Node 20 deprecation: bump actions/setup-python and other Node 20 actions before 2026-06-02

@v

GitHub Actions is forcing Node 24 as the default runtime on 2026-06-02. Currently meta-repo's drift-check workflow uses actions/setup-python@v5 which still runs on Node 20.

Audit all .github/workflows/*.yml files in the meta-repo and the 9 tool repos for actions still on Node 20. Bump to versions that support Node 24 before the deadline.

Affected actions likely include:

actions/setup-python (latest version supports Node 24)
actions/checkout (already on v5, may be fine)
Any third-party actions with @v# pins

Surfaced during Phase 2 close-out (see #1 Phase 2 completion section).

chore: bump GitHub Actions to Node 24-compatible versions (#11)

chore: bump GitHub Actions to Node 24-compatible versions (#9)

chore: bump GitHub Actions to Node 24-compatible versions (#6)

chore: bump GitHub Actions to Node 24-compatible versions (#11)

chore: bump GitHub Actions to Node 24-compatible versions (#15)

chore: bump GitHub Actions to Node 24-compatible versions (#3)

chore: bump GitHub Actions to Node 24-compatible versions (#34)

Node 20 deprecation work complete (deadline 2026-06-02).

Stream 1 — 11 Node 20 dependabot PRs merged:

Docker: fix: composite action propagates checker exit code to caller #15 (setup-python), fix: suppress stale-counts for cursor-plugin type to unblock D-1 #16 (checkout), feat: add release-doc-sync composite action (Phase 2a, refs #5) #19 (upload-pages-artifact)
Home-Lab: Doc-consistency tests fail after auto-release across tool repos #5 (checkout), feat: drift checker core library (Phase 2 Session A) #7 (setup-python), feat: drift checker CI integration (Phase 2 Session C) #9 (upload-pages-artifact)
Monday: fix: treat drafter 'No changes' body as empty #2 (setup-python), docs: align workflow documentation with branch-protection ruleset #3 (stale), Missing auto-label dependencies across tool repos #4 (release-drafter), chore: finish Phase 1 with standards template and scaffold updates #6 (checkout), feat: drift checker core library (Phase 2 Session A) #7 (codeql-action)

Stream 2 — 8 manual PRs merged:

CFX fix: split drift-check tokens (DRIFT_CHECK_TOKEN read, GITHUB_TOKEN issues) #11, Unity feat: drift checker CI integration (Phase 2 Session C) #9, Mobile-App chore: finish Phase 1 with standards template and scaffold updates #6, Plaid chore: finish Phase 1 with standards template and scaffold updates #6, Steam fix: split drift-check tokens (DRIFT_CHECK_TOKEN read, GITHUB_TOKEN issues) #11, Monday fix: composite action propagates checker exit code to caller #15, steam-mcp docs: align workflow documentation with branch-protection ruleset #3, Developer-Tools-Directory chore: bump GitHub Actions to Node 24-compatible versions #34

Verification: final audit across all 10 repos returns zero Node-20-affected actions outside of the upstream block.

Remaining concerns tracked separately:

Add github-actions dependabot coverage to 7 uncovered repos #31: dependabot coverage gap (7 repos uncovered)
actions/dependency-review-action upstream-blocked at Node 20 #32: actions/dependency-review-action upstream-blocked at Node 20
Triage 7 non-Node-20 dependabot PRs (typescript, vitest, @types/node, MCP SDK bumps) #33: 7 unrelated dependabot PR triage backlog (typescript, vitest, @types/node, MCP SDK)

actions/dependency-review-action@v4 remains across 6 workflow files (Docker, Home-Lab, Plaid, Monday, Steam, DTD) pending upstream v5 release. Decision required by 2026-05-25 if upstream does not ship in time (#32).

DTD also picked up a peter-evans/create-pull-request bump from v6.1.0 SHA → v8.1.1 SHA (5f6978faf089d4d20b00c7766989d076bb2fc7f1), preserving the deliberate supply-chain pin convention found in sync.yml.

Navigation Menu

Repository navigation

Node 20 deprecation: bump actions/setup-python and other Node 20 actions before 2026-06-02 #18

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Node 20 deprecation: bump actions/setup-python and other Node 20 actions before 2026-06-02 #18

Description

Activity

TMHSDigital commented on Apr 25, 2026

Metadata

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Issue actions