Skip to content

[code-update-service] Running code-update job: actions-node20-runtime-upgrade - #10

Open
code-update-service[bot] wants to merge 1 commit into
trunkfrom
actions-node20-runtime-upgrade-67732
Open

code-update-service[bot] wants to merge 1 commit into
trunkfrom
actions-node20-runtime-upgrade-67732

Conversation

@code-update-service

@code-update-service code-update-service Bot commented Aug 31, 2026 •

Copy link
Copy Markdown

🤖 This PR was raised by the code-update-service! 🤖.

This code update job updates outdated GitHub Actions pins that still
trigger deprecated Node.js 20 runtime warnings. It focuses on workflow
action version upgrades to align with the Node24 runtime migration.
🤖 Changes are generated by claude-code. 🤖

⚙️ Workflow run: code-update-service#33406296080

Node.js 20 Action Runtime Upgrade Summary

GitHub Actions workflow files were updated to use newer action major
versions that target a supported Node.js runtime, eliminating Node.js 20
deprecation warnings from workflow runs.

Actions Upgraded

| Action | Old Version | New Version | Files | |---|---|---|---| |
actions/checkout | @v4 | @v5 | build.yml, workflow-requested.yml,
pr-labeled.yml, docker_official_image_build_and_test.yml, pr-update.yml,
deflake.yml, docker_rc_release.yml, docker_build_and_test.yml,
prepare_docker_official_image_source.yml, pr-linter.yml,
generate-reports.yml, ci-complete.yml | | actions/upload-artifact |
@v4 | @v7 | build.yml, docker_official_image_build_and_test.yml,
deflake.yml, docker_build_and_test.yml,
prepare_docker_official_image_source.yml, pr-reviewed.yml,
docker_scan.yml | | actions/download-artifact | @v4 | @v8 |
build.yml, pr-linter.yml, ci-complete.yml | | actions/setup-python |
@v5 | @v6 | docker_official_image_build_and_test.yml,
docker_rc_release.yml, docker_build_and_test.yml,
prepare_docker_official_image_source.yml | | actions/labeler | @v5 |
@v6 | pr-update.yml | | actions/stale | @v9 | @v10 | stale.yml,
pr-labels-cron.yml | | actions/github-script | @v7 | @v9 |
pr-labels-cron.yml | | docker/setup-qemu-action | @49b3bc8e...
(v3.2.0) | @v4 | docker_promote.yml, docker_rc_release.yml | |
docker/setup-buildx-action | @988b5a02... (v3.6.1) | @v4 |
docker_promote.yml, docker_rc_release.yml | | docker/login-action |
@9780b0c4... (v3.3.0) | @v4 | docker_promote.yml,
docker_rc_release.yml |

Files Changed

  • .github/workflows/build.yml
  • .github/workflows/ci-complete.yml
  • .github/workflows/deflake.yml
  • .github/workflows/docker_build_and_test.yml
  • .github/workflows/docker_official_image_build_and_test.yml
  • .github/workflows/docker_promote.yml
  • .github/workflows/docker_rc_release.yml
  • .github/workflows/docker_scan.yml
  • .github/workflows/generate-reports.yml
  • .github/workflows/pr-labeled.yml
  • .github/workflows/pr-labels-cron.yml
  • .github/workflows/pr-linter.yml
  • .github/workflows/pr-reviewed.yml
  • .github/workflows/pr-update.yml
  • .github/workflows/prepare_docker_official_image_source.yml
  • .github/workflows/stale.yml
  • .github/workflows/workflow-requested.yml

Could Not Auto-Resolve

| Action | Current Pin | Latest Release | Reason | |---|---|---|---| |
aquasecurity/trivy-action | @6e7b7d1f... (v0.24.0) | v0.36.0 | No
v0 major-version tag exists; the action uses 0.x semver without a
rolling major-version tag. Appears in: docker_scan.yml,
docker_build_and_test.yml, docker_official_image_build_and_test.yml |

Copilot AI lite review requested due to automatic review settings August 31, 2026 15:09
@github-actions github-actions Bot added the build label Aug 31, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Changes: Maintenance (1)

This PR updates multiple GitHub Actions workflows to newer major versions of commonly used actions, aiming to eliminate deprecated Node.js 20 runtime warnings and align with the Node24 runtime migration.

Changes:

  • Bump actions/checkout, actions/upload-artifact, actions/download-artifact, and actions/setup-python to newer major versions across CI and automation workflows.
  • Upgrade automation actions (actions/stale, actions/github-script, actions/labeler) and Docker-related setup/login actions in release/promote workflows.

Reviewed changes

Copilot reviewed 17 out of 17 changed files in this pull request and generated 17 comments.

Show a summary per file
File Description
.github/workflows/build.yml Upgrades checkout/artifact action versions used across CI build/test/catalog jobs.
.github/workflows/ci-complete.yml Upgrades checkout and download-artifact versions for build-scan publishing workflow.
.github/workflows/deflake.yml Upgrades checkout and upload-artifact versions for deflaking and report archival.
.github/workflows/docker_build_and_test.yml Upgrades checkout/setup-python/upload-artifact versions in Docker build+test workflow.
.github/workflows/docker_official_image_build_and_test.yml Upgrades checkout/setup-python/upload-artifact versions in official image build+test workflow.
.github/workflows/docker_promote.yml Upgrades Docker QEMU/Buildx/login actions used during image promotion.
.github/workflows/docker_rc_release.yml Upgrades checkout/setup-python and Docker QEMU/Buildx/login actions used during RC release.
.github/workflows/docker_scan.yml Upgrades upload-artifact version for publishing scan reports.
.github/workflows/generate-reports.yml Upgrades checkout version in scheduled report generation workflow.
.github/workflows/pr-labeled.yml Upgrades checkout version in PR-labeled automation workflow.
.github/workflows/pr-labels-cron.yml Upgrades github-script and stale action versions in scheduled label automation.
.github/workflows/pr-linter.yml Upgrades checkout and download-artifact versions in PR linter workflow.
.github/workflows/pr-reviewed.yml Upgrades upload-artifact version used for PR number persistence.
.github/workflows/pr-update.yml Upgrades checkout and labeler action versions for PR update automation.
.github/workflows/prepare_docker_official_image_source.yml Upgrades checkout/setup-python/upload-artifact versions for preparing official image source artifacts.
.github/workflows/stale.yml Upgrades stale action version used for stale issue/PR handling.
.github/workflows/workflow-requested.yml Upgrades checkout version in workflow-run requested automation.
Suppressed comments (5)

.github/workflows/pr-labels-cron.yml:80

  • This workflow uses the GitHub-hosted runner ubuntu-latest; the org GitHub Actions guideline requires using self-hosted runners (e.g. gha-production-*) to avoid uncontrolled egress.
    permissions:
      issues: write
      pull-requests: write
    steps:
      - uses: actions/stale@v10

.github/workflows/build.yml:121

  • This workflow uses the GitHub-hosted runner ubuntu-latest; the org GitHub Actions guideline requires using self-hosted runners (e.g. gha-production-*) to avoid uncontrolled egress.
        run: printenv
        env:
          GITHUB_CONTEXT: ${{ toJson(github) }}
      - name: Checkout code
        uses: actions/checkout@v5

.github/workflows/build.yml:195

  • This workflow uses the GitHub-hosted runner ubuntu-latest; the org GitHub Actions guideline requires using self-hosted runners (e.g. gha-production-*) to avoid uncontrolled egress.
      job-variation: ${{ matrix.java }}-${{ matrix.run-flaky == true && 'flaky' || 'noflaky' }}-${{ matrix.run-new == true && 'new' || 'nonew' }}
    name: JUnit tests Java ${{ matrix.java }}${{ matrix.run-flaky == true && ' (flaky)' || '' }}${{ matrix.run-new == true && ' (new)' || '' }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v5

.github/workflows/build.yml:285

  • This workflow uses the GitHub-hosted runner ubuntu-latest; the org GitHub Actions guideline requires using self-hosted runners (e.g. gha-production-*) to avoid uncontrolled egress.
    outputs:
      uploaded-test-catalog: ${{ steps.archive-test-catalog.outcome == 'success' }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v5

.github/workflows/build.yml:337

  • This workflow uses the GitHub-hosted runner ubuntu-latest; the org GitHub Actions guideline requires using self-hosted runners (e.g. gha-production-*) to avoid uncontrolled egress.
    permissions:
      contents: write
    steps:
      - name: Checkout Test Catalog
        uses: actions/checkout@v5

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@@ -37,8 +37,8 @@ jobs:
runs-on: ubuntu-latest
@@ -38,7 +38,7 @@ jobs:
stale:
runs-on: ubuntu-latest
Comment on lines 35 to +39
env:
GITHUB_CONTEXT: ${{ toJson(github) }}
- name: Save PR Number
run: echo ${{ github.event.pull_request.number }} > PR_NUMBER.txt
- uses: actions/upload-artifact@v4
- uses: actions/upload-artifact@v7
Comment on lines 34 to +38
run: printenv
env:
GITHUB_CONTEXT: ${{ toJson(github) }}
- name: Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5
Comment on lines 31 to +35
run: printenv
env:
GITHUB_CONTEXT: ${{ toJson(github) }}
- name: Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5
@@ -32,9 +32,9 @@ jobs:
build:
runs-on: ubuntu-latest
Comment on lines 41 to +45
runs-on: ubuntu-latest
name: Deflake JUnit tests
steps:
- name: Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5
Comment on lines 60 to +64
run: printenv
env:
GITHUB_CONTEXT: ${{ toJson(github) }}
- name: Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5
Comment on lines 65 to +69
runs-on: ubuntu-latest
name: Load Test Catalog
steps:
- name: Checkout main
uses: actions/checkout@v4
uses: actions/checkout@v5
@@ -31,9 +31,9 @@ jobs:
build:
runs-on: ubuntu-latest
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant