chore: install fallbacks using pnpm dlx

[teodorus-nathaniel]

resolves #11

Issue

pnpm v10 used in wizard cannot do audit because something deprecated from npm. The fix is in pnpm 11.
but pnpm 11 has this issue, so it needs to be fixed here

Summary by CodeRabbit

• Bug Fixes

  • Improved formatting, Markdown, and commit validation checks by avoiding global tool installations.
  • Checks now use available local tools or run the required tool through the configured package manager.

• Documentation

  • Updated action documentation to reflect the revised fallback behavior for validation tools.

[holdex]

Time Submission Status

Member	#	Time	Running Total	Status	Last Update
teodorus-nathaniel			30min	✅ Submitted	Jul 15, 2026, 11:58 AM
georgeciubotaru			5min	✅ Submitted	Jul 15, 2026, 11:58 AM

---

Submit or update total time with:

@holdex pr submit-time 2h

Add time on top of previous submission with:

@holdex pr add-time 1h30m

See available commands to help comply with our Guidelines.

[coderabbitai]

Walkthrough

Base GitHub Actions now avoid global installation of commitlint, rumdl, and Prettier. They prefer local binaries and otherwise execute tools on demand through the configured package manager. ACTIONS.md documents the updated fallback behavior.

Changes

CLI execution fallbacks

Layer / File(s)	Summary
Commitlint execution path .github/actions/base/commit-check/action.yml, ACTIONS.md	Commit validation now invokes @commitlint/cli through pnpm dlx, npx --yes, or bunx, using detected configuration or --default-config.
Markdown and formatting fallbacks .github/actions/base/markdown-check/action.yml, .github/actions/base/prettier/action.yml, ACTIONS.md	Markdown and Prettier checks prefer local binaries and otherwise use package-manager executors instead of global installations.

Estimated code review effort: 3 (Moderate) | ~20 minutes

Possibly related PRs

• holdex/github-actions#7: Updates Prettier invocation behavior in the same base action.
• holdex/github-actions#10: Updates rumdl fallback invocation in the same base action.

Suggested reviewers: georgeciubotaru

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	The PR replaces the global pnpm install path with pnpm dlx, matching issue #11's requirement.
Out of Scope Changes check	✅ Passed	The changes stay within the fallback execution behavior and related docs for the affected actions.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the main change: switching fallback installs to pnpm dlx-based execution.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/global-install

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[teodorus-nathaniel]

@holdex pr submit-time 30m

[georgeciubotaru]

@holdex pr submit-time 5m