From 359032982cd13d86c82e4fca39f448d3f602fcb9 Mon Sep 17 00:00:00 2001 From: Radoslav Dimitrov Date: Wed, 3 Jun 2026 13:39:30 +0300 Subject: [PATCH] Bump CI actions off deprecated Node.js 20 GitHub is deprecating the Node.js 20 runtime for JavaScript actions: it is forced to Node.js 24 on 2026-06-16 and removed on 2026-09-16, which surfaces "Node.js 20 actions are deprecated" warnings across our workflows. Bump every affected action to a release that runs on Node.js 24. All are runtime-only major bumps with no input or behavior changes for our usage: - azure/setup-helm v4.3.1 -> v5.0.0 - docker/login-action v3.7.0 -> v4.2.0 - docker/setup-buildx-action v3.12.0 -> v4.1.0 - docker/metadata-action v5.10.0 -> v6.1.0 - docker/build-push-action v6.19.2 -> v7.2.0 - codecov/codecov-action v5 -> v6.0.1 (also moves its embedded github-script v7 -> v8) - slackapi/slack-github-action v2.1.1 -> v3.0.3 arduino/setup-task and golang/govulncheck-action are left as-is: neither has a Node.js 24 release yet. Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/workflows/helm-charts-test.yml | 2 +- .github/workflows/helm-publish.yml | 2 +- .github/workflows/image-build-and-publish.yml | 20 +++++++++---------- .github/workflows/operator-ci.yml | 2 +- .github/workflows/releaser.yml | 2 +- .../workflows/skills-build-and-publish.yml | 2 +- .github/workflows/test-e2e-lifecycle.yml | 2 +- .github/workflows/test.yml | 2 +- 8 files changed, 17 insertions(+), 17 deletions(-) diff --git a/.github/workflows/helm-charts-test.yml b/.github/workflows/helm-charts-test.yml index 51e3378eff..c123dbc334 100644 --- a/.github/workflows/helm-charts-test.yml +++ b/.github/workflows/helm-charts-test.yml @@ -26,7 +26,7 @@ jobs: uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9 - name: Set up Helm - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4.3.1 + uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5.0.0 with: version: v3.20.2 # helm diff --git a/.github/workflows/helm-publish.yml b/.github/workflows/helm-publish.yml index b23ff761b8..3d5411e0f7 100644 --- a/.github/workflows/helm-publish.yml +++ b/.github/workflows/helm-publish.yml @@ -73,7 +73,7 @@ jobs: echo "Extracted version: $VERSION from tag: $TAG" - name: Set up Helm - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4 + uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5.0.0 with: version: 'v3.14.0' diff --git a/.github/workflows/image-build-and-publish.yml b/.github/workflows/image-build-and-publish.yml index bc75c9be5f..6fb9b9eb67 100644 --- a/.github/workflows/image-build-and-publish.yml +++ b/.github/workflows/image-build-and-publish.yml @@ -29,7 +29,7 @@ jobs: uses: ./.github/actions/compute-version - name: Login to GitHub Container Registry - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -92,18 +92,18 @@ jobs: uses: ./.github/actions/compute-version - name: Login to GitHub Container Registry - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Set up Docker Buildx - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 + uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0 - name: Extract metadata id: meta - uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0 + uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0 with: images: ${{ env.BASE_REPO }} tags: | @@ -112,7 +112,7 @@ jobs: type=raw,value=latest,enable=${{ startsWith(github.ref, 'refs/tags/') }} - name: Build and push Docker image - uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2 + uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 with: context: containers/egress-proxy platforms: linux/amd64,linux/arm64 @@ -168,7 +168,7 @@ jobs: uses: ./.github/actions/compute-version - name: Login to GitHub Container Registry - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -178,7 +178,7 @@ jobs: uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 + uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0 - name: Install Cosign uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1 @@ -239,7 +239,7 @@ jobs: uses: ./.github/actions/compute-version - name: Login to GitHub Container Registry - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -249,7 +249,7 @@ jobs: uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 + uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0 - name: Install Cosign uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1 @@ -320,7 +320,7 @@ jobs: fi - name: Login to GitHub Container Registry - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 with: registry: ghcr.io username: ${{ github.actor }} diff --git a/.github/workflows/operator-ci.yml b/.github/workflows/operator-ci.yml index 78827a319a..d7b7a0969c 100644 --- a/.github/workflows/operator-ci.yml +++ b/.github/workflows/operator-ci.yml @@ -160,7 +160,7 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - name: Set up Helm - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4.3.1 # pin@v4.3.0 + uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5.0.0 - name: Setup Ko uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9 diff --git a/.github/workflows/releaser.yml b/.github/workflows/releaser.yml index 7d918b5d73..88c68e550c 100644 --- a/.github/workflows/releaser.yml +++ b/.github/workflows/releaser.yml @@ -307,7 +307,7 @@ jobs: permissions: {} steps: - name: Send Slack Notification - uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a # v2.1.1 + uses: slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3 with: webhook: ${{ secrets.SLACK_TOOLHIVE_RELEASE_WEBHOOK_URL }} webhook-type: incoming-webhook diff --git a/.github/workflows/skills-build-and-publish.yml b/.github/workflows/skills-build-and-publish.yml index 77fdd7b1dc..b5b77c84c9 100644 --- a/.github/workflows/skills-build-and-publish.yml +++ b/.github/workflows/skills-build-and-publish.yml @@ -58,7 +58,7 @@ jobs: - name: Login to GitHub Container Registry if: inputs.push - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 with: registry: ghcr.io username: ${{ github.actor }} diff --git a/.github/workflows/test-e2e-lifecycle.yml b/.github/workflows/test-e2e-lifecycle.yml index e9a8456639..20d07721e9 100644 --- a/.github/workflows/test-e2e-lifecycle.yml +++ b/.github/workflows/test-e2e-lifecycle.yml @@ -50,7 +50,7 @@ jobs: sudo systemctl restart docker - name: Set up Helm - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4.3.1 + uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5.0.0 - name: Setup Ko uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9 diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 6428e35230..eea4f19ebe 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -67,7 +67,7 @@ jobs: - name: Upload coverage reports to Codecov with GitHub Action if: startsWith(matrix.os, 'ubuntu') - uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5 + uses: codecov/codecov-action@cddd853df119a48c5be31a973f8cd97e12e35e16 # v6.0.1 with: token: ${{ secrets.CODECOV_TOKEN }} slug: stacklok/toolhive