From 73b8867bbac43df1dafe7906e947d41d04a38ded Mon Sep 17 00:00:00 2001
From: //AM <am@veraxis.io>
Date: Mon, 17 Aug 2026 12:37:16 -0400
Subject: [PATCH] ops: refresh pinned GitHub Actions for supported runtime

actions/setup-python and actions/upload-artifact were pinned at releases that
still declare runs.using node20, so the runner forced them onto Node.js 24 and
emitted the deprecation warning recorded in #17. Verified upstream at the pinned
SHAs rather than assumed: setup-python a26af69b declares node20, upload-artifact
330a01c4 declares node20, and actions/checkout fbc6f399 already declares node24
and is left alone.

Both are moved to the lowest release that natively targets node24, so the only
behavioural change is the runtime itself:

  actions/setup-python   a26af69be951a213d495a4c3e4e4022e16d87065 v5.6.0
                      -> e797f83bcb11b83ae66e0230d6156d7c80228e7c v6.0.0
  actions/upload-artifact 330a01c490aca151604b8cf639adc76d48f6c5d4 v5.0.0
                      -> b7c566a772e6b6bfb58ed0dc250532a479d7789f v6.0.0

Each new SHA was resolved from the upstream tag and its action.yml confirmed to
declare node24. Both upstream releases note the same requirement, a runner at
2.327.1 or later, which GitHub-hosted runners satisfy.

Operations only. One file changes and nothing else: no semantic artifact, no
schema, no contract, no corpus, no ZTL or VEIP evidence, no RUN evidence, no
claims, no STATUS.md.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 .github/workflows/ci.yml | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9837c12..064b373 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -43,7 +43,7 @@ jobs:
           fetch-depth: 0
 
       - name: Set up Python
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
@@ -96,7 +96,7 @@ jobs:
 
       - name: Upload manifest report
         if: always()
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
         with:
           name: manifest-report
           path: |
@@ -118,7 +118,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Python
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
@@ -137,7 +137,7 @@ jobs:
 
       - name: Upload schema report
         if: always()
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
         with:
           name: schema-report
           path: schema-report.json
@@ -157,7 +157,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Python
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
@@ -191,7 +191,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Python
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
@@ -222,7 +222,7 @@ jobs:
           fetch-depth: 0
 
       - name: Set up Python
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
@@ -244,7 +244,7 @@ jobs:
 
       - name: Upload test and coverage artifacts
         if: always()
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
         with:
           name: test-results
           path: |
@@ -266,7 +266,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Python
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
@@ -290,7 +290,7 @@ jobs:
 
       - name: Upload SBOM
         if: always()
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
         with:
           name: sbom
           path: |