Skip to content

ci: bump Actions off Node 20 runtime (#6) - #7

Open
chtnnh wants to merge 1 commit into
mainfrom
fix/gh-actions-node24-bump
Open

ci: bump Actions off Node 20 runtime (#6)#7
chtnnh wants to merge 1 commit into
mainfrom
fix/gh-actions-node24-bump

Conversation

@chtnnh

@chtnnh chtnnh commented Aug 13, 2026

Copy link
Copy Markdown
Owner

Summary

Test plan

  • CI green on this PR (no Node 20 action annotations)
  • After merge, docs workflow deploy succeeds and .nojekyll is present

Know-Code-Verified: 4a6e5b6a224860021716a5684dfac0dc5244085e084d93babcb7e7150f1e561d
@cursor

cursor Bot commented Aug 13, 2026

Copy link
Copy Markdown

PR Summary

Low Risk
Workflow and documentation version bumps only; the Pages hidden-files flag is a targeted fix for docs deploy correctness.

Overview
Bumps actions/checkout and actions/setup-node from v4 → v5 across all repo workflows (ci, docs, know-code, release, umami-proxy), the composite action/action.yml, know-code init --workflow output (consumerWorkflowYaml), and the live website/docs/ci.md example so CI stops running on the deprecated Node 20 action runtime.

For GitHub Pages, upgrades upload-pages-artifact to v5 and deploy-pages to v5, and sets include-hidden-files: true on the upload step so Docusaurus .nojekyll is included (v4+ drops dotfiles by default).

Adds a test assertion that generated consumer workflows pin actions/checkout@v5.

Reviewed by Cursor Bugbot for commit 54a8120. Bugbot is set up for automated code reviews on this repo. Configure here.

@chtnnh chtnnh self-assigned this Aug 13, 2026

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 54a8120. Configure here.

Comment thread action/action.yml
steps:
- name: Setup Node
uses: actions/setup-node@v4
uses: actions/setup-node@v5

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatic cache can fail consumer verify

Medium Severity

Bumping setup-node to v5 turns on automatic dependency caching when a consumer package.json declares packageManager. This action only runs a global install, so the post-run cache save can error and fail the verify job.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 54a8120. Configure here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Bump GitHub Actions off deprecated Node 20 runtime (checkout/setup-node v4 → v5+)

1 participant