From f2de3c48e46e74d1ba23c375df557c08b8670b21 Mon Sep 17 00:00:00 2001 From: Yaroslav Serhieiev Date: Thu, 22 Oct 2026 12:11:57 +0300 Subject: [PATCH 1/4] fix(ci): release artifact path without '..' and bump upload-artifact to node24 upload-artifact rejects paths containing '..', which broke the release dry run. Also bumps upload-artifact to v7.0.2 (node24). --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 6b49c713d1..7f1d804aa3 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -47,7 +47,7 @@ env: RELEASE_REMOVE_DOCUMENTATION_VERSION: ${{ inputs.remove_documentation_version }} RELEASE_SOURCE_RUN_ID: ${{ inputs.source_run_id }} RELEASE_PUBLISH_ENABLED: ${{ vars.RELEASE_PUBLISH_ENABLED }} - RELEASE_DIR: ${{ github.workspace }}/../release-artifacts + RELEASE_DIR: /home/runner/work/_temp/release-artifacts GH_TOKEN: ${{ github.token }} jobs: From f36de2ac97440bf5a61a95cb1f705edd435efe9e Mon Sep 17 00:00:00 2001 From: Yaroslav Serhieiev Date: Thu, 22 Oct 2026 12:12:11 +0300 Subject: [PATCH 2/4] fix(ci): bump upload-artifact to v7.0.2 (node24) --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7f1d804aa3..c7de49a04a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -117,7 +117,7 @@ jobs: - name: Pack and record immutable release inputs if: inputs.operation != 'resume' run: node scripts/release/index.cjs prepare-artifact - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: inputs.operation != 'resume' id: upload with: From a63304caa655654fb786ef3ac19b4e2ce91d5b60 Mon Sep 17 00:00:00 2001 From: Yaroslav Serhieiev Date: Thu, 22 Oct 2026 12:13:29 +0300 Subject: [PATCH 3/4] fix(ci): bump Node to 24.22.1 in release workflows --- .github/workflows/release-checks.yml | 2 +- .github/workflows/release.yml | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/release-checks.yml b/.github/workflows/release-checks.yml index b23669ac36..6726569406 100644 --- a/.github/workflows/release-checks.yml +++ b/.github/workflows/release-checks.yml @@ -19,7 +19,7 @@ jobs: persist-credentials: false - uses: actions/setup-node@65d868f8d4d85d7d4abb7de0875cde3fcc8798f5 with: - node-version: '24.19.0' + node-version: '24.22.1' package-manager-cache: false - name: Test release authorization and recovery run: node --test scripts/release/*.test.cjs diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c7de49a04a..e52624f067 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -71,7 +71,7 @@ jobs: persist-credentials: false - uses: actions/setup-node@65d868f8d4d85d7d4abb7de0875cde3fcc8798f5 with: - node-version: '24.19.0' + node-version: '24.22.1' package-manager-cache: false - name: Check admin authorization run: node scripts/release/index.cjs authorize @@ -144,7 +144,7 @@ jobs: persist-credentials: false - uses: actions/setup-node@65d868f8d4d85d7d4abb7de0875cde3fcc8798f5 with: - node-version: '24.19.0' + node-version: '24.22.1' package-manager-cache: false - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: @@ -174,7 +174,7 @@ jobs: persist-credentials: false - uses: actions/setup-node@65d868f8d4d85d7d4abb7de0875cde3fcc8798f5 with: - node-version: '24.19.0' + node-version: '24.22.1' package-manager-cache: false - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: @@ -205,7 +205,7 @@ jobs: persist-credentials: false - uses: actions/setup-node@65d868f8d4d85d7d4abb7de0875cde3fcc8798f5 with: - node-version: '24.19.0' + node-version: '24.22.1' package-manager-cache: false - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: From 4da71db51c1df2d44a30cc7639bc5a0640af2e48 Mon Sep 17 00:00:00 2001 From: Yaroslav Serhieiev Date: Thu, 22 Oct 2026 12:14:05 +0300 Subject: [PATCH 4/4] docs: update tested Node/npm pair --- docs/RELEASING.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/RELEASING.md b/docs/RELEASING.md index 4fdc6c5bf1..24b73a0fab 100644 --- a/docs/RELEASING.md +++ b/docs/RELEASING.md @@ -47,7 +47,7 @@ enabling publication. Creating or merging the workflow does not configure npm tr No npm write token is needed in GitHub. `GITHUB_TOKEN` performs repository bookkeeping; only the publish job has `id-token: write`. Publishing runs on a GitHub-hosted Ubuntu -runner. The workflow uses Node 24.19.0, including npm 11.17.0; update this tested pair +runner. The workflow uses Node 24.22.1, including npm 11.19.1; update this tested pair together. Older npm releases can execute `prepare` during `npm pack --ignore-scripts`. ## Start a release @@ -146,7 +146,7 @@ state rather than assuming every click is queued indefinitely. ## Validate changes to the release tooling -With Node 24.19.0 and npm 11.17.0: +With Node 24.22.1 and npm 11.19.1: ```sh node --test scripts/release/*.test.cjs