Skip to content

[1.0.x → main] Move every pinned action to Node 24 (#5341) - #5348

Draft
thunder-automation-bot wants to merge 1 commit into
mainfrom
forward-port/1.0.x/pr-5341
Draft

thunder-automation-bot wants to merge 1 commit into
mainfrom
forward-port/1.0.x/pr-5341

Conversation

@thunder-automation-bot

Copy link
Copy Markdown

Automated forward-port of #5341 from 1.0.x to main.

Original PR: #5341
Commits cherry-picked: 1
Source branch: 1.0.x
Target branch: main


Purpose

Node 20 is removed from the GitHub Actions runners on 23 September 2026. Every action pinned in this repository still targeted it, so every job logged a deprecation warning.
actions/setup-go has never cached anything in this repository: it looks for go.sum at the repository root, which does not exist here, so every Go job logged Restore cache failed: Dependencies file is not found and re-downloaded its modules from scratch.

This is the 1.0.x counterpart of the same change on main. It is needed separately because local composite actions are read from the checked-out branch, so a release cut from 1.0.x would otherwise load the old pins, and would get no Go cache at all now that main's release builder no longer carries the hand-rolled cache steps.

Approach

Re-pinned 121 uses: lines to releases whose own action.yml declares node24, verified by fetching action.yml at each pinned SHA. The two duplicate actions/cache pins were collapsed onto one.

Set cache-dependency-path: "**/go.sum" on .github/actions/setup-go so the built-in cache keys off all three Go modules instead of a root file that does not exist. Since setup-go now caches GOMODCACHE and GOCACHE itself, the ten hand-rolled Cache Go Modules steps became duplicates and were removed, across pr-builder.yml (3), release-builder.yml (3), postgres-tests.yml (2), nightly-build-validation.yml (1) and windows-powershell-validation.yml (1). The same setting was applied to the three setup-go calls in windows-build-validation.yml that bypass the composite.

Local composite actions are read from the checked-out tree, not the dispatch ref, so this only takes effect on branches containing it.

Action From To
actions/checkout v4 v7.0.1
actions/upload-artifact v4 v7.0.1
actions/download-artifact v4 v8.0.1
actions/cache v4 (two SHAs) v6.1.0
actions/github-script v7 v9.0.0
actions/setup-node v4 / v4.4.0 v7.0.0
actions/setup-go v5 v7.0.0
pnpm/action-setup v4.3.0 v6.1.0
docker/login-action v3 v4.6.0
docker/setup-buildx-action v3 v4.3.0
azure/setup-helm v3 (node16) v5.0.1
softprops/action-gh-release v2 v3.0.3
dorny/paths-filter v3 v4.0.3
actions/dependency-review-action v4 v5.0.0
actions/deploy-pages v4 v5.0.1
actions/upload-pages-artifact v3 v5.0.0
codecov/codecov-action v4 v5

Related Issues

Related PRs

  • N/A

Checklist

  • Followed the contribution guidelines.
  • Manual test round performed and verified.
  • Documentation provided. (Add links if there are any)
    • Ran Vale and fixed all errors and warnings
  • Tests provided. (Add links if there are any)
    • Unit Tests
    • Integration Tests
  • Breaking changes. (Fill if applicable)
    • Breaking changes section filled.
    • breaking change label added.

Security checks

  • Followed secure coding standards in WSO2 Secure Coding Guidelines
  • Confirmed that this PR doesn't commit any keys, passwords, tokens, usernames, or other secrets.

Signed-off-by: Osara-B <osara922@gmail.com>
@github-actions

github-actions Bot commented Sep 9, 2026

Copy link
Copy Markdown

👋 @Osara-B @rajithacharith please review this forward-port of #5341 to main.

⚠️ Merge conflicts detected during cherry-pick.
The branch was pushed with unresolved conflict markers committed.
Please resolve the conflicts on this branch and mark the PR ready for review before merging.

@coderabbitai

coderabbitai Bot commented Sep 9, 2026

Copy link
Copy Markdown
Contributor

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

  • Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants