fix: bump Node to 24 and refresh pinned Actions/npm deps

The last publish-docs.yaml run in ~9 months (previous success: 2025-10-13)
failed with "POSTCSS: ... node: bad option: --permission": Hugo's Node
permission sandbox (on by default since ~v0.161) passes the `--permission`
flag, which Node only recognizes as of v23.5 (20.x/22.x require
--experimental-permission instead - see nodejs/node permission-model docs).
CI pinned node-version: 20, so a floating-Hugo/pinned-old-Node combination
broke as soon as gh-pages was pushed to again.

Bump node-version to 24 (verified: reproduced the failure locally on both
Node 20/22, confirmed the build succeeds on Node 24). While in here, bump
the other pinned Actions to their current majors (checkout v5->v7,
configure-pages v5->v6, setup-node v5->v6, upload-pages-artifact v4->v5,
deploy-pages v4->v5) and the npm devDependencies (autoprefixer, postcss,
postcss-cli) to latest, which also clears 2 npm audit advisories
(picomatch ReDoS/method-injection, yaml stack overflow).

Author: amuraru

.github/workflows/ci-docs.yaml

@@ -16,7 +16,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           submodules: 'recursive'
 
@@ -27,9 +27,9 @@ jobs:
           extended: true
 
       - name: Set up Node
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
 
       - name: Install dependencies
         run: npm ci

.github/workflows/publish-docs.yaml

@@ -15,13 +15,13 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           submodules: 'recursive'
 
       - name: Set up Pages
         id: pages
-        uses: actions/configure-pages@v5
+        uses: actions/configure-pages@v6
 
       - name: Set up Hugo
         uses: peaceiris/actions-hugo@v3
@@ -30,9 +30,9 @@ jobs:
           extended: true
 
       - name: Set up Node
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
 
       - name: Install dependencies
         run: npm ci
@@ -41,7 +41,7 @@ jobs:
         run: hugo --environment production --gc --minify --baseURL ${{ steps.pages.outputs.base_url }}/
 
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v4
+        uses: actions/upload-pages-artifact@v5
         with:
           path: ./public/
 
@@ -66,4 +66,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5

package-lock.json

@@ -20,8 +20,8 @@
   "author": "Adobe",
   "license": "Apache-2.0",
   "devDependencies": {
-    "autoprefixer": "^10.4.16",
-    "postcss": "^8.4.32",
-    "postcss-cli": "^11.0.0"
+    "autoprefixer": "^10.5.2",
+    "postcss": "^8.5.16",
+    "postcss-cli": "^11.0.1"
   }
 }