In our action, we have uses: digicert/code-signing-software-trust-action@v1. We get the following error.
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: digicert/code-signing-software-trust-action@v1
After further investigation, it seems that this repo doesn't follow best practices regarding semantic versioning. In other words, there is no way for someone to specify to use the latest v1.X.Y even though actions like checkout provide this. This can result in users unknowingly using out of date versions in an attempt to future-proof their action by trying to use the latest v1 compatible digicert action.
In our action, we have
uses: digicert/code-signing-software-trust-action@v1. We get the following error.After further investigation, it seems that this repo doesn't follow best practices regarding semantic versioning. In other words, there is no way for someone to specify to use the latest
v1.X.Yeven though actions like checkout provide this. This can result in users unknowingly using out of date versions in an attempt to future-proof their action by trying to use the latest v1 compatible digicert action.