fix(ci-cd): bump github actions to node 24 runtimes (#168)

Clears the Node runtime deprecation annotations on GitHub Actions runs by
moving every first-party action to a major that declares using: node24.

- bump actions/checkout from v3 to v5 in main, release, sync-docs and trivy
- bump actions/setup-node from v3 to v5 in main
- bump actions/setup-node from v4 to v5 in release
- set release workflow node-version from '22' to '24'
- leave the CI matrix at [22, 24] to keep supported-version coverage
- leave SHA-pinned aquasecurity/trivy-action unchanged

GH-167

Author: piyushsinghgaur1

.github/workflows/main.yaml

@@ -13,8 +13,8 @@ jobs:
       matrix:
         node-version: [22, 24]
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v5
         with:
           node-version: ${{ matrix.node-version }}
       - name: Install Dependencies

.github/workflows/release.yaml

@@ -14,17 +14,17 @@ jobs:
     # environment: production  # Uncomment if you set an environment name in npm trusted publisher settings
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
         with:
           # fetch-depth is necessary to get all tags
           # otherwise lerna can't detect the changes and will end up bumping the versions for all packages
           fetch-depth: 0
           token: ${{ secrets.RELEASE_COMMIT_GH_PAT }}
 
       - name: Setup Node
-        uses: actions/setup-node@v4  # UPDATED to v4
+        uses: actions/setup-node@v5
         with:
-          node-version: '22'
+          node-version: '24'
           registry-url: 'https://registry.npmjs.org'
           always-auth: false  # important for trusted publishing
 

.github/workflows/sync-docs.yaml

@@ -18,13 +18,13 @@ jobs:
 
     steps:
       - name: Checkout Extension Code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
         with:
           token: ${{env.GITHUB_TOKEN}}
           path: './extension/'
 
       - name: Checkout Docs Repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
         with:
           token: ${{env.GITHUB_TOKEN}}
           repository: ${{env.DOCS_REPO}}

.github/workflows/trivy.yaml

@@ -19,7 +19,7 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
 
       - name: Run Trivy vulnerability scanner in repo mode
         uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0