From 4055e3d9452cd1eb0354deed1af041aa0e9085e7 Mon Sep 17 00:00:00 2001 From: Paul Calnon Date: Tue, 5 May 2026 23:03:43 -0500 Subject: [PATCH] ci(workflow): force gitleaks-action onto Node.js 24 GitHub forces all Node.js 20 actions onto Node.js 24 on 2026-06-02. gitleaks-action v2.3.9 has no released Node.js 24 build (PR #215 upstream is in flight). Opt in now via the documented FORCE_JAVASCRIPT_ACTIONS_TO_NODE24 env override to eliminate the deprecation warning today and ensure continued operation past the cutover. Drop the override once gitleaks-action publishes a node24-pinned release. Co-Authored-By: Claude Opus 4.7 (1M context) --- .github/workflows/ci.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 7d17622..6c7db2f 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -429,6 +429,12 @@ jobs: uses: gitleaks/gitleaks-action@ff98106e4c7b2bc287b24eaf42907196329070c7 # v2.3.9 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + # gitleaks-action v2.3.9 ships as a Node.js 20 action. + # GitHub forces Node 24 on 2026-06-02; opt in now to eliminate + # the deprecation warning and ensure continued operation past + # the cutover. Drop this once gitleaks-action publishes a + # release pinned to node24 (upstream PR #215). + FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true" - name: Run Bandit (SAST) run: |