Skip to content

Upgrade @actions dependencies#1303

Open
Copilot wants to merge 1 commit intomainfrom
copilot/upgrade-actions-dependencies
Open

Upgrade @actions dependencies#1303