ci: fix docs preview-cleanup (HTTP 400) and move CI off Node 20

.github/workflows/build-image.yaml

@@ -18,7 +18,7 @@ jobs:
       contents: read
       packages: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Log in to GHCR
         uses: docker/login-action@v3

.github/workflows/docs-preview-cleanup.yml

@@ -30,8 +30,20 @@ jobs:
         run: |
           set -euo pipefail
           base="https://api.cloudflare.com/client/v4/accounts/${CF_ACCOUNT_ID}/pages/projects/${CF_PROJECT}/deployments"
-          ids=$(curl -fsS -H "Authorization: Bearer ${CF_API_TOKEN}" "${base}?env=preview&per_page=100" \
-            | jq -r --arg b "$BRANCH" '.result[] | select(.deployment_trigger.metadata.branch == $b) | .id')
+          # Collect this branch's preview deployment ids. Page through results:
+          # the endpoint rejects an oversized per_page with HTTP 400, so use the
+          # default page size and paginate until a page comes back empty.
+          ids=""
+          page=1
+          while :; do
+            resp=$(curl -fsS -H "Authorization: Bearer ${CF_API_TOKEN}" "${base}?env=preview&page=${page}")
+            count=$(printf '%s' "$resp" | jq '.result | length')
+            [ "$count" -eq 0 ] && break
+            match=$(printf '%s' "$resp" | jq -r --arg b "$BRANCH" '.result[] | select(.deployment_trigger.metadata.branch == $b) | .id')
+            [ -n "$match" ] && ids="${ids}${match}"$'\n'
+            page=$((page + 1))
+            [ "$page" -gt 100 ] && break
+          done
           if [ -z "$ids" ]; then
             echo "No preview deployments found for branch '$BRANCH'."
             exit 0

.github/workflows/lint.yaml

@@ -10,10 +10,10 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Set up Helm
-        uses: azure/setup-helm@v4
+        uses: azure/setup-helm@v5
 
       - name: Install kubeconform
         run: |

.github/workflows/release.yaml

@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
@@ -32,7 +32,7 @@ jobs:
           git config user.email "$GITHUB_ACTOR@users.noreply.github.com"
 
       - name: Set up Helm
-        uses: azure/setup-helm@v4
+        uses: azure/setup-helm@v5
 
       - name: Update dependencies
         run: helm dependency update ${{ inputs.chart_path }} || true

.github/workflows/test-integration.yaml

@@ -19,10 +19,10 @@ jobs:
       OPERATOR_REF: v0.1.0-alpha.19
     steps:
       - name: Checkout software-pack-template
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Checkout nebari-operator (for dev/scripts)
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           repository: nebari-dev/nebari-operator
           ref: ${{ env.OPERATOR_REF }}
@@ -34,7 +34,7 @@ jobs:
           cluster_name: pack-integration
 
       - name: Set up Helm
-        uses: azure/setup-helm@v4
+        uses: azure/setup-helm@v5
 
       # ============================================================
       # Infrastructure: MetalLB

.github/workflows/test.yaml

@@ -10,15 +10,15 @@ jobs:
   integration:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Create kind cluster
         uses: helm/kind-action@v1
         with:
           cluster_name: pack-test
 
       - name: Set up Helm
-        uses: azure/setup-helm@v4
+        uses: azure/setup-helm@v5
 
       # Test vanilla YAML example
       - name: Apply vanilla-yaml manifests