Skip to content

ci: bump the four GitHub Actions that still declare a node20 runtime - #11

Merged
JOY (JOY) merged 1 commit into
devfrom
chore/ci-bump-action-versions
Sep 12, 2026
Merged

JOY (JOY) merged 1 commit into
devfrom
chore/ci-bump-action-versions

Conversation

@JOY

@JOY JOY (JOY) commented Sep 12, 2026

Copy link
Copy Markdown

GitHub annotates every run with:


Note

Low Risk
CI-only dependency bumps with no application or deployment logic changes; main risk is rare action behavior differences on future runs.

Overview
Updates CI (.github/workflows/ci.yml) so backend and frontend jobs use newer action majors that run on supported Node runtimes, addressing GitHub’s node20 deprecation notices on workflow runs.

Checkout goes from v4 to v7 in both jobs. setup-go moves v5v7 on backend tests. On frontend typecheck, pnpm/action-setup is v4v6 and setup-node is v4v7; Go/Node versions, caches, and test commands are unchanged.

Other workflows (e.g. deploy-beta/prod) still pin older checkout versions and were not part of this diff.

Reviewed by Cursor Bugbot for commit ad50c17. Configure here.

GitHub reports on every run that actions/checkout@v4, actions/setup-go@v5,
actions/setup-node@v4 and pnpm/action-setup@v4 target Node.js 20 and are being
forced to run on Node.js 24. Nothing is broken today - the forcing is already
happening - but the pinned majors have not declared support for the runtime they
are being given.

  actions/checkout    v4 -> v7
  actions/setup-go    v5 -> v7
  actions/setup-node  v4 -> v7
  pnpm/action-setup   v4 -> v6

Checked against each action's own action.yml rather than assumed: all four
declare runs.using: node24 at the new major, pnpm/action-setup@v6.1.0 still
accepts the version input this workflow passes, and actions/setup-node@v7.0.0
still accepts node-version, cache and cache-dependency-path.

The docker/* actions in deploy-beta.yml and deploy-prod.yml carry the same warning
and are deliberately left alone. Bumping them cannot be validated by a pull
request - only by triggering a real image build - so they belong in a separate
change where a failed build does not also take the beta pipeline down.

This pull request is its own test: CI runs it using the new action versions.
@gemini-code-assist

Copy link
Copy Markdown

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

@coderabbitai

coderabbitai Bot commented Sep 12, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 5796f36b-eb48-4f6e-86d7-48388894c559

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@cursor

cursor Bot commented Sep 12, 2026

Copy link
Copy Markdown

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_a05fe45d-534f-4a82-b87a-71e1e7978baa)

@JOY
JOY (JOY) merged commit 5bc3f77 into dev Sep 12, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant