Skip to content

ci: upgrade checkout/setup-node/cache to node24 in pr.yml#30

Merged
kurok merged 7 commits into
mainfrom
fix/pr-yml-node24-warnings
May 27, 2026
Merged

ci: upgrade checkout/setup-node/cache to node24 in pr.yml#30
kurok merged 7 commits into
mainfrom
fix/pr-yml-node24-warnings

Conversation

@kurok
Copy link
Copy Markdown

@kurok kurok commented May 27, 2026

Summary

Fixes Node.js 20 deprecation warnings in pr.yml:

Action Old New
actions/checkout v4 (node20) v6.0.2 / de0fac2 (node24)
actions/setup-node v4 (node20) v6.4.0 / 48b55a0 (node24)
actions/cache v4 (node20) v5.0.5 / 27d5ce7 (node24)

All actions SHA-pinned per supply-chain policy.

Test plan

  • PR automations workflow runs without Node.js 20 deprecation warnings

kurok added 2 commits May 27, 2026 08:12
Signed-off-by: yuriyryabikov <22548029+kurok@users.noreply.github.com>
Signed-off-by: yuriyryabikov <22548029+kurok@users.noreply.github.com>
@kurok kurok force-pushed the fix/pr-yml-node24-warnings branch from f0ce810 to 136a1c3 Compare May 27, 2026 07:13
kurok added 5 commits May 27, 2026 08:18
Signed-off-by: yuriyryabikov <22548029+kurok@users.noreply.github.com>
…ctions/github

- @actions/core: 1.2.6 -> 1.11.1 (fixes GHSA-7r3h-m5j6-3q42 delimiter injection)
- @actions/github: 4.0.0 -> 8.0.1 (CJS, fixes octokit ReDoS chain)
- undici override ^6.26.0 (fixes GHSA-g9mf-h72j-4rw9 and 4 related CVEs)
- transitive: cross-spawn, semver, minimatch, flatted, lodash, node-fetch, ajv, brace-expansion, js-yaml, word-wrap, fast-xml-parser all updated

Signed-off-by: yuriyryabikov <22548029+kurok@users.noreply.github.com>
…rnings

- eslint: 7.16.0 -> 9.39.4
- migrate .eslintrc.yml -> eslint.config.js (flat config)
- add @eslint/js@10.0.1 and globals@17.6.0
- eliminates deprecated rimraf@3, glob@7, inflight, and eslint@7 warnings
- dist rebuilt

Signed-off-by: yuriyryabikov <22548029+kurok@users.noreply.github.com>
- remove @eslint/js from devDeps (bundled with eslint@9)
- downgrade globals to ^15.15.0 (compatible with eslint@9)
- add no-unused-vars caughtErrorsIgnorePattern to allow _-prefixed catches
- rename catch(error) -> catch(_error) in gh.js to match convention
- dist rebuilt

Signed-off-by: yuriyryabikov <22548029+kurok@users.noreply.github.com>
- jest: 29.7.0 -> 30.4.2
- override test-exclude to ^8.0.0 (uses glob@13 vs glob@7)
- eliminates inflight@1.0.6 and glob@7 deprecation warnings
- dist rebuilt

Signed-off-by: yuriyryabikov <22548029+kurok@users.noreply.github.com>
@kurok kurok merged commit 79a4a79 into main May 27, 2026
4 checks passed
@kurok kurok deleted the fix/pr-yml-node24-warnings branch May 27, 2026 07:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant