From ab96d8475c256d0072f1a34da65add5bce70d8dd Mon Sep 17 00:00:00 2001 From: Shigenobu Nishikawa Date: Thu, 30 Jul 2026 03:08:38 +0900 Subject: [PATCH] ci: bump actions in composite actions to Node 24 Every build job currently emits a deprecation warning: Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4 The workflows under .github/workflows/ were already moved to Node 24 runtimes, but the two local composite actions under .github/actions/ were left behind on v4: .github/actions/checkout-qmk_firmware actions/checkout@v4 .github/actions/release-archive actions/download-artifact@v4 This happened because Dependabot does not scan composite actions in subdirectories. With `directory: "/"` it only searches .github/workflows and a root-level action.yml, so no update PR is ever opened for these two files. For example, "Bump actions/checkout from 4 to 6" (0a4b8aa) updated build-firmware.yml and release.yml but left the composite action on v4, even though all three referenced actions/checkout@v4 at that moment. Move both to the majors already in use by the workflows, which run on Node 24 (verified via each action's action.yml `using:` field): actions/checkout v4 (node20) -> v6 (node24) actions/download-artifact v4 (node20) -> v8 (node24) All inputs used here are still supported in the new majors. --- .github/actions/checkout-qmk_firmware/action.yml | 2 +- .github/actions/release-archive/action.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/actions/checkout-qmk_firmware/action.yml b/.github/actions/checkout-qmk_firmware/action.yml index 19fce257f6a..5970eda8328 100644 --- a/.github/actions/checkout-qmk_firmware/action.yml +++ b/.github/actions/checkout-qmk_firmware/action.yml @@ -15,7 +15,7 @@ runs: steps: - name: Checkout qmk_firmware - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: path: ${{ inputs.path }} repository: qmk/qmk_firmware diff --git a/.github/actions/release-archive/action.yml b/.github/actions/release-archive/action.yml index f973b545612..bab48ad1ca3 100644 --- a/.github/actions/release-archive/action.yml +++ b/.github/actions/release-archive/action.yml @@ -14,7 +14,7 @@ runs: steps: - name: Download artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: pattern: ${{ inputs.name }}-*-firmware merge-multiple: true