Skip to content

Internal: Update Node and GitHub Actions versions in workflows [TMZ-1085] (CP #709→3.5) - #711

Merged
Ntnelbaba merged 1 commit into
3.5from
update-node-github-actions-f171-cherry-pick-pr709
Nov 4, 2026
Merged

Ntnelbaba merged 1 commit into
3.5from
update-node-github-actions-f171-cherry-pick-pr709

Conversation

@Ntnelbaba

@Ntnelbaba Ntnelbaba commented Nov 3, 2026 •

Copy link
Copy Markdown
Contributor

Cherry-pick of #709 to 3.5 branch.

Source: elementor/hello-theme
Original Author: @Ntnelbaba

Opened manually: the automatic cherry-pick could not push changes to workflow files. One conflict resolved: .github/workflows/theme-check.yml no longer exists on 3.5, so it stays deleted there.

✨ PR Description

1. Problem & Context

Updating Node.js and GitHub Actions versions to maintain security, performance, and compatibility (TMZ-1085). Transitions the environment to Node 22.x and latest stable action versions.

2. What Changed (Where)

File Change
.github/workflows/build.yml Node 18 $\rightarrow$ 22; updated checkout, setup-node, cache, upload-artifact.
.github/workflows/cherry-pick-pr.yml Updated checkout; moved context variables to env for security.
.github/workflows/cherry-pick-validation.yml Updated checkout and github-script; moved context variables to env.
.github/workflows/daily-test-matrix.yml ubuntu-22.04 $\rightarrow$ ubuntu-latest; updated checkout, github-script, artifacts.
.github/workflows/deploy.yml Updated checkout and download-artifact; moved context variables to env.
.github/workflows/lint.yml Node 18 $\rightarrow$ 22; updated checkout, setup-node, cache, setup-php.
.github/workflows/permissions/action.yml Moved input/context variables to env to prevent shell injection.
.github/workflows/phpunit.yml Updated checkout.
.github/workflows/playground-preview.yml Updated checkout and download-artifact.
.github/workflows/playwright-*.yml Node 20 $\rightarrow$ 22; updated checkout, setup-node, setup-php, artifacts.

3. How It Works

The PR updates version tags for actions/checkout@v6, setup-node@v7, cache@v6, and upload/download-artifact@v7/v8. It also implements a security hardening pattern by mapping GitHub context variables to environment variables before use in shell scripts.

4. Risks

  • Node.js 22.x may introduce breaking changes for legacy build scripts.
  • updated ubuntu-latest runner may differ from fixed ubuntu-22.04 environments.

Generated by LinearB AI and added by gitStream.
AI-generated content may contain inaccuracies. Please verify before using.
💡 Tip: You can customize your AI Description using Guidelines Learn how

@github-actions

github-actions Bot commented Nov 3, 2026

Copy link
Copy Markdown

Hello Elementor Build

Last updated at: 20261103.1943
Version: 3.5.2

✅ Hello Elementor build is ready for download.

You can download the latest build from the link below:

🔗 hello-elementor.3.5.2.zip

The build is available for 7 days.

@Ntnelbaba
Ntnelbaba merged commit 1a17e77 into 3.5 Nov 4, 2026
45 checks passed
@Ntnelbaba
Ntnelbaba deleted the update-node-github-actions-f171-cherry-pick-pr709 branch November 4, 2026 08:55

This branch was successfully deployed

1 active deployment
playground-preview — 8e901e55 Deployed Nov 3, 2026 by github-actions[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants