RED-198334 Bump GH Actions off Node 20 (release/7.4) - #532
Closed
gonen-red wants to merge 1 commit into
Closed
Conversation
- Bump first-party actions: actions/checkout@v4 -> @v6 (16 sites), actions/upload-artifact@v4 -> @v7 (5 sites), actions/download-artifact@v4 -> @v7 - Bump docker/* actions: setup-buildx v3->v4 (3 sites), login v3->v4 (4 sites), build-push v6->v7 (2 sites) - Bump dorny/test-reporter v2->v3, peter-evans/create-pull-request v7->v8, iarekylew00t/verified-bot-commit v1->v2 Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Contributor
|
Thanks, I did it by merging your unstable PR into release branches. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
RED-198334. Cherry-pick of the canonical Node 20 -> Node 24 bump from
unstable(#526). Targetsrelease/7.4.actions/checkout@v4->@v6(16 sites),actions/upload-artifact@v4->@v7(5 sites),actions/download-artifact@v4->@v7docker/*actions:setup-buildxv3->v4 (3 sites),loginv3->v4 (4 sites),build-pushv6->v7 (2 sites)dorny/test-reporterv2->v3,peter-evans/create-pull-requestv7->v8,iarekylew00t/verified-bot-commitv1->v2Test plan
pull-request.ymlruns cleanly on this PRrelease_build_and_test.ymlproduces same image digests with bumped actionsNote
Medium Risk
Wide CI/release pipeline version bumps could surface breaking changes in checkout, artifacts, or Docker build steps until workflows are re-run on this branch.
Overview
Cherry-pick onto
release/7.4of the GitHub Actions version bumps that move workflows off Node 20 (toward Node 24), matching the change already onunstable(#526). Only composite actions and workflow YAMLuses:pins change—no build scripts, Dockerfiles, or release logic.First-party actions:
actions/checkoutv4 → v6 across composite actions and workflows;actions/upload-artifactandactions/download-artifactv4 → v7 wherever artifacts are stored or merged (build logs, image metadata, release handle, release info).Docker and third-party actions:
docker/setup-buildx-actionv3 → v4,docker/login-actionv3 → v4,docker/build-push-actionv6 → v7; plusdorny/test-reporterv2 → v3,peter-evans/create-pull-requestv7 → v8, andiarekylew00t/verified-bot-commitv1 → v2 for release commits.Touches PR validation, build/test, multi-arch publish, and release build/publish paths—behavior should stay the same aside from the updated action runtimes.
Reviewed by Cursor Bugbot for commit 04b313b. Bugbot is set up for automated code reviews on this repo. Configure here.