From 13071414eda5a178b348e66a66c6d7f90f692227 Mon Sep 17 00:00:00 2001 From: nonth Date: Fri, 29 May 2026 15:33:03 +0700 Subject: [PATCH] ci: bump deprecated GitHub Actions to Node 24 versions MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Resolves the Node 20 deprecation warning surfaced by every run since GitHub's 2025-09 announcement. From 2026-06-02 GitHub will force the Node 24 default on runners; pinning Node 20 actions past then needs an ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION opt-out, which we don't want. - actions/checkout@v4 → @v6 - actions/setup-node@v4 → @v6 - actions/setup-java@v4 → @v5 - android-actions/setup-android@v3 → @v4 All four major bumps ship the same input schema we use (node-version, distribution/java-version/cache, registry-url, fetch-depth) and are backward-compatible with our usage. Changeset added as patch so this also validates the full CI release pipeline end-to-end (Trusted Publishing OIDC + provenance attestation + tag creation under the new tag-protection ruleset). Co-Authored-By: Claude Opus 4.7 (1M context) --- .changeset/bump-node24-actions.md | 13 +++++++++++++ .github/workflows/ci.yml | 8 ++++---- .github/workflows/release.yml | 8 ++++---- 3 files changed, 21 insertions(+), 8 deletions(-) create mode 100644 .changeset/bump-node24-actions.md diff --git a/.changeset/bump-node24-actions.md b/.changeset/bump-node24-actions.md new file mode 100644 index 0000000..38991b4 --- /dev/null +++ b/.changeset/bump-node24-actions.md @@ -0,0 +1,13 @@ +--- +"@inoxth/react-native-edot-shared": patch +"@inoxth/react-native-edot-sdk": patch +"@inoxth/react-native-edot-navigation": patch +"@inoxth/react-native-edot-tracer-provider": patch +--- + +ci: bump deprecated GitHub Actions to Node 24 supporting versions + +No runtime or API changes. Pure CI tooling update so the release +pipeline keeps working past GitHub's 2026-06-02 Node 24 default +cutover. Also doubles as the first end-to-end validation of the +Trusted Publishing + OIDC + provenance attestation flow. diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 96e347e..f53824e 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -13,21 +13,21 @@ jobs: name: Verify runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version: 24 - name: Set up JDK 17 - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: corretto java-version: "17" cache: gradle - name: Set up Android SDK - uses: android-actions/setup-android@v3 + uses: android-actions/setup-android@v4 - name: Enable Corepack run: corepack enable diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f421c73..69a6d53 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -15,24 +15,24 @@ jobs: pull-requests: write id-token: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: fetch-depth: 0 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version: 24 registry-url: https://registry.npmjs.org/ - name: Set up JDK 17 - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: corretto java-version: "17" cache: gradle - name: Set up Android SDK - uses: android-actions/setup-android@v3 + uses: android-actions/setup-android@v4 - name: Enable Corepack run: corepack enable