[Sync to prerelease] Update GitHub Actions for Node.js 24 compatibility (#1966)

* Update actions/checkout to v6 and actions/github-script to v8

GitHub is deprecating Node.js 20 for Actions runners, forcing Node.js 24
starting June 2, 2026. Update official GitHub Actions to Node 24-compatible
versions across all workflow files.

* Update third-party actions for Node.js 24 compatibility

- korthout/backport-action: v3 -> v4 (node24)
- stefanzweifel/git-auto-commit-action: v5 -> v7 (node24)

The skip_checkout input in update-downloads.yml was removed as v6+
no longer switches branches internally (equivalent default behavior).

* Update release-info composite action to Node 24

The bundled CJS code (node-fetch@2, hasha@5) is compatible with Node 24.

(cherry picked from commit 5725511)

Co-authored-by: Christophe Dervieux <christophe.dervieux@gmail.com>

Author: github-actions[bot]

.github/workflows/actions/release-info/action.yml

@@ -27,5 +27,5 @@ inputs:
     required: true
 
 runs:
-  using: "node20"
+  using: "node24"
   main: "index.js"

.github/workflows/optimize-images.yml

@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           fetch-depth: 0
 
@@ -55,7 +55,7 @@ jobs:
           done
 
       - name: Commit optimized images
-        uses: stefanzweifel/git-auto-commit-action@b863ae1933cb653a53c021fe36dbb774e1fb9403 # v5
+        uses: stefanzweifel/git-auto-commit-action@04702edda442b2e678b25b537cec683a1493fcb9 # v7
         with:
           commit_message: "Optimize PNG images with oxipng"
           commit_user_name: github-actions[bot]

.github/workflows/port-to-prerelease.yml

@@ -27,12 +27,12 @@ jobs:
         startsWith(github.event.comment.body, '/sync-prerelease')
       )
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Create backport pull requests
         id: synced-pr
-        # https://github.com/korthout/backport-action/releases/tag/v3.0.0
-        uses: korthout/backport-action@7e7cb1977d64d20339e8fdec12c0a1a065371de7
+        # https://github.com/korthout/backport-action/releases/tag/v4.2.0
+        uses: korthout/backport-action@4aaf0e03a94ff0a619c9a511b61aeb42adea5b02
         with:
           cherry_picking: auto
           branch_name: sync-${pull_number}-to-${target_branch}
@@ -52,7 +52,7 @@ jobs:
 
       - name: Trigger deploy using a comment
         if: steps.synced-pr.outputs.was_successful == 'true'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           # special fine-grained token for issue comment trigger
           github-token: ${{ secrets.ISSUE_COMMENT_TRIGGER_PAT }}

.github/workflows/preview.yml

@@ -65,7 +65,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: refs/pull/${{ github.event.pull_request.number || github.event.issue.number }}/merge
 
@@ -159,7 +159,7 @@ jobs:
 
       - name: Create custom PR comment
         if: github.event.pull_request || github.event.issue.pull_request
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         env:
           DEPLOY_URL: ${{ steps.netlify-deploy.outputs.deploy-url }}
           CHANGED_FILES: ${{ steps.changed-files.outputs.all_changed_files }}

.github/workflows/publish.yml

@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           # if called from workflow_call event, checkout the ref otherwise use default
           ref: ${{ inputs.ref || '' }}

.github/workflows/test-algolia-upload.yml

@@ -7,7 +7,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Setup Ruby
         uses: ruby/setup-ruby@v1
         with:

.github/workflows/update-downloads.yml

@@ -14,7 +14,7 @@ jobs:
       prerelease_version: ${{ steps.get-versions.outputs.prerelease_version }}
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 #        with:
 #          token: ${{ secrets.COMMIT_PAT }}
 
@@ -38,13 +38,12 @@ jobs:
 
       - name: Commit Changes to main branch
         id: auto-commit
-        uses: stefanzweifel/git-auto-commit-action@v5
+        uses: stefanzweifel/git-auto-commit-action@v7
         with:
           repository: .
           commit_user_name: Github Action Runner
           commit_user_email: runner@quarto.org
           commit_author: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
-          skip_checkout: true
 
       - name: Cherry-pick change to prerelease branch
         id: cherry-pick-prerelease

.github/workflows/update-prerelease-reference.yml

@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout prerelease branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: prerelease
 

.github/workflows/upload-index.yml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Setup Ruby
         uses: ruby/setup-ruby@v1
         with: