build(deps): update GitHub Actions to Node.js 24 (#340)

Fixing: 
```
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/setup-java@3a4f6e1, docker/login-action@74a5d14, docker/setup-buildx-action@b5ca514. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
```

## Summary
- Updates all GitHub Actions to latest versions with Node.js 24 runtime
support
- Resolves deprecation warnings: "Node.js 20 actions are deprecated"
- Pins `actions/setup-python` to a full SHA (was unpinned `@v6`)

### Updated actions
| Action | Old | New |
|--------|-----|-----|
| `actions/checkout` | v6.0.1 | v6.0.2 |
| `actions/setup-java` | v4.7.0 | v5.2.0 |
| `actions/setup-node` | v4.3.0 | v6.3.0 |
| `actions/setup-go` | v4.1.0 | v6.3.0 |
| `docker/login-action` | v3.4.0 / v3.7.0 | v4.0.0 |
| `docker/setup-buildx-action` | v3.10.0 | v4.0.0 |
| `docker/build-push-action` | v5.4.0 | v7.0.0 |
| `actions/setup-python` | @v6 (unpinned) | v6.2.0 |

## Test plan
- [ ] Trigger a scheduled workflow run and verify builds complete
without Node.js 20 deprecation warnings
- [ ] Verify Docker build & push still works correctly
- [ ] Verify manifest creation still works

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: barnabasbusa

.github/actions/deploy/action.yml

@@ -79,9 +79,9 @@ runs:
   using: composite
   steps:
   - name: Checkout this repo
-    uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+    uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
   - name: Check out source repository
-    uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+    uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
     with:
       repository: ${{ inputs.source_repository }}
       path: source
@@ -111,7 +111,7 @@ runs:
     run: |
       docker context use builders || docker context create builders
   - name: Set up Docker Buildx
-    uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
+    uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
     with:
       endpoint: builders
   - name: Unlock MacOS keychain for Docker Hub login
@@ -120,15 +120,15 @@ runs:
     run: |
       security -v unlock-keychain -p ${{ inputs.MACOS_PASSWORD }} ~/Library/Keychains/login.keychain-db
   - name: Login to Docker Hub
-    uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+    uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
     with:
       username: ${{ inputs.DOCKER_USERNAME }}
       password: ${{ inputs.DOCKER_PASSWORD }}
   - name: Login to harbor registry
     if: ${{ inputs.harbor_registry != '' }}
     id: harbor_login
     continue-on-error: true
-    uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+    uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
     with:
       registry: ${{ inputs.harbor_registry }}
       username: ${{ inputs.HARBOR_USERNAME }}
@@ -178,7 +178,7 @@ runs:
   - name: Docker build & push
     if: ${{ inputs.build_script == '' }}
     id: docker_build
-    uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5.4.0
+    uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
     with:
       context: ./source
       file: ${{ inputs.target_dockerfile }}

.github/actions/install-deps/action.yml

@@ -11,23 +11,23 @@ runs:
   using: composite
   steps:
   - name: Checkout this repo
-    uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-  - uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
+    uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+  - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
     if: contains(inputs.repository, 'teku')
     with:
       distribution: 'temurin'
       java-version: '21'
-  - uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
+  - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
     if: contains(inputs.repository, 'besu')
     with:
       distribution: 'temurin'
       java-version: '21'
-  - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
+  - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
     if: contains(inputs.repository, 'lodestar') || contains(inputs.repository, 'ethereumjs')
     with:
       node-version: 20
       check-latest: true
-  - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+  - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
     if: contains(inputs.repository, 'prysm')
     with:
       go-version: '1.23.0'

.github/actions/manifest/action.yml

@@ -44,7 +44,7 @@ runs:
   using: composite
   steps:
   - name: Checkout this repo
-    uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+    uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
   - name: Generate images list
     id: generate_images_list
     shell: bash
@@ -90,19 +90,19 @@ runs:
     run: |
       docker context create builders
   - name: Set up Docker Buildx
-    uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
+    uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
     with:
       endpoint: builders
   - name: Login to Docker Hub
-    uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+    uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
     with:
       username: ${{ inputs.DOCKER_USERNAME }}
       password: ${{ inputs.DOCKER_PASSWORD }}
   - name: Login to harbor registry
     if: ${{ inputs.harbor_registry != '' }}
     id: harbor_login
     continue-on-error: true
-    uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+    uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
     with:
       registry: ${{ inputs.harbor_registry }}
       username: ${{ inputs.HARBOR_USERNAME }}

.github/workflows/scheduled.yml

@@ -18,7 +18,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - uses: mikefarah/yq@5a7e72a743649b1b3a47d1a1d8214f3453173c51 # v4.52.4
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: '3.10'
       - name: Install dependencies
@@ -30,7 +30,7 @@ jobs:
           python generate_config.py
           echo "Generated config.yaml for workflow use"
       - name: Login to Docker Hub
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
+        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           username: ${{ vars.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}