Skip to content

ci: update GitHub Actions to Node 24 runtimes#86

Open
prd-carapulse[bot] wants to merge 1 commit into
morpho-mainfrom
hermes/fix-node20-github-actions
Open

ci: update GitHub Actions to Node 24 runtimes#86
prd-carapulse[bot] wants to merge 1 commit into
morpho-mainfrom
hermes/fix-node20-github-actions

Conversation

@prd-carapulse

@prd-carapulse prd-carapulse Bot commented Jun 17, 2026

Copy link
Copy Markdown

Summary:

  • update GitHub Actions that still resolve to Node.js 20 runtimes
  • keep action refs pinned to commit SHAs with version comments
  • scan .github/workflows/* and .github/actions/**/action.yml|yaml

Updated action groups:

  • anchore/sbom-action/download-syft -> v0.24.0
  • step-security/harden-runner -> v2.19.4
  • docker/setup-buildx-action -> v4.1.0
  • docker/login-action -> v4.2.0
  • actions/checkout -> v6.0.3
  • pnpm/action-setup -> v6.0.9
  • aws-actions/configure-aws-credentials -> v6.2.0
  • actions/setup-go, actions/setup-node -> v6.4.0
  • actions/upload-artifact -> v7.0.1
  • docker/build-push-action -> v7.2.0
  • goreleaser/goreleaser-action -> v7.2.2

Verification:

  • before: 56 Node20 action uses
  • after: 0 Node20 action uses on hermes/fix-node20-github-actions
  • metadata scan errors after: 0

Test plan:

  • Not run (workflow ref updates only).
  • Verified branch with metadata scan above.

Requested by: <@U07KE3NALTX>

Update GitHub Actions that still resolve to Node.js 20 runtimes. Refs remain pinned to commit SHAs with version comments.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants