Bump GitHub Actions to Node 24 compatible versions [MOD-15112]

[dor-forer]

Describe the changes in the pull request

Migrate all JavaScript-based GitHub Actions in .github/workflows/ to versions running on the Node 24 runtime, ahead of the June 2, 2026 Node 20 deprecation.

Version bumps:

Action	Old	New
actions/checkout	v4	v6
actions/setup-python	v5	v6
actions/upload-artifact	v4	v7
aws-actions/configure-aws-credentials	v4	v6
machulav/ec2-github-runner	v2.4.2	v2.6.1
codecov/codecov-action	v4	v6
github/codeql-action/*	v3	v4
korthout/backport-action	v3	v4
release-drafter/release-drafter	v6	v7
slackapi/slack-github-action	v1	v3

slackapi/slack-github-action v1 → v3 in event-nightly.yml requires an API change: the SLACK_WEBHOOK_URL env var is replaced by explicit webhook and webhook-type: incoming-webhook action inputs.

rojopolis/spellcheck-github-actions@v0 is left as-is (Docker-based action, not Node-based).

Which issues this PR fixes

1. MOD-15112

Main objects this PR modified

1. .github/workflows/arm.yml
2. .github/workflows/benchmark-runner.yml
3. .github/workflows/codeql-analysis.yml
4. .github/workflows/coverage.yml
5. .github/workflows/event-nightly.yml
6. .github/workflows/event-pull_request.yml
7. .github/workflows/release-drafter.yml
8. .github/workflows/task-backport_pr.yml
9. .github/workflows/task-unit-test.yml

Mark if applicable

• This PR introduces API changes
• This PR introduces serialization changes

---

Note

Medium Risk
Moderate risk because it upgrades multiple third-party GitHub Actions across CI, including AWS runner lifecycle, CodeQL, and Codecov steps; failures would block builds or leak incomplete artifacts rather than change product behavior.

Overview
Updates CI workflows to use newer, Node 24-compatible versions of key GitHub Actions (e.g., actions/checkout, setup-python, upload-artifact, AWS credentials, EC2 runner management, CodeQL, Codecov, Release Drafter, and backport automation).

Adjusts the nightly Slack notification step to the slackapi/slack-github-action@v3 input format by passing the webhook via with.webhook/webhook-type instead of the deprecated SLACK_WEBHOOK_URL env var.

^{Reviewed by Cursor Bugbot for commit 24736b4. Bugbot is set up for automated code reviews on this repo. Configure here.}

[jit-ci]

🛡️ Jit Security Scan Results

✅ No security findings were detected in this PR

---

^{Security scan by Jit}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 24736b4. Configure here.}

[cursor]

Deprecated file input not migrated to files

Medium Severity

The codecov/codecov-action was bumped from v4 to v6, but the file input on this line was not updated to files. The file input was deprecated in v5 in favor of files. Combined with disable_search: true (which prevents automatic coverage file discovery), if the deprecated file alias stops being recognized in a future v6 patch, no coverage file will be specified or discovered, causing the upload step to silently produce no results.

 

^{Reviewed by Cursor Bugbot for commit 24736b4. Configure here.}

[github-actions]

Backport failed for 0.6, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally and resolve any conflicts.

git fetch origin 0.6
git worktree add -d .worktree/backport-947-to-0.6 origin/0.6
cd .worktree/backport-947-to-0.6
git switch --create backport-947-to-0.6
git cherry-pick -x 369f14fb01ef7b827e4242f543460a15750d82ca

[github-actions]

Backport failed for 0.7, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally and resolve any conflicts.

git fetch origin 0.7
git worktree add -d .worktree/backport-947-to-0.7 origin/0.7
cd .worktree/backport-947-to-0.7
git switch --create backport-947-to-0.7
git cherry-pick -x 369f14fb01ef7b827e4242f543460a15750d82ca

[github-actions]

Backport failed for 0.8, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally and resolve any conflicts.

git fetch origin 0.8
git worktree add -d .worktree/backport-947-to-0.8 origin/0.8
cd .worktree/backport-947-to-0.8
git switch --create backport-947-to-0.8
git cherry-pick -x 369f14fb01ef7b827e4242f543460a15750d82ca

[github-actions]

Backport failed for 8.2, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally and resolve any conflicts.

git fetch origin 8.2
git worktree add -d .worktree/backport-947-to-8.2 origin/8.2
cd .worktree/backport-947-to-8.2
git switch --create backport-947-to-8.2
git cherry-pick -x 369f14fb01ef7b827e4242f543460a15750d82ca

[github-actions]

Successfully created backport PR for 8.4:

• [8.4] Bump GitHub Actions to Node 24 compatible versions [MOD-15112]  #948