Skip to content

ci: bump github actions to their latest majors - #1147

Open
hsablonniere wants to merge 1 commit into
masterfrom
ci/bump-github-actions
Open

ci: bump github actions to their latest majors#1147
hsablonniere wants to merge 1 commit into
masterfrom
ci/bump-github-actions

Conversation

@hsablonniere

@hsablonniere hsablonniere commented Sep 11, 2026

Copy link
Copy Markdown
Member

Every workflow run currently prints Node.js 20 is deprecated warnings (example) for actions still pinned to a major whose runtime targets Node 20; GitHub force-runs them on Node 24 in the meantime and warns ahead of full Node 20 removal.

Version audit of every external action used across .github/workflows and .github/actions:

Action Before After
actions/checkout v5 v7
actions/setup-node v4, v6 v7
actions/download-artifact v4 v8
actions/upload-artifact v4 v7
marocchino/sticky-pull-request-comment v2 v3.0.5
webfactory/ssh-agent v0.9.1 v0.10.0
google-github-actions/release-please-action v3 unchanged, see below

release-please-action is intentionally left on v3: its v4 major changes the action's config schema and warrants its own dedicated PR/review rather than being folded into a routine version bump.

Every workflow run currently logs a "Node.js 20 is deprecated" warning for
actions/checkout, actions/setup-node, actions/download-artifact and
actions/upload-artifact: these were pinned to majors whose runtime still
targets Node 20, which GitHub Actions now force-runs on Node 24 with a
warning ahead of the full removal.

Bumps checkout v5 to v7, setup-node v4/v6 to v7, download-artifact v4 to
v8, upload-artifact v4 to v7, sticky-pull-request-comment v2 to v3.0.5,
and ssh-agent v0.9.1 to v0.10.0. release-please-action stays on v3: its
v4 major changes the action's config schema and needs its own review.
@hsablonniere
hsablonniere requested a review from a team as a code owner September 11, 2026 10:35
@github-actions

Copy link
Copy Markdown

🔎 A preview has been automatically published!

If you created the alias to the preview script, you can run this command to download and install this preview:

clever-preview update ci-bump-github-actions

You can also run it from your local repository:

./scripts/preview.js update ci-bump-github-actions
OS SHA256 checksum
🐧 linux 3c7ed05c09d368976fb707112a0d981c44d53bdff6c0cdacce44eeb5e87a58bf
🍏 macos 92a40628d3507db9d56b4319c8e31c7093543a79d7abf3f9299be3abab2afbf8

This preview will be deleted once this PR is closed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants