semantic-release-action/src/preInstall.task.js

const path = require('path');
const core = require('@actions/core');
const exec = require('./_exec');

/**
 * Pre-install extra dependecies
 * @returns {Promise<void>}
 */
module.exports = async extras => {
  if (!extras) {
    return Promise.resolve();
  }

  const _extras = extras.replace(/['"]/g, '').replace(/[\n\r]/g, ' ');
  const silentFlag = process.env.RUNNER_DEBUG === '1' ? '' : '--silent';

  const { stdout, stderr } = await exec(`npm install ${_extras} --no-audit ${silentFlag}`, {
    cwd: path.resolve(__dirname, '..')
  });
  core.debug(stdout);
  core.error(stderr);
};