From 20ecb62fce038485b2c317cef3bf18895417aa5b Mon Sep 17 00:00:00 2001 From: Claude Date: Wed, 4 Nov 2026 21:40:04 +0000 Subject: [PATCH] Move release artifact steps off Node 20 actions release.yml was the last workflow still pinning upload-artifact and download-artifact v4, which target the deprecated Node.js 20 runtime (#1588). GitHub forces them onto Node 24 for now; when Node 20 action support is removed, the release build and github-release jobs would break at publish time, and release is the one workflow no PR exercises. Pin the same releases every other workflow already uses: upload-artifact v6.0.0 (b7c566a) and download-artifact v7.0.0 (37930b1). The download step lists every artifact of the run with path + merge-multiple, which ci.yml already does with v7, and the by-artifact-ID path change in v5 doesn't apply. Co-Authored-By: Claude Opus 5.5 (1M context) Claude-Session: https://claude.ai/code/session_011f9aeR1h6tkiHFXbvuNbrv --- .github/workflows/release.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 0248757cc..3cc645dd6 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -196,14 +196,14 @@ jobs: - name: Upload artifact (tar.gz) if: matrix.archive == 'tar.gz' - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: socket-patch-${{ matrix.target }} path: socket-patch-${{ matrix.target }}.tar.gz - name: Upload artifact (zip) if: matrix.archive == 'zip' - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: socket-patch-${{ matrix.target }} path: socket-patch-${{ matrix.target }}.zip @@ -251,7 +251,7 @@ jobs: sums-digest: ${{ steps.sums.outputs.digest }} steps: - name: Download all artifacts - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: path: artifacts merge-multiple: true