Upgrade GitHub Actions for Node 24 compatibility

[salmanmkc]

Upgrades GitHub Actions to versions that support Node 24, since Node 20 is reaching EOL in April 2026.

Changes

Action	Old Version(s)	New Version	Compare	Files
actions/download-artifact	37930b1	3e5f45b	Diff	run_tests.yaml
actions/setup-node	6044e13	53b8394	Diff	run_tests.yaml
actions/upload-artifact	b7c566a	bbbca2d	Diff	run_tests.yaml, scorecard.yml

Context

Per GitHub's announcement, Node 20 is being deprecated and runners will default to Node 24 starting June 2nd, 2026.

• Node 20 EOL: April 2026
• Node 24 becomes default: June 2nd, 2026

Release Notes

Release notes for actions/upload-artifact

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packag

...truncated

Release notes for actions/setup-node

v6.3.0

What's Changed

Enhancements:

• Support parsing devEngines field by @susnux in feat(node-version-file): support parsing devEngines field actions/setup-node#1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

• Fix npm audit issues by @gowridurgad in Fix npm audit issues actions/setup-node#1491
• Replace uuid with crypto.randomUUID() by @trivikr in Replace uuid with crypto.randomUUID() actions/setup-node#1378
• Upgrade minimatch from 3.1.

...truncated

Release notes for actions/download-artifact

v8.0.1

What's Changed

• Support for CJK characters in the artifact name by @danwkennedy in Add regression tests for CJK characters actions/download-artifact#471
• Add a regression test for artifact name + content-type mismatches by @danwkennedy in Add a regression test for artifact name + content-type mismatches actions/download-artifact#472

Full Changelog: actions/download-artifact@v8...v8.0.1

v8.0.0

v8 - What's new

[!IMPORTANT]
actions/download-artifact@v8 has been migrated to an ESM module. This should be transparent to the caller but forks might need to make significant changes.

[!IMPORTANT]
Hash mismatches will now error by default. Users can override this behavior with a setting change (see below).

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action chec

...truncated

Notes

Actions that were previously pinned to commit SHAs remain pinned to SHAs (updated to the latest release SHA).

Worth running the workflows on a branch before merging to make sure everything still works.