From 586f4b7bd60f21fbd11d9ebc875766651292547e Mon Sep 17 00:00:00 2001 From: GadgetAI <232155002+labgadget015-dotcom@users.noreply.github.com> Date: Thu, 3 Sep 2026 06:28:17 +0000 Subject: [PATCH] chore(actions): bump Node 20 actions to Node 24 before Sep 16 removal GitHub removes the Node 20 Actions runtime on 2026-09-16. Every pinned action was checked against its own action.yml `runs.using` rather than a version table; these 18 references were the ones still declaring node20: actions/checkout@v4 -> v5 (7) actions/setup-node@v4 -> v5 (3) actions/setup-python@v4/@v5 -> v6 (3, one in the root action.yml) actions/github-script@v7 -> v8 (1) actions/stale@v9 -> v10 (1) dependabot/fetch-metadata@v2 -> v3 (1) softprops/action-gh-release@v2 -> v3 (1) Every one of these majors is a runtime bump only. The single behavioural change is setup-node v5 enabling package-manager caching by default; deploy-landing.yml sets `cache: npm` explicitly, which still wins. The root action.yml matters beyond CI: it is the composite action external repos consume via @main, so its node20 step would have broken consumers too, not just this pipeline. Already on Node 24 and left alone: checkout@v5, setup-python@v6, upload-artifact@v6, download-artifact@v7, github-script@v8, cache@v5, labeler@v6, gitleaks-action@v3, codecov-action@v5 (composite). Refs #235 Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01Aa8jYF37KPZRRD1tWyePeo --- .github/workflows/auto-pr.yml | 4 ++-- .github/workflows/changelog.yml | 4 ++-- .github/workflows/daily-summary.yml | 4 ++-- .github/workflows/dependabot-automerge.yml | 2 +- .github/workflows/deploy-landing.yml | 14 +++++++------- .github/workflows/release-and-publish.yml | 2 +- .github/workflows/set-vercel-env.yml | 2 +- .github/workflows/stale-pr-handler.yml | 2 +- action.yml | 2 +- 9 files changed, 18 insertions(+), 18 deletions(-) diff --git a/.github/workflows/auto-pr.yml b/.github/workflows/auto-pr.yml index cff6db1..af62e4f 100644 --- a/.github/workflows/auto-pr.yml +++ b/.github/workflows/auto-pr.yml @@ -29,12 +29,12 @@ jobs: pull-requests: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 with: fetch-depth: 0 token: ${{ secrets.GH_PAT }} - - uses: actions/setup-python@v4 + - uses: actions/setup-python@v6 with: python-version: "3.11" diff --git a/.github/workflows/changelog.yml b/.github/workflows/changelog.yml index 77c7fd5..024cec5 100644 --- a/.github/workflows/changelog.yml +++ b/.github/workflows/changelog.yml @@ -12,12 +12,12 @@ jobs: contents: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 with: fetch-depth: 0 token: ${{ secrets.GH_PAT }} - - uses: actions/setup-python@v4 + - uses: actions/setup-python@v6 with: python-version: "3.11" diff --git a/.github/workflows/daily-summary.yml b/.github/workflows/daily-summary.yml index 05a799e..03d7c8f 100644 --- a/.github/workflows/daily-summary.yml +++ b/.github/workflows/daily-summary.yml @@ -24,13 +24,13 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v5 with: # Need a real branch so we can commit the summary back ref: ${{ github.ref }} - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v6 with: python-version: '3.12' diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml index 34ae970..f03f30a 100644 --- a/.github/workflows/dependabot-automerge.yml +++ b/.github/workflows/dependabot-automerge.yml @@ -111,7 +111,7 @@ jobs: - name: Fetch Dependabot metadata id: meta if: github.event_name == 'pull_request_target' - uses: dependabot/fetch-metadata@v2 + uses: dependabot/fetch-metadata@v3 with: github-token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/deploy-landing.yml b/.github/workflows/deploy-landing.yml index b3d68aa..0e0d339 100644 --- a/.github/workflows/deploy-landing.yml +++ b/.github/workflows/deploy-landing.yml @@ -21,9 +21,9 @@ jobs: name: Lint & Build runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v5 with: node-version: "20" cache: "npm" @@ -49,9 +49,9 @@ jobs: needs: lint-and-build if: github.event_name == 'pull_request' steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v5 with: node-version: "20" cache: "npm" @@ -72,7 +72,7 @@ jobs: VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }} - name: Comment preview URL on PR - uses: actions/github-script@v7 + uses: actions/github-script@v8 with: script: | github.rest.issues.createComment({ @@ -91,9 +91,9 @@ jobs: name: production url: ${{ vars.LANDING_PAGE_URL }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v5 with: node-version: "20" cache: "npm" diff --git a/.github/workflows/release-and-publish.yml b/.github/workflows/release-and-publish.yml index 3b8b76e..950a9ed 100644 --- a/.github/workflows/release-and-publish.yml +++ b/.github/workflows/release-and-publish.yml @@ -64,7 +64,7 @@ jobs: python -m twine upload dist/* --skip-existing - name: Create GitHub Release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@v3 with: tag_name: v${{ steps.version.outputs.version }} name: Release v${{ steps.version.outputs.version }} diff --git a/.github/workflows/set-vercel-env.yml b/.github/workflows/set-vercel-env.yml index 6124785..74c1c77 100644 --- a/.github/workflows/set-vercel-env.yml +++ b/.github/workflows/set-vercel-env.yml @@ -11,7 +11,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 with: token: ${{ secrets.GH_PAT }} diff --git a/.github/workflows/stale-pr-handler.yml b/.github/workflows/stale-pr-handler.yml index 69ea3e1..ad3e9f3 100644 --- a/.github/workflows/stale-pr-handler.yml +++ b/.github/workflows/stale-pr-handler.yml @@ -32,7 +32,7 @@ jobs: steps: - name: Run actions/stale - uses: actions/stale@v9 + uses: actions/stale@v10 with: repo-token: ${{ secrets.GITHUB_TOKEN }} diff --git a/action.yml b/action.yml index 8773390..957b216 100644 --- a/action.yml +++ b/action.yml @@ -54,7 +54,7 @@ runs: using: 'composite' steps: - name: Setup Python - uses: actions/setup-python@v4 + uses: actions/setup-python@v6 with: python-version: '3.11'