ci: update actions to Node 24 runtimes

[gmr]

Summary

GitHub is forcing Node 20 JS actions to Node 24 on 2026-06-16 and removing Node 20 on 2026-09-16. Update the actions that still ran on Node 20:

• actions/cache v4 → v5 (node24; inputs unchanged)
• rust-lang/crates-io-auth-action v1 → v1.0.4 (node24)
• softprops/action-gh-release v2 → v3 (node24)

actions/checkout@v5 and dtolnay/rust-toolchain (composite) were already fine.

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Updated GitHub Actions workflow dependencies to latest versions for improved security and reliability in build, release, and testing processes.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 355fbc6d-1784-4433-9449-8fea7a962887

📥 Commits

Reviewing files that changed from the base of the PR and between 840f459 and 63569a2.

📒 Files selected for processing (3)

• .github/workflows/publish.yaml
• .github/workflows/release.yaml
• .github/workflows/testing.yaml

---

📝 Walkthrough

Walkthrough

Three GitHub Actions workflows receive single-line action version updates: rust-lang/crates-io-auth-action is pinned to v1.0.4 in the publish workflow, softprops/action-gh-release is bumped from v2 to v3 in the release workflow, and actions/cache is bumped from v4 to v5 in the testing workflow.

Changes

CI Action Version Bumps

Layer / File(s)	Summary
Action version pins across workflows .github/workflows/publish.yaml, .github/workflows/release.yaml, .github/workflows/testing.yaml	rust-lang/crates-io-auth-action pinned to v1.0.4 (was v1), softprops/action-gh-release bumped to v3 (was v2), and actions/cache bumped to v5 (was v4).

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

🐇 Hop, hop, versions align,
Pinned and bumped in a tidy line,
Cache v5, release v3,
Crates token locked precisely,
The rabbit nods — workflows look fine! ✨

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'ci: update actions to Node 24 runtimes' accurately and concisely describes the main change: updating GitHub Actions to support Node 24 runtimes.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}