Finding
All workflows pin actions/checkout to SHA 34e114876b0b11c390a56381ad16ebd13914f8d5 (v4) and softprops/action-gh-release to SHA 153bb8e04406b158c6c84fc1615b65b24149a1fe (v2), both of which run on Node.js 20. GitHub is deprecating Node.js 20 on Actions runners — after June 2nd, 2026, Node.js 24 will be forced. Affected workflows: tests.yml, commit-lint.yml, release.yml, auto-release.yml.
Impact
After June 2nd, 2026 all CI runs will fail or behave unexpectedly if the SHAs are not updated before then.
Fix
Update both actions to the latest Node.js 24-compatible releases and re-pin to their new SHAs across all four workflows.
Finding
All workflows pin
actions/checkoutto SHA34e114876b0b11c390a56381ad16ebd13914f8d5(v4) andsoftprops/action-gh-releaseto SHA153bb8e04406b158c6c84fc1615b65b24149a1fe(v2), both of which run on Node.js 20. GitHub is deprecating Node.js 20 on Actions runners — after June 2nd, 2026, Node.js 24 will be forced. Affected workflows:tests.yml,commit-lint.yml,release.yml,auto-release.yml.Impact
After June 2nd, 2026 all CI runs will fail or behave unexpectedly if the SHAs are not updated before then.
Fix
Update both actions to the latest Node.js 24-compatible releases and re-pin to their new SHAs across all four workflows.