Repository navigation
ci(ENG-3243): move action pins off the deprecated Node 20 runtime - #28
Conversation
Swap every JavaScript action that still declares the node20 (or older) runtime for a release that declares node24, keeping this repo's pin style. Workflows that push take checkout v5 rather than v6, so their credential handling is unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
There was a problem hiding this comment.
🟢 Approval recommended
Both workflows consistently use immutable pins for the intended Node 24-based action releases without changing workflow behavior.
0 open findings
What changed in this PR
Updates GitHub Actions to Node 24-based releases, eliminating deprecated Node 20 action runtimes.
Changes:
- Upgrades pinned
actions/checkoutto v5.0.0. - Upgrades pinned
actions/setup-nodeto v6.3.0.
| File | Description |
|---|---|
.github/workflows/build.yml |
Updates build workflow action pins. |
.github/workflows/release.yml |
Updates release workflow action pins while retaining checkout v5 credential behavior. |
🧠 Review effort: Balanced
Give feedback about Copilot approvals in this survey to enter a drawing for a $150 gift card.
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
There was a problem hiding this comment.
No issues found across 2 files
Auto-approved: CI-only update of checkout/setup-node pins to Node 24 runtimes in build/release workflows, removing GitHub's deprecated-Node-20 annotations; checkout stays on v5 to preserve push credentials, keeping the change bounded.
View guided diff | Turn on auto-fix | Re-trigger cubic
Summary
Moves every JavaScript action in this repo's workflows that declares the Node 20 (or older) runtime to a release that runs on Node 24, removing the "Node.js 20 is deprecated" annotations GitHub adds to every job that uses one. Part of ENG-3243, which has done the same across the org.
actions/checkout08c6903)actions/setup-node53b8394)Compatibility
$RUNNER_TEMPinstead of.git/config;gitcommands keep working. Workflows here that push (git push/tag, create-pull-request, release tooling) take v5 instead, which is Node 24 but keeps the credential in.git/config, so their push path is unchanged.package.jsondeclares an npmpackageManager; none does here, and steps that cache already setcache:.Testing
Workflow-only change. Steps that only run on push, release, deploy or schedule aren't exercised by this PR's CI and will first run on merge.
🤖 Generated with Claude Code
Summary by cubic
Moves the
actions/checkoutandactions/setup-nodepins inbuild.ymlandrelease.ymlto releases that run on Node 24, clearing GitHub's "Node.js 20 is deprecated" job annotations.Compatibility
actions/checkoutgoes to v5 (not v6) so workflows that push keep credentials in.git/config; v6 stores them under$RUNNER_TEMP.actions/setup-nodev6 auto-enables caching only whenpackage.jsondeclares an npmpackageManager; that isn't the case here.Written for commit bf5e670. Summary will update on new commits.