chore: upgrade GitHub Actions to fix Node 20 deprecation warnings

[devin-ai-integration]

Summary

Upgrades GitHub Actions across 9 workflow files to Node 24-compatible versions, addressing the Node 20 deprecation deadline (June 2, 2026).

Upgraded actions:

Action	From	To	Files affected
actions/setup-python	v5	v6	4 files
actions/github-script	v6/v7	v8	3 files
actions/upload-artifact	v4	v6	3 files
actions/cache	v4	v5	1 file
docker/setup-qemu-action	v3	v4	2 files
docker/setup-buildx-action	v3	v4	2 files
docker/login-action	v2	v4	2 files
docker/metadata-action	v4	v6	2 files
docker/build-push-action	v3	v7	2 files

Also adds actions: write permission to stale.yml (required by actions/stale@v10).

Not upgraded (no Node 24 version available):

• tokorom/action-slack-incoming-webhook@main — still node16, no newer version
• wow-actions/auto-comment@v1 — still node16, no v2 exists
• andymckay/labeler@master — archived repo, no maintained successor at same path

Not affected (Docker/Composite, not Node.js):

• repo-sync/pull-request@v2, pypa/gh-action-pypi-publish@release/v1, elementary-data/run-elementary-action@v1.13

Review & Testing Checklist for Human

• docker/build-push-action v3→v7: This skips 4 major versions. v7 removed deprecated DOCKER_BUILD_NO_SUMMARY and DOCKER_BUILD_EXPORT_RETENTION_DAYS env vars and legacy export-build tool support for build summary. Verify build-docker-image.yml and release.yml don't rely on any removed features. Review the v4, v5, v6, and v7 changelogs for breaking changes.
• docker/metadata-action v4→v6: v6 changed how # is handled in list inputs (now preserved inside values). Verify the multi-line tags: input in release.yml still produces correct Docker tags.
• actions/upload-artifact v4→v6: Skips v5 which had breaking changes around artifact deduplication and naming. Confirm artifact uploads in test-warehouse.yml, test-github-action.yml, and release.yml still behave correctly.
• Trigger a test run of test-all-warehouses (e.g. on postgres) and the build-docker-image workflow to verify the upgraded actions work end-to-end.

Notes

• All Docker actions (qemu, buildx, login, metadata, build-push) were bumped to their March 2026 Node 24 releases in one step rather than incrementally, since intermediate versions are already EOL.
• actions/checkout@v6 and actions/setup-python@v6 in cleanup-stale-schemas.yml were already at Node 24 versions — no changes needed.
• actions/stale@v10 was already current, but needed the actions: write permission to function correctly.

Link to Devin session: https://app.devin.ai/sessions/cfef8561ef684ea4bdc30dfd48ed44c6
Requested by: @haritamar

Summary by CodeRabbit

• Chores
  • Updated GitHub Actions workflow dependencies to use newer versions for improved CI/CD reliability and compatibility across all automation pipelines.

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring

[github-actions]

👋 @devin-ai-integration[bot]
Thank you for raising your pull request.
Please make sure to add tests and document all user-facing changes.
You can do this by editing the docs files in this pull request.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 7c245e0a-1739-432d-95ab-e8c395427029

📥 Commits

Reviewing files that changed from the base of the PR and between 89a6dac and 0b3000b.

📒 Files selected for processing (9)

• .github/workflows/assign-devin-prs.yml
• .github/workflows/build-docker-image.yml
• .github/workflows/bump-version.yml
• .github/workflows/release.yml
• .github/workflows/run-precommit.yml
• .github/workflows/stale.yml
• .github/workflows/test-github-action.yml
• .github/workflows/test-release.yml
• .github/workflows/test-warehouse.yml

---

📝 Walkthrough

Walkthrough

The PR updates GitHub Actions dependencies across 9 workflow files to use newer major versions. Common updates include: actions/setup-python v5→v6, actions/github-script v6→v8 and v7→v8, actions/upload-artifact v4→v6, actions/cache v4→v5, and Docker-related action versions (qemu/buildx/login/metadata/build-push). The stale.yml workflow adds an actions: write permission. No workflow logic, conditions, or step structure were modified.

Changes

Cohort / File(s)	Summary
Python Setup Upgrades .github/workflows/run-precommit.yml, .github/workflows/test-github-action.yml, .github/workflows/release.yml, .github/workflows/test-warehouse.yml	Updated actions/setup-python from v5 to v6 across multiple workflows.
GitHub Script Version Upgrades .github/workflows/assign-devin-prs.yml, .github/workflows/bump-version.yml, .github/workflows/test-release.yml	Updated actions/github-script to v8 (from v7 or v6) in failure-handling and inline assignment steps.
Artifact Upload Upgrades .github/workflows/test-github-action.yml, .github/workflows/release.yml, .github/workflows/test-warehouse.yml	Updated actions/upload-artifact from v4 to v6 for report and log artifact uploads.
Docker Tooling Upgrades .github/workflows/build-docker-image.yml, .github/workflows/release.yml, .github/workflows/test-warehouse.yml	Updated Docker-related actions: docker/setup-qemu-action v3→v4, docker/setup-buildx-action v3→v4, docker/login-action v2→v4, docker/metadata-action v4→v6, docker/build-push-action v3→v7.
Cache and Permissions Updates .github/workflows/test-warehouse.yml, .github/workflows/stale.yml	Updated actions/cache from v4 to v5; added actions: write permission to close-issues job in stale workflow.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Poem

🐰 Version bumps, so neat and clean,
GitHub Actions upgraded to the scene,
Python v6 and Scripts to v8,
Docker tooling—can't be late!
Workflows leap to futures bright. ✨

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The PR title accurately reflects the main change: upgrading GitHub Actions to fix Node 20 deprecation warnings, which is the primary objective across all 9 workflow files.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch devin/1774374193-upgrade-actions-node24

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}