ci: upgrade Pages action runtimes

Author: kevinten10

.github/workflows/deploy.yml

@@ -14,21 +14,21 @@ jobs:
       group: ${{ github.workflow }}-${{ github.ref }}
     steps:
       - name: "Checkout source code"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           submodules: recursive  # Fetch the Docsy theme
           fetch-depth: 0         # Fetch all history for .GitInfo and .Lastmod
 
       - name: "Setup Hugo"
-        uses: peaceiris/actions-hugo@v2
+        uses: peaceiris/actions-hugo@v3
         with:
           hugo-version: '0.145.0'
           extended: true
 
       - name: "Setup Node"
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: '20'
+          node-version: '22'
           cache: 'npm'
 
       - name: "Install project dependencies"
@@ -44,7 +44,7 @@ jobs:
         run: hugo --gc --minify --destination docs
 
       - name: "Deploy"
-        uses: peaceiris/actions-gh-pages@v3
+        uses: peaceiris/actions-gh-pages@v4
         if: ${{ github.ref == 'refs/heads/master' }} # Deploy in master branch only
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}

docs/maintenance/2026-06-27-capa-io-triage.md

@@ -15,12 +15,14 @@
 - Corrected npm repository, issue, and homepage metadata.
 - Migrated deprecated Docsy settings, removed the fake Universal Analytics ID, and removed a duplicate blog menu declaration.
 - Scoped gitleaks away from the pinned Docsy submodule, whose upstream search documentation contains example keys.
+- Updated checkout, Node setup, Hugo, and Pages actions to their current Node 24-based major versions; the build runtime now uses Node 22 to satisfy Docsy's engine requirement.
 
 ## Validation
 
 - Hugo 0.145.0 official container build: 300 pages and 408 output files generated successfully.
 - A second production build completed without Hugo/Docsy configuration warnings.
 - `gitleaks dir . --no-banner --redact`: passed.
+- GitHub Pages workflow: passed on the exact dependency-fix commit after the action runtime upgrade.
 
 ## Follow-Up