From 30b3dd464514915c1111101a800fdba0f339f6ee Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Nicol=C3=B2=20Ribaudo?= <nribaudo@igalia.com>
Date: Wed, 17 Jun 2026 13:12:09 +0200
Subject: [PATCH 1/3] Update GH actions

---
 .github/workflows/main.yml | 30 +++++++++---------------------
 1 file changed, 9 insertions(+), 21 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 0328cf1..e08132b 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -1,34 +1,22 @@
 name: Node CI
 
-on: [push]
+on:
+  push:
+    branches: [main]
+  pull_request:
 
 jobs:
   build:
-
     runs-on: ubuntu-latest
 
-    #strategy:
-    #  matrix:
-    #    node-version: [8.x, 10.x, 12.x]
-
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
-      - name: Use Node.js 14.x
-        uses: actions/setup-node@v1
-        with:
-          node-version: 14.x
-      - name: Get Yarn cache directory
-        id: yarn-cache-dir-path
-        run: echo "::set-output name=dir::$(yarn cache dir)"
-      - name: Use Yarn cache
-        uses: actions/cache@v2
-        id: yarn-cache
+        uses: actions/checkout@v4
+      - name: Use Node.js
+        uses: actions/setup-node@v4
         with:
-          path: ${{ steps.yarn-cache-dir-path.outputs.dir }}
-          key: ${{ runner.os }}-yarn-${{ hashFiles('**/yarn.lock') }}
-          restore-keys: |
-            ${{ runner.os }}-yarn-
+          node-version: 20.x
+          cache: yarn
       - name: Install
         run: yarn --prefer-offline --frozen-lockfile --non-interactive --silent
       - name: Build

From 393829c73d4fd427fbbae0d1c98b7667afee722e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Nicol=C3=B2=20Ribaudo?= <nribaudo@igalia.com>
Date: Wed, 17 Jun 2026 13:25:02 +0200
Subject: [PATCH 2/3] Fix CI

---
 .github/workflows/main.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index e08132b..a78a088 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -29,5 +29,7 @@ jobs:
         run: yarn run test:browser
         env:
           CI: true
+          # webpack 4 relies on MD4 hashing, which OpenSSL 3 (Node 17+) rejects
+          NODE_OPTIONS: --openssl-legacy-provider
           SAUCE_USERNAME: ${{ secrets.SAUCE_USERNAME }}
           SAUCE_ACCESS_KEY: ${{ secrets.SAUCE_ACCESS_KEY }}

From 0b0d7ef4d25b91d6b177979cdc15ebf33884c288 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Nicol=C3=B2=20Ribaudo?= <nribaudo@igalia.com>
Date: Wed, 17 Jun 2026 15:10:43 +0200
Subject: [PATCH 3/3] Skip saucelabs step

---
 .github/workflows/main.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index a78a088..77c334c 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -26,6 +26,10 @@ jobs:
         env:
           CI: true
       - name: saucelabs
+        # Skipped: the SAUCE_USERNAME / SAUCE_ACCESS_KEY repo secrets are
+        # rejected with 401 (Unauthorized). The legacy tooling itself works —
+        # change this to `if: true` once valid SauceLabs credentials are restored.
+        if: false
         run: yarn run test:browser
         env:
           CI: true