Update publish workflow actions for Node 20 deprecation#6
Merged
Conversation
Node 20 actions are deprecated; runners force Node 24 on June 2, 2026 and remove Node 20 on September 16, 2026. Bump checkout and setup-python to their first node24 majors, and pin all three actions by full commit SHA for reproducible, audit-friendly references. - actions/checkout v4 -> v6.0.2 - actions/setup-python v5 -> v6.2.0 - pypa/gh-action-pypi-publish release/v1 -> v1.14.0
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
GitHub is deprecating Node 20 as a JavaScript actions runtime: Node 24 becomes the forced default on June 2, 2026, and Node 20 is removed on September 16, 2026 (changelog).
Bump the publish workflow to the first node24-compatible majors and pin every action by full commit SHA:
actions/checkoutv4 → v6.0.2actions/setup-pythonv5 → v6.2.0pypa/gh-action-pypi-publishrelease/v1→ v1.14.0Both
checkout@v6andsetup-python@v6declareusing: node24inaction.yml.gh-action-pypi-publish@v1.14.0is a composite action and unaffected by the runner deprecation, but pinned by SHA for consistency.Test Plan
publish-release: falseand confirm no Node 20 deprecation warnings on the three updated steps