fix(ci-cd): bump github actions to node 24 runtimes (#286)

Clears the "Node.js 20 is deprecated" GitHub Actions annotation by moving
every first-party action to a major that declares using: node24.

- bump actions/checkout from v4 to v5 in main.yaml, release.yaml,
  sync-docs.yaml and trivy.yaml
- bump actions/setup-node from v4 to v5 in main.yaml and release.yaml
- bump node-version from '22' to '24' in release.yaml
- drop the stale "UPDATED to v4" comment on the release.yaml setup-node step
- keep the main.yaml test matrix at [22, 24]; it already covers Node 24 and
  dropping 22 would reduce coverage
- leave the SHA-pinned aquasecurity/trivy-action step untouched

GH-285

Author: piyushsinghgaur1

.github/workflows/main.yaml

@@ -13,8 +13,8 @@ jobs:
       matrix:
         node-version: [22, 24]
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v5
         with:
           node-version: ${{ matrix.node-version }}
       - name: Install Dependencies

.github/workflows/release.yaml

@@ -13,17 +13,17 @@ jobs:
     # environment: production  # Uncomment if you set an environment name in npm trusted publisher settings
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           # fetch-depth is necessary to get all tags
           # otherwise lerna can't detect the changes and will end up bumping the versions for all packages
           fetch-depth: 0
           token: ${{ secrets.RELEASE_COMMIT_GH_PAT }}
 
       - name: Setup Node
-        uses: actions/setup-node@v4  # UPDATED to v4
+        uses: actions/setup-node@v5
         with:
-          node-version: '22'
+          node-version: '24'
           registry-url: 'https://registry.npmjs.org'
           always-auth: false  # for trusted publishing
 

.github/workflows/sync-docs.yaml

@@ -18,13 +18,13 @@ jobs:
 
     steps:
       - name: Checkout Extension Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           token: ${{env.GITHUB_TOKEN}}
           path: './extension/'
 
       - name: Checkout Docs Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           token: ${{env.GITHUB_TOKEN}}
           repository: ${{env.DOCS_REPO}}

.github/workflows/trivy.yaml

@@ -19,7 +19,7 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Run Trivy vulnerability scanner in repo mode
         uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0