From 6ccf30e4cced1a7e33e02af54ddd322fc90bbf56 Mon Sep 17 00:00:00 2001 From: sophiehouser Date: Wed, 8 Apr 2026 12:12:44 -0400 Subject: [PATCH 1/4] try bumping to version 24 --- .github/workflows/publish.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 1e2cf46..1943b78 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -24,9 +24,9 @@ jobs: run: corepack enable - uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4 - name: Use Node.js 20.x + name: Use Node.js 24.x with: - node-version: '20.x' + node-version: '24.x' registry-url: 'https://registry.npmjs.org' scope: '@fragment-dev' From 610974e6b3ca45af50e6d21005d4ab7753b2c0a0 Mon Sep 17 00:00:00 2001 From: sophiehouser Date: Wed, 8 Apr 2026 12:18:57 -0400 Subject: [PATCH 2/4] bump to most recent version of github actions used by publish action --- .github/workflows/publish.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 1943b78..0d4a85b 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -11,19 +11,19 @@ jobs: contents: read steps: - - uses: tibdex/github-app-token@32691ba7c9e7063bd457bd8f2a5703138591fa58 # v1 + - uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # v2 id: generate-token with: - app_id: ${{ secrets.PR_APP_ID }} - private_key: ${{ secrets.PR_APP_PRIVATE_KEY }} + app-id: ${{ secrets.PR_APP_ID }} + private-key: ${{ secrets.PR_APP_PRIVATE_KEY }} - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 name: Checkout repository - name: Enable Corepack run: corepack enable - - uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4 + - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 name: Use Node.js 24.x with: node-version: '24.x' @@ -31,7 +31,7 @@ jobs: scope: '@fragment-dev' - name: Install dependencies - uses: nick-fields/retry@7152eba30c6575329ac0576536151aca5a72780e # v3 + uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3 with: retry_on: error timeout_minutes: 5 From e405972c8fa1d344f7c840a3601bb8fd9c040800 Mon Sep 17 00:00:00 2001 From: sophiehouser Date: Wed, 8 Apr 2026 12:26:23 -0400 Subject: [PATCH 3/4] force actions to use 24? --- .github/workflows/publish.yml | 18 ++++++++++-------- 1 file changed, 10 insertions(+), 8 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 0d4a85b..b90c321 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -9,29 +9,31 @@ jobs: runs-on: ubuntu-latest permissions: contents: read + env: + FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true steps: - - uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # v2 + - uses: tibdex/github-app-token@32691ba7c9e7063bd457bd8f2a5703138591fa58 # v1 id: generate-token with: - app-id: ${{ secrets.PR_APP_ID }} - private-key: ${{ secrets.PR_APP_PRIVATE_KEY }} + app_id: ${{ secrets.PR_APP_ID }} + private_key: ${{ secrets.PR_APP_PRIVATE_KEY }} - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 name: Checkout repository - name: Enable Corepack run: corepack enable - - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 - name: Use Node.js 24.x + - uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4 + name: Use Node.js 20.x with: - node-version: '24.x' + node-version: '20.x' registry-url: 'https://registry.npmjs.org' scope: '@fragment-dev' - name: Install dependencies - uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3 + uses: nick-fields/retry@7152eba30c6575329ac0576536151aca5a72780e # v3 with: retry_on: error timeout_minutes: 5 From 07e5e93ff568f816a87eb5048a3937380e77065f Mon Sep 17 00:00:00 2001 From: sophiehouser Date: Wed, 8 Apr 2026 12:28:43 -0400 Subject: [PATCH 4/4] allow node 20 --- .github/workflows/publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index b90c321..dead3cd 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -10,7 +10,7 @@ jobs: permissions: contents: read env: - FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true + ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true steps: - uses: tibdex/github-app-token@32691ba7c9e7063bd457bd8f2a5703138591fa58 # v1