WA-VERIFY-108: Audit core repo .github/workflows for deprecated action patterns

[kitcommerce]

Summary

Verify that the core Workarea repo's GitHub Actions workflows don't use deprecated Node.js 12 runtime actions or workarea-commerce/ci composite actions. These patterns were found in plugin repos and fixed, but the core repo should be independently confirmed clean.

Objective

The github-actions-node12-deprecation pattern doc describes the detection strategy. Apply it to the core repo's workflow files.

Approach

# Check for deprecated composite actions
grep -r 'workarea-commerce/ci' .github/workflows/ && echo 'FOUND deprecated actions' || echo 'CLEAN'

# Check for @v1 actions that might be node12
grep -rn 'uses:.*@v1' .github/workflows/ | grep -v 'actions/checkout\|ruby/setup-ruby'

# Check for docker-compose usage
grep -rn 'docker-compose' .github/workflows/

# List all action refs for manual review
grep -rn 'uses:' .github/workflows/ | sort | uniq

Acceptance Criteria

• No workarea-commerce/ci/*@v1 composite action usage found
• All action uses: references pinned to node20-compatible versions (v3+/v4+)
• No docker-compose in workflow scripts (use native services instead)
• Any findings documented as follow-up issues; clean bill of health if none

Verification Plan

Run the detection commands above. PASS if all checks return clean.

Client Impact

None (CI configuration only).