Skip to content

chore(ci): bump GitHub Actions to Node 24-compatible versions - #83

Merged
Brian Krabach (bkrabach) merged 2 commits into
mainfrom
chore/bump-actions-for-node24
May 19, 2026
Merged

chore(ci): bump GitHub Actions to Node 24-compatible versions#83
Brian Krabach (bkrabach) merged 2 commits into
mainfrom
chore/bump-actions-for-node24

Conversation

@bkrabach

Copy link
Copy Markdown
Collaborator

Summary

Bumps all Node.js 20 GitHub Actions in the Build Wheels workflow to their latest Node 24-compatible versions, ahead of GitHub's enforcement deadline of 2026-06-02.

Version changes

Action Before After Latest at time of bump
actions/checkout @v4 @v6 v6.0.2
actions/setup-python @v5 @v6 v6.2.0
actions/upload-artifact @v4 @v7 v7.0.1
actions/download-artifact @v4 @v8 v8.0.1
PyO3/maturin-action @v1 @v1 v1.51.0 (no change needed)

PyO3/maturin-action — no change needed

The v1 tag already declares runs: using: 'node24' in its action.yml (verified against https://raw.githubusercontent.com/PyO3/maturin-action/v1/action.yml). No version bump or env-var workaround is required.

FORCE_JAVASCRIPT_ACTIONS_TO_NODE24 — not added

All actions in this workflow now use Node 24 natively; the env-var safety-net is not needed.

Breaking-change notes

These are informational only — none affect this workflow's usage patterns.

  • actions/checkout@v6 (v6.0.0): credentials are now persisted to a separate file rather than embedded in .git/config. No impact because no step reads credential config from git after checkout.
  • actions/download-artifact@v8 (v8.0.0): hash mismatches now error by default (previously a warning). This is a security improvement; wheel downloads in the same workflow run will have matching hashes.
  • actions/download-artifact@v8 (v5.0.0): path-output changed for single artifact downloads by artifact ID. Our publish job uses pattern: 'wheels-*' (by name), so this does not apply.
  • All v5+ actions require minimum Actions Runner v2.327.1. GitHub-hosted runners (ubuntu-latest, macos-latest, windows-latest) always satisfy this.

Validation

  • YAML parsed successfully with Python yaml.safe_load
  • Diff reviewed manually — only action version strings changed, no structural modifications

Brian Krabach (bkrabach) and others added 2 commits May 18, 2026 08:12
The workflow was only triggered on pull_request and push to rust-core.
This meant when main went red — as happened after IT's wasmtime
auto-fix in #74 — there was no signal until the next PR opened.

Add 'main' to the push branches so any direct push (merge, admin push,
revert) triggers a full CI run on the new HEAD. Catches future
regressions immediately.

Co-authored-by: Amplifier <amplifier@microsoft.com>
- actions/checkout:         v4 → v6 (v6.0.2 latest; Node 24 since v5)
- actions/setup-python:     v5 → v6 (v6.2.0 latest; Node 24 dep upgrade)
- actions/upload-artifact:  v4 → v7 (v7.0.1 latest; Node 24 since v6)
- actions/download-artifact v4 → v8 (v8.0.1 latest; Node 24 since v7)
- PyO3/maturin-action:      v1 unchanged (already runs on node24)

No FORCE_JAVASCRIPT_ACTIONS_TO_NODE24 env var needed — every action
used in this workflow is already on Node 24 after this bump.

Resolves GitHub's Node 20 deprecation deadline of 2026-06-02.
@bkrabach
Brian Krabach (bkrabach) merged commit e30c30c into main May 19, 2026
6 checks passed
@bkrabach
Brian Krabach (bkrabach) deleted the chore/bump-actions-for-node24 branch May 19, 2026 00:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant