Skip to content

ci: bump GitHub Actions to Node 24 runtimes#172

Merged
hardbyte merged 1 commit into
mainfrom
bump-actions-node24
Jun 11, 2026
Merged

ci: bump GitHub Actions to Node 24 runtimes#172
hardbyte merged 1 commit into
mainfrom
bump-actions-node24

Conversation

@hardbyte

Copy link
Copy Markdown
Contributor

GitHub forces Node.js 20 actions to run on Node 24 starting June 16th, 2026 (five days away) and removes Node 20 from runners in September 2026 — the v0.17.6 release run was already emitting deprecation warnings for checkout, setup-python, upload-artifact, and download-artifact.

This bumps every pinned action to its current major, all of which run node24 natively (verified against each action's action.yml):

Action From To Compatibility notes
actions/checkout v4 v6 v6 persists credentials to a separate file — irrelevant here, no workflow does git push after checkout
actions/setup-python v5 v6 node24 only
actions/upload-artifact v4 v7 new archive input unused; ESM change is internal
actions/download-artifact v4 v8 v5's by-ID path change and v8's direct-download handling don't apply — both usages download by name with an explicit path:
actions/setup-node v4 v6 v5's auto-caching triggers only on a packageManager field in package.json; none at repo root
actions/github-script v7 v9 v9's ESM breaks require('@actions/github') — our script only uses the injected github/context objects
actions/cache v3 v5 node24 only, same inputs
cloudflare/wrangler-action v3 v4 only change is default wrangler version; both usages pin wranglerVersion: "4.32.0"

Left as-is: Swatinem/rust-cache@v2 and rust-lang/crates-io-auth-action@v1 (floating major tags already resolve to node24 releases), dtolnay/rust-toolchain (composite action, no Node runtime), pypa/gh-action-pypi-publish@release/v1 (docker action).

Note: this PR's CI exercises ci.yaml and the docs workflows (including the github-script PR comment), but release.yml only runs on tags — it gets its first real validation on the next release.

GitHub forces Node.js 20 actions to run on Node 24 from June 16th 2026
and removes Node 20 from runners in September 2026. Bump all pinned
actions to their current majors, which run on node24 natively:

- actions/checkout v4 -> v6 (credential persistence change is irrelevant
  here; no workflow pushes via git after checkout)
- actions/setup-python v5 -> v6
- actions/upload-artifact v4 -> v7
- actions/download-artifact v4 -> v8 (both usages download by name with
  an explicit path, so the v5 by-id path change and v8 direct-download
  behavior do not apply)
- actions/setup-node v4 -> v6
- actions/github-script v7 -> v9 (script only uses the injected
  github/context objects, unaffected by the ESM breaking changes)
- actions/cache v3 -> v5
- cloudflare/wrangler-action v3 -> v4 (default wrangler version change
  does not apply; both usages pin wranglerVersion explicitly)

Swatinem/rust-cache@v2 and rust-lang/crates-io-auth-action@v1 already
resolve to node24 releases on their floating major tags, and
dtolnay/rust-toolchain is a composite action.
@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

@github-actions

Copy link
Copy Markdown

📖 Documentation Preview: https://reflectapi-docs-preview-pr-172.partly.workers.dev

Updated automatically from commit b8cef14

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant