INFRA-726 — Upgrade GHA to Node.js 24

[ChazzleDazzle]

Summary

Upgrade GitHub Actions to Node.js 24-compatible versions.

GitHub will force Node.js 24 as the default runner on June 2, 2026 and remove
Node.js 20 entirely on September 16, 2026.

Linear: https://linear.app/enginetravel/issue/INFRA-726

Changes

Action	Previous	Updated	File(s)
actions/checkout	@v3	@v6.0.2 (SHA de0fac2e...)	workflow.yml
actions/setup-go	@v3	@v6.4.0 (SHA 4a360112...)	workflow.yml
actions/cache	@v3	@v5.0.5 (SHA 27d5ce7f...)	workflow.yml

Actions needing manual review

• golangci/golangci-lint-action@v3 — not in action-versions.json
• shogo82148/actions-goveralls@v1 — not in action-versions.json

Upstream blockers

None.

---

Made with AI (model: claude-sonnet-4-20250514)

Made with Cursor

---

Note

Low Risk
CI-only workflow changes with no application runtime impact; slower builds possible without cache, and two third-party actions may still need Node 24 validation.

Overview
Updates the Test workflow for Node.js 24–ready runners by pinning actions/checkout and actions/setup-go to v6 SHAs (instead of @V3 tags) and reordering steps so checkout runs before Go setup in both lint and test jobs.

The test matrix no longer runs Go 1.17.x (only 1.18.x and 1.20.x), matching the module’s go 1.18 minimum. The actions/cache restore step for ~/go/pkg/mod is removed from the test job, so dependency caching in CI is no longer applied.

TODO comments flag golangci/golangci-lint-action@v3 and shogo82148/actions-goveralls@v1 for manual Node 24 verification because they are not listed in action-versions.json.

^{Reviewed by Cursor Bugbot for commit 56c62b7. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 2 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit b9f1726. Configure here.}

[coveralls]

Coverage Report for CI Build 26461449577

Warning

No base build found for commit 5464ad4 on master.
Coverage changes can't be calculated without a base build.
If a base build is processing, this comment will update automatically when it completes.

Coverage: 88.583%

Details

• Patch coverage: No coverable lines changed in this PR.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

Requires a base build to compare against. How to fix this →

---

Coverage Stats

Relevant Lines:	1016
Covered Lines:	900
Line Coverage:	88.58%
Coverage Strength:	8.77 hits per line

---

💛 - Coveralls

[ChazzleDazzle]

Addressed both BugBot findings in 3e97788:

1. setup-go v6 cache runs before checkout — Moved checkout before setup-go in both golangci and test jobs so the built-in cache can find go.mod.
2. Dual caching conflict — Removed the explicit actions/cache step since setup-go v6 handles Go module caching natively.

---

Made with AI (model: claude-sonnet-4-20250514)

[jabaughman]

Approved.