Upgrade Node.js to 24 for npm trusted publishing (#329 )

Switch to npm trusted publishing (OIDC) (#327 )
Replace NPM_TOKEN-based authentication with OIDC trusted publishing. This eliminates the need for long-lived npm access tokens. Changes: - Add id-token: write permission to the release job - Add registry-url to setup-node - Remove the setup authentication step (.npmrc token write) - Remove NPM_TOKEN env var from the Publish packages step Requires trusted publisher configuration on npmjs.com for each package. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-02-25 15:04:40 -06:00 · 2026-02-25 13:15:38 -06:00 · 2026-02-24 11:19:31 -06:00 · 2026-02-24 11:02:54 -06:00 · 2026-02-24 11:02:35 -06:00 · 2026-01-30 09:23:48 -06:00
14 changed files with 96 additions and 54 deletions
@@ -1 +1,4 @@
 * @actions/actions-vscode-reviewers
+
+# Owners maintaining https://github.com/actions/runner-images
+/languageservice/src/value-providers/default.ts @actions/runner-images-writers @actions/actions-vscode-reviewers
@@ -14,7 +14,7 @@ jobs:

    strategy:
      matrix:
-        node-version: [18.x, 20.x, 22.x]
+        node-version: [20.x, 22.x, 24.x]

    steps:
    - uses: actions/checkout@v4
@@ -37,10 +37,10 @@ jobs:

    steps:
    - uses: actions/checkout@v4
-    - name: Use Node.js 22.x
+    - name: Use Node.js 24.x
      uses: actions/setup-node@v4
      with:
-        node-version: 22.x
+        node-version: 24.x
        cache: 'npm'
        registry-url: 'https://npm.pkg.github.com'
    - run: npm ci
@@ -29,7 +29,7 @@ jobs:

      - uses: actions/setup-node@v4
        with:
-          node-version: "16"
+          node-version: 24.x

      - name: Bump version and push
        run: |
@@ -60,6 +60,7 @@ jobs:
    permissions:
      contents: write
      packages: write
+      id-token: write

    env:
      PKG_VERSION: "" # will be set in the workflow
@@ -69,8 +70,9 @@ jobs:

      - uses: actions/setup-node@v4
        with:
-          node-version: 22.x
+          node-version: 24.x
          cache: "npm"
+          registry-url: 'https://registry.npmjs.org'
          scope: '@actions'

      - name: Parse version from lerna.json
@@ -97,13 +99,8 @@ jobs:
            core.summary.addLink(`Release v${{ env.PKG_VERSION }}`, release.data.html_url);
            await core.summary.write();

-      - name: setup authentication
-        run: echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" >> .npmrc
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-
      - name: Publish packages
        run: |
          lerna publish ${{ env.PKG_VERSION }} --yes --no-git-reset --no-git-tag-version
        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: 'true'
@@ -1,6 +1,6 @@
 {
  "name": "@actions/expressions",
-  "version": "0.3.44",
+  "version": "0.3.45",
  "license": "MIT",
  "type": "module",
  "source": "./src/index.ts",
@@ -44,7 +44,7 @@
    "watch": "tsc --build tsconfig.build.json --watch"
  },
  "engines": {
-    "node": ">= 18"
+    "node": ">= 20"
  },
  "files": [
    "dist/**/*"
@@ -1,6 +1,6 @@
 {
  "name": "@actions/languageserver",
-  "version": "0.3.44",
+  "version": "0.3.45",
  "description": "Language server for GitHub Actions",
  "license": "MIT",
  "type": "module",
@@ -48,8 +48,8 @@
    "actions-languageserver": "./bin/actions-languageserver"
  },
  "dependencies": {
-    "@actions/languageservice": "^0.3.44",
-    "@actions/workflow-parser": "^0.3.44",
+    "@actions/languageservice": "^0.3.45",
+    "@actions/workflow-parser": "^0.3.45",
    "@octokit/rest": "^21.1.1",
    "@octokit/types": "^9.0.0",
    "vscode-languageserver": "^8.0.2",
@@ -57,7 +57,7 @@
    "yaml": "^2.1.3"
  },
  "engines": {
-    "node": ">= 18"
+    "node": ">= 20"
  },
  "files": [
    "dist/**/*",
@@ -1,6 +1,6 @@
 {
  "name": "@actions/languageservice",
-  "version": "0.3.44",
+  "version": "0.3.45",
  "description": "Language service for GitHub Actions",
  "license": "MIT",
  "type": "module",
@@ -47,15 +47,15 @@
    "watch": "tsc --build tsconfig.build.json --watch"
  },
  "dependencies": {
-    "@actions/expressions": "^0.3.44",
-    "@actions/workflow-parser": "^0.3.44",
+    "@actions/expressions": "^0.3.45",
+    "@actions/workflow-parser": "^0.3.45",
    "vscode-languageserver-textdocument": "^1.0.7",
    "vscode-languageserver-types": "^3.17.2",
    "vscode-uri": "^3.0.8",
    "yaml": "^2.1.1"
  },
  "engines": {
-    "node": ">= 18"
+    "node": ">= 20"
  },
  "files": [
    "dist/**/*"
@@ -19,8 +19,8 @@ describe("completion", () => {
    const result = await complete(...getPositionFromCursor(input));

