Commit 4e2e556400d for woocommerce

commit 4e2e556400d6f95e8b98cf0de3c45401003b1a7e
Author: Adrian Moldovan <3854374+adimoldovan@users.noreply.github.com>
Date:   Tue Jul 14 13:47:36 2026 +0300

    ci: bump Node 20 actions to Node 24 - part 2 (#66571)

diff --git a/.github/workflows/backwards-compatibility-review.yml b/.github/workflows/backwards-compatibility-review.yml
index c68d7adb2ac..96aca3e4f7f 100644
--- a/.github/workflows/backwards-compatibility-review.yml
+++ b/.github/workflows/backwards-compatibility-review.yml
@@ -28,7 +28,7 @@ jobs:
           fetch-depth: 0

       - name: PR Review with Progress Tracking (inline-only)
-        uses: anthropics/claude-code-action@v1
+        uses: anthropics/claude-code-action@e90deca47693f9457b72f2b53c17d7c445a87342 # v1.0.171
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           prompt: |
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0766e1eee82..666a675960b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -167,7 +167,7 @@ jobs:
       # re-run this job when it succeeded, so consumers must find the previous attempt's artifact.
       WOOCOMMERCE_PLUGIN_ARTIFACT_NAME: woocommerce-plugin-${{ github.run_id }}
     steps:
-      - uses: 'actions/checkout@v4'
+      - uses: 'actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0' # v7.0.0
         name: 'Checkout'
         with:
           ref: ${{ inputs.refName != '' && inputs.refName || '' }}
@@ -187,7 +187,7 @@ jobs:
         run: pnpm --filter='@woocommerce/plugin-woocommerce' build:zip

       - name: 'Upload WooCommerce plugin artifact'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: ${{ env.WOOCOMMERCE_PLUGIN_ARTIFACT_NAME }}
           path: plugins/woocommerce/woocommerce.zip
@@ -226,7 +226,7 @@ jobs:

       - name: 'Download WooCommerce plugin artifact'
         if: ${{ matrix.usesSharedPluginBuild == true && inputs.artifactName == '' }}
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: woocommerce-plugin-${{ github.run_id }}
           path: ${{ github.workspace }}/woocommerce-plugin-artifact
@@ -304,7 +304,7 @@ jobs:

       - name: 'Resolve artifacts path'
         if: ${{ always() && matrix.report.resultsPath != '' }}
-        # Blocks e2e use a relative path which is not supported by actions/upload-artifact@v4
+        # Blocks e2e use a relative path which is not supported by actions/upload-artifact
         # https://github.com/actions/upload-artifact/issues/176
         env:
           ARTIFACTS_PATH: '${{ matrix.projectPath }}/${{ matrix.report.resultsPath }}'
diff --git a/.github/workflows/docs-needed-detection.yml b/.github/workflows/docs-needed-detection.yml
index 1b31e426cf9..23f4c497c8f 100644
--- a/.github/workflows/docs-needed-detection.yml
+++ b/.github/workflows/docs-needed-detection.yml
@@ -21,7 +21,7 @@ jobs:
     steps:
       - name: 'Analyze Pull Request'
         id: analyze
-        uses: anthropics/claude-code-action@64c7a0ef71df67b14cb4471f4d9c8565c61042bf #v1.0.66
+        uses: anthropics/claude-code-action@e90deca47693f9457b72f2b53c17d7c445a87342 # v1.0.171
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/pr-assess-bundle-size.yml b/.github/workflows/pr-assess-bundle-size.yml
index b6459870d05..49320dec282 100644
--- a/.github/workflows/pr-assess-bundle-size.yml
+++ b/.github/workflows/pr-assess-bundle-size.yml
@@ -61,7 +61,7 @@ jobs:
               run: 'npm install -g corepack@latest && corepack enable pnpm'
               # `npm install -g corepack@latest` addresses https://github.com/nodejs/corepack/issues/612.

-            - uses: preactjs/compressed-size-action@f780fd104362cfce9e118f9198df2ee37d12946c
+            - uses: preactjs/compressed-size-action@f322c295dde06a1cb7ccaef105732dd8a726d1d9 # v2.10.0
               env:
                   BROWSERSLIST_IGNORE_OLD_DATA: true
               with:
diff --git a/.github/workflows/pr-project-label.yml b/.github/workflows/pr-project-label.yml
index 3a4514a52b7..19451067a13 100644
--- a/.github/workflows/pr-project-label.yml
+++ b/.github/workflows/pr-project-label.yml
@@ -16,7 +16,7 @@ jobs:
             contents: read
             pull-requests: write
         steps:
-            - uses: actions/labeler@v3
+            - uses: actions/labeler@3d612d72e6784a1a65365cc6d33b5a001c12bf10 # v3.1.0
               with:
                   repo-token: '${{ secrets.GITHUB_TOKEN }}'
                   configuration-path: .github/project-pr-labeler.yml
diff --git a/.github/workflows/pr-release-communication.yml b/.github/workflows/pr-release-communication.yml
index d2846a47861..c65083eddbe 100644
--- a/.github/workflows/pr-release-communication.yml
+++ b/.github/workflows/pr-release-communication.yml
@@ -41,7 +41,7 @@ jobs:

       - name: Generate Feature Highlight
         id: highlight
-        uses: anthropics/claude-code-action@v1
+        uses: anthropics/claude-code-action@e90deca47693f9457b72f2b53c17d7c445a87342 # v1.0.171
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           claude_args: >
@@ -170,7 +170,7 @@ jobs:

       - name: Generate Developer Advisory
         id: advisory
-        uses: anthropics/claude-code-action@v1
+        uses: anthropics/claude-code-action@e90deca47693f9457b72f2b53c17d7c445a87342 # v1.0.171
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           claude_args: >
diff --git a/.github/workflows/stalebot.yml b/.github/workflows/stalebot.yml
index ea54c245505..60c1adc8b56 100644
--- a/.github/workflows/stalebot.yml
+++ b/.github/workflows/stalebot.yml
@@ -18,7 +18,7 @@ jobs:
         if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch'
         steps:
             - name: Process stale issues and PRs
-              uses: actions/stale@v9.0.0
+              uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10.1.0
               with:
                   repo-token: ${{ secrets.GITHUB_TOKEN }}
                   stale-issue-message: "As a part of this repository's maintenance, this issue is being marked as stale due to inactivity. Please feel free to comment on it in case we missed something.\n\n###### After 7 days with no activity this issue will be automatically closed."
diff --git a/.github/workflows/storybook-pages.yml b/.github/workflows/storybook-pages.yml
index b63e88cf0b0..2340687fd23 100644
--- a/.github/workflows/storybook-pages.yml
+++ b/.github/workflows/storybook-pages.yml
@@ -31,7 +31,7 @@ jobs:
                   STORYBOOK_COMPOSITION_PATH_PREFIX: /woocommerce

             - name: Deploy
-              uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4.0.0
+              uses: peaceiris/actions-gh-pages@84c30a85c19949d7eee79c4ff27748b70285e453 # v4.1.0
               with:
                   github_token: ${{ secrets.GITHUB_TOKEN }}
                   publish_dir: ./tools/storybook/storybook-static