From d0b0f104b7876135447d63e5c5fb1bf6ce148043 Mon Sep 17 00:00:00 2001
From: Piyush Singh <piyush.singh@sourcefuse.com>
Date: Mon, 17 Aug 2026 13:58:27 +0530
Subject: [PATCH] fix(ci-cd): bump github actions to node 24 runtimes

- bump actions/checkout from v3/v4 to v5 in main, release, sync-docs and
  trivy workflows (v5 declares using: node24)
- bump actions/setup-node from v3/v4 to v5 in main and release workflows
  (v5 declares using: node24)
- bump release workflow node-version from '22' to '24'
- leave the main workflow test matrix at [22, 24] so consumer coverage on
  node 22 is preserved
- leave the SHA-pinned aquasecurity/trivy-action untouched

GH-35
---
 .github/workflows/main.yaml      | 4 ++--
 .github/workflows/release.yaml   | 6 +++---
 .github/workflows/sync-docs.yaml | 4 ++--
 .github/workflows/trivy.yaml     | 2 +-
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index 234c5ad..a57d694 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -13,8 +13,8 @@ jobs:
       matrix:
         node-version: [22, 24]
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v5
         with:
           node-version: ${{ matrix.node-version }}
       - name: Install Dependencies
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index d9206bc..06abe9e 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -9,7 +9,7 @@ jobs:
   Release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           # fetch-depth is necessary to get all tags
           # otherwise lerna can't detect the changes and will end up bumping the versions for all packages
@@ -17,9 +17,9 @@ jobs:
           token: ${{ secrets.RELEASE_COMMIT_GH_PAT }}
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
-           node-version: '22'
+           node-version: '24'
            registry-url: 'https://registry.npmjs.org'
            always-auth: false  # important for trusted publishing
       - name: Configure CI Git User
diff --git a/.github/workflows/sync-docs.yaml b/.github/workflows/sync-docs.yaml
index 53e0c33..ba37281 100644
--- a/.github/workflows/sync-docs.yaml
+++ b/.github/workflows/sync-docs.yaml
@@ -18,13 +18,13 @@ jobs:
 
     steps:
       - name: Checkout Extension Code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
         with:
           token: ${{env.GITHUB_TOKEN}}
           path: './extension/'
 
       - name: Checkout Docs Repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
         with:
           token: ${{env.GITHUB_TOKEN}}
           repository: ${{env.DOCS_REPO}}
diff --git a/.github/workflows/trivy.yaml b/.github/workflows/trivy.yaml
index 088ba48..0abca6a 100644
--- a/.github/workflows/trivy.yaml
+++ b/.github/workflows/trivy.yaml
@@ -19,7 +19,7 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
 
       - name: Run Trivy vulnerability scanner in repo mode
         uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0