chore: add cached pnpm-install composite action

Adopts the caching pattern from apify/apify-cli#1068: a reusable
composite action at .github/actions/pnpm-install that handles pnpm
setup, pnpm store caching (keyed by year-month + lockfile hash),
and the install. Workflows now delegate their install step to
`uses: ./.github/actions/pnpm-install` instead of inlining each
piece. setup-node remains in workflows (without the cache: pnpm
parameter, since caching is handled inside the composite).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: B4nan

.github/actions/pnpm-install/action.yml

@@ -0,0 +1,42 @@
+name: "pnpm install"
+description: "Run pnpm install with cache enabled"
+runs:
+    using: "composite"
+    steps:
+        - name: Set up swap space
+          if: runner.os == 'Linux'
+          uses: pierotofy/set-swap-space@v1.0
+          with:
+              swap-size-gb: 10
+
+        - uses: pnpm/action-setup@v4.1.0
+          name: Install pnpm
+          with:
+              run_install: false
+
+        - name: Expose pnpm config(s) through "$GITHUB_OUTPUT"
+          id: pnpm-config
+          shell: bash
+          run: |
+              echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
+
+        - name: Cache rotation keys
+          id: cache-rotation
+          shell: bash
+          run: |
+              echo "YEAR_MONTH=$(/bin/date -u "+%Y%m")" >> $GITHUB_OUTPUT
+
+        - uses: actions/cache@v4
+          name: Setup pnpm cache
+          with:
+              path: ${{ steps.pnpm-config.outputs.STORE_PATH }}
+              key: ${{ runner.os }}-pnpm-store-cache-${{ steps.cache-rotation.outputs.YEAR_MONTH }}-${{ hashFiles('**/pnpm-lock.yaml') }}
+              restore-keys: |
+                  ${{ runner.os }}-pnpm-store-cache-${{ steps.cache-rotation.outputs.YEAR_MONTH }}-
+
+        - name: Install dependencies
+          shell: bash
+          run: |
+              pnpm install --frozen-lockfile --prefer-offline --loglevel error
+          env:
+              HUSKY: "0"

.github/workflows/publish_to_npm.yaml

@@ -22,15 +22,13 @@ jobs:
                   ref: ${{ inputs.ref }}
                   token: ${{ secrets.APIFY_SERVICE_ACCOUNT_GITHUB_TOKEN }}
                   fetch-depth: 0 # we need to pull everything to allow lerna to detect what packages changed
-            - uses: pnpm/action-setup@v4
             - name: Use Node.js 24
               uses: actions/setup-node@v6
               with:
                   node-version: 24
                   registry-url: 'https://registry.npmjs.org'
-                  cache: 'pnpm'
-            - name: Install dependencies
-              run: pnpm install --frozen-lockfile
+            - name: Install pnpm and dependencies
+              uses: ./.github/actions/pnpm-install
             - name: Build module
               run: pnpm build
             - name: Publish to NPM

.github/workflows/test_and_release.yaml

@@ -19,14 +19,12 @@ jobs:
 
         steps:
             -   uses: actions/checkout@v6
-            -   uses: pnpm/action-setup@v4
             -   name: Use Node.js ${{ matrix.node-version }}
                 uses: actions/setup-node@v6
                 with:
                     node-version: ${{ matrix.node-version }}
-                    cache: 'pnpm'
-            -   name: Install Dependencies
-                run: pnpm install --frozen-lockfile
+            -   name: Install pnpm and dependencies
+                uses: ./.github/actions/pnpm-install
             -   name: Run Tests
                 run: pnpm test
 
@@ -36,14 +34,12 @@ jobs:
 
         steps:
             -   uses: actions/checkout@v6
-            -   uses: pnpm/action-setup@v4
             -   name: Use Node.js 24
                 uses: actions/setup-node@v6
                 with:
                     node-version: 24
-                    cache: 'pnpm'
-            -   name: Install Dependencies
-                run: pnpm install --frozen-lockfile
+            -   name: Install pnpm and dependencies
+                uses: ./.github/actions/pnpm-install
             -   run: pnpm build
 
             -   name: Check build consistency
@@ -59,14 +55,12 @@ jobs:
 
         steps:
             -   uses: actions/checkout@v6
-            -   uses: pnpm/action-setup@v4
             -   name: Use Node.js 24
                 uses: actions/setup-node@v6
                 with:
                     node-version: 24
-                    cache: 'pnpm'
-            -   name: Install Dependencies
-                run: pnpm install --frozen-lockfile
+            -   name: Install pnpm and dependencies
+                uses: ./.github/actions/pnpm-install
             -   run: pnpm lint
 
     publish:
@@ -78,13 +72,11 @@ jobs:
             -   uses: actions/checkout@v6
                 with:
                     fetch-depth: 0 # we need to pull everything to allow lerna to detect what packages changed
-            -   uses: pnpm/action-setup@v4
             -   uses: actions/setup-node@v6
                 with:
                     node-version: 24
-                    cache: 'pnpm'
-            -   name: Install Dependencies
-                run: pnpm install --frozen-lockfile
+            -   name: Install pnpm and dependencies
+                uses: ./.github/actions/pnpm-install
             -   name: Check for changes
                 id: changed_packages
                 run: |