From e874eab3ca980f6a0377aec22db855f66564a6d9 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Sun, 5 Jul 2026 21:50:34 +0000
Subject: [PATCH] mono - chore: upgrade GitHub Actions (breaking)

Upgrade all pinned GitHub Actions to their latest majors (pin style @vX
preserved; workflow YAML validated):

- actions/checkout v4 -> v7
- actions/setup-node v4 -> v6
- codecov/codecov-action v5 -> v7
- cloudflare/wrangler-action v3 -> v4
- pnpm/action-setup v6 (already latest; unchanged)

checkout/setup-node/codecov-action run in PR-triggered workflows
(tests.yml, codecov.yml), so PR CI exercises them. wrangler-action runs
only in deploy-website.yml on the release event and is not exercised by PR
CI; verified by research: @v4 keeps the v-prefixed pin, defaults to
Wrangler CLI v4 (already this repo's wrangler devDep major), and
`pages deploy` is unchanged.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01P1TBuMiXotBjpNHYcbwvqf
---
 .github/workflows/codecov.yml        | 6 +++---
 .github/workflows/deploy-website.yml | 6 +++---
 .github/workflows/release.yml        | 4 ++--
 .github/workflows/tests.yml          | 4 ++--
 4 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/codecov.yml b/.github/workflows/codecov.yml
index 586ee262..089fada8 100644
--- a/.github/workflows/codecov.yml
+++ b/.github/workflows/codecov.yml
@@ -19,12 +19,12 @@ jobs:
         node-version: ['26']
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Install pnpm
         uses: pnpm/action-setup@v6
 
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node-version }}
           cache: pnpm
@@ -45,6 +45,6 @@ jobs:
         run: pnpm test:ci
 
       - name: Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v7
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
diff --git a/.github/workflows/deploy-website.yml b/.github/workflows/deploy-website.yml
index 26172c05..e8e46627 100644
--- a/.github/workflows/deploy-website.yml
+++ b/.github/workflows/deploy-website.yml
@@ -15,13 +15,13 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v7
 
     - name: Install pnpm
       uses: pnpm/action-setup@v6
 
     - name: Use Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version: 26
         cache: pnpm
@@ -36,7 +36,7 @@ jobs:
       run: pnpm website:build
 
     - name: Publish to Cloudflare Pages
-      uses: cloudflare/wrangler-action@v3
+      uses: cloudflare/wrangler-action@v4
       with:
         apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
         accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d71936b3..233606df 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -47,7 +47,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           # This job only reads the repo (it never pushes), so don't leave the
           # GITHUB_TOKEN in .git/config for later steps / actions to read.
@@ -57,7 +57,7 @@ jobs:
         uses: pnpm/action-setup@v6
 
       - name: Use Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: .nvmrc
           registry-url: https://registry.npmjs.org # writes the .npmrc the registry expects
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index bd4c4b79..6c7773e0 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -19,12 +19,12 @@ jobs:
         node-version: ['22', '24', '26']
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Install pnpm
         uses: pnpm/action-setup@v6
 
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node-version }}
           cache: pnpm