Skip to content

Bump the workflow action pins off Node 20 - #91

Merged
mmshad merged 1 commit into
mainfrom
bump-action-pins
Aug 5, 2026
Merged

Bump the workflow action pins off Node 20#91
mmshad merged 1 commit into
mainfrom
bump-action-pins

Conversation

@mmshad

@mmshad mmshad commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

Every CI run logs a deprecation warning: checkout v4 and setup-uv v5 target Node 20 and the runners force them onto Node 24.

  • actions/checkout v4 to v7, in both workflows
  • astral-sh/setup-uv v5 to v9.0.0, in both workflows
  • codecov/codecov-action v5 to v7
  • pypa/gh-action-pypi-publish stays on release/v1, the pin upstream documents

setup-uv publishes no moving tag above v7, so that one is pinned to an exact version and needs a deliberate bump next time.

Nothing in the changed majors touches how these are called here: v8 of setup-uv dropped an old custom version manifest format that is not used here, and v9 stopped pruning its cache, which costs a little more cache space and no behavior. The release workflow calls checkout and setup-uv with the same inputs as CI, so this run exercises the same pins a release will use.

checkout v4 and setup-uv v5 target Node 20, which the runners now force
onto Node 24 with a deprecation warning, so CI logs one per job. codecov
moves up with them. setup-uv publishes no moving tag above v7, hence the
exact version. The publish action stays on release/v1, which is what
upstream recommends.
@mmshad
mmshad merged commit 334e921 into main Aug 5, 2026
7 checks passed
@mmshad
mmshad deleted the bump-action-pins branch August 5, 2026 22:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant