Repository navigation
ci: bump Node20-deprecated actions to Node24; cut runner costs - #781
Merged
Merged
Conversation
- Bump actions/checkout, actions/setup-go, actions/setup-python, actions/upload-artifact, actions/download-artifact, actions/cache, docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action, docker/setup-qemu-action, crazy-max/ghaction-chocolatey, Vampire/setup-wsl, aws-actions/configure-aws-credentials, azure/login, google-github-actions/auth to their latest Node24-compatible releases in build.yml and lint.yml, resolving the Node.js 20 deprecation warnings surfaced across all build.yml jobs. - Replace custom/self-hosted runner labels (ubuntu-22.04, ubuntu-22-04-m, ubuntu-22-04-arm64-m, arm-ubuntu-22-04-runner-one) with standard GitHub-hosted ubuntu-latest / ubuntu-24.04-arm, which are free and unlimited for this public repo, in test_python_package_build, linuxbuild, linuxtest, linuxarmbuild, dockerbuild, dockertest, and dockermerge jobs. - Prune the now-unused self-hosted runner labels from .github/actionlint.yaml; macOS and windows-11-arm runners are left untouched since they are already standard GitHub-hosted images (free for public repos) and required for their target architectures. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
setup-go v6+ sets GOTOOLCHAIN=local, so lint's pinned 1.23.0 no longer auto-upgrades to satisfy go.mod's 'go 1.25.3' directive during 'go mod tidy', causing the Lint job to fail. Align with the version already used by build.yml's setup-go steps. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
setup-go v6+ pins GOTOOLCHAIN=local by default, so 'go install golang.org/x/perf/cmd/benchstat@latest' fails when the module's latest pseudo-version requires a newer Go than the pinned 1.25.3 toolchain. Scope GOTOOLCHAIN=auto to just this install step so it can fetch whatever toolchain that tool needs, without changing the toolchain used to build/test the project itself. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
jeffreyaven
added a commit
that referenced
this pull request
Sep 20, 2026
Resolves the remaining Dependabot alert for actions/download-artifact (arbitrary file write via artifact extraction, >= 4.0.0 < 4.1.3). build.yml was already moved to v8.0.1 in #781 and mcp-packaging.yml is already on v8, so this is the net change left over from #782, which would otherwise have pinned everything to the Node20-based v5. Supersedes #782. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
jeffreyaven
pushed a commit
that referenced
this pull request
Sep 20, 2026
- Bump Flask 3.0.3 -> 3.1.3 in cicd/requirements.txt (Dependabot). - Bump actions/download-artifact v4.1.2 -> v8.0.1 in .github/workflows/scenario.yaml, resolving the remaining Dependabot alert for download-artifact (arbitrary file write via artifact extraction, >= 4.0.0 < 4.1.3). build.yml was moved to v8.0.1 in #781 and mcp-packaging.yml was already on v8. Supersedes #782, which would have pinned everything to the Node20-based v5. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Test plan