Skip to content

chore: re-sync appstore-build-publish workflow with org template (Node 20)#5328

Open
brdns wants to merge 1 commit into
nextcloud:mainfrom
brdns:chore/bump-actions-node24
Open

chore: re-sync appstore-build-publish workflow with org template (Node 20)#5328
brdns wants to merge 1 commit into
nextcloud:mainfrom
brdns:chore/bump-actions-node24

Conversation

@brdns
Copy link
Copy Markdown

@brdns brdns commented May 18, 2026

Hello,

The appstore-build-publish workflow run for v8.4.6 brings two deprecation warnings on ubuntu-latest:

  • Node.js 20 actions are deprecated and are forced to move up to Node 24 after 2026-06-02 and should be entirely removed by 2026-09-16.
  • set-output command was deprecated in 2022.

nextcloud/.github/workflow-templates/appstore-build-publish.yml already pins newer versions that address 5 of the 7 listed GitHub actions. This PR re-syncs nextcloud/contacts with the upstream Nextcloud template.

Edits

5 bumps in .github/workflows/appstore-build-publish.yml:

Action From To
actions/setup-node v6.2.0 v6.4.0
andstor/file-existence-action v3.0.0 v3.1.0
icewind1991/nextcloud-version-matrix v1.3.1 v1.3.2
shivammathur/setup-php 2.36.0 2.37.0
skjnldsv/xpath-action @master v1.0.0

Still needs attention

Two actions stay on Node 20 because they have no newer release:

  • skjnldsv/check-actor-permission : last tag v3.0 (2024-02)
  • skjnldsv/read-package-engines-version-actions : last tag v3 (2024-02)

Bumps the 5 following GitHub actions up to the versions currently in
used at nextcloud/.github/workflow-templates/appstore-build-publish.yml,
to address the Node.js 20 deprecation warning by GitHub which should be
effective quite soon (2026-06-02):

  actions/setup-node                     v6.2.0 -> v6.4.0
  andstor/file-existence-action          v3.0.0 -> v3.1.0
  icewind1991/nextcloud-version-matrix   v1.3.1 -> v1.3.2
  shivammathur/setup-php                 2.36.0 -> 2.37.0
  skjnldsv/xpath-action                  master -> v1.0.0

Two GitHub actions remain on Node 20 because they actually don't avec
a more recent release:
  skjnldsv/check-actor-permission                  (v3.0 2024)
  skjnldsv/read-package-engines-version-actions    (v3 2024)

These should get a separate upstream release which is out of scope here.

Signed-off-by: brdns <101930208+brdns@users.noreply.github.com>
@codecov
Copy link
Copy Markdown

codecov Bot commented May 18, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants