From fae9f74393a2be1a9e02d19fb439d8976bccb9e5 Mon Sep 17 00:00:00 2001
From: Piyush Singh <piyush.singh@sourcefuse.com>
Date: Mon, 17 Aug 2026 13:59:17 +0530
Subject: [PATCH] fix(ci-cd): bump github actions to node 24 runtimes

Clears the Node runtime deprecation annotations on GitHub Actions runs by
moving every first-party action to a major that declares using: node24.

- bump actions/checkout from v3 to v5 in main, release, sync-docs and trivy
- bump actions/setup-node from v3 to v5 in main
- bump actions/setup-node from v4 to v5 in release
- set release workflow node-version from '22' to '24'
- leave the CI matrix at [22, 24] to keep supported-version coverage
- leave SHA-pinned aquasecurity/trivy-action unchanged

GH-167
---
 .github/workflows/main.yaml      | 4 ++--
 .github/workflows/release.yaml   | 6 +++---
 .github/workflows/sync-docs.yaml | 4 ++--
 .github/workflows/trivy.yaml     | 2 +-
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index 234c5ad..a57d694 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -13,8 +13,8 @@ jobs:
       matrix:
         node-version: [22, 24]
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v5
         with:
           node-version: ${{ matrix.node-version }}
       - name: Install Dependencies
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 3e6f41e..3476011 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -14,7 +14,7 @@ jobs:
     # environment: production  # Uncomment if you set an environment name in npm trusted publisher settings
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
         with:
           # fetch-depth is necessary to get all tags
           # otherwise lerna can't detect the changes and will end up bumping the versions for all packages
@@ -22,9 +22,9 @@ jobs:
           token: ${{ secrets.RELEASE_COMMIT_GH_PAT }}
 
       - name: Setup Node
-        uses: actions/setup-node@v4  # UPDATED to v4
+        uses: actions/setup-node@v5
         with:
-          node-version: '22'
+          node-version: '24'
           registry-url: 'https://registry.npmjs.org'
           always-auth: false  # important for trusted publishing
 
diff --git a/.github/workflows/sync-docs.yaml b/.github/workflows/sync-docs.yaml
index 53e0c33..ba37281 100644
--- a/.github/workflows/sync-docs.yaml
+++ b/.github/workflows/sync-docs.yaml
@@ -18,13 +18,13 @@ jobs:
 
     steps:
       - name: Checkout Extension Code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
         with:
           token: ${{env.GITHUB_TOKEN}}
           path: './extension/'
 
       - name: Checkout Docs Repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
         with:
           token: ${{env.GITHUB_TOKEN}}
           repository: ${{env.DOCS_REPO}}
diff --git a/.github/workflows/trivy.yaml b/.github/workflows/trivy.yaml
index 92e6a99..3cbad0b 100644
--- a/.github/workflows/trivy.yaml
+++ b/.github/workflows/trivy.yaml
@@ -19,7 +19,7 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
 
       - name: Run Trivy vulnerability scanner in repo mode
         uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0