From 6a05438259c211bb34daad590584bdd21916cfc5 Mon Sep 17 00:00:00 2001 From: Aaron McConnell Date: Mon, 27 Jul 2026 11:54:59 -0400 Subject: [PATCH] chore: update GitHub Actions to Node 24-compatible versions GitHub Actions runners will default to Node 24 on 2026-06-16 and remove Node 20 in fall 2026 (JS actions on Node 12/16/20 are all affected). Bump every JS-based action to its latest Node 24-capable release, SHA-pinned with a version comment. Not changed (no Node 24 release / composite / archived): - darenm/Setup-VSTest (no Node 24 release exists) - dtolnay/rust-toolchain (composite action) - actions/create-release, actions/upload-release-asset (archived; need rewrite) Ref: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/ Co-Authored-By: Claude Opus 4.8 --- .github/workflows/java-ci.yml | 4 ++-- .github/workflows/maven-deploy.yml | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/java-ci.yml b/.github/workflows/java-ci.yml index af37c77..4b802c1 100644 --- a/.github/workflows/java-ci.yml +++ b/.github/workflows/java-ci.yml @@ -17,9 +17,9 @@ jobs: java: [8, 11, 17] steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup java - uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4.8.0 + uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0 with: distribution: "zulu" java-version: ${{ matrix.java }} diff --git a/.github/workflows/maven-deploy.yml b/.github/workflows/maven-deploy.yml index 363277a..d7fe40f 100644 --- a/.github/workflows/maven-deploy.yml +++ b/.github/workflows/maven-deploy.yml @@ -7,10 +7,10 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up JDK 11 - uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4.8.0 + uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0 with: java-version: '11' distribution: 'temurin' @@ -25,13 +25,13 @@ jobs: uses: duosecurity/duo_client_python/.github/actions/sbom-convert@master - name: Archive SBOM artifacts - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: duo_client_java_sbom path: spdx.json - name: Set up Apache Maven Central - uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4.8.0 + uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0 with: java-version: '11' distribution: 'temurin'