From 54a812028cf3a0c62e2319be3abaaf07c4c7de22 Mon Sep 17 00:00:00 2001
From: chtnnh <59027776+chtnnh@users.noreply.github.com>
Date: Thu, 13 Aug 2026 10:30:43 +0400
Subject: [PATCH] ci: bump Actions off Node 20 runtime (#6)

Know-Code-Verified: 4a6e5b6a224860021716a5684dfac0dc5244085e084d93babcb7e7150f1e561d
---
 .github/workflows/ci.yml               |  4 ++--
 .github/workflows/docs.yml             | 10 ++++++----
 .github/workflows/know-code.yml        |  4 ++--
 .github/workflows/release.yml          |  4 ++--
 .github/workflows/umami-proxy.yml      |  2 +-
 action/action.yml                      |  2 +-
 packages/cli/src/commands-core.test.ts |  1 +
 packages/cli/src/commands/init.ts      |  2 +-
 website/docs/ci.md                     |  2 +-
 9 files changed, 17 insertions(+), 14 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 01c7d95..0a7c655 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -9,8 +9,8 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v5
         with:
           node-version: "22"
           cache: npm
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index a4662fb..e80ba46 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -23,9 +23,9 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v5
         with:
           node-version: "22"
           cache: npm
@@ -38,9 +38,11 @@ jobs:
           npm run build -w website
 
       - name: Upload Pages artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@v5
         with:
           path: website/build
+          # v4+ excludes dotfiles by default; Docusaurus needs .nojekyll.
+          include-hidden-files: true
 
   deploy:
     needs: build
@@ -50,4 +52,4 @@ jobs:
       url: ${{ steps.deployment.outputs.page_url }}
     steps:
       - id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5
diff --git a/.github/workflows/know-code.yml b/.github/workflows/know-code.yml
index a9b717c..6f8ce89 100644
--- a/.github/workflows/know-code.yml
+++ b/.github/workflows/know-code.yml
@@ -11,11 +11,11 @@ jobs:
   verify:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v5
         with:
           node-version: "22"
           cache: npm
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d4ad7b3..0406656 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -20,12 +20,12 @@ jobs:
     runs-on: ubuntu-latest
     environment: npm-release
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       # Node 24 → npm ≥ 11.5.1 (required for trusted publishing).
       # Do NOT set registry-url: setup-node would inject a dummy NODE_AUTH_TOKEN
       # that prevents the OIDC exchange (ENEEDAUTH).
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v5
         with:
           node-version: "24"
           package-manager-cache: false
diff --git a/.github/workflows/umami-proxy.yml b/.github/workflows/umami-proxy.yml
index 2874e7c..83bbfbb 100644
--- a/.github/workflows/umami-proxy.yml
+++ b/.github/workflows/umami-proxy.yml
@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Deploy Worker
         uses: cloudflare/wrangler-action@v4
diff --git a/action/action.yml b/action/action.yml
index e4b04f4..1a8478c 100644
--- a/action/action.yml
+++ b/action/action.yml
@@ -31,7 +31,7 @@ runs:
   using: composite
   steps:
     - name: Setup Node
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v5
       with:
         node-version: "22"
 
diff --git a/packages/cli/src/commands-core.test.ts b/packages/cli/src/commands-core.test.ts
index ff95a78..8af2094 100644
--- a/packages/cli/src/commands-core.test.ts
+++ b/packages/cli/src/commands-core.test.ts
@@ -254,6 +254,7 @@ describe("commands: config / init / quiz / doctor / reset / ship", () => {
     const yml = consumerWorkflowYaml("develop");
     assert.match(yml, /base-branch: develop/);
     assert.match(yml, /chtnnh\/know-code\/action@v0\.3\.0/);
+    assert.match(yml, /actions\/checkout@v5/);
     // Push-to-base has no merge-base ahead of HEAD — verify must be PR-only.
     assert.match(yml, /pull_request:/);
     assert.doesNotMatch(yml, /push:/);
diff --git a/packages/cli/src/commands/init.ts b/packages/cli/src/commands/init.ts
index 15d4d12..ad35228 100644
--- a/packages/cli/src/commands/init.ts
+++ b/packages/cli/src/commands/init.ts
@@ -24,7 +24,7 @@ jobs:
   verify:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
diff --git a/website/docs/ci.md b/website/docs/ci.md
index 1c9dc2e..7930e3e 100644
--- a/website/docs/ci.md
+++ b/website/docs/ci.md
@@ -23,7 +23,7 @@ jobs:
   verify:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0