Skip to content

chore: move the pinned actions off Node 20 - #19

Merged
feng-shiplight merged 1 commit into
mainfrom
chore/node24-actions
Aug 12, 2026
Merged

chore: move the pinned actions off Node 20#19
feng-shiplight merged 1 commit into
mainfrom
chore/node24-actions

Conversation

@feng-shiplight

Copy link
Copy Markdown
Contributor

GitHub is forcing Node-20 actions onto Node 24, warning on every consumer run.

Action Was Now
upload-artifact v4 v7.0.1 (043fb46d)
download-artifact v4 v8.0.1 (3e5f45b2)
setup-node v4 v7.0.0 (82076278)

checkout was already on v6/node24.

upload-artifact@v5 would not have fixed this — v5 kept node20 as its default runtime and only had preliminary node24 support. v6 is the first that actually runs node24; same for download-artifact v7.

v6+/v7+ require Actions Runner >= 2.327.1. The Shiplight self-hosted runners report 2.336.0, so this is safe. Consumers on older self-hosted runners must update first — worth knowing before upgrading.

One behaviour change rides along: download-artifact@v8 errors on a digest mismatch rather than warning. For a pipeline that diagnoses failures from a downloaded report, failing loudly on a corrupt artifact beats reasoning about garbage.

Every with: block was validated against the new input sets; all five usages remain valid.

🤖 Generated with Claude Code

GitHub is forcing Node-20 actions onto Node 24, which surfaces as a deprecation
warning on every run:

  Node.js 20 is deprecated. The following actions target Node.js 20 but are
  being forced to run on Node.js 24: actions/upload-artifact@ea165f8d...

Bumps the three pins that still shipped `runs.using: node20`:

  upload-artifact    v4 -> v7.0.1  (043fb46d)
  download-artifact  v4 -> v8.0.1  (3e5f45b2)
  setup-node         v4 -> v7.0.0  (82076278)

checkout was already on v6/node24 and is unchanged.

Note that upload-artifact v5 does NOT fix this — v5 kept node20 as its default
runtime and only had preliminary node24 support. v6 is the first release that
actually runs on node24, and the same applies to download-artifact v7.

upload-artifact v6+ and download-artifact v7+ require Actions Runner >= 2.327.1.
The Shiplight self-hosted runners report 2.336.0, so this is safe; a consumer on
older self-hosted runners would need to update them first.

Two behaviour changes ride along with the majors, both wanted here:
- download-artifact v8 errors on a digest mismatch rather than warning. For a
  pipeline that diagnoses failures from a downloaded report, failing loudly on a
  corrupt artifact beats silently reasoning about garbage.
- Both actions moved to ESM, which is transparent to callers.

Every `with:` block was checked against the new input sets; all five usages are
still valid.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@feng-shiplight
feng-shiplight merged commit 9c61c0a into main Aug 12, 2026
1 check failed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant