ci: sync org workflows and upgrade actions for node24 readiness

[LucasSantana-Dev]

Summary

• fast-forward local baseline to include budget-guard upstream commits (feat(ci): add reusable actions budget guard workflow #4/fix(ci): remove reserved secret from reusable budget guard #5)
• upgrade reusable workflow internals to Node24-ready majors:
  • actions/checkout@v6
  • actions/setup-node@v6
• keep workflow_call interfaces unchanged across reusable workflows
• update README + CHANGELOG with Node24-readiness maintenance note

Validation

• bash -n .github/scripts/actions-budget-guard.sh
• bash -n .github/scripts/tests/actions-budget-guard.test.sh
• .github/scripts/tests/actions-budget-guard.test.sh
• YAML parse checks for all .github/workflows/*.yml
• YAML parse checks for .github/actions/*/action.yml
• drift audit: no remaining checkout@v4 / setup-node@v4

Contract guard

• no changes to budget-guard inputs/outputs
• no changes to reusable workflow workflow_call signatures

Summary by CodeRabbit

• Chores
  • Upgraded GitHub Actions versions (checkout and setup-node) from v4 to v6 across all CI/CD workflows for improved compatibility.
  • Updated CI runtime documentation to reflect infrastructure improvements.

[coderabbitai]

Caution

Review failed

Pull request was closed or merged during review

📝 Walkthrough

Walkthrough

This pull request upgrades GitHub Actions versions across multiple workflow files and composite actions from v4 to v6, specifically updating actions/checkout and actions/setup-node. Documentation in CHANGELOG and README are updated to reflect these changes for Node24 readiness.

Changes

Cohort / File(s)	Summary
Composite Actions .github/actions/setup-node/action.yml, .github/actions/setup-python/action.yml	Updated checkout from v4 to v6; setup-node also bumped from v4 to v6 in setup-node action.
Reusable Workflows .github/workflows/reusable-*.yml	Updated checkout from v4 to v6 across all reusable workflows (ai-security-review, actions-budget-guard, docker-build, node-ci, publish-npm, secret-scan, semgrep, trivy).
Node CI & Node Setup .github/workflows/reusable-node-ci.yml, .github/workflows/reusable-publish-npm.yml	Updated both checkout and setup-node from v4 to v6 across lint, test, typecheck, build, security, and publish jobs.
Test Workflows .github/workflows/test-actions-budget-guard.yml	Updated checkout from v4 to v6 in guard-tests job.
Documentation CHANGELOG.md, README.md	Added notes documenting action version upgrades to v6 for Node24 readiness and removed custom github_token secret reference.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~5 minutes

Possibly related PRs

• feat: Reusable publish-npm and docker-build workflows (Phase 3) #2: Main PR updates actions/checkout and actions/setup-node versions inside workflow files (reusable-publish-npm.yml, reusable-docker-build.yml) that these changes build upon.
• feat(ci): add reusable actions budget guard workflow #4: The reusable-actions-budget-guard.yml workflow file modified in this PR was originally added in that PR.

Poem

🐰 Hopping through workflows with glee,
From v4 to v6, all actions run free,
Node24 ready, our pipelines gleam,
A fluffy success for the automation dream! 🚀

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main changes: upgrading GitHub Actions to Node24-ready versions and syncing organizational workflows.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch ci/org-ci-sync-node24-readiness

📝 Coding Plan

• Generate coding plan for human review comments

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}