Upgrade GitHub Actions for Node 24 compatibility

[salmanmkc]

Warning

You may currently be seeing a warning like this in your workflow runs:

Node.js 20 actions are deprecated. The following actions are running on Node.js 20
and may not work as expected: actions/checkout@v4, actions/cache@v4, actions/upload-artifact@v4, actions/download-artifact@v4, actions/setup-node@v4.
Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026.
Please check if updated versions of these actions are available that support Node.js 24.
To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment
variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you
can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true.
For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

The exact actions listed will vary per workflow.

Upgrades GitHub Actions to versions that support Node 24, since Node 20 is reaching EOL in April 2026.

Changes

Action	Old Version(s)	New Version	Compare	Files
actions/cache	v4	v5	Diff	_bazel.yml, codspeed.yml, release.yml, test.yml
actions/checkout	v4	v6	Diff	_bazel.yml, _wpt.yml, bigbonk.yml, bonk.yml, codspeed.yml, daily-release.yml, deps-updater.yml, fixup.yml, internal-build.yml, lint.yml, new-pr-review.yml, release-python-runtime.yml, release-python-snapshots.yml, release.yml, semgrep.yml, test.yml
actions/download-artifact	v4	v8	Diff	_wpt.yml, release-python-snapshots.yml, release.yml, test.yml
actions/setup-node	v4	v6	Diff	release.yml, test.yml
actions/setup-python	v5	v6	Diff	release-python-runtime.yml, release-python-snapshots.yml
actions/upload-artifact	v4	v7	Diff	_bazel.yml, _wpt.yml, test.yml

Context

Per GitHub's announcement, Node 20 is being deprecated and runners will default to Node 24 starting June 2nd, 2026.

• Node 20 EOL: April 2026
• Node 24 becomes default: June 2nd, 2026

Notes

Worth running the workflows on a branch before merging to make sure everything still works.

[github-actions]

Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just posting a Pull Request Comment same as the below format.

---

I have read the CLA Document and I hereby sign the CLA

---

_{You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.}

[fhanau]

This is already being worked on in #6328.

[salmanmkc]

This is already being worked on in #6328.

oh great, didn't notice, we can close this