ci: update action pins for Node 24 compatibility

[riderx]

Summary (AI generated)

• update the pinned GitHub Actions used by CI workflows to Node 24-compatible revisions
• keep the existing Supabase CLI binary pin for tests while moving the setup action wrapper to supabase/setup-cli@v2
• remove Node 20 deprecation warnings from the Playwright test workflow and related CI jobs

Motivation (AI generated)

GitHub Actions is deprecating Node 20-based JavaScript actions. These workflows were still pinned to older action revisions, which created deprecation warnings and risked future CI breakage as GitHub runners move to Node 24.

Business Impact (AI generated)

This keeps Capgo CI stable, reduces noisy warnings in pull requests, and lowers the risk of test or deployment interruptions caused by upstream GitHub Actions runtime changes.

Test Plan (AI generated)

• Validate the updated workflow YAML parses correctly
• Confirm the touched workflows no longer pin the previous Node 20-era action revisions
• Run tests
• Run Playwright tests
• Run benchmarks
• Review the rerun of the Playwright job after the transient Supabase reset failure and confirm the workflow passes

Checklist (AI generated)

• Only CI workflow files were changed
• The Supabase CLI runtime version pin used by tests remains unchanged
• The PR is ready for review with passing checks

Generated with AI

Summary by CodeRabbit

• Chores
  • Updated build and deployment workflow configurations to use current versions of development tooling.
  • Refreshed continuous integration testing workflows with updated action versions for improved reliability and compatibility with latest standards.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 89857b1f-9abf-4c39-8a27-6179a1fff6cc

📥 Commits

Reviewing files that changed from the base of the PR and between d204af5 and 6083ba2.

📒 Files selected for processing (3)

• .github/workflows/build_and_deploy.yml
• .github/workflows/codspeed.yml
• .github/workflows/tests.yml

---

📝 Walkthrough

Walkthrough

Workflow YAML files update third-party GitHub Action references: Supabase CLI setup moves to supabase/setup-cli@v2.0.0, and various actions change from pinned commit SHAs to semantic version tags (e.g., actions/checkout@v6, actions/setup-node@v6, oven-sh/setup-bun@v2, actions/cache@v5, actions/upload-artifact@v6, etc.).

Changes

Cohort / File(s)	Summary
Supabase CLI Setup /.github/workflows/build_and_deploy.yml, /.github/workflows/tests.yml	Replaces supabase/setup-cli pinned commit with supabase/setup-cli@v2.0.0; keeps step inputs (e.g., version) and downstream Supabase CLI commands unchanged.
GitHub Official Actions /.github/workflows/codspeed.yml, /.github/workflows/tests.yml	Switches actions/checkout from a pinned SHA to @v6, updates actions/setup-node from a pinned SHA to @v6 (codspeed), updates actions/cache to @v5, and actions/upload-artifact to @v6 (tests). No step inputs changed.
Build Tool & Third-party Actions /.github/workflows/codspeed.yml, /.github/workflows/tests.yml	Changes oven-sh/setup-bun references while retaining major v2; updates CodSpeedHQ/action and crate-ci/typos/JarvusInnovations/background-action from pinned SHAs to semver tags (@v4, @v1.45.1, @v1 respectively).

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Poem

🐰 I hopped through YAML lanes with cheer,
Pinned SHAs swapped for tags so clear,
Supabase leapt to v2 with glee,
Actions aligned — CI sings with me! 🥕✨

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	❓ Inconclusive	PR description covers summary, motivation, and business impact; however, the Test Plan and Checklist sections lack the required detail format from the template.	Clarify whether the Test Plan section satisfies repository requirements; ensure the Checklist aligns with the template's specific items (code style, documentation, test coverage, manual testing steps).

✅ Passed checks (4 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	The title accurately describes the main change: updating GitHub Actions pins for Node 24 compatibility, which aligns with the file summaries and PR objectives.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/fix-node24-actions

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codspeed-hq]

Merging this PR will not alter performance

✅ 28 untouched benchmarks

---

_{Comparing codex/fix-node24-actions (6083ba2) with main (fb6ccb3)}

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[sonarqubecloud]

Quality Gate failed

Failed conditions
9 Security Hotspots

See analysis details on SonarQube Cloud