Skip to content

chore(ci): bump actions to latest majors (Node 24 LTS)#26

Merged
bdruth merged 1 commit into
flexfrom
chore/bump-actions-to-node24
May 19, 2026
Merged

chore(ci): bump actions to latest majors (Node 24 LTS)#26
bdruth merged 1 commit into
flexfrom
chore/bump-actions-to-node24

Conversation

@bdruth
Copy link
Copy Markdown

@bdruth bdruth commented May 19, 2026

Summary

Bumps the GitHub Actions referenced by publish-flex-image.yml and upstream-sync.yml to their latest majors. All bumped actions now declare using: node24 in their action.yml, matching the current Node.js Active LTS (since Oct 2025).

Why now

GitHub will force Node.js 24 as the default Actions runtime on 2026-06-02 and remove Node.js 20 on 2026-09-16. The smoke runs of publish-flex-image both surfaced deprecation warnings on the prior versions.

Bumps

Action Before After
actions/checkout v5 v6 (v6.0.2)
aws-actions/configure-aws-credentials v4 v6 (v6.1.1)
docker/setup-buildx-action v3 v4 (v4.0.0)
docker/build-push-action v5 v7 (v7.1.0)
aws-actions/amazon-ecr-login v2 v2 (v2.1.5 — already Node 24)

Breaking-change review (two-major jumps)

aws-actions/configure-aws-credentials v4 → v6

  • v5.0.0 (Sep 2025): boolean-input handling cleanup. We pass only strings (role-to-assume, aws-region), so unaffected.
  • v6.0.0 (Feb 2026): Node 24 migration only.

docker/build-push-action v5 → v7

  • v6.0.0 (Jun 2024): Build summaries are now generated by default. Opt-out via DOCKER_BUILD_SUMMARY=false env if undesired. We accept this — summaries are useful artifacts.
  • v7.0.0 (Mar 2026): Node 24 migration; removes deprecated envs (DOCKER_BUILD_NO_SUMMARY, DOCKER_BUILD_EXPORT_RETENTION_DAYS) we don't use.

Test plan

The publish workflow has a self-contained smoke test that exercises every action:

  • Trigger publish-flex-image.yml with a throwaway tag against dev:
    gh workflow run publish-flex-image.yml -f version=flex-bump-smoke -f environment=dev
    
    Expect: success, no Node 20 deprecation warnings.
  • Clean up the throwaway tag from ECR afterward.
  • upstream-sync.yml — first scheduled run (next 09:00 UTC) or a manual dispatch with no inputs will exercise actions/checkout@v6. Expect: "Up to date" notice (flex is on v0.9.5).

Files changed

  • .github/workflows/publish-flex-image.yml
  • .github/workflows/upstream-sync.yml

GitHub Actions will force the Node.js 24 runtime as the default on
2026-06-02 and remove Node.js 20 on 2026-09-16. The smoke runs of
publish-flex-image both surfaced deprecation warnings for the previous
versions. Node.js 24 has been the active LTS since October 2025, so
this bumps to majors that declare `using: node24` in action.yml.

Bumps:
  actions/checkout                  v5 → v6
  aws-actions/configure-aws-credentials  v4 → v6
  docker/setup-buildx-action        v3 → v4
  docker/build-push-action          v5 → v7
  aws-actions/amazon-ecr-login      stays at v2 (v2.1.5 already on node24)

Breaking-change review:
  - configure-aws-credentials v5 cleaned up boolean-input handling; we
    pass only strings (role-to-assume, aws-region), unaffected.
  - configure-aws-credentials v6 is a Node 24 migration only.
  - build-push-action v6 enables build summaries by default (we accept
    this side effect; opt-out via DOCKER_BUILD_SUMMARY=false if needed).
  - build-push-action v7 is a Node 24 migration plus removal of deprecated
    envs we don't use (DOCKER_BUILD_NO_SUMMARY, DOCKER_BUILD_EXPORT_RETENTION_DAYS).
  - actions/checkout v6, docker/setup-buildx-action v4: Node 24 only.
@bdruth bdruth merged commit 5423ccb into flex May 19, 2026
@bdruth bdruth deleted the chore/bump-actions-to-node24 branch May 19, 2026 03:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant