Merge pull request #1094 from nextstrain/gh-action-ubuntu-24.04

Bump GH Action workflows to `ubuntu-24.04`

.github/workflows/ci.yml

@@ -29,7 +29,7 @@ defaults:
 jobs:
   # Lint regardless of build or test status and lint early.
   lint:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
@@ -42,7 +42,7 @@ jobs:
       - run: node ./scripts/check-resource-index-match.js
 
   type-check:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
@@ -53,7 +53,7 @@ jobs:
 
   # Build into Heroku slug so we can deploy the same build that we test.
   build:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
 
@@ -72,7 +72,7 @@ jobs:
   test:
     if: github.repository == 'nextstrain/nextstrain.org'
     needs: build
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     container:
       image: heroku/heroku:22
     env:
@@ -155,7 +155,7 @@ jobs:
       url: ${{ inputs.heroku-app && format('https://{0}.herokuapp.com', inputs.heroku-app) || 'https://next.nextstrain.org' }}
 
     # Deploy steps
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     env:
       HEROKU_APP: ${{ inputs.heroku-app || 'nextstrain-canary' }}
     steps:

.github/workflows/dependabot-automation.yml

@@ -9,7 +9,7 @@ permissions:
 jobs:
   merge-auspice-bump:
     if: github.event.pull_request.user.login == 'dependabot[bot]'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - id: metadata
         uses: dependabot/fetch-metadata@v2

.github/workflows/index-resources.yml

@@ -31,7 +31,7 @@ defaults:
 
 jobs:
   build-ref-matrix:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     outputs:
       ref-matrix: ${{ steps.ref-matrix.outputs.ref-matrix }}
     steps:
@@ -61,7 +61,7 @@ jobs:
       group: ${{ github.workflow }}-${{ matrix.resource_index }}
     env:
         RESOURCE_INDEX: ${{ matrix.resource_index }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       id-token: write # needed to interact with GitHub's OIDC Token endpoint
       contents: read

.github/workflows/remind-to-promote.yml

@@ -11,15 +11,15 @@ on:
 
 jobs:
   remind-to-promote:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     defaults:
       run:
         shell: bash
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: '16'
+          node-version-file: 'package.json'
       - run: npm ci
 
         # Use the GitHub Actions cache to store the minimal persistent state we

.github/workflows/terraform-lint.yml

@@ -6,6 +6,7 @@ on:
     tags-ignore:
       - '**'
     paths:
+      - '.github/workflows/terraform-lint.yml'
       - '**.tf'
       - '**.tfvars'
       - '**.tf.json'
@@ -15,8 +16,14 @@ on:
   workflow_dispatch:
 jobs:
   fmt:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
+      - name: Install Terraform
+        run: |
+          wget -O terraform.zip https://releases.hashicorp.com/terraform/1.10.2/terraform_1.10.2_linux_amd64.zip
+          unzip terraform.zip -d "$HOME/terraform"
+          echo "$HOME/terraform" >> "$GITHUB_PATH"
+
       - uses: actions/checkout@v4
       - run: scripts/terraform-fmt -check
 
@@ -27,8 +34,14 @@ jobs:
         env:
           - env/production
           - env/testing
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
+      - name: Install Terraform
+        run: |
+          wget -O terraform.zip https://releases.hashicorp.com/terraform/1.10.2/terraform_1.10.2_linux_amd64.zip
+          unzip terraform.zip -d "$HOME/terraform"
+          echo "$HOME/terraform" >> "$GITHUB_PATH"
+
       - uses: actions/checkout@v4
 
       - run: terraform init -backend=false