Skip to content

CI: update GitHub actions to Node.js 24 versions (1.4-maint) - #10594

Merged
ThomasWaldmann merged 2 commits into
borgbackup:1.4-maintfrom
ThomasWaldmann:gha-node24-14
Nov 4, 2026
Merged

ThomasWaldmann merged 2 commits into
borgbackup:1.4-maintfrom
ThomasWaldmann:gha-node24-14

Conversation

@ThomasWaldmann

@ThomasWaldmann ThomasWaldmann commented Nov 4, 2026 •

Copy link
Copy Markdown
Member

The 1.4-maint CI runs show "Node.js 20 is deprecated" warnings: the runners force these actions onto Node.js 24. The CodeQL job also gets a failure annotation because github/codeql-action v2 is deprecated.

This updates the affected actions to their current major versions. All of them target Node.js 24, and they are the same majors master already uses:

  • actions/checkout v4 -> v7
  • actions/setup-python v5 -> v7
  • actions/cache v4 -> v6
  • actions/upload-artifact v4 -> v7 (only used on tag builds)
  • codecov/codecov-action v4 -> v7 (we only pass token and env_vars, which are unaffected by the v5 file -> files rename)
  • github/codeql-action/{init,analyze} v2 -> v4

These are already on Node.js 24 and stay unchanged: msys2/setup-msys2@v2, actions/attest-build-provenance@v3, cross-platform-actions/action@v1.5.0, chartboost/ruff-action@v1.

Not addressed here: the cross-platform-actions warning that the run input is deprecated. It is unrelated to Node.js and needs the VM steps restructured.

All actions are now pinned to full commit SHAs with the release in a trailing comment (e.g. actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1), the same style and SHAs as on master. actions/attest-build-provenance (not used on master) is pinned to v3.0.0, which is what the floating v3 tag points to.

🤖 Generated with Claude Code

ThomasWaldmann and others added 2 commits November 4, 2026 22:43
The runners force actions targeting Node.js 20 to run on Node.js 24 and
warn about it. Update these actions to their current major versions,
which target Node.js 24 (same majors as on master):

- actions/checkout v4 -> v7
- actions/setup-python v5 -> v7
- actions/cache v4 -> v6
- actions/upload-artifact v4 -> v7
- codecov/codecov-action v4 -> v7
- github/codeql-action v2 -> v4 (v2 is deprecated and errors out)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Like on master, reference each action by its full commit SHA, with the
release it corresponds to in a trailing comment.

actions/attest-build-provenance is pinned to v3.0.0, which is what the
floating v3 tag points to.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@ThomasWaldmann
ThomasWaldmann merged commit 4dab852 into borgbackup:1.4-maint Nov 4, 2026
13 checks passed
@ThomasWaldmann
ThomasWaldmann deleted the gha-node24-14 branch November 4, 2026 22:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant