tools: pin OpenSSL to 3.5.4 on test-shared workflow · nodejs/node@3ec9764

# This action uses the following secrets:

# CACHIX_AUTH_TOKEN: Write access to nodejs.cachix.org – without it, the cache is read-only.

name: Test Shared libraries

on:

with:

extra_nix_config: sandbox = true

- uses: cachix/cachix-action@0fc020193b5a1fa3ac4575aa3a7d3aa6a35435ad # v16

with:

name: nodejs

authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}

- name: Configure sccache

uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1

with:

make build-ci -j12

```

Most dependencies will likely be available in the official nixpkgs cache,

although for some dependencies we have to deviate for the upstream repository,

in which case those will be built locally, or you can use the Cachix repository

for the project: `cachix use nodejs`. See <https://docs.cachix.org/> for more

information.

The use of `make build-ci` is to ensure you are using the `CONFIG_FLAGS`

environment variable. You can also specify it manually:

nghttp2

nghttp3

ngtcp2

openssl

simdjson

simdutf

sqlite

zstd

;

http-parser = pkgs.llhttp;

openssl = pkgs.openssl.overrideAttrs (old: {

version = "3.5.4";

src = pkgs.fetchurl {

url = builtins.replaceStrings [ old.version ] [ "3.5.4" ] old.src.url;

hash = "sha256-lnMR+ElVMWlpvbHY1LmDcY70IzhjnGIexMNP3e81Xpk=";

};

doCheck = false;

configureFlags = (old.configureFlags or [ ]) ++ [

"no-docs"

"no-tests"

];

outputs = [

"bin"

"out"

"dev"

];

});

},

ccache ? pkgs.ccache,

ninja ? pkgs.ninja,