Update Github Actions to use Node 20 runtime (mozilla#14302)

* Update Slack GHA to latest, Node-20-based version

* Update actions/checkout GHA to latest, Node-20-based version

* Update actions/setup-node GHA to latest, Node-20-based version

* Update actions/setup-python GHA to latest, Node-20-based version

* Update codecov/codecov-action GHA to v4, based on node 20

.github/actions/slack/action.yaml

@@ -54,7 +54,7 @@ runs:
         esac" >> $GITHUB_ENV
 
     - id: slack-notification
-      uses: slackapi/slack-github-action@v1.23.0
+      uses: slackapi/slack-github-action@v1.25.0
       env:
         SLACK_BOT_TOKEN: ${{ inputs.slack_bot_token }}
       with:

.github/workflows/cdn_tests.yml

@@ -23,7 +23,7 @@ jobs:
     if: github.repository == 'mozilla/bedrock'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Notify via Slack that tests are starting
         uses: ./.github/actions/slack
         with:
@@ -64,7 +64,7 @@ jobs:
 
     steps:
       - name: Fetch codebase
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Run CDN tests
         run: ./bin/integration_tests/functional_tests.sh
@@ -86,7 +86,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [notify-of-test-run-start, cdn-tests]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Notify via Slack of test-run outcome
         uses: ./.github/actions/slack
         with:

.github/workflows/demo_deploy.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Clone repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           # this means that it is a full history clone, not a shallow one
           # heroku push fails with a shallow clone

.github/workflows/download_tests.yml

@@ -19,7 +19,7 @@ jobs:
     if: github.repository == 'mozilla/bedrock'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Notify via Slack that tests are starting
         uses: ./.github/actions/slack
         with:
@@ -51,7 +51,7 @@ jobs:
 
     steps:
       - name: Fetch codebase
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Run functional download tests
         run: ./bin/integration_tests/functional_tests.sh
@@ -73,7 +73,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [notify-of-test-run-start, download-tests]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Notify via Slack of test-run outcome
         uses: ./.github/actions/slack
         with:

.github/workflows/fluent_linter.yml

@@ -22,9 +22,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Clone repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Set up Python 3
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: "3.10"
       - name: Install Python dependencies

.github/workflows/integration_tests.yml

@@ -24,7 +24,7 @@ jobs:
   notify-of-test-run-start:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Notify via Slack that tests are starting
         uses: ./.github/actions/slack
         with:
@@ -82,7 +82,7 @@ jobs:
     steps:
       - name: Fetch codebase
         if: always()
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Sets specific env vars IF we're on testing against dev/main only
         if: ${{ github.event.inputs.branch == 'main'}}
         run: |
@@ -111,7 +111,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [notify-of-test-run-start, integration-tests]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Notify via Slack of test-run outcome
         uses: ./.github/actions/slack
         with:

.github/workflows/pull_request_tests.yml

@@ -17,8 +17,8 @@ jobs:
         run: |
           sudo apt-get update
           sudo apt-get install chromium-browser firefox xvfb
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
           node-version: 20
       - name: "Install JS dependencies"
@@ -29,8 +29,8 @@ jobs:
   test-python:
     runs-on: ubuntu-20.04  # For consistency with above
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-python@v4
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
         with:
           python-version: "3.11"  # matches current Python in production
       - name: "Run Python tests (on Docker)"
@@ -44,7 +44,7 @@ jobs:
           name: coverage-results
           path: python_coverage
       - name: "Upload coverage to Codecov"
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v4
         with:
           # A CodeCov token is normally NOT needed for public repos, but this workaround is suggested here:
           # https://community.codecov.com/t/upload-issues-unable-to-locate-build-via-github-actions-api/3954/18

.github/workflows/send_mozorg_fluent_strings_to_l10n_org.yml

@@ -18,7 +18,7 @@ jobs:
     if: github.repository == 'mozilla/bedrock'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Run PR-opening script
         shell: bash
         run: SITE_MODE=Mozorg FLUENT_REPO_AUTH=${{ secrets.FLUENT_REPO_AUTH }} bin/open-ftl-pr.sh

.github/workflows/send_pocket_fluent_strings_to_l10n_org.yml

@@ -18,7 +18,7 @@ jobs:
     if: github.repository == 'mozilla/bedrock'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Run PR opening script
         shell: bash
         run: SITE_MODE=Pocket FLUENT_REPO_AUTH=${{ secrets.FLUENT_REPO_AUTH }} bin/open-ftl-pr.sh