    expect(result).not.toBeUndefined();
-    // 12 runner labels + 2 escape hatches (switch to list, switch to full syntax)
-    expect(result.length).toEqual(14);
+    // 28 runner labels + 2 escape hatches (switch to list, switch to full syntax)
+    expect(result.length).toEqual(30);
    const labels = result.map(x => x.label);
    expect(labels).toContain("macos-latest");
    expect(labels).toContain("(switch to list)");
@@ -59,7 +59,7 @@ jobs:
    const result = await complete(...getPositionFromCursor(input));

    expect(result).not.toBeUndefined();
-    expect(result.length).toEqual(11);
+    expect(result.length).toEqual(27);

    const labels = result.map(x => x.label);
    expect(labels).toContain("macos-latest");
@@ -195,7 +195,7 @@ jobs:
    const result = await hover(...getPositionFromCursor(input), testHoverConfig("uses", "step-uses", undefined));
    expect(result).not.toBeUndefined();
    expect(result?.contents).toEqual(
-      "Selects an action to run as part of a step in your job. An action is a reusable unit of code. You can use an action defined in the same repository as the workflow, a public repository, or in a published Docker container image."
+      "Selects an action to run as part of a step in your job. An action is a reusable unit of code. You can use an action defined in the same repository as the workflow, a public repository, a [private repository with access enabled](https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#allowing-access-to-components-in-a-private-repository), or in a published Docker container image."
    );
  });
 });
@@ -4,19 +4,36 @@ import {reusableJobInputs} from "./reusable-job-inputs.js";
 import {reusableJobSecrets} from "./reusable-job-secrets.js";
 import {stringsToValues} from "./strings-to-values.js";

+// Refer to: https://github.com/actions/runner-images?tab=readme-ov-file#available-images
 export const DEFAULT_RUNNER_LABELS = [
-  "ubuntu-latest",
-  "ubuntu-24.04",
-  "ubuntu-22.04",
-  "ubuntu-20.04",
-  "ubuntu-slim",
-  "windows-latest",
-  "windows-2022",
-  "windows-2019",
-  "macos-latest",
-  "macos-15",
+  "codespaces-prebuild",
+  "macos-13",
+  "macos-13-large",
+  "macos-13-xlarge",
  "macos-14",
-  "self-hosted"
+  "macos-14-large",
+  "macos-14-xlarge",
+  "macos-15",
+  "macos-15-intel",
+  "macos-15-large",
+  "macos-15-xlarge",
+  "macos-26",
+  "macos-26-large",
+  "macos-26-xlarge",
+  "macos-latest",
+  "macos-latest-large",
+  "macos-latest-xlarge",
+  "self-hosted",
+  "ubuntu-22.04",
+  "ubuntu-22.04-arm",
+  "ubuntu-24.04",
+  "ubuntu-24.04-arm",
+  "ubuntu-latest",
+  "ubuntu-slim",
+  "windows-2022",
+  "windows-2025",
+  "windows-2025-vs2026",
+  "windows-latest"
 ];

