This is an automated email from the ASF dual-hosted git repository.
Yicong-Huang pushed a commit to branch release/v1.1.0-incubating
in repository https://gitbox.apache.org/repos/asf/texera.git
The following commit(s) were added to refs/heads/release/v1.1.0-incubating by
this push:
new 67cf21c66c chore(ci): upgrade actions to Node.js 24 runtimes (#4648)
67cf21c66c is described below
commit 67cf21c66c75205c275b85d385734a4fccf1d78b
Author: Yicong Huang <[email protected]>
AuthorDate: Sat May 2 23:48:11 2026 +0000
chore(ci): upgrade actions to Node.js 24 runtimes (#4648)
### What changes were proposed in this PR?
Bump every Node-based action used in `.github/workflows/` to a version
that ships Node 24, ahead of GitHub's deadlines (forced Node 24 on
2026-06-02; Node 20 removed 2026-09-16).
| Action | From | To |
|---|---|---|
| `actions/github-script` | `v7` | `v8` |
| `actions/checkout` | `v4` | `v5` |
| `actions/cache` | `v4` | `v5` |
| `actions/upload-artifact` | `v4` | `v5` |
| `actions/download-artifact` | `v4` | `v6` |
| `amannn/action-semantic-pull-request` | `v5.5.3` | `v6.1.1` |
| `docker/setup-buildx-action` | `v3.11.1` | `v4.0.0` |
| `docker/login-action` | `v3.6.0` | `v4.1.0` |
| `docker/build-push-action` | `v6.18.0` | `v7.1.0` |
| `docker/setup-qemu-action` | `v3.7.0` | `v4.0.0` |
Third-party actions are SHA-pinned with a version comment (existing
convention). For each, the SHA points to that release tag; `runs.using:
'node24'` is verified.
Already on Node 24 (no change): `actions/setup-java@v5`,
`actions/setup-node@v5`, `actions/setup-python@v6`,
`actions/labeler@v6`, `coursier/cache-action`. Composite actions are
unaffected by the Node 20 deprecation: `sbt/setup-sbt`,
`apache/skywalking-eyes`.
### Any related issues, documentation, discussions?
Closes #4647
### How was this PR tested?
YAML parses locally for all 11 workflow files. Will be exercised on this
PR's own CI run — the Node 20 deprecation warning should disappear from
logs of every job.
### Was this PR authored or co-authored using generative AI tooling?
Generated-by: Claude Code (Opus 4.7)
Co-authored-by: github-actions[bot]
<github-actions[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 (1M context) <[email protected]>
(backported from commit e3d96b0d83d81cbbc1239725daf0b742103f3f0a)
---
.github/workflows/auto-assign.yml | 4 ++--
.../automatic-email-notif-on-ddl-change.yml | 2 +-
.github/workflows/build-and-push-images.yml | 28 +++++++++++-----------
.github/workflows/build.yml | 2 +-
.github/workflows/check-header.yml | 2 +-
.github/workflows/create-release-candidate.yml | 6 ++---
.github/workflows/issue-triage.yml | 4 ++--
.github/workflows/lint-pr.yml | 2 +-
8 files changed, 25 insertions(+), 25 deletions(-)
diff --git a/.github/workflows/auto-assign.yml
b/.github/workflows/auto-assign.yml
index 48fe10f6c2..9fbc507bb6 100644
--- a/.github/workflows/auto-assign.yml
+++ b/.github/workflows/auto-assign.yml
@@ -31,7 +31,7 @@ jobs:
&& github.event.pull_request.assignees[0] == null
runs-on: ubuntu-latest
steps:
- - uses: actions/github-script@v7
+ - uses: actions/github-script@v8
with:
script: |
const pr = context.payload.pull_request;
@@ -45,7 +45,7 @@ jobs:
if: github.event.action == 'closed' && github.event.pull_request.merged
runs-on: ubuntu-latest
steps:
- - uses: actions/github-script@v7
+ - uses: actions/github-script@v8
with:
script: |
const { owner, repo } = context.repo;
diff --git a/.github/workflows/automatic-email-notif-on-ddl-change.yml
b/.github/workflows/automatic-email-notif-on-ddl-change.yml
index 782deaa2a7..1c5f96c440 100644
--- a/.github/workflows/automatic-email-notif-on-ddl-change.yml
+++ b/.github/workflows/automatic-email-notif-on-ddl-change.yml
@@ -29,7 +29,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@v5
with:
fetch-depth: 0
sparse-checkout: sql/updates/
diff --git a/.github/workflows/build-and-push-images.yml
b/.github/workflows/build-and-push-images.yml
index d120ed3757..19534787f8 100644
--- a/.github/workflows/build-and-push-images.yml
+++ b/.github/workflows/build-and-push-images.yml
@@ -156,7 +156,7 @@ jobs:
run: sbt DAO/jooqGenerate
- name: Upload JOOQ generated code
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@v5
with:
name: jooq-code
path: |
@@ -335,7 +335,7 @@ jobs:
extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}",
"project/build.properties" ]'
- name: Download JOOQ generated code
- uses: actions/download-artifact@v4
+ uses: actions/download-artifact@v6
with:
name: jooq-code
path: common/dao/src/main/scala/org/apache/texera/dao/jooq/generated/
@@ -349,11 +349,11 @@ jobs:
df -h
- name: Set up Docker Buildx
- uses:
docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.11.1
+ uses:
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
- name: Log in to GitHub Container Registry
if: startsWith(needs.set-parameters.outputs.docker_registry,
'ghcr.io/')
- uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 #
v3.6.0
+ uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 #
v4.1.0
with:
registry: ghcr.io
username: ${{ github.actor }}
@@ -361,13 +361,13 @@ jobs:
- name: Log in to Docker Hub
if: ${{ !startsWith(needs.set-parameters.outputs.docker_registry,
'ghcr.io/') }}
- uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 #
v3.6.0
+ uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 #
v4.1.0
with:
username: ${{ secrets.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_PASSWORD }}
- name: Build and push AMD64 image
- uses:
docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.18.0
+ uses:
docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
with:
context: ${{ matrix.context }}
file: ${{ matrix.dockerfile }}
@@ -415,7 +415,7 @@ jobs:
extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}",
"project/build.properties" ]'
- name: Download JOOQ generated code
- uses: actions/download-artifact@v4
+ uses: actions/download-artifact@v6
with:
name: jooq-code
path: common/dao/src/main/scala/org/apache/texera/dao/jooq/generated/
@@ -430,16 +430,16 @@ jobs:
# Set up QEMU for ARM64 emulation
- name: Set up QEMU
- uses:
docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.7.0
+ uses:
docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
with:
platforms: linux/arm64
- name: Set up Docker Buildx
- uses:
docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.11.1
+ uses:
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
- name: Log in to GitHub Container Registry
if: startsWith(needs.set-parameters.outputs.docker_registry,
'ghcr.io/')
- uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 #
v3.6.0
+ uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 #
v4.1.0
with:
registry: ghcr.io
username: ${{ github.actor }}
@@ -447,13 +447,13 @@ jobs:
- name: Log in to Docker Hub
if: ${{ !startsWith(needs.set-parameters.outputs.docker_registry,
'ghcr.io/') }}
- uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 #
v3.6.0
+ uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 #
v4.1.0
with:
username: ${{ secrets.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_PASSWORD }}
- name: Build and push ARM64 image
- uses:
docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.18.0
+ uses:
docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
with:
context: ${{ matrix.context }}
file: ${{ matrix.dockerfile }}
@@ -481,7 +481,7 @@ jobs:
steps:
- name: Log in to GitHub Container Registry
if: startsWith(needs.set-parameters.outputs.docker_registry,
'ghcr.io/')
- uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 #
v3.6.0
+ uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 #
v4.1.0
with:
registry: ghcr.io
username: ${{ github.actor }}
@@ -489,7 +489,7 @@ jobs:
- name: Log in to Docker Hub
if: ${{ !startsWith(needs.set-parameters.outputs.docker_registry,
'ghcr.io/') }}
- uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 #
v3.6.0
+ uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 #
v4.1.0
with:
username: ${{ secrets.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_PASSWORD }}
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 9bda7c3ddf..79363ff1d4 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -92,7 +92,7 @@ jobs:
with:
node-version: ${{ matrix.node-version }}
architecture: ${{ matrix.arch }}
- - uses: actions/cache@v4
+ - uses: actions/cache@v5
with:
path: frontend/.yarn/cache
key: ${{ runner.os }}-${{ matrix.arch }}-${{ matrix.node-version
}}-yarn-cache-v4-${{ hashFiles('**/yarn.lock') }}
diff --git a/.github/workflows/check-header.yml
b/.github/workflows/check-header.yml
index c2cbddc133..5557bc5c78 100644
--- a/.github/workflows/check-header.yml
+++ b/.github/workflows/check-header.yml
@@ -29,5 +29,5 @@ jobs:
name: Check License Headers
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v5
- uses: apache/skywalking-eyes@5c5b974209f0de5d905f37deb69369068ebfc15c
# v0.7.0
diff --git a/.github/workflows/create-release-candidate.yml
b/.github/workflows/create-release-candidate.yml
index 920919591a..38e96235df 100644
--- a/.github/workflows/create-release-candidate.yml
+++ b/.github/workflows/create-release-candidate.yml
@@ -50,7 +50,7 @@ jobs:
steps:
- name: Checkout code
- uses: actions/checkout@v4
+ uses: actions/checkout@v5
with:
fetch-depth: 0 # Full history for proper tagging
@@ -308,7 +308,7 @@ jobs:
echo "✓ Vote email template generated!"
- name: Upload RC artifacts
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@v5
with:
name: rc-artifacts
path: |
@@ -330,7 +330,7 @@ jobs:
steps:
- name: Download RC artifacts
- uses: actions/download-artifact@v4
+ uses: actions/download-artifact@v6
with:
name: rc-artifacts
diff --git a/.github/workflows/issue-triage.yml
b/.github/workflows/issue-triage.yml
index 0846b98ebe..710cff11c6 100644
--- a/.github/workflows/issue-triage.yml
+++ b/.github/workflows/issue-triage.yml
@@ -33,7 +33,7 @@ jobs:
steps:
- name: Remove 'triage' label when issue is assigned
if: github.event.action == 'assigned'
- uses: actions/github-script@v7
+ uses: actions/github-script@v8
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
@@ -59,7 +59,7 @@ jobs:
- name: Add 'triage' label when issue is unassigned and has no assignees
if: github.event.action == 'unassigned'
- uses: actions/github-script@v7
+ uses: actions/github-script@v8
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
diff --git a/.github/workflows/lint-pr.yml b/.github/workflows/lint-pr.yml
index fcc5d46f0c..8d55eecbe6 100644
--- a/.github/workflows/lint-pr.yml
+++ b/.github/workflows/lint-pr.yml
@@ -31,6 +31,6 @@ jobs:
permissions:
pull-requests: read
steps:
- - uses:
amannn/action-semantic-pull-request@0723387faaf9b38adef4775cd42cfd5155ed6017 #
v5.5.3
+ - uses:
amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 #
v6.1.1
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
