chore: upgrade actions to Node 24 runtime (SHA-pinned)

[John C. Bland II (johncblandii)]

what

• Bump GitHub Actions references in the workflows and action.yml to versions running on the
  Node 24 runtime, SHA-pinned with precise version comments:
  • actions/checkout@v6 → @3d3c42e5... # v7.0.1
  • nick-fields/assert-action@v2 → @0efd6166... # v4.0.1

why

• GitHub is deprecating the Node 20 runtime; affected workflows emit a deprecation warning and
  are already being force-migrated to Node 24
• SHA pinning with a verified tag comment makes the upgrade deliberate and supply-chain-safe,
  matching the org's direction in chore: upgrade actions to Node 24 runtime and enforce SHA pinning .github#261
• Every pinned SHA was verified against its upstream tag

references

• https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

still on Node 20

• 1arp/create-a-file-action@0.4 (in action.yml) — no Node 24 release exists upstream yet

Supersedes #88
Supersedes #87

[Copilot]

Pull request overview

Updates this repository’s GitHub Actions usages to versions that run on the Node 24 runtime, using SHA pinning with tag comments to make upgrades explicit and supply-chain safer.

Changes:

• Pin actions/checkout to the SHA for v7.0.1 across the composite action and test workflows.
• Pin nick-fields/assert-action to the SHA for v4.0.1 across the test/assert workflows.
• Keep the pinned SHAs annotated with the corresponding upstream tag for traceability.

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
action.yml	Pins actions/checkout to the v7.0.1 commit SHA in the composite action steps.
.github/workflows/test-helmfile-raw.yml	Pins actions/checkout and nick-fields/assert-action to Node 24–compatible SHAs.
.github/workflows/test-helmfile-raw-default-kube-version.yml	Pins actions/checkout and nick-fields/assert-action to Node 24–compatible SHAs.
.github/workflows/test-helm-raw.yml	Pins actions/checkout and nick-fields/assert-action to Node 24–compatible SHAs.
.github/workflows/test-helm-raw-default-kube-version.yml	Pins actions/checkout and nick-fields/assert-action to Node 24–compatible SHAs.
.github/workflows/test-destroy.yml	Pins actions/checkout and nick-fields/assert-action to Node 24–compatible SHAs.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[John C. Bland II (johncblandii)]

Follow-up (ff4fdfa): cloudposse/github-action-wait-commit-status released v0.2.2 with the Node 24 runtime (from cloudposse/github-action-wait-commit-status#31), so the @v0.2.1 (node20) pin in action.yml is now bumped to @968fc17e... # v0.2.2 — SHA verified against the tag. That clears the last node20 ref in this action other than 1arp/create-a-file-action@0.4 (still no node24 release upstream).

[github-actions]

These changes were released in v1.10.1.