From 31b71bbd70dea08ebc8d13cf48a1d1187a12a82d Mon Sep 17 00:00:00 2001
From: Joey Ballentine <joeyjballentine@gmail.com>
Date: Fri, 31 Jul 2026 13:44:12 -0500
Subject: [PATCH] ci: bump GitHub Actions to current majors

frontend.yml was pinned to checkout@v2 / setup-node@v1, whose Node 12/16
runtimes are long deprecated. Move every action to its current major:

  checkout              v2/v3 -> v7
  setup-node            v1/v3 -> v7
  setup-python          v4    -> v7
  cache                 v3/v4 -> v6
  configure-pages       v3    -> v6
  upload-pages-artifact v3    -> v5
  deploy-pages          v4    -> v5

Beyond the runtime bump, checkout v6 writes credentials to a separate
file and v7 refuses to check out fork PR code under pull_request_target
and workflow_run. Neither workflow uses those triggers, so this is
defense in depth against someone adding one later.

No input changes were needed; the repo only uses fetch-depth,
node-version, python-version, cache, path and key, which are all
unchanged across these majors.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 .github/workflows/frontend.yml | 20 ++++++++++----------
 .github/workflows/nextjs.yml   | 16 ++++++++--------
 2 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/.github/workflows/frontend.yml b/.github/workflows/frontend.yml
index b26bab23..768e1e01 100644
--- a/.github/workflows/frontend.yml
+++ b/.github/workflows/frontend.yml
@@ -14,8 +14,8 @@ jobs:
     lint:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v2
-            - uses: actions/setup-node@v1
+            - uses: actions/checkout@v7
+            - uses: actions/setup-node@v7
               with:
                   node-version: 20
             - run: npm ci
@@ -25,16 +25,16 @@ jobs:
     build:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v2
-            - uses: actions/setup-node@v1
+            - uses: actions/checkout@v7
+            - uses: actions/setup-node@v7
               with:
                   node-version: 20
-            - uses: actions/setup-python@v4
+            - uses: actions/setup-python@v7
               with:
                   python-version: '3.11'
             - name: Cache thumbnails
               id: cache-thumbnails
-              uses: actions/cache@v4
+              uses: actions/cache@v6
               with:
                   path: .thumb-cache/thumbs
                   key: thumbnails
@@ -44,8 +44,8 @@ jobs:
     test:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v2
-            - uses: actions/setup-node@v1
+            - uses: actions/checkout@v7
+            - uses: actions/setup-node@v7
               with:
                   node-version: 20
             - run: npm ci
@@ -54,8 +54,8 @@ jobs:
     validate-db:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v2
-            - uses: actions/setup-node@v1
+            - uses: actions/checkout@v7
+            - uses: actions/setup-node@v7
               with:
                   node-version: 20
             - run: npm ci
diff --git a/.github/workflows/nextjs.yml b/.github/workflows/nextjs.yml
index 00525cdd..5d077146 100644
--- a/.github/workflows/nextjs.yml
+++ b/.github/workflows/nextjs.yml
@@ -30,25 +30,25 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             - name: Checkout
-              uses: actions/checkout@v3
+              uses: actions/checkout@v7
               with:
                   fetch-depth: 0
             - name: Setup Node
-              uses: actions/setup-node@v3
+              uses: actions/setup-node@v7
               with:
                   node-version: 20
                   cache: 'npm'
-            - uses: actions/setup-python@v4
+            - uses: actions/setup-python@v7
               with:
                   python-version: '3.11'
             - name: Cache thumbnails
               id: cache-thumbnails
-              uses: actions/cache@v4
+              uses: actions/cache@v6
               with:
                   path: .thumb-cache/thumbs
                   key: thumbnails
             - name: Setup Pages
-              uses: actions/configure-pages@v3
+              uses: actions/configure-pages@v6
               with:
                   # Automatically inject basePath in your Next.js configuration file and disable
                   # server side image optimization (https://nextjs.org/docs/api-reference/next/image#unoptimized).
@@ -56,7 +56,7 @@ jobs:
                   # You may remove this line if you want to manage the configuration yourself.
                   static_site_generator: next
             - name: Restore cache
-              uses: actions/cache@v3
+              uses: actions/cache@v6
               with:
                   path: |
                       .next/cache
@@ -70,7 +70,7 @@ jobs:
             - name: Build the website
               run: npm run build
             - name: Upload artifact
-              uses: actions/upload-pages-artifact@v3
+              uses: actions/upload-pages-artifact@v5
               with:
                   path: ./out
 
@@ -84,4 +84,4 @@ jobs:
         steps:
             - name: Deploy to GitHub Pages
               id: deployment
-              uses: actions/deploy-pages@v4
+              uses: actions/deploy-pages@v5