node and actions notes plus upgrades

.github/workflows/build.yml

@@ -12,11 +12,11 @@ jobs:
 
     - uses: actions/setup-node@v6.4.0
       with:
-        node-version: 24.16.0
+        node-version: 24.18.0
 
     - name: Restore Build Cache
       id: restore-build-cache
-      uses: actions/cache/restore@v5.0.5
+      uses: actions/cache/restore@v6.1.0
       with:
         path: |
           common/temp
@@ -33,7 +33,7 @@ jobs:
 
     - name: Restore Dependencies From Cache
       id: restore-cache
-      uses: actions/cache/restore@v5.0.5
+      uses: actions/cache/restore@v6.1.0
       if: steps.restore-build-cache.outputs.cache-hit != 'true'
       with:
         path: |
@@ -50,7 +50,7 @@ jobs:
 
     - name: Save Build Cache
       id: save-cache
-      uses: actions/cache/save@v5.0.5
+      uses: actions/cache/save@v6.1.0
       if: steps.restore-build-cache.outputs.cache-hit != 'true'
       with:
         path: |

.github/workflows/ci-salt.txt

@@ -1,3 +1,3 @@
 In CI, the contents of this file are hashed to save and restore dependencies between workflows.
 Change anything here to force a cache miss even if repo-state.json hasn't changed.
-2026-06-30T08:38:56.477Z
+2026-07-09T01:31:35.115Z

.github/workflows/deploy.yml

@@ -22,11 +22,11 @@ jobs:
 
     - uses: actions/setup-node@v6.4.0
       with:
-        node-version: 24.16.0
+        node-version: 24.18.0
 
     - name: Restore Build Cache
       id: restore-build-cache
-      uses: actions/cache/restore@v5.0.5
+      uses: actions/cache/restore@v6.1.0
       with:
         path: |
           common/temp

.github/workflows/e2e-test.yml

@@ -12,11 +12,11 @@ jobs:
 
     - uses: actions/setup-node@v6.4.0
       with:
-        node-version: 24.16.0
+        node-version: 24.18.0
 
     - name: Restore Build Cache
       id: restore-build-cache
-      uses: actions/cache/restore@v5.0.5
+      uses: actions/cache/restore@v6.1.0
       with:
         path: |
           common/temp

.github/workflows/install.yml

@@ -12,11 +12,11 @@ jobs:
 
     - uses: actions/setup-node@v6.4.0
       with:
-        node-version: 24.16.0
+        node-version: 24.18.0
 
     - name: Restore Cache
       id: restore-cache
-      uses: actions/cache/restore@v5.0.5
+      uses: actions/cache/restore@v6.1.0
       with:
         path: |
           common/temp
@@ -34,7 +34,7 @@ jobs:
 
     - name: Save Cache
       id: save-cache
-      uses: actions/cache/save@v5.0.5
+      uses: actions/cache/save@v6.1.0
       if: steps.restore-cache.outputs.cache-hit != 'true'
       with:
         path: |

.github/workflows/lint.yml

@@ -12,11 +12,11 @@ jobs:
 
     - uses: actions/setup-node@v6.4.0
       with:
-        node-version: 24.16.0
+        node-version: 24.18.0
 
     - name: Restore Build Cache
       id: restore-build-cache
-      uses: actions/cache/restore@v5.0.5
+      uses: actions/cache/restore@v6.1.0
       with:
         path: |
           common/temp

.github/workflows/type-check.yml

@@ -12,11 +12,11 @@ jobs:
 
     - uses: actions/setup-node@v6.4.0
       with:
-        node-version: 24.16.0
+        node-version: 24.18.0
 
     - name: Restore Build Cache
       id: restore-build-cache
-      uses: actions/cache/restore@v5.0.5
+      uses: actions/cache/restore@v6.1.0
       with:
         path: |
           common/temp

.github/workflows/unit-test.yml

@@ -12,11 +12,11 @@ jobs:
 
     - uses: actions/setup-node@v6.4.0
       with:
-        node-version: 24.16.0
+        node-version: 24.18.0
 
     - name: Restore Build Cache
       id: restore-build-cache
-      uses: actions/cache/restore@v5.0.5
+      uses: actions/cache/restore@v6.1.0
       with:
         path: |
           common/temp

CONTRIBUTING.md

@@ -135,6 +135,45 @@ git add rush.json common/scripts
 git commit -m 'build: update rush from x to y'
 ```
 
+### Updating Node
+
+Periodically upgrade the versions of Node.js supported and used in this repo.
+Use only the _Active_ or _Maintenance_ [Long Term Support (LTS)](https://nodejs.org/en/about/previous-releases#release-schedule) releases.
+
+* The ranges declared by `nodeSupportedVersionRange` in [rush.json] enforce supported versions before running any repo operations.
+* The version kept in [mise.toml](./mise.toml) pins the node version is used for local development.
+* The version range declared in [@sqs/eslint-config-node](./projects/eslint-config-node/src/eslint-config-node.js) informs which features eslint flags as unsupported.
+* Each Github [workflow](./.github/workflows/) job pins the node version via `setup-node` action:
+
+```yaml
+- uses: actions/setup-node@v6.4.0
+  with:
+    node-version: 24.18.0
+```
+
+### Updating Github Actions
+
+#### Runner Image
+
+Periodically upgrade the version of the image used by the actions runner.
+
+```yaml
+jobs:
+  install:
+    runs-on: ubuntu-24.04
+```
+
+#### Job Steps
+
+Periodically upgrade the versions of any actions used in workflow jobs.
+Steps that use third-party actions should pin the versions to use.
+Review the changelog/releases for each action and bump as appropriate.
+
+```yaml
+steps:
+  - uses: actions/checkout@v7.0.0
+```
+
 ---
 
 [^1]: `update-minor` and `update-major` depend on [jq](https://stedolan.github.io/jq/)

common/autoinstallers/rush-check-updates/package.json

@@ -4,6 +4,6 @@
   "private": true,
   "type": "module",
   "dependencies": {
-    "npm-check-updates": "~22.2.8"
+    "npm-check-updates": "~22.2.9"
   }
 }

common/autoinstallers/rush-commitlint/package.json

@@ -4,7 +4,7 @@
   "private": true,
   "type": "module",
   "dependencies": {
-    "@commitlint/cli": "~21.1.0",
-    "@commitlint/config-conventional": "~21.1.0"
+    "@commitlint/cli": "~21.2.0",
+    "@commitlint/config-conventional": "~21.2.0"
   }
 }