Closes #21664: Update and pin GitHub Actions for Node 24 compatibility #143

Closed
opened 2026-04-05 16:22:13 +02:00 by MrUnknownDE · 0 comments
Owner

Originally created by @pheus on 3/16/2026

Fixes: #21664

This PR updates the affected GitHub Actions for GitHub Actions' Node 20 deprecation and pins all referenced actions to full commit SHAs instead of version tags. This helps reduce supply chain risk from tag retargeting while preparing the workflows for the transition to Node 24.

The Node.js version used for CI testing is unchanged; this update only affects the GitHub Actions used by the workflows themselves.

Updated actions:

  • actions/checkout to v6.0.2
  • actions/setup-python to v6.2.0
  • actions/setup-node to v6.3.0
  • actions/stale to v10.2.0
  • github/codeql-action/init pinned to v4.33.0
  • github/codeql-action/analyze pinned to v4.33.0
  • dessant/lock-threads pinned to v6.0.0 (no version change)
*Originally created by @pheus on 3/16/2026* ### Fixes: #21664 This PR updates the affected GitHub Actions for GitHub Actions' Node 20 deprecation and pins all referenced actions to full commit SHAs instead of version tags. This helps reduce supply chain risk from tag retargeting while preparing the workflows for the transition to Node 24. The Node.js version used for CI testing is unchanged; this update only affects the GitHub Actions used by the workflows themselves. Updated actions: - `actions/checkout` to `v6.0.2` - `actions/setup-python` to `v6.2.0` - `actions/setup-node` to `v6.3.0` - `actions/stale` to `v10.2.0` - `github/codeql-action/init` pinned to `v4.33.0` - `github/codeql-action/analyze` pinned to `v4.33.0` - `dessant/lock-threads` pinned to `v6.0.0` (no version change)
Sign in to join this conversation.
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github/netbox#143