fix(release): patch lodash-es inside action's own node_modules (#189)

The workspace-level npm install does not affect semantic-release which
runs from _actions/cycjimmy/semantic-release-action/*/node_modules/.
Override lodash-es directly in the action directory.

Author: bedatty

.github/workflows/release.yml

@@ -148,10 +148,14 @@ jobs:
             @semantic-release/exec
 
       # WORKAROUND: lodash-es@4.18.0 has a broken import (assignWith undefined).
-      # Pin to last known-good version until upstream publishes a fix.
+      # Pin to last known-good version inside the action's own node_modules.
       - name: Pin lodash-es to avoid 4.18.0 bug
-        working-directory: ${{ matrix.app.working_dir }}
-        run: npm install lodash-es@4.17.23
+        run: |
+          ACTION_DIR="${GITHUB_WORKSPACE}/../_actions/cycjimmy/semantic-release-action/b12c8f6015dc215fe37bc154d4ad456dd3833c90"
+          cd "${ACTION_DIR}/node_modules/lodash-es" && npm pack lodash-es@4.17.23 2>/dev/null && tar xzf lodash-es-4.17.23.tgz --strip-components=1 && rm -f lodash-es-4.17.23.tgz
+          if [ -d "${ACTION_DIR}/node_modules/semantic-release/node_modules/lodash-es" ]; then
+            cd "${ACTION_DIR}/node_modules/semantic-release/node_modules/lodash-es" && npm pack lodash-es@4.17.23 2>/dev/null && tar xzf lodash-es-4.17.23.tgz --strip-components=1 && rm -f lodash-es-4.17.23.tgz
+          fi
 
       # ----------------- Snapshot tags before release -----------------
       - name: Snapshot tags before release

.github/workflows/typescript-release.yml

@@ -168,10 +168,14 @@ jobs:
             @semantic-release/exec@7.1.0
 
       # WORKAROUND: lodash-es@4.18.0 has a broken import (assignWith undefined).
-      # Pin to last known-good version until upstream publishes a fix.
+      # Pin to last known-good version inside the action's own node_modules.
       - name: Pin lodash-es to avoid 4.18.0 bug
-        working-directory: ${{ matrix.app.working_dir }}
-        run: npm install lodash-es@4.17.23
+        run: |
+          ACTION_DIR="${GITHUB_WORKSPACE}/../_actions/cycjimmy/semantic-release-action/b12c8f6015dc215fe37bc154d4ad456dd3833c90"
+          cd "${ACTION_DIR}/node_modules/lodash-es" && npm pack lodash-es@4.17.23 2>/dev/null && tar xzf lodash-es-4.17.23.tgz --strip-components=1 && rm -f lodash-es-4.17.23.tgz
+          if [ -d "${ACTION_DIR}/node_modules/semantic-release/node_modules/lodash-es" ]; then
+            cd "${ACTION_DIR}/node_modules/semantic-release/node_modules/lodash-es" && npm pack lodash-es@4.17.23 2>/dev/null && tar xzf lodash-es-4.17.23.tgz --strip-components=1 && rm -f lodash-es-4.17.23.tgz
+          fi
 
       - name: Semantic Release
         uses: cycjimmy/semantic-release-action@b12c8f6015dc215fe37bc154d4ad456dd3833c90 # v6