Skip to content

ci: bump checkout and setup-python to Node 24-native majors - #6

Merged
sherryzyh merged 1 commit into
mainfrom
ci/bump-actions-node24
Jun 22, 2026
Merged

ci: bump checkout and setup-python to Node 24-native majors#6
sherryzyh merged 1 commit into
mainfrom
ci/bump-actions-node24

Conversation

@sherryzyh

Copy link
Copy Markdown
Owner

What

Bump the pinned GitHub-maintained actions in both workflows to their current stable majors, which run natively on Node.js 24:

Action Before After
actions/checkout v4 v7
actions/setup-python v5 v6

Applied identically in .github/workflows/ci.yml and .github/workflows/release.yml.

Why

GitHub Actions now force-runs Node 20 JavaScript actions on Node 24 and is deprecating the Node 20 runtime (removal slated for late 2026). checkout@v4 and setup-python@v5 still declare the Node 20 runtime, which surfaced as a deprecation warning in CI (run 27923556616).

Verification

Latest stable majors confirmed on the GitHub marketplace:

  • actions/checkout — current major is v7 (v5/v6/v7 all run on Node 24). v7's only behavioral change vs. v5/v6 is blocking fork checkouts for pull_request_target / workflow_run events; this does not affect us — our triggers are plain pull_request, push, and tag pushes. v6's credential-file persistence requires a recent runner, which GitHub-hosted ubuntu-latest satisfies.
  • actions/setup-python — current major is v6 (Node 24).

If a more conservative pin is preferred, actions/checkout@v5 is equally Node-24-native and longer-established; happy to downgrade.

Other actions checked

pypa/gh-action-pypi-publish@release/v1 (release workflow) is a composite action on a floating upstream-maintained ref, not a Node 20 action — left unchanged.

CI maintenance only; no application code changes.

🤖 Generated with Claude Code

GitHub Actions now force-runs Node 20 actions on Node 24 and is
deprecating the Node 20 runtime (removal slated for late 2026). The
pinned actions/checkout@v4 and actions/setup-python@v5 still declare the
Node 20 runtime, producing deprecation warnings in CI.

Bump to the current stable majors that run natively on Node 24:
  - actions/checkout       v4 -> v7
  - actions/setup-python   v5 -> v6

checkout v7's only behavioral change vs v5/v6 (blocking fork checkouts
for pull_request_target / workflow_run events) does not apply here; our
workflows use plain pull_request, push, and tag triggers. The remaining
third-party action, pypa/gh-action-pypi-publish@release/v1, is a
composite action on a floating ref maintained upstream and is unaffected.

CI maintenance only; no application code changes.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@sherryzyh
sherryzyh force-pushed the ci/bump-actions-node24 branch from f19f283 to 4142a15 Compare June 22, 2026 01:31
@sherryzyh
sherryzyh merged commit eacfd3c into main Jun 22, 2026
3 checks passed
@sherryzyh
sherryzyh deleted the ci/bump-actions-node24 branch June 23, 2026 03:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant