ci: bump checkout@v5 and setup-buildx-action@v4 (Node 24, drop deprec… #3

	name: CI

	# Builds the image and boots the database to prove every extension installs
	# and gets created successfully. Runs on push/PR.
	on:
	push:
	branches: [main, master]
	pull_request:
	workflow_dispatch:

	jobs:
	build-and-verify:
	runs-on: ubuntu-latest
	timeout-minutes: 25

	steps:
	- name: Checkout
	uses: actions/checkout@v5

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v4

	- name: Create .env for CI
	run: \|
	cp .env.example .env
	# Deterministic password for the throwaway CI database.
	sed -i 's/^POSTGRES_PASSWORD=.*/POSTGRES_PASSWORD=ci_test_password_123/' .env

	- name: Build image
	run: docker compose build

	- name: Start database
	run: docker compose up -d

	- name: Wait for healthy
	run: \|
	for i in $(seq 1 30); do
	if docker compose exec -T postgres pg_isready -U local_dev -d local_db; then
	echo "ready"; exit 0
	fi
	echo "waiting... ($i)"; sleep 5
	done
	echo "database did not become ready"; docker compose logs; exit 1

	- name: Assert extensions are installed
	run: \|
	docker compose exec -T postgres psql -U local_dev -d local_db -tAc \
	"SELECT extname FROM pg_extension ORDER BY extname;" \| tee /tmp/ext.txt
	for ext in postgres_fdw mysql_fdw tds_fdw file_fdw vector pg_cron \
	pg_partman pgaudit pg_repack hypopg pg_hint_plan orafce \
	pg_stat_statements; do
	grep -qx "$ext" /tmp/ext.txt \|\| { echo "MISSING extension: $ext"; exit 1; }
	done
	echo "All required extensions present."

	- name: Dump logs on failure
	if: failure()
	run: docker compose logs

	- name: Teardown
	if: always()
	run: docker compose down -v

Provide feedback