Skip to content

Updated to use Node 24#48

Merged
tarcieri merged 1 commit intorustsec:masterfrom
haydonryan:master
Mar 20, 2026
Merged

Updated to use Node 24#48
tarcieri merged 1 commit intorustsec:masterfrom
haydonryan:master

Conversation

@haydonryan
Copy link
Copy Markdown

Resolves #47

Tested against my own repo - worked fine. (warning doesn't appear).

I used AI to apply this change.

@tarcieri tarcieri merged commit 858dc40 into rustsec:master Mar 20, 2026
1 check passed
tolgakaratas added a commit to Denomas/clone that referenced this pull request May 7, 2026
GitHub still warned 'Node.js 20 actions are deprecated' for two
actions whose v-major refs lag behind their actual Node 24 work:

  * rustsec/audit-check@v2 — upstream merged the Node 24 bump
    (rustsec/audit-check#48, master commit 858dc40f, 2026-03-20)
    but has not cut a v2.x.x release yet, so the v2 floating ref
    still points at v2.0.0 (2024-09-23) which ships Node 20.
    Pin to the master commit SHA. The pin is documented inline so
    the next maintainer (or dependabot) knows to drop it once a
    real release lands. Same pin in both build.yml and
    security-scan.yml.

  * github/codeql-action — v3.x.x is the legacy Node 20 series;
    the maintainer publishes v4.x.x in parallel and the v4 line
    runs on Node 24 (verified against init/action.yml on tag
    v4.35.4). Bump init/autobuild/analyze from @V3 to @v4 in
    security-scan.yml.

Verified with actionlint v1.7.7 — both files lint clean. After
this push the only remaining 'Node 20' warnings would be from
actions whose latest tag itself ships Node 20 (none in our tree
as of 2026-05-07).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Github actions enforcing update to node 24

2 participants