Skip to content

[8.4] Bump GitHub Actions to Node 24 compatible versions [MOD-15112]#964

Merged
dor-forer merged 3 commits into8.4from
backport-947-953-to-8.4
May 6, 2026
Merged

[8.4] Bump GitHub Actions to Node 24 compatible versions [MOD-15112]#964
dor-forer merged 3 commits into8.4from
backport-947-953-to-8.4

Conversation

@dor-forer
Copy link
Copy Markdown
Collaborator

@dor-forer dor-forer commented May 5, 2026

Describe the changes in the pull request

Manual backport of #947 and #953 to 8.4. Both upstream changes are applied as two cherry-picked commits.

Migrates JavaScript-based GitHub Actions to versions running on the Node 24 runtime, ahead of the June 2, 2026 Node 20 deprecation, and uses the correct files: input for codecov/codecov-action@v6.

Version bumps:

Action Old New
actions/checkout v4 v6
actions/setup-python v5 v6
actions/upload-artifact v4 v7
aws-actions/configure-aws-credentials v4 v6
machulav/ec2-github-runner v2.4.2 v2.6.1
codecov/codecov-action v4 v6 (input renamed filefiles)
github/codeql-action/* v3 v4
korthout/backport-action v3 v4
release-drafter/release-drafter v6 v7
slackapi/slack-github-action v1 v3 (input-based webhook config)

Both cherry-picks applied cleanly with no manual conflict resolution.

Which issues this PR fixes

  1. MOD-15112

Main objects this PR modified

  1. .github/workflows/arm.yml
  2. .github/workflows/benchmark-runner.yml
  3. .github/workflows/codeql-analysis.yml
  4. .github/workflows/coverage.yml
  5. .github/workflows/event-nightly.yml
  6. .github/workflows/event-pull_request.yml
  7. .github/workflows/release-drafter.yml
  8. .github/workflows/task-backport_pr.yml
  9. .github/workflows/task-unit-test.yml

Mark if applicable

  • This PR introduces API changes
  • This PR introduces serialization changes

Note

Medium Risk
CI behavior depends on updated third-party GitHub Actions (runner provisioning, CodeQL, Codecov, Slack, artifacts), so failures would primarily impact automation rather than product code.

Overview
Modernizes CI workflows by bumping several GitHub Actions to newer major versions (e.g., actions/checkout, setup-python, upload-artifact, configure-aws-credentials, machulav/ec2-github-runner, codeql-action, release-drafter, backport-action, slack-github-action).

Adjusts workflow configuration where required by the upgrades, including switching Codecov’s input from file to files and moving Slack notification webhook configuration into with: inputs.

Reviewed by Cursor Bugbot for commit d9de9fe. Bugbot is set up for automated code reviews on this repo. Configure here.

dor-forer added 2 commits May 5, 2026 14:50
[MOD-15112] Bump GitHub Actions to Node 24 compatible versions

Migrate all JavaScript-based GitHub Actions to versions running on the
Node 24 runtime ahead of the June 2, 2026 Node 20 deprecation.

- actions/checkout v4 -> v6
- actions/setup-python v5 -> v6
- actions/upload-artifact v4 -> v7
- aws-actions/configure-aws-credentials v4 -> v6
- machulav/ec2-github-runner v2.4.2 -> v2.6.1
- codecov/codecov-action v4 -> v6
- github/codeql-action/* v3 -> v4
- korthout/backport-action v3 -> v4
- release-drafter/release-drafter v6 -> v7
- slackapi/slack-github-action v1 -> v3 (input-based webhook config)

(cherry picked from commit 369f14f)
[MOD-15112] Fix codecov-action 'file' input renamed to 'files' in v5+

Renaming codecov/codecov-action's 'file' input to 'files'. The 'file'
input was removed in v5.0.0 (renamed to 'files') and v6 did not
reintroduce it. Combined with 'disable_search: true', the old
'file:' key was silently ignored and no coverage report was uploaded.

(cherry picked from commit 5ec2f77)
@jit-ci
Copy link
Copy Markdown

jit-ci Bot commented May 5, 2026

🛡️ Jit Security Scan Results

CRITICAL HIGH MEDIUM

✅ No security findings were detected in this PR


Security scan by Jit

@dor-forer dor-forer marked this pull request as ready for review May 5, 2026 12:01
Comment thread .github/workflows/release-drafter.yml
Copy link
Copy Markdown

@cursor cursor Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit d9de9fe. Configure here.

Comment thread .github/workflows/event-nightly.yml
@codecov
Copy link
Copy Markdown

codecov Bot commented May 5, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.04%. Comparing base (b3ab13d) to head (d9de9fe).

Additional details and impacted files
@@            Coverage Diff             @@
##              8.4     #964      +/-   ##
==========================================
- Coverage   97.06%   97.04%   -0.03%     
==========================================
  Files         126      126              
  Lines        7470     7470              
==========================================
- Hits         7251     7249       -2     
- Misses        219      221       +2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@dor-forer dor-forer requested a review from BenGoldberger May 6, 2026 08:48
@dor-forer dor-forer added this pull request to the merge queue May 6, 2026
Merged via the queue into 8.4 with commit 1bab969 May 6, 2026
17 checks passed
@dor-forer dor-forer deleted the backport-947-953-to-8.4 branch May 6, 2026 09:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants