From 605f4ca40560ac98e78f93a4ac93d1aaae5cbeb1 Mon Sep 17 00:00:00 2001
From: Erik Torres <erik.torres@ibm.com>
Date: Thu, 25 Jun 2026 14:04:26 -0500
Subject: [PATCH 1/2] added Node.js 24 update

---
 .github/workflows/ci-checks.yaml |  8 ++++----
 .github/workflows/release.yaml   | 14 +++++++-------
 2 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/ci-checks.yaml b/.github/workflows/ci-checks.yaml
index f199e50..8c4efd5 100644
--- a/.github/workflows/ci-checks.yaml
+++ b/.github/workflows/ci-checks.yaml
@@ -14,15 +14,15 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 
+        uses: actions/checkout@v5
 
       - name: Setup Golang
-        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a 
+        uses: actions/setup-go@v6
         with:
           go-version: 1.25.11
 
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v9.2.1
+        uses: golangci/golangci-lint-action@v6
         with:
           version: v2.12.2
 
@@ -57,7 +57,7 @@ jobs:
         run: govulncheck -test ./...
 
       - name: Upload coverage report
-        uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b 
+        uses: actions/upload-artifact@v5
         with:
           name: coverage.txt
           path: coverage.txt
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 1166c45..33f6773 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -30,10 +30,10 @@ jobs:
       IMAGE_NAME: ${{ env.IMAGE_NAME }}
     steps:
     - name: Checkout code
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      uses: actions/checkout@v5
 
     - name: Setup Golang
-      uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a
+      uses: actions/setup-go@v6
       with:
         go-version: 1.25.11
 
@@ -92,7 +92,7 @@ jobs:
         echo "Hash of sbom.json is: $SBOM_DIGEST"
 
     - name: Upload SBOM
-      uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b
+      uses: actions/upload-artifact@v5
       with:
         name: sbom.json
         path: sbom.json
@@ -143,7 +143,7 @@ jobs:
         echo "Hash of scan.json is: $SCAN_DIGEST"
 
     - name: Upload vulnerability scan report
-      uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+      uses: actions/upload-artifact@v5
       with:
         name: scan.json
         path: scan.json
@@ -164,7 +164,7 @@ jobs:
     needs: [provenance, scan, build]
     steps:
     - name: Checkout code
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      uses: actions/checkout@v5
 
     - name: Authenticate to GCP
       uses: google-github-actions/auth@v2
@@ -182,7 +182,7 @@ jobs:
         gcloud --quiet auth configure-docker
 
     - name: Download files
-      uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
+      uses: actions/download-artifact@v5
       with:
         merge-multiple: true
         path: ./
@@ -230,7 +230,7 @@ jobs:
         yq -i 'select(.kind=="Deployment") .spec.template.spec.containers[0].image = "${{ env.IMAGE }}"' manifests/install.yaml
 
     - name: Checkout github-actions
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         repository: kubecost/github-actions
         path: github-actions

From bb200bba0ac2cd11eec9af55276691f0a5cf9edf Mon Sep 17 00:00:00 2001
From: Erik Torres <erik.torres@ibm.com>
Date: Thu, 25 Jun 2026 14:21:28 -0500
Subject: [PATCH 2/2] added Node.js 24 update2

---
 .github/workflows/ci-checks.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci-checks.yaml b/.github/workflows/ci-checks.yaml
index 8c4efd5..8efaafb 100644
--- a/.github/workflows/ci-checks.yaml
+++ b/.github/workflows/ci-checks.yaml
@@ -22,7 +22,7 @@ jobs:
           go-version: 1.25.11
 
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v6
+        uses: golangci/golangci-lint-action@v7
         with:
           version: v2.12.2