CI: Allow use of node16 for release jobs

[adpaco-aws]

actions/checkout@v3 is causing trouble in the BuildBundle-Linux workflow as described in #3321 .

This PR sets ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true to continue using node16 so we don't find issues with node20 dependencies in ubuntu-18.04 jobs. This is the option recommended in this GitHub post: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

Resolves #3321

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 and MIT licenses.

[adpaco-aws]

Looks like the CI job also fails with v4 😢

[adpaco-aws]

Tried adding the following to the build_bundle_linux job:

  env:
    ACTIONS_RUNNER_FORCED_INTERNAL_NODE_VERSION: node16
    ACTIONS_RUNNER_FORCE_ACTIONS_NODE_VERSION: node16

But it didn't work. Not sure how to export these variables before starting the runners in our case.

[adpaco-aws]

Replacing the action used in the build_bundle_linux job with taiki-e/checkout-action@v1 (a 3rd party action that doesn't use node) avoids the error until the actions/upload-artifact action is called because it uses the same dependencies (see this run for example).

[adpaco-aws]

I've also tried to set ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true at the workflow level (as suggested by this comment) but it didn't work (see run here).

[tautschnig]

Approving except the PR title now needs adjusting.

[tautschnig]

Maybe worth adding a link to https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/ to the PR description (and, thus, the git commit message).

[adpaco-aws]

I've also tried to set ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true at the workflow level (as suggested by actions/checkout#1809 (comment)) but it didn't work (see run here).

Note: @tautschnig told us this didn't work because v4 will always try to use node20. The flag works if we don't upgrade the action's version.

Maybe worth adding a link to https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/ to the PR description (and, thus, the git commit message).

Yes, added the link. Thanks!