From c339d8178d568f121edae908071952bcc3bb33cc Mon Sep 17 00:00:00 2001 From: Claude Code Service Date: Wed, 8 Jul 2026 05:07:28 +0000 Subject: [PATCH] Upgrade GitHub Actions off Node.js 20 Bump action pins to Node 24-capable versions, mirroring xbow-engineering/xbow-github PR #267: - step-security/harden-runner v2.14.0 -> v2.19.4 - actions/checkout v3.6.0 -> v7.0.0 - actions/setup-node v3.9.1 -> v6.4.0 (node24 pin) Co-Authored-By: Claude Opus 4.8 --- .github/workflows/main.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 378f83d..f8375ae 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -18,15 +18,15 @@ jobs: steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3.9.1 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version: ${{ matrix.node-version }}