 const runsOnValueProvider = {
@@ -6,5 +6,5 @@
    "languageservice",
    "languageserver"
  ],
-  "version": "0.3.44"
+  "version": "0.3.45"
 }
@@ -136,7 +136,7 @@
    },
    "expressions": {
      "name": "@actions/expressions",
-      "version": "0.3.44",
+      "version": "0.3.45",
      "license": "MIT",
      "devDependencies": {
        "@types/jest": "^29.0.3",
@@ -152,7 +152,7 @@
        "typescript": "^5.8.3"
      },
      "engines": {
-        "node": ">= 18"
+        "node": ">= 20"
      }
    },
    "expressions/node_modules/@eslint/eslintrc": {
@@ -396,11 +396,11 @@
    },
    "languageserver": {
      "name": "@actions/languageserver",
-      "version": "0.3.44",
+      "version": "0.3.45",
      "license": "MIT",
      "dependencies": {
-        "@actions/languageservice": "^0.3.44",
-        "@actions/workflow-parser": "^0.3.44",
+        "@actions/languageservice": "^0.3.45",
+        "@actions/workflow-parser": "^0.3.45",
        "@octokit/rest": "^21.1.1",
        "@octokit/types": "^9.0.0",
        "vscode-languageserver": "^8.0.2",
@@ -426,7 +426,7 @@
        "typescript": "^4.8.4"
      },
      "engines": {
-        "node": ">= 18"
+        "node": ">= 20"
      }
    },
    "languageserver/node_modules/@eslint/eslintrc": {
@@ -940,11 +940,11 @@
    },
    "languageservice": {
      "name": "@actions/languageservice",
-      "version": "0.3.44",
+      "version": "0.3.45",
      "license": "MIT",
      "dependencies": {
-        "@actions/expressions": "^0.3.44",
-        "@actions/workflow-parser": "^0.3.44",
+        "@actions/expressions": "^0.3.45",
+        "@actions/workflow-parser": "^0.3.45",
        "vscode-languageserver-textdocument": "^1.0.7",
        "vscode-languageserver-types": "^3.17.2",
        "vscode-uri": "^3.0.8",
@@ -966,7 +966,7 @@
        "typescript": "^4.8.4"
      },
      "engines": {
-        "node": ">= 18"
+        "node": ">= 20"
      }
    },
    "languageservice/node_modules/@eslint/eslintrc": {
@@ -6350,6 +6350,31 @@
      "dev": true,
      "license": "MIT"
    },
+    "node_modules/encoding": {
+      "version": "0.1.13",
+      "resolved": "https://registry.npmjs.org/encoding/-/encoding-0.1.13.tgz",
+      "integrity": "sha512-ETBauow1T35Y/WZMkio9jiM0Z5xjHHmJ4XmjZOq1l/dXz3lr2sRn87nJy20RupqSh1F2m3HHPSp8ShIPQJrJ3A==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "iconv-lite": "^0.6.2"
+      }
+    },
+    "node_modules/encoding/node_modules/iconv-lite": {
+      "version": "0.6.3",
+      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz",
+      "integrity": "sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "safer-buffer": ">= 2.1.2 < 3.0.0"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
    "node_modules/end-of-stream": {
      "version": "1.4.4",
      "resolved": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.4.tgz",
@@ -13345,10 +13370,10 @@
    },
    "workflow-parser": {
      "name": "@actions/workflow-parser",
-      "version": "0.3.44",
+      "version": "0.3.45",
      "license": "MIT",
      "dependencies": {
-        "@actions/expressions": "^0.3.44",
+        "@actions/expressions": "^0.3.45",
        "cronstrue": "^2.21.0",
        "yaml": "^2.0.0-8"
      },
@@ -13366,7 +13391,7 @@
        "typescript": "^4.8.4"
      },
      "engines": {
-        "node": ">= 18"
+        "node": ">= 20"
      }
    },
    "workflow-parser/node_modules/typescript": {
@@ -1,6 +1,6 @@
 {
  "name": "@actions/workflow-parser",
-  "version": "0.3.44",
+  "version": "0.3.45",
  "license": "MIT",
  "type": "module",
  "source": "./src/index.ts",
@@ -48,12 +48,12 @@
    "watch": "tsc --build tsconfig.build.json --watch"
  },
  "dependencies": {
-    "@actions/expressions": "^0.3.44",
+    "@actions/expressions": "^0.3.45",
    "cronstrue": "^2.21.0",
    "yaml": "^2.0.0-8"
  },
  "engines": {
-    "node": ">= 18"
+    "node": ">= 20"
  },
  "files": [
    "dist/**/*"
@@ -2172,7 +2172,7 @@
      }
    },
    "step-uses": {
-      "description": "Selects an action to run as part of a step in your job. An action is a reusable unit of code. You can use an action defined in the same repository as the workflow, a public repository, or in a published Docker container image.",
+      "description": "Selects an action to run as part of a step in your job. An action is a reusable unit of code. You can use an action defined in the same repository as the workflow, a public repository, a [private repository with access enabled](https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#allowing-access-to-components-in-a-private-repository), or in a published Docker container image.",
      "string": {
        "require-non-empty": true
      }
Author	SHA1	Message	Date
eric sciple	9f770badd3	Upgrade Node.js to 24 for npm trusted publishing (#329 )	2026-02-25 15:04:40 -06:00
eric sciple	9dd856db3d	Switch to npm trusted publishing (OIDC) (#327 ) Replace NPM_TOKEN-based authentication with OIDC trusted publishing. This eliminates the need for long-lived npm access tokens. Changes: - Add id-token: write permission to the release job - Add registry-url to setup-node - Remove the setup authentication step (.npmrc token write) - Remove NPM_TOKEN env var from the Publish packages step Requires trusted publisher configuration on npmjs.com for each package. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-02-25 13:15:38 -06:00
github-actions[bot]	4a881d9ea1	Release extension version 0.3.45 (#326 ) Co-authored-by: GitHub Actions <github-actions@github.com>	2026-02-24 11:19:31 -06:00
Paulo Santos	6a0408d237	Update default runner image labels (#325 ) * update default runner image labels * chore: format in style of file * remove old labels * tests: update expected length of runner labels in tests * tests: fix another test, missed	2026-02-24 11:02:54 -06:00
Paulo Santos	0c2f39f1d0	Add @actions/runner-images-writers to CODEOWNERS (#324 ) * added @actions/runner-images-writers to CODEOWNERS * target specific file and add comment * added both teams to file ownership	2026-02-24 11:02:35 -06:00
eric sciple	fb5c6e4f27	Add private repository access to step-uses description (#322 ) Update the step-uses description to mention that actions can also be used from private repositories when access is enabled via repository settings. Fixes #319	2026-01-30 09:23:48 -06:00