Skip to content

[0.6] Bump GitHub Actions to Node 24 compatible versions [MOD-15112]#949

Draft
dor-forer wants to merge 1 commit into0.6from
backport-947-to-0.6
Draft

[0.6] Bump GitHub Actions to Node 24 compatible versions [MOD-15112]#949
dor-forer wants to merge 1 commit into0.6from
backport-947-to-0.6

Conversation

@dor-forer
Copy link
Copy Markdown
Collaborator

@dor-forer dor-forer commented May 4, 2026

Describe the changes in the pull request

Manual backport of #947 to 0.6. The automated backport failed due to conflicts.

Migrates JavaScript-based GitHub Actions to versions running on the Node 24 runtime, ahead of the June 2, 2026 Node 20 deprecation.

Version bumps applied to the workflow files that exist on 0.6:

Action Old New
actions/checkout v4 v6
actions/setup-python v5 v6
actions/upload-artifact v4 v7
aws-actions/configure-aws-credentials v4 v6
machulav/ec2-github-runner v2 / v2.4.1 v2.6.1
codecov/codecov-action v4 v6
github/codeql-action/* v3 v4
korthout/backport-action v2 v4
release-drafter/release-drafter v6 v7

Conflict-resolution notes:

Which issues this PR fixes

  1. MOD-15112

Main objects this PR modified

  1. .github/workflows/arm.yml
  2. .github/workflows/codeql-analysis.yml
  3. .github/workflows/coverage.yml
  4. .github/workflows/event-pull_request.yml
  5. .github/workflows/release-drafter.yml
  6. .github/workflows/task-backport_pr.yml
  7. .github/workflows/task-unit-test.yml

Mark if applicable

  • This PR introduces API changes
  • This PR introduces serialization changes

[MOD-15112] Bump GitHub Actions to Node 24 compatible versions

Migrate all JavaScript-based GitHub Actions to versions running on the
Node 24 runtime ahead of the June 2, 2026 Node 20 deprecation.

- actions/checkout v4 -> v6
- actions/setup-python v5 -> v6
- actions/upload-artifact v4 -> v7
- aws-actions/configure-aws-credentials v4 -> v6
- machulav/ec2-github-runner v2.4.2 -> v2.6.1
- codecov/codecov-action v4 -> v6
- github/codeql-action/* v3 -> v4
- korthout/backport-action v3 -> v4
- release-drafter/release-drafter v6 -> v7
- slackapi/slack-github-action v1 -> v3 (input-based webhook config)

(cherry picked from commit 369f14f)
@jit-ci
Copy link
Copy Markdown

jit-ci Bot commented May 4, 2026

🛡️ Jit Security Scan Results

CRITICAL HIGH MEDIUM

✅ No security findings were detected in this PR


Security scan by Jit

@dor-forer dor-forer closed this May 5, 2026
@dor-forer
Copy link
Copy Markdown
Collaborator Author

Closing in favor of re-backporting once #953 merges. The bumped codecov-action with: key in this PR is broken (file: was renamed to files: in v5; see #953).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant