From 63ccac006eda7d2aa35fe364fccae8a57aa78e15 Mon Sep 17 00:00:00 2001
From: Chuck McAndrew <6248903+dcmcand@users.noreply.github.com>
Date: Tue, 7 Jul 2026 10:32:21 +0200
Subject: [PATCH] ci: move remaining actions off the deprecated Node 20 runtime

GitHub is deprecating the node20 action runtime. Audited every `uses:`
reference across all workflows; four were still on node20 and have node24
releases available:

- actions/add-to-project: v1.0.2 -> v2.0.0 (SHA-pinned, runtime bump)
- docker/login-action: v3 -> v4
- docker/build-push-action: v6 -> v7
- cloudflare/wrangler-action: v3 -> v4

All four now run on node24. Inputs are unchanged across the bumps, no
removed docker build envs are in use, and every job runs on ubuntu-latest
(past the Actions Runner v2.327.1 floor the docker v7/v4 actions require).
wrangler-action v4 defaults to Wrangler v4; `pages deploy` is unchanged.

thollander/actions-comment-pull-request is left at v3: its latest release
(and default branch) still target node20, so no node24 version exists yet.

actions/checkout@v5, azure/setup-helm@v5, helm/kind-action@v1, and
oven-sh/setup-bun@v2 were already on node24.
---
 .github/workflows/add-to-project.yaml | 4 ++--
 .github/workflows/build-image.yaml    | 4 ++--
 .github/workflows/docs.yml            | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/add-to-project.yaml b/.github/workflows/add-to-project.yaml
index 1d1d278..ea5f674 100644
--- a/.github/workflows/add-to-project.yaml
+++ b/.github/workflows/add-to-project.yaml
@@ -10,8 +10,8 @@ jobs:
   add-to-project:
     runs-on: ubuntu-latest
     steps:
-      # https://github.com/actions/add-to-project/releases/tag/v1.0.2
-      - uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e
+      # https://github.com/actions/add-to-project/releases/tag/v2.0.0
+      - uses: actions/add-to-project@5afcf98fcd03f1c2f92c3c83f58ae24323cc57fd
         with:
           project-url: ${{ vars.PROJECT_BOARD_URL }}
           github-token: ${{ secrets.ADD_TO_PROJECT_PAT }}
diff --git a/.github/workflows/build-image.yaml b/.github/workflows/build-image.yaml
index f584a82..2513ac2 100644
--- a/.github/workflows/build-image.yaml
+++ b/.github/workflows/build-image.yaml
@@ -21,14 +21,14 @@ jobs:
       - uses: actions/checkout@v5
 
       - name: Log in to GHCR
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: examples/auth-fastapi
           push: true
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 6227073..bc56a78 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -52,7 +52,7 @@ jobs:
       - name: Deploy to Cloudflare Pages
         id: deploy
         if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
-        uses: cloudflare/wrangler-action@v3
+        uses: cloudflare/wrangler-action@v4
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}