From 047c0c9a80a2765bb20bb31e7f1f607e77c1a881 Mon Sep 17 00:00:00 2001
From: MobyNL <markmoberts@gmail.com>
Date: Mon, 17 Aug 2026 21:49:19 +0200
Subject: [PATCH] build(ci): move the GitHub actions off the deprecated Node 20

checkout v4 to v7, setup-python v5 to v7, upload-artifact v4 to v7. All three
declared Node 20, which the runners now force onto Node 24 while warning on every
job. Nothing was broken by it, but 'forced' is the stage before removal, and the
one workflow that must not break when it happens is release.yml.

pypa/gh-action-pypi-publish stays on release/v1: it is a rolling tag and is already
current.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 .github/workflows/ci.yml      | 18 +++++++++---------
 .github/workflows/release.yml |  4 ++--
 2 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1eec61e..18e9f54 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,8 +17,8 @@ jobs:
       matrix:
         python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install Poetry
@@ -59,8 +59,8 @@ jobs:
             assertionengine: "5.0.1"
             pythonlibcore: ""
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
       - name: Install
@@ -87,8 +87,8 @@ jobs:
     runs-on: ubuntu-latest
     continue-on-error: true
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.13"
       - name: Install
@@ -104,8 +104,8 @@ jobs:
   acceptance-test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
       - name: Install Poetry
@@ -116,7 +116,7 @@ jobs:
         # The server is part of the repository and needs nothing but graphql-core, so there is
         # no container to wait for.
         run: ./run_atest.sh
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         if: always()
         with:
           name: atest-results
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7b44006..a5f9831 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,8 +12,8 @@ jobs:
       # Trusted publishing, so no token is stored in the repository.
       id-token: write
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
       - name: Install Poetry