Skip to content

UID2-6742: upgrade Node.js 20 actions to Node.js 24-compatible versions#227

Open
sophia-chen-ttd wants to merge 11 commits intomainfrom
sch-UID2-6742-update-node20-actions
Open

UID2-6742: upgrade Node.js 20 actions to Node.js 24-compatible versions#227
sophia-chen-ttd wants to merge 11 commits intomainfrom
sch-UID2-6742-update-node20-actions

Conversation

@sophia-chen-ttd
Copy link
Copy Markdown
Contributor

Summary

  • actions/checkout@v4@v6 (SHA 34e114876bde0fac2e) — 13 workflow steps across 11 workflow files and 2 composite actions
  • azure/login@v2@v3 (SHA 1384c340532459ea) — 5 composite actions
  • docker/login-action@v3@v4 — 3 workflow steps and 3 composite actions

All three actions ran on Node.js 20, which is deprecated and forced off on June 2, 2026 per GitHub's announcement.

After this merges, please create release tag v3.82 (current latest: v3.81) so the update-major-version-tags workflow advances the floating v3 tag — automatically resolving transitive warnings in all downstream repos that call IABTechLab/uid2-shared-actions@v3 reusable workflows.

Jira

https://thetradedesk.atlassian.net/browse/UID2-6742

🤖 Generated with Claude Code

sophia-chen-ttd and others added 11 commits May 4, 2026 15:38
Replaces actions/checkout@v4->@v6, azure/login@v2->@V3,
docker/login-action@v3->@v4 across all shared workflows and
composite actions. Required before June 2 2026 forced Node 24
migration. Resolves UID2-6742.
…-compatible versions

- actions/github-script: v7 (f28e40c7) -> v9.0.0 (3a2844b7)
- EndBug/add-and-commit: v9 (a94899bc) -> v10.0.0 (290ea2c4)
- actions/cache + cache/save: v4 (0057852b) -> v5.0.5 (27d5ce7f)
- oras-project/setup-oras: v1 (22ce207d) -> v2.0.0 (38de303a)
- github/codeql-action/upload-sarif: v3 (5c8a8a64) -> v4.35.3 (e46ed2cb)
- aquasecurity/trivy-action: v0.35.0 (57a97c7e) -> v0.36.0 (ed142fd0)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
…compatible versions

- actions/setup-java: v4 -> v5.2.0 (be666c2f)
- docker/build-push-action: v5 (ca052bb5) -> v7.1.0 (bcafcacb)
- docker/metadata-action: v5 (c299e40c) -> v6.0.0 (030e8812)
- google-github-actions/auth: v2 (c200f369) -> v3.0.0 (7c6bc770)
- actions/upload-artifact: v4 -> v7.0.1 (043fb46d)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
… branch

Temporary: internal cross-refs to vulnerability_scan@v3 and the
shared-build-and-test ref: v3 now point to the test branch so CI
validates the updated action. Revert to @V3 / ref: v3 before merging
(or drop this commit — after v3.82 release the floating tag auto-advances).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Fixes Node.js 20 deprecation warning in GCP private operator E2E flows.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
…ch for CI validation

Points all 14 internal @v3/@v2 composite action refs to branch so E2E CI
picks up updated azure/login@v3, docker/login-action@v4, gcloud@v3 versions.
DROP THIS COMMIT BEFORE MERGING.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
…posite refs to branch

Redirects check_branch_and_release_type@v3, version_number@v2,
commit_pr_and_merge@v3 (x2), delete_draft_releases@v3 to branch so CI
loads updated github-script@v9/add-and-commit@v10 instead of deprecated
v7/v9 from the tag.
DROP THIS COMMIT BEFORE MERGING.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
…edentials v4→v6.1.0

Both v6 releases use node24. Fixes Node.js 20 deprecation warnings in
AWS private operator start/stop E2E flows.

py-actions/py-dependency-install@v4.1.0 is blocked on upstream — no
node24 release exists yet.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant