From b5c8b16dcc504a720f7bdd0d9eec3957cfdb5c89 Mon Sep 17 00:00:00 2001
From: "sentry-junior[bot]"
 <264270552+sentry-junior[bot]@users.noreply.github.com>
Date: Thu, 22 Oct 2026 17:49:25 +0000
Subject: [PATCH] ci: Keep the runner's apt packages when installing Playwright

`playwright install --with-deps` names system libraries that the runner
image already has, so apt-get upgrades them to the latest Ubuntu update.
That is half of the download when the apt cache is cold.

Co-Authored-By: Joshua Li <14209781+joshuarli@users.noreply.github.com>
---
 .github/actions/install-playwright/action.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/actions/install-playwright/action.yml b/.github/actions/install-playwright/action.yml
index bd84a13e9107..378e77666093 100644
--- a/.github/actions/install-playwright/action.yml
+++ b/.github/actions/install-playwright/action.yml
@@ -34,6 +34,13 @@ runs:
           playwright
           apt
 
+    # `--with-deps` names packages that the runner image already has (glib, mesa, nss, ...), and `apt-get install` would
+    # upgrade them to the latest Ubuntu update. That is half of the download on a cold cache, and the image versions work.
+    - name: Keep installed apt packages
+      if: steps.playwright-version.outputs.version != ''
+      run: echo 'APT::Get::Upgrade "false";' | sudo tee /etc/apt/apt.conf.d/99-no-upgrade > /dev/null
+      shell: bash
+
     # Downloads only the browsers and apt packages that are not on the cache volume yet. `npx` runs outside the repo,
     # so it can't pick up a `playwright` that a parallel `pnpm install` is still linking.
     - name: Install Playwright