Skip to content

fix(ci): update workflow actions for Node.js 24 compatibility#20

Merged
zfarrell merged 2 commits intomainfrom
fix/update-actions-node24
Apr 6, 2026
Merged

fix(ci): update workflow actions for Node.js 24 compatibility#20
zfarrell merged 2 commits intomainfrom
fix/update-actions-node24

Conversation

@zfarrell
Copy link
Copy Markdown
Contributor

@zfarrell zfarrell commented Apr 6, 2026

Update all GitHub Actions to Node.js 24 compatible versions with SHA pins.

Comment thread .github/workflows/ci.yml
Comment thread .github/workflows/ci.yml Outdated
Copy link
Copy Markdown

@claude claude Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 - SHA version comments need verification: de0fac2e (checkout) is labeled v6 and 66822842 (cache) is labeled v5, but actions/checkout was at v4.x as of late 2025. A SHA pinned with a wrong version label is unauditable and indistinguishable from a tampered pin. Run: gh api repos/actions/checkout/git/refs/tags and gh api repos/actions/cache/git/refs/tags to confirm the SHAs match before merging.

Copy link
Copy Markdown
Contributor Author

@zfarrell zfarrell left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Verified: both SHAs match their respective tags.

$ gh api repos/actions/checkout/git/ref/tags/v6 --jq '.object.sha'
de0fac2e4500dabe0009e67214ff5f5447ce83dd

$ gh api repos/actions/cache/git/ref/tags/v5 --jq '.object.sha'
668228422ae6a00e4ad889ee87cd7109ec5666a7

actions/checkout v6 and actions/cache v5 are both current releases with Node.js 24 support.

@zfarrell zfarrell merged commit 2336126 into main Apr 6, 2026
5 checks passed
@zfarrell zfarrell deleted the fix/update-actions-node24 branch April 6, 2026 21:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant