Repository navigation
ci: move workflow actions to Node 24 runtimes - #143
Conversation
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
There was a problem hiding this comment.
Warning
Copilot couldn't run its full agentic review because it didn't start before the timeout. Make sure your repository has a runner available, or add a copilot-code-review.yml file specifying one with the runs-on attribute. See the docs for more details.
Copilot review overview
Review effort: Lite
Findings: 2
Open (4)
This Copilot setup still installs Node.js 20 while most workflows in this PR standardize on Node… · New This workflow uses a moving tag (@v6) for an action that runs with repository credentials… · New The pinned-SHA comments were previously full semver (e.g., v4.2.2 / v5.5.0) but are now only majors… · New The pinned-SHA comments were previously full semver (e.g., v4.2.2 / v5.5.0) but are now only majors… · New
What changed in this PR
Updates GitHub Actions workflows to newer action majors that run on Node 24 runtimes, addressing GitHub’s Node 20 deprecation warnings while keeping existing workflow structure and gates.
Changes:
- Bump core actions across workflows (checkout, setup-go/node, artifacts, Pages, Docker, stale/labeling, releases, provenance).
- Switch multiple Go setup steps from a hard-coded Go version to using
go.modviago-version-file. - Update artifact and Pages deployment-related actions to newer major versions.
| File | Description |
|---|---|
| .github/workflows/span-budget-gate.yml | Updates checkout/setup-go actions and aligns Go version selection to go.mod. |
| .github/workflows/si-canonical-gate.yml | Updates checkout action major version. |
| .github/workflows/security.yml | Updates pinned action SHAs for checkout/setup-go/setup-node to newer majors. |
| .github/workflows/release.yml | Updates multiple pinned actions (checkout, buildx, login, upload-artifact, attest, gh-release, setup-go) to newer majors and aligns Go version selection to go.mod. |
| .github/workflows/proto-gen-check.yml | Updates checkout/setup-go actions and aligns Go version selection to go.mod. |
| .github/workflows/post-deploy-smoke.yml | Updates pinned checkout/setup-go/upload-artifact actions; aligns Go version selection to go.mod. |
| .github/workflows/perf.yml | Updates checkout/setup-node actions. |
| .github/workflows/ops-gate.yml | Updates pinned checkout/setup-go actions across jobs; aligns Go version selection to go.mod. |
| .github/workflows/load-test.yml | Updates checkout/upload-artifact actions to newer majors. |
| .github/workflows/label.yml | Updates labeler action major version. |
| .github/workflows/helm-ci.yml | Updates checkout action major version across chart validation jobs. |
| .github/workflows/frontend-quality.yml | Updates checkout/setup-node/setup-go and upload-artifact majors across frontend quality jobs. |
| .github/workflows/docs.yml | Updates checkout/setup-node and Pages-related action majors. |
| .github/workflows/deploy-rollback.yml | Updates pinned checkout/setup-go/upload-artifact actions; aligns Go version selection to go.mod. |
| .github/workflows/copilot-setup-steps.yml | Updates setup-go/setup-node action majors used for Copilot workflow environment setup. |
| .github/workflows/codec-coverage-gate.yml | Updates checkout/setup-go actions and aligns Go version selection to go.mod. |
| .github/workflows/cleanup.yml | Updates pinned checkout/upload-artifact plus setup-node and stale action majors. |
| .github/workflows/ci.yml | Updates checkout/setup-go/setup-node/upload-artifact/buildx action majors across CI jobs. |
| .github/workflows/capacity-test.yml | Updates pinned checkout/setup-go/upload-artifact actions; aligns Go version selection to go.mod. |
| .github/workflows/backup-restore-drill.yml | Updates pinned checkout/setup-go/upload-artifact actions; aligns Go version selection to go.mod. |
| .github/workflows/ai-eval.yml | Updates checkout/setup-go/upload-artifact majors across AI eval jobs. |
| .github/copilot-setup-steps.yml | Updates action majors and changes Go to go-version-file, but leaves Node version set to 20. |
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
| uses: actions/setup-node@v4 | ||
| uses: actions/setup-node@v5 | ||
| with: | ||
| node-version: '20' |
| runs-on: ${{ inputs.runner || 'ubuntu-latest' }} | ||
| steps: | ||
| - uses: actions/labeler@v5 | ||
| - uses: actions/labeler@v6 |
| runs-on: ${{ inputs.runner || 'ubuntu-latest' }} | ||
| steps: | ||
| - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | ||
| - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5 |
| sudo apt-get install --no-install-recommends -y file libatomic1 | ||
|
|
||
| - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 | ||
| - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6 |
There was a problem hiding this comment.
Copilot review overview
🟡 Changes recommended
Resolve the unsupported Node 20 Copilot setup and unintended Go 1.27.1 toolchain changes before approval.
Get a fresh assessment by requesting another Copilot review.
Review effort: Lite
Findings: 1
Open (5)
Frontend Node version is incompatible with package requirements · New This workflow uses a moving tag (@v6) for an action that runs with repository credentials… This Copilot setup still installs Node.js 20 while most workflows in this PR standardize on Node… The pinned-SHA comments were previously full semver (e.g., v4.2.2 / v5.5.0) but are now only majors… The pinned-SHA comments were previously full semver (e.g., v4.2.2 / v5.5.0) but are now only majors…
| uses: actions/setup-node@v4 | ||
| uses: actions/setup-node@v5 | ||
| with: | ||
| node-version: '20' |



What changed
Why
Validation