Fix publish-npm: upgrade to Node 20, actions v4, and modern output syntax

[Copilot]

The publish-npm job was failing with a misleading npm ERR! code E404 on npm publish --tag awsv3, caused by a combination of EOL tooling and deprecated CI primitives.

Root Causes

• npm 8 auth bug (Node 16 EOL): npm 8 returns 404 Not Found from the CDN layer instead of 401 Unauthorized when registry auth fails, producing the confusing 'leo-sdk@7.1.21' is not in this registry error. npm 10 (Node 20) handles this correctly.
• Actions forced to Node.js 24 on June 16, 2026: actions/checkout@v3 and actions/setup-node@v3 run on Node.js 20, which GitHub is force-disabling in 4 days from the failing run. Already flagged in the CI logs.
• Deprecated set-output syntax: Three steps used ##[set-output name=...;] which GitHub has warned will be disabled.

Changes

• npm-publish.yml

  • node-version: 16 → 20
  • actions/checkout@v3 → @v4, actions/setup-node@v3 → @v4
  • Replaced deprecated set-output with >> $GITHUB_OUTPUT:

    - run: echo "##[set-output name=version;]$(echo ${GITHUB_REF#refs/tags/v})"
    + run: echo "version=$(echo ${GITHUB_REF#refs/tags/v})" >> $GITHUB_OUTPUT

  • Fixed step name typo: "Extract npm Tag from Tag Tag" → "Extract npm Tag from Git Tag"

• node.js.yml: actions/checkout@v3 → @v4, actions/setup-node@v3 → @v4

• sdk-doc-gh-pages.yml: actions/checkout@v3 → @v4

• codeql-analysis.yml: actions/checkout@v3 → @v4, github/codeql-action@v2 → @v3

[ch-snyk-sa]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.