From b65b125a6b7af5882b4863beb5790eab018fb415 Mon Sep 17 00:00:00 2001
From: Hermes Agent <hermes@thenetwerk.net>
Date: Mon, 8 Jun 2026 22:28:48 -0500
Subject: [PATCH] ci: bump GitHub Actions to Node 24 runtimes
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

GitHub deprecates Node.js 20 action runtimes on 2026-06-16 (forced to Node 24).
Bump every JS-based action in both workflows to its current major, all of which
run on Node 24: checkout v4→v6, setup-dotnet v4→v5, setup-python v5→v6, and the
docker actions setup-buildx v3→v4, login v3→v4, metadata v5→v6, build-push v6→v7.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
---
 .github/workflows/ci.yml      |  8 ++++----
 .github/workflows/release.yml | 12 ++++++------
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d0c60f9..cdd47a7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,8 +19,8 @@ jobs:
     name: .NET — test + audit
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-dotnet@v4
+      - uses: actions/checkout@v6
+      - uses: actions/setup-dotnet@v5
         with:
           dotnet-version: "10.0.x"
       - name: Test (xUnit + Testcontainers-Postgres)
@@ -38,8 +38,8 @@ jobs:
     name: Python — lint + test + audit
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
       - name: Install
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1ee8d14..792fafe 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -30,15 +30,15 @@ jobs:
             context: .
             dockerfile: Dockerfile.poller
     steps:
-      - uses: actions/checkout@v4
-      - uses: docker/setup-buildx-action@v3
-      - uses: docker/login-action@v3
+      - uses: actions/checkout@v6
+      - uses: docker/setup-buildx-action@v4
+      - uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ghcr.io/cryptojones/osapplytrack-${{ matrix.name }}
           tags: |
@@ -46,7 +46,7 @@ jobs:
             type=semver,pattern={{major}}.{{minor}}
             type=semver,pattern={{major}}
             type=raw,value=latest
-      - uses: docker/build-push-action@v6
+      - uses: docker/build-push-action@v7
         with:
           context: ${{ matrix.context }}
           file: ${{ matrix.dockerfile }}
@@ -61,7 +61,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Create release
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}