Upgrade GitHub Actions to current versions

Author: KSemenenko

.github/workflows/ci.yml

@@ -25,17 +25,17 @@ jobs:
         run: git config --global core.longpaths true
 
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6.0.2
         with:
           submodules: recursive
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6.3.0
         with:
           node-version: ${{ env.NODE_VERSION }}
 
       - name: Setup .NET
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5.2.0
         with:
           dotnet-version: ${{ env.DOTNET_VERSION }}
 

.github/workflows/codeql.yml

@@ -24,15 +24,15 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6.0.2
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3
         with:
           languages: ${{ matrix.language }}
 
       - name: Setup .NET
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5.2.0
         with:
           dotnet-version: '10.0.x'
 

.github/workflows/gemini-cli-watch.yml

@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Checkout repository with submodules
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6.0.2
         with:
           submodules: recursive
           fetch-depth: 0
@@ -245,7 +245,7 @@ jobs:
 
       - name: Create issue for Gemini CLI update
         if: steps.detect.outputs.has_update == 'true'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         env:
           CURRENT_SHA: ${{ steps.detect.outputs.current_sha }}
           LATEST_SHA: ${{ steps.detect.outputs.latest_sha }}

.github/workflows/real-integration.yml

@@ -27,17 +27,17 @@ jobs:
         run: git config --global core.longpaths true
 
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6.0.2
         with:
           submodules: recursive
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6.3.0
         with:
           node-version: ${{ env.NODE_VERSION }}
 
       - name: Setup .NET
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5.2.0
         with:
           dotnet-version: ${{ env.DOTNET_VERSION }}
 

.github/workflows/release.yml

@@ -20,17 +20,17 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6.0.2
       with:
         submodules: recursive
 
     - name: Setup .NET
-      uses: actions/setup-dotnet@v4
+      uses: actions/setup-dotnet@v5.2.0
       with:
         dotnet-version: ${{ env.DOTNET_VERSION }}
 
     - name: Setup Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6.3.0
       with:
         node-version: ${{ env.NODE_VERSION }}
 
@@ -94,7 +94,7 @@ jobs:
         test -f "./artifacts/ManagedCode.GeminiSharpSDK.Extensions.AgentFramework.$AGENT_FRAMEWORK_VERSION.nupkg"
 
     - name: Upload artifacts
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7.0.0
       with:
         name: nuget-packages
         path: ./artifacts/*.nupkg
@@ -113,16 +113,16 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6.0.2
 
     - name: Download artifacts
-      uses: actions/download-artifact@v5
+      uses: actions/download-artifact@v8.0.1
       with:
         name: nuget-packages
         path: ./artifacts
 
     - name: Setup .NET
-      uses: actions/setup-dotnet@v4
+      uses: actions/setup-dotnet@v5.2.0
       with:
         dotnet-version: ${{ env.DOTNET_VERSION }}
 
@@ -171,13 +171,13 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6.0.2
       with:
         fetch-depth: 0
         token: ${{ secrets.GITHUB_TOKEN }}
 
     - name: Download artifacts
-      uses: actions/download-artifact@v5
+      uses: actions/download-artifact@v8.0.1
       with:
         name: nuget-packages
         path: ./artifacts
@@ -273,12 +273,14 @@ jobs:
         echo "*This release was automatically created by GitHub Actions*" >> release_notes.md
 
     - name: Create GitHub Release
-      uses: softprops/action-gh-release@v2
-      with:
-        tag_name: v${{ needs.publish-nuget.outputs.version }}
-        name: v${{ needs.publish-nuget.outputs.version }}
-        body_path: release_notes.md
-        draft: false
-        prerelease: false
-        files: ./artifacts/*.nupkg
-        token: ${{ secrets.GITHUB_TOKEN }}
+      env:
+        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      run: |
+        TAG="v${{ needs.publish-nuget.outputs.version }}"
+        if gh release view "$TAG" >/dev/null 2>&1; then
+          echo "GitHub release $TAG already exists"
+        else
+          gh release create "$TAG" ./artifacts/*.nupkg \
+            --title "$TAG" \
+            --notes-file release_notes.md
+        fi

docs/Features/release-and-sync-automation.md

@@ -36,6 +36,7 @@ Keep package quality and upstream Gemini CLI parity automatically verified throu
 - CI and Release workflows must execute full solution tests before smoke subsets, excluding auth-required tests with `-- --treenode-filter "/*/*/*/*[RequiresGeminiAuth!=true]"`.
 - CI, Release, and scheduled smoke workflows must install Gemini CLI in a way that remains resolvable by later `dotnet test` steps (for example by adding local `node_modules/.bin` to `PATH`).
 - Windows workflows that checkout recursive submodules must enable Git long paths before `actions/checkout`, otherwise upstream Gemini snapshot files can break checkout.
+- Workflow action refs must stay on current Node 24-capable upstream versions where available; when the latest upstream action still runs on Node 20, prefer an equivalent shell/`gh` implementation over keeping a deprecated JS action.
 - Gemini CLI smoke test workflow steps must run `GeminiCli_Smoke_*` via `GeminiSharpSDK.Tests` project scope to avoid false `zero tests ran` failures in non-smoke test assemblies.
 - Gemini CLI smoke validation must cover both `gemini --help` and headless `gemini --prompt ... --output-format stream-json`, proving root and non-interactive surfaces stay discoverable.
 - Release workflow must build/test before pack/publish.