[amyu]

Renovate currently leaves action.yml's Node.js runtime outside dependency updates and tracks Node type definitions separately from the runtime. Parse action.yml as YAML with a JSONata query to read runs.using, and use GitHub's official supported-runtime documentation as the version source. Once GitHub documents node26, Renovate can propose updating the Action runtime from node24 to node26.

Group Node.js, @types/node, and the Action runtime under the existing Node.js group while preserving their individual version schemes. The file selector is the repository's exact action.yml filename.

Grouping combines available update candidates; it does not require matching major versions or delay @types/node updates until the Action runtime supports that major. No new version cap is introduced for Node.js or its types.

Validation

• Passed renovate-config-validator --strict renovate.json5. The local validator used its RegExp fallback because native RE2 was unavailable.
• Exercised Renovate's JSONata manager against action.yml and confirmed it extracts runs.using as node24.
• Confirmed the custom datasource offers node20 and node24 with the current official documentation, with no runtime update offered.
• Simulated adding official node26 support and exercised Renovate's actual auto-replacement code in a temporary directory; confirmed that only the Action runtime changes to node26.
• Applied Renovate's package rules to .node-version, engines.node, @types/node, and the Action runtime; confirmed the shared Node.js group and preserved version schemes.
• Passed git diff --check.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	🔄 Running since 2026-10-28T15:53:44.725892Z	ae116eb	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.