[ovr]

Check List

• Tests have been run in packages where changes have been made if available
• Linter has been run for changed code
• Tests for the changes have been added if not covered yet
• Docs have been added / updated if required

Description of Changes Made

Brings 18 actions up to their latest majors — mostly the Node 20 → Node 24 runtime migration that landed across actions/* and docker/*: checkout→v7, setup-node/setup-python→v7, cache→v6, upload-artifact→v7, download-artifact→v8, github-script→v9, labeler→v7, all four docker/*→v4/v7, codecov→v7, nick-fields/retry→v4, dockerhub-description→v5, configure-aws-credentials→v6, upx-action→v3. Two of those majors renamed inputs, so docker/bake-action's workdir: becomes source: and upx-action's file: becomes files:. Also replaced two actions that have no newer release: allenevans/set-env (6 call sites) with plain >> "$GITHUB_ENV", and the node12 hramos/label-actions@v1 with its maintained upstream dessant/label-actions@v5. Added a grouped weekly github-actions entry to .github/dependabot.yml — its absence is why everything had drifted 1–4 majors behind. All runners are GitHub-hosted and every container: image in use is glibc ≥ 2.31, above Node 24's 2.28 floor, so the runtime bump is safe throughout.

Verification

actionlint 1.7.12 passes clean, and passes on an origin/master baseline too. Separately, all 215 remote uses: steps had their with: keys validated against each action's action.yml at the new ref — worth noting because actionlint alone does not catch renamed inputs: it passed on master with the stale workdir:/file: keys still in place. The bake-action rename is exercised by this PR (the diff touches cross-images.yml); master.yml, publish.yml, post-release.yml, rust-cubestore-master.yml and the upx steps only fire on master/tags/schedule, so they need a look at merge time.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 80.21%. Comparing base (98ac580) to head (7a7534a).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #11792      +/-   ##
==========================================
- Coverage   84.67%   80.21%   -4.47%     
==========================================
  Files         261      500     +239     
  Lines       86451   105649   +19198     
  Branches        0     3885    +3885     
==========================================
+ Hits        73204    84748   +11544     
- Misses      13247    20352    +7105     
- Partials        0      549     +549     

Flag	Coverage Δ
cube-backend	60.15% <ø> (?)
cubesql	84.67% <ø> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.