Skip to content

[code-update-service] Running code-update job: actions-node20-runtime-upgrade - #2

Open
code-update-service[bot] wants to merge 1 commit into
mainfrom
actions-node20-runtime-upgrade-67334
Open

code-update-service[bot] wants to merge 1 commit into
mainfrom
actions-node20-runtime-upgrade-67334

Conversation

@code-update-service

Copy link
Copy Markdown

🤖 This PR was raised by the code-update-service! 🤖.

This code update job updates outdated GitHub Actions pins that still trigger deprecated Node.js 20 runtime warnings.
It focuses on workflow action version upgrades to align with the Node24 runtime migration.
🤖 Changes are generated by claude-code. 🤖

⚙️ Workflow run: code-update-service#33395203516

Actions Node20 Runtime Upgrade Summary

GitHub Actions using deprecated Node.js 20 runtimes were updated to newer major versions to eliminate CI deprecation warnings.

Actions Upgraded

File Action Old Version New Version
semgrep.yml actions/checkout v3 v5
goreleaser.yml actions/checkout v2 v5
goreleaser.yml actions/setup-go v2 v6
goreleaser.yml goreleaser/goreleaser-action v2 v7
golangci-lint.yml actions/setup-go v3 v6
golangci-lint.yml actions/checkout v3 v5
golangci-lint.yml golangci/golangci-lint-action v3 v9
trigger-publish.yml tibdex/github-app-token (deprecated) SHA pin Replaced with actions/create-github-app-token@v3

Files Changed

  • .github/workflows/trigger-publish.yml
  • .github/workflows/semgrep.yml
  • .github/workflows/goreleaser.yml
  • .github/workflows/golangci-lint.yml

Files Not Changed

  • .github/workflows/features-integration.yml — contains only reusable workflow calls (out of scope)

Actions That Could Not Be Auto-Resolved

None.

Copilot AI lite review requested due to automatic review settings August 31, 2026 13:09

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Changes: Maintenance (1)

This PR updates GitHub Actions workflow dependencies to newer major versions to eliminate deprecated Node.js 20 runtime warnings and align CI with the Node.js 24 migration.

Changes:

  • Upgraded actions/checkout, actions/setup-go, and golangci/golangci-lint-action / goreleaser/goreleaser-action to newer major versions across workflows.
  • Replaced deprecated tibdex/github-app-token usage with actions/create-github-app-token@v3 in the publish trigger workflow.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 4 comments.

File Description
.github/workflows/trigger-publish.yml Swap GitHub App token action to actions/create-github-app-token@v3.
.github/workflows/semgrep.yml Bump actions/checkout to a newer major version for Semgrep runs.
.github/workflows/goreleaser.yml Upgrade checkout/setup-go/goreleaser action versions used in release publishing.
.github/workflows/golangci-lint.yml Upgrade setup-go/checkout/golangci-lint action versions used in linting.
Suppressed comments (1)

.github/workflows/trigger-publish.yml:26

  • ::set-output is deprecated and may stop working; write step outputs via $GITHUB_OUTPUT instead.
        uses: actions/create-github-app-token@v3

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

- name: Generate a token
id: generate_token
uses: tibdex/github-app-token@b62528385c34dbc9f38e5f4225ac829252d1ea92
uses: actions/create-github-app-token@v3
image: returntocorp/semgrep
steps:
- uses: actions/checkout@v3
- uses: actions/checkout@v5
@@ -8,16 +8,16 @@ jobs:
name: lint
runs-on: ubuntu-latest
@@ -8,15 +8,15 @@ jobs:
runs-on: ubuntu-latest
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant