Skip to content

[8.4] Bump GitHub Actions to Node 24 compatible versions [MOD-15112] #948

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
github-actions wants to merge 1 commit into
base: 8.4
Choose a base branch
from
Open

[8.4] Bump GitHub Actions to Node 24 compatible versions [MOD-15112] #948

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions .github/workflows/arm.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,14 +11,14 @@ jobs:
ec2-instance-id: ${{ steps.start-ec2-runner.outputs.ec2-instance-id }}
steps:
- name: Configure AWS credentials
uses: aws-actions/configure-aws-credentials@v4
uses: aws-actions/configure-aws-credentials@v6
with:
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
aws-region: ${{ secrets.AWS_REGION }}
- name: Start EC2 runner
id: start-ec2-runner
uses: machulav/ec2-github-runner@v2.4.2
uses: machulav/ec2-github-runner@v2.6.1
Copy link
Copy Markdown

@cursor cursor Bot May 4, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Non-existent action version referenced for EC2 runner

High Severity

machulav/ec2-github-runner@v2.6.1 does not appear to exist as a published tag or release. The latest available version is v2.5.2. This will cause all workflows using this action (arm, benchmark-runner, and coverage, including their stop-runner jobs) to fail immediately when GitHub Actions attempts to download the action.

Additional Locations (2)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 12a1622. Configure here.

with:
mode: start
github-token: ${{ secrets.GH_PERSONAL_ACCESS_TOKEN }}
Expand All @@ -44,13 +44,13 @@ jobs:
if: ${{ always() }} # required to stop the runner even if the error happened in the previous jobs
steps:
- name: Configure AWS credentials
uses: aws-actions/configure-aws-credentials@v4
uses: aws-actions/configure-aws-credentials@v6
with:
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
aws-region: ${{ secrets.AWS_REGION }}
- name: Stop EC2 runner
uses: machulav/ec2-github-runner@v2.4.2
uses: machulav/ec2-github-runner@v2.6.1
with:
mode: stop
github-token: ${{ secrets.GH_PERSONAL_ACCESS_TOKEN }}
Expand Down
10 changes: 5 additions & 5 deletions .github/workflows/benchmark-runner.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,14 +24,14 @@ jobs:
ec2_instance_id: ${{ steps.start-ec2-runner.outputs.ec2-instance-id }}
steps:
- name: Configure AWS credentials
uses: aws-actions/configure-aws-credentials@v4
uses: aws-actions/configure-aws-credentials@v6
with:
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
aws-region: ${{ secrets.AWS_REGION_BENCHMARK }}
- name: Start EC2 runner
id: start-ec2-runner
uses: machulav/ec2-github-runner@v2.4.2
uses: machulav/ec2-github-runner@v2.6.1
with:
mode: start
github-token: ${{ secrets.GH_PERSONAL_ACCESS_TOKEN }}
Expand All @@ -48,7 +48,7 @@ jobs:
- name: Pre checkout deps
run: sudo apt-get update && sudo apt-get -y install git
- name: Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v6
with:
submodules: recursive
- name: Print runner info
Expand Down Expand Up @@ -96,13 +96,13 @@ jobs:
if: ${{ always() }} # required to stop the runner even if the error happened in the previous jobs
steps:
- name: Configure AWS credentials
uses: aws-actions/configure-aws-credentials@v4
uses: aws-actions/configure-aws-credentials@v6
with:
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
aws-region: ${{ secrets.AWS_REGION_BENCHMARK }}
- name: Stop EC2 runner
uses: machulav/ec2-github-runner@v2.4.2
uses: machulav/ec2-github-runner@v2.6.1
with:
mode: stop
github-token: ${{ secrets.GH_PERSONAL_ACCESS_TOKEN }}
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/codeql-analysis.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,12 +32,12 @@ jobs:

steps:
- name: Checkout repository
uses: actions/checkout@v4
uses: actions/checkout@v6
with:
submodules: recursive
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@v3
uses: github/codeql-action/init@v4
with:
languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a config file.
Expand All @@ -48,7 +48,7 @@ jobs:
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
# If this step fails, then you should remove it and run the build manually (see below)
- name: Autobuild
uses: github/codeql-action/autobuild@v3
uses: github/codeql-action/autobuild@v4

# ℹ️ Command-line programs to run using the OS shell.
# 📚 https://git.io/JvXDl
Expand All @@ -60,4 +60,4 @@ jobs:
# - run: make

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3
uses: github/codeql-action/analyze@v4
14 changes: 7 additions & 7 deletions .github/workflows/coverage.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,14 +9,14 @@ jobs:
ec2-instance-id: ${{ steps.start-ec2-runner.outputs.ec2-instance-id }}
steps:
- name: Configure AWS credentials
uses: aws-actions/configure-aws-credentials@v4
uses: aws-actions/configure-aws-credentials@v6
with:
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
aws-region: ${{ secrets.AWS_REGION_BENCHMARK }}
- name: Start EC2 runner
id: start-ec2-runner
uses: machulav/ec2-github-runner@v2.4.2
uses: machulav/ec2-github-runner@v2.6.1
with:
mode: start
github-token: ${{ secrets.GH_PERSONAL_ACCESS_TOKEN }}
Expand All @@ -35,7 +35,7 @@ jobs:
- name: Pre checkout deps
run: sudo apt-get update && sudo apt-get install -y git
- name: checkout
uses: actions/checkout@v4
uses: actions/checkout@v6
with:
submodules: recursive
- name: Print CPU information
Expand Down Expand Up @@ -67,7 +67,7 @@ jobs:
- name: run codecov
run: make coverage
- name: Upload coverage to Codecov
uses: codecov/codecov-action@v4
uses: codecov/codecov-action@v6 # NOSONAR
with:
file: ./bin/Linux-x86_64-debug/cov.info
token: ${{ secrets.CODECOV_TOKEN }}
Expand All @@ -83,7 +83,7 @@ jobs:
echo "path=bin/${FULL_VARIANT}/unit_tests/Testing/Temporary/" >> $GITHUB_OUTPUT
- name: Archive san tests reports
if: failure()
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: san tests reports on intel
path: ${{ steps.tests-artifact-path.outputs.path }}
Expand All @@ -97,13 +97,13 @@ jobs:
if: ${{ always() }}
steps:
- name: Configure AWS credentials
uses: aws-actions/configure-aws-credentials@v4
uses: aws-actions/configure-aws-credentials@v6
with:
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
aws-region: ${{ secrets.AWS_REGION_BENCHMARK }}
- name: Stop EC2 runner
uses: machulav/ec2-github-runner@v2.4.2
uses: machulav/ec2-github-runner@v2.6.1
with:
mode: stop
github-token: ${{ secrets.GH_PERSONAL_ACCESS_TOKEN }}
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/event-nightly.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -69,8 +69,8 @@ jobs:
if: failure()
steps:
- name: Notify on failure
uses: slackapi/slack-github-action@v1
uses: slackapi/slack-github-action@v3
with:
webhook: ${{ secrets.SLACK_WEBHOOK_URL_NIGHTLY_FAILURE }}
webhook-type: incoming-webhook
payload: '{ "failed_run": "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}", "repository": "${{github.repository}}" }'
env:
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL_NIGHTLY_FAILURE }}
9 changes: 4 additions & 5 deletions .github/workflows/event-pull_request.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ jobs:
cancel-in-progress: true
steps:
- name: checkout
uses: actions/checkout@v4
uses: actions/checkout@v6
with:
submodules: recursive
- name: Print CPU information
Expand All @@ -31,7 +31,7 @@ jobs:
echo "Runner Architecture: ${{ runner.arch }}"
echo "========================"
- name: setup python
uses: actions/setup-python@v5
uses: actions/setup-python@v6
with:
python-version: '3.10'
- name: install dependencies
Expand All @@ -44,11 +44,10 @@ jobs:
run: make unit_test
- name: flow tests
run: make flow_test VERBOSE=1
# Using version 4 if node20 is supported, since it is MUCH faster (15m vs 25s)
- name: Upload Logs
# Upload artifacts only if flow tests failed
if: failure()
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: Test Logs
path: |
Expand All @@ -74,7 +73,7 @@ jobs:
spellcheck:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6
with:
submodules: recursive
- name: Spellcheck
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release-drafter.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ jobs:
runs-on: ubuntu-latest
steps:
# Drafts your next Release notes as Pull Requests are merged into "master"
- uses: release-drafter/release-drafter@v6
- uses: release-drafter/release-drafter@v7
Copy link
Copy Markdown

@cursor cursor Bot May 4, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Stale GITHUB_TOKEN env var ignored by release-drafter v7

Low Severity

release-drafter/release-drafter@v7 replaced the GITHUB_TOKEN environment variable with a token input (which defaults to ${{ github.token }}). The env: GITHUB_TOKEN block on this step is now dead code — the action ignores it. The workflow still functions because the default token value is equivalent, but the env var is misleading.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 12a1622. Configure here.

with:
# (Optional) specify config name to use, relative to .github/. Default: release-drafter.yml
config-name: release-drafter-config.yml
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/task-backport_pr.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,12 +28,12 @@ jobs:
startsWith(github.event.comment.body, '/backport')
)
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6
with:
submodules: recursive
- name: Create backport pull requests
id: backport
uses: korthout/backport-action@v3
uses: korthout/backport-action@v4
with:
pull_title: '[${target_branch}] ${pull_title}'
merge_commits: 'skip'
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/task-unit-test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ jobs:
- name: pre-checkout script
run: ${{ inputs.pre-checkout-script }}
- name: checkout
uses: actions/checkout@v4
uses: actions/checkout@v6
with:
submodules: recursive
- name: Print CPU information
Expand Down Expand Up @@ -76,7 +76,7 @@ jobs:
echo "path=bin/${FULL_VARIANT}/unit_tests/Testing/Temporary/" >> $GITHUB_OUTPUT
- name: Archive san tests reports
if: ${{ inputs.san == 'address' && failure() }}
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: san tests reports on ${{ steps.artifact-name.outputs.name }}
path: ${{ steps.tests-artifact-path.outputs.path }}
Loading