From d911985497ebedf0375c894af2a64ecf4716c861 Mon Sep 17 00:00:00 2001 From: Bill Freeman Date: Sun, 9 Aug 2026 16:13:52 -0500 Subject: [PATCH 1/3] Update GitHub Actions to current majors No pin here was deprecated - these were node24 majors that had since been superseded. Bumped so the fleet stays on one set of versions. - actions/checkout@v5 -> actions/checkout@v7 - actions/setup-node@v5 -> actions/setup-node@v7 CI-only change, so no CHANGELOG entry - matching csgo-ppp #123, email #13 and changelog a5aa9b3. Co-Authored-By: Claude Opus 5 (1M context) --- .github/actions/setup/action.yml | 2 +- .github/workflows/format.yml | 2 +- .github/workflows/main.yml | 4 ++-- .github/workflows/publish.yml | 10 +++++----- .github/workflows/version.yml | 2 +- 5 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/actions/setup/action.yml b/.github/actions/setup/action.yml index fd3206f..0b1f265 100644 --- a/.github/actions/setup/action.yml +++ b/.github/actions/setup/action.yml @@ -16,7 +16,7 @@ runs: using: composite steps: - name: Setup Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@v7 with: cache: npm node-version: ${{ inputs.node_version }} diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml index 510ceca..51908b1 100644 --- a/.github/workflows/format.yml +++ b/.github/workflows/format.yml @@ -16,7 +16,7 @@ jobs: timeout-minutes: 30 steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@v7 with: ref: ${{ github.head_ref }} token: ${{ secrets.GH_TOKEN }} diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 0688a56..2d10671 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -11,7 +11,7 @@ jobs: timeout-minutes: 30 steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@v7 - name: Setup uses: ./.github/actions/setup - name: Build @@ -23,7 +23,7 @@ jobs: timeout-minutes: 30 steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@v7 - name: Setup uses: ./.github/actions/setup - name: Lint diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index dd6e5a6..28a0688 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -18,9 +18,9 @@ jobs: timeout-minutes: 30 steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@v7 with: node-version: '22' registry-url: https://registry.npmjs.org @@ -46,9 +46,9 @@ jobs: timeout-minutes: 30 steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@v7 with: node-version: '22' registry-url: https://npm.pkg.github.com @@ -76,7 +76,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@v7 with: ref: ${{ github.head_ref }} token: ${{ secrets.GH_TOKEN }} diff --git a/.github/workflows/version.yml b/.github/workflows/version.yml index d21dbca..0debc49 100644 --- a/.github/workflows/version.yml +++ b/.github/workflows/version.yml @@ -16,7 +16,7 @@ jobs: timeout-minutes: 30 steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@v7 with: persist-credentials: false - name: Setup Git config From 617b097e5d410acac8b54d99d02305e70f326fa1 Mon Sep 17 00:00:00 2001 From: Bill Freeman Date: Sun, 9 Aug 2026 16:31:37 -0500 Subject: [PATCH 2/3] Pin actions/setup-node to v6, not v7 v7 stops exporting the dummy NODE_AUTH_TOKEN, but it still writes an .npmrc containing ${NODE_AUTH_TOKEN} whenever registry-url is set, so every later yarn/npm call fails with "Failed to replace env in config: ${NODE_AUTH_TOKEN}". Upstream dropped the fallback deliberately (actions/setup-node#1558) because it could corrupt an OIDC publish, and the fix on our side would be setting NODE_AUTH_TOKEN on every package-manager step in every workflow. v6 already runs on Node 24, so the deprecation this sweep exists to clear is cleared either way. v7 only added ESM plus cache-key outputs we do not use. Co-Authored-By: Claude Opus 5 (1M context) --- .github/actions/setup/action.yml | 2 +- .github/workflows/publish.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/actions/setup/action.yml b/.github/actions/setup/action.yml index 0b1f265..788b08d 100644 --- a/.github/actions/setup/action.yml +++ b/.github/actions/setup/action.yml @@ -16,7 +16,7 @@ runs: using: composite steps: - name: Setup Node.js - uses: actions/setup-node@v7 + uses: actions/setup-node@v6 with: cache: npm node-version: ${{ inputs.node_version }} diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 28a0688..172b93a 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -20,7 +20,7 @@ jobs: - name: Checkout uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v7 + uses: actions/setup-node@v6 with: node-version: '22' registry-url: https://registry.npmjs.org @@ -48,7 +48,7 @@ jobs: - name: Checkout uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v7 + uses: actions/setup-node@v6 with: node-version: '22' registry-url: https://npm.pkg.github.com From 71602b764796186edcc954a211809cb8b3942d56 Mon Sep 17 00:00:00 2001 From: Bill Freeman Date: Sun, 9 Aug 2026 17:34:32 -0500 Subject: [PATCH 3/3] Add a changelog entry for the GitHub Actions update CI-only changes get an entry too (maintainer decision, 2026-08-09). The bullet goes under the pending section where one exists; where the top heading has already shipped, this opens a new Unreleased section rather than inventing a version number, since version.yml cuts the real one at release. Co-Authored-By: Claude Opus 5 (1M context) --- CHANGELOG.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 058d10d..005c273 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/). ## Unreleased +### Changed + +- GitHub Actions updated to Node 24 runtimes: `actions/checkout` v5 to v7; `actions/setup-node` v5 to v6. + ## 0.8.2 / 2026-07-05 ### Changed