Skip to content

chore: bump GitHub Actions to v5 majors (Node 24 runtime) ⬆️#1409

Merged
damsleth merged 1 commit into
devfrom
chore/actions-node-24
May 11, 2026
Merged

chore: bump GitHub Actions to v5 majors (Node 24 runtime) ⬆️#1409
damsleth merged 1 commit into
devfrom
chore/actions-node-24

Conversation

@damsleth
Copy link
Copy Markdown
Member

Summary

Resolves the GitHub Actions Node 20 deprecation warning seen in recent deploys.

Node.js 20 actions are deprecated. The following actions are running on Node.js 20: `actions/checkout@v4`, `actions/setup-node@v4`, `actions/upload-artifact@v4`. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026.

Bumps

Action From To
actions/checkout v4 v5
actions/setup-node v4 v5
actions/upload-artifact v4 v5
actions/download-artifact v4 v5

Why v5 (not latest)

Dependabot was suggesting checkout@v6, upload@v7, download@v8 (the actual latest majors of each). Going to v5 across the board instead because:

  1. Smallest jump that addresses the warning. v5 of all four runs on Node 24.
  2. Keeps upload-artifact and download-artifact major-paired. Mismatched majors between these two are a known footgun — the artifact protocol shifted between v4 and v5.
  3. Less surface area for breaking changes than walking through 2-3 majors in a single PR.

We can chase v6/v7/v8 later when there's a reason to, on a dedicated branch with a release-notes read.

Supersedes

Both will be closed once this lands.

Also touched

  • .github/workflows/README.md — example snippets bumped to v5; the "Standardization" section corrected (it previously claimed everything was on v4, which was the truth at write time).

Test plan

  • PR's own Test build run is green on v5 actions
  • After merge, dev deploy succeeds (the Node 20 deprecation warning should be gone from the run summary)

GitHub deprecated Node 20 as the JS-action runtime in Sept 2025;
forced switch to Node 24 lands 2026-06-02. Bumps all four core
actions to their v5 majors, which run on Node 24:

  actions/checkout       v4 -> v5
  actions/setup-node     v4 -> v5
  actions/upload-artifact v4 -> v5
  actions/download-artifact v4 -> v5

Chose v5 across the board rather than latest-of-each (checkout v6,
upload v7, download v8) because v5 is the smallest jump that
addresses the warning and keeps upload/download majors paired -
mismatched artifact action majors are a known footgun.

Also updates the workflows README so its example snippets and the
"Standardization" section stop claiming everything is on v4.

Supersedes dependabot PRs #1391 (checkout v4->v6) and #1393
(download-artifact v4->v8); both will be closed.
@damsleth damsleth merged commit 40aa58c into dev May 11, 2026
4 of 5 checks passed
@damsleth damsleth deleted the chore/actions-node-24 branch May 11, 2026 13:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant