ci: move the reusable workflows' actions to Node 24 #22

Merged
marcos-mendez merged 1 commit from ci/node24-actions into main 2026-10-07 18:51:16 -03:00
marcos-mendez commented 2026-10-07 18:06:31 -03:00 (Migrated from github.com)

GitHub deprecates the Node 20 action runtime. This moves every action in the reusable workflows to its current Node 24 major. Callers on @main pick it up on merge.

Action Old New
actions/checkout v4 v7
actions/upload-artifact v4 v7
actions/download-artifact v4 v8
actions/setup-python v5 v7
actions/cache v4 v6
github/codeql-action/upload-sarif v4 v4 (already node24)
  • persist-credentials: false is kept everywhere it was set.
  • Upload and download are bumped together; v4 to v8 share one artifact backend, and downloads here are by name, so the v5 by-ID path change does not apply. download-artifact v8 now fails on a digest mismatch.
  • checkout v7 refuses fork heads under pull_request_target/workflow_run; the self-hosted jobs already refuse those events.
  • Self-hosted keel-lxc runners are at 2.338.0 (minimum 2.327.1).

Test plan

  • This repo's own CI (lint, tests, security) green
  • A caller run against this branch green
GitHub deprecates the Node 20 action runtime. This moves every action in the reusable workflows to its current Node 24 major. Callers on `@main` pick it up on merge. | Action | Old | New | |---|---|---| | actions/checkout | v4 | v7 | | actions/upload-artifact | v4 | v7 | | actions/download-artifact | v4 | v8 | | actions/setup-python | v5 | v7 | | actions/cache | v4 | v6 | | github/codeql-action/upload-sarif | v4 | v4 (already node24) | - `persist-credentials: false` is kept everywhere it was set. - Upload and download are bumped together; v4 to v8 share one artifact backend, and downloads here are by name, so the v5 by-ID path change does not apply. download-artifact v8 now fails on a digest mismatch. - checkout v7 refuses fork heads under `pull_request_target`/`workflow_run`; the self-hosted jobs already refuse those events. - Self-hosted keel-lxc runners are at 2.338.0 (minimum 2.327.1). ## Test plan - [ ] This repo's own CI (lint, tests, security) green - [ ] A caller run against this branch green
Sign in to join this conversation.
No description provided.