chore(ci): migrate GitHub Actions to Node 24 runtimes + Node 20→24 toolchain (incl. #9141)

.azure-pipelines/templates/setup.yml

@@ -2,7 +2,7 @@ steps:
   - task: NodeTool@0
     displayName: "Using Node.js"
     inputs:
-      versionSpec: '20.x'
+      versionSpec: '24.x'
     condition: succeeded()
 
   - script: npm install -g pnpm

.github/workflows/Deploy-Documentation.yml

@@ -26,26 +26,26 @@ jobs:
     runs-on: ubuntu-latest
     name: Build and Deploy Job
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v5
         with:
           submodules: true
 
       - name: Cache turbo build setup
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: .turbo
           key: ${{ runner.os }}-turbo-docs-${{ github.sha }}
           restore-keys: |
             ${{ runner.os }}-turbo-docs-
 
-      - name: Set up Node.js version 20.x
-        uses: actions/setup-node@v1
+      - name: Set up Node.js version 24.x
+        uses: actions/setup-node@v5
         with:
-          node-version: 20.x
+          node-version: 24.x
+          package-manager-cache: false
 
-      - uses: pnpm/action-setup@v3
+      - uses: pnpm/action-setup@v5
         with:
-          version: 9.1.3
           run_install: |
             - recursive: true
               args: [--frozen-lockfile, --strict-peer-dependencies]

.github/workflows/Deploy-Standalone.yml

@@ -10,26 +10,26 @@ jobs:
     runs-on: ubuntu-latest
     name: Build and Deploy Job
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v5
         with:
           submodules: true
 
       - name: Cache turbo build setup
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: .turbo
           key: ${{ runner.os }}-turbo-docs-${{ github.sha }}
           restore-keys: |
             ${{ runner.os }}-turbo-docs-
 
-      - name: Set up Node.js version 20.x
-        uses: actions/setup-node@v1
+      - name: Set up Node.js version 24.x
+        uses: actions/setup-node@v5
         with:
-          node-version: 20.x
+          node-version: 24.x
+          package-manager-cache: false
 
-      - uses: pnpm/action-setup@v3
+      - uses: pnpm/action-setup@v5
         with:
-          version: 9.1.3
           run_install: |
             - recursive: true
               args: [--frozen-lockfile, --strict-peer-dependencies]

.github/workflows/ISSUE_MANAGEMENT.yml

@@ -11,7 +11,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions/stale@v4
+      - uses: actions/stale@v10
         with:
           only-labels: 'Needs More Info'
           days-before-issue-stale: 3
@@ -21,7 +21,7 @@ jobs:
           close-issue-message: "This issue has been closed because the information requested wasn't provided within 7 days."
           operations-per-run: 200
           repo-token: ${{ secrets.GITHUB_TOKEN }}
-      - uses: actions/stale@v4
+      - uses: actions/stale@v10
         with:
           only-labels: 'daily-status'
           days-before-issue-stale: 1

.github/workflows/check-ai-docs.yml

@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Regenerate AI docs
         run: ./scripts/generate-ai-docs.sh

.github/workflows/codeql-analysis.yml

@@ -39,11 +39,11 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v5
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -54,7 +54,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v3
+        uses: github/codeql-action/autobuild@v4
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -68,4 +68,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4

.github/workflows/compile-loc.yml

@@ -11,18 +11,18 @@ jobs:
 
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v5
         with:
           token: ${{ secrets.AUTOMATION_PAT }}
 
       - name: Set up Node.js
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@v5
         with:
-          node-version: 20.x
+          node-version: 24.x
+          package-manager-cache: false
 
-      - uses: pnpm/action-setup@v3
+      - uses: pnpm/action-setup@v5
         with:
-          version: 9.1.3
           run_install: |
             - recursive: true
               args: [--frozen-lockfile, --strict-peer-dependencies]
@@ -31,7 +31,7 @@ jobs:
         run: npm run compile:loc
 
       - name: Commit changes
-        uses: EndBug/add-and-commit@v7
+        uses: EndBug/add-and-commit@v10
         with:
           author_name: Loc Bot
           author_email: travisharris@microsoft.com

.github/workflows/copilot-cleanup.yml

@@ -18,15 +18,13 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
-      - uses: pnpm/action-setup@v4
-        with:
-          version: 9
+      - uses: pnpm/action-setup@v5
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v5
         with:
           node-version: '20'
           cache: 'pnpm'

.github/workflows/copilot-design-pass.yml

@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Check invoker permissions
         id: check-perms

.github/workflows/copilot-flake-review.yml

@@ -26,13 +26,11 @@ jobs:
     outputs:
       has_flakes: ${{ steps.analyze.outputs.has_flakes }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
-      - uses: pnpm/action-setup@v4
-        with:
-          version: 9
+      - uses: pnpm/action-setup@v5
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v5
         with:
           node-version: '20'
           cache: 'pnpm'
@@ -93,7 +91,7 @@ jobs:
 
       - name: Upload flake report
         if: steps.analyze.outputs.has_flakes == 'true'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: flake-report
           path: /tmp/flake-results/flakes.json
@@ -105,13 +103,11 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 20
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
-      - uses: pnpm/action-setup@v4
-        with:
-          version: 9
+      - uses: pnpm/action-setup@v5
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v5
         with:
           node-version: '20'
           cache: 'pnpm'
@@ -123,7 +119,7 @@ jobs:
         run: npm install -g @github/copilot@latest
 
       - name: Download flake report
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           name: flake-report
           path: /tmp/flake-results/

.github/workflows/copilot-investigate.yml

@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 50
 
@@ -76,7 +76,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 50
 

.github/workflows/copilot-resolve-conflicts.yml

@@ -51,7 +51,7 @@ jobs:
       matrix:
         pr: ${{ fromJSON(needs.find-conflicting-prs.outputs.conflicting-prs) }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
 

.github/workflows/issue-sync.yml

@@ -32,10 +32,10 @@ jobs:
       id-token: write
     name: Sync workflow
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
 
       - name: Azure login
-        uses: azure/login@v2
+        uses: azure/login@v3
         with:
           client-id: ${{ secrets.AZURE_TESTING_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TESTING_TENANT_ID }}

.github/workflows/loc-auto-merge.yml

@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v5
         with:
           # We must fetch at least the immediate parents so that if this is
           # a pull request then we can checkout the head.

.github/workflows/playwright.yml

@@ -15,13 +15,13 @@ jobs:
         shardIndex: [1, 2, 3]
         shardTotal: [3]
     steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-node@v4
+    - uses: actions/checkout@v5
+    - uses: actions/setup-node@v5
       with:
-        node-version: 20.x
-    - uses: pnpm/action-setup@v3
+        node-version: 24.x
+        package-manager-cache: false
+    - uses: pnpm/action-setup@v5
       with:
-        version: 9.1.3
         run_install: |
           - recursive: true
             args: [--frozen-lockfile, --strict-peer-dependencies]
@@ -32,7 +32,7 @@ jobs:
       run: pnpm run test:e2e:designer --grep @mock --shard=${{ matrix.shardIndex }}/${{ matrix.shardTotal }}
       env:
         TEST_SHARDED: true
-    - uses: actions/upload-artifact@v4
+    - uses: actions/upload-artifact@v6
       if: always()
       with:
         name: designer-playwright-report-${{ matrix.shardIndex }}
@@ -44,13 +44,14 @@ jobs:
     needs: [designer-e2e-shards]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v5
         with:
-          node-version: 20.x
+          node-version: 24.x
+          package-manager-cache: false
 
       - name: Download blob reports from GitHub Actions Artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           path: all-blob-reports
           pattern: designer-playwright-report-*
@@ -60,7 +61,7 @@ jobs:
         run: npx playwright merge-reports --reporter html ./all-blob-reports
 
       - name: Upload HTML report
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: designer-playwright-report
           path: playwright-report
@@ -71,13 +72,13 @@ jobs:
     timeout-minutes: 90
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-node@v4
+    - uses: actions/checkout@v5
+    - uses: actions/setup-node@v5
       with:
-        node-version: 20.x
-    - uses: pnpm/action-setup@v3
+        node-version: 24.x
+        package-manager-cache: false
+    - uses: pnpm/action-setup@v5
       with:
-        version: 9.1.3
         run_install: |
           - recursive: true
             args: [--frozen-lockfile, --strict-peer-dependencies]
@@ -86,7 +87,7 @@ jobs:
       run: pnpm run e2e:setup
     - name: Run Chat Client Playwright tests
       run: pnpm run test:e2e:chatClient --grep @mock
-    - uses: actions/upload-artifact@v4
+    - uses: actions/upload-artifact@v6
       if: always()
       with:
         name: chat-client-playwright-report