Skip to content

Opt into Node.js 24 for JavaScript GitHub Actions#5

Merged
rodchristiansen merged 2 commits into
mainfrom
ci/node24-opt-in
Apr 11, 2026
Merged

Opt into Node.js 24 for JavaScript GitHub Actions#5
rodchristiansen merged 2 commits into
mainfrom
ci/node24-opt-in

Conversation

@rodchristiansen

Copy link
Copy Markdown
Contributor

Summary

Sets `FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true` at the workflow `env` level so all JavaScript-based actions (`actions/checkout`, `actions/setup-dotnet`, `actions/upload-artifact`, `actions/download-artifact`, `softprops/action-gh-release`) run under Node 24 instead of the deprecated Node 20 runtime.

Context

The last two release runs surfaced this deprecation warning:

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-dotnet@v4, actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026.

Why the env flag instead of version bumps

  • Zero risk: The flag just changes the Node runtime the action runs under. No action version bumps means no new behavior, no changed APIs, no broken inputs.
  • Documented migration path: GitHub explicitly documents `FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true` as the way to opt in early.
  • Reversible: If anything breaks under Node 24, we can temporarily set `ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true` to fall back.
  • Self-deleting: The flag becomes redundant on June 2, 2026 when Node 24 is the default. A comment in the workflow documents this.

Action version bumps (e.g. `actions/checkout@v4` → `@v5`) can be a separate, deliberate PR if/when new features from those majors are needed.

Test plan

  • Workflow file syntax is valid (visually inspected)
  • Verify the CI run on this PR no longer shows the Node 20 deprecation warnings
  • Verify the build and test jobs still pass under Node 24

Sets FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true at the workflow env level
so all JavaScript-based actions (checkout, setup-dotnet, upload-artifact,
download-artifact, action-gh-release) run under Node 24 instead of the
deprecated Node 20 runtime.

GitHub is auto-migrating JavaScript actions to Node 24 as the default on
June 2, 2026 and removing the Node 20 runner entirely on September 16,
2026. Opting in now:

- Removes the deprecation warnings from the most recent release runs.
- Surfaces any Node 24 compatibility issues while there's still time to
  downgrade via ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true.
- No action version bumps needed — the flag reuses the existing v4/v2
  pins, which continue working under Node 24.

The flag becomes redundant once Node 24 is the default and should be
removed then. A comment in the workflow documents this.
Copilot AI review requested due to automatic review settings April 11, 2026 23:21

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the CI workflow to opt GitHub Actions’ JavaScript-based actions into the Node.js 24 runtime ahead of the scheduled Node 20 deprecation/removal, reducing runtime deprecation warnings during CI and releases.

Changes:

  • Sets FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true at the workflow env scope.
  • Adds inline documentation explaining the rationale and relevant migration dates.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/workflows/ci.yml Outdated
Address PR #5 Copilot review: the original comment suggested setting
ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true 'after Node 20 is removed
from the runner on September 16, 2026' — but after that date the
runtime is gone and the fallback can't work. Rewrite the comment to
describe the narrow Jun 2 → Sep 16 escape hatch window correctly, and
separate it from the 'this flag is temporary' note so each sentence
has one purpose.
@rodchristiansen rodchristiansen merged commit c8f9dcd into main Apr 11, 2026
2 checks passed
@rodchristiansen rodchristiansen deleted the ci/node24-opt-in branch April 11, 2026 23:49
rodchristiansen added a commit that referenced this pull request Apr 12, 2026
Consolidates the four PRs merged today into a single semver entry
for humans, and triggers a new CI release whose body will link back
to the individual timestamp-tagged releases (2308, 2314, 2344, 2347).

The entry credits @aysiu explicitly for the PEM client cert
contribution in PR #2, which was the original spark for the mTLS
feature. PFX + Credential Manager and the strategy-priority refactor
were layered on as maintainer tweaks.

Also documents:
- xUnit test suite + dotnet test CI integration (PR #3)
- Node.js 24 opt-in for JavaScript Actions (PR #5)
- REG_DWORD/QWORD handling fix in GetRegistryValue, closing #4 (PR #6)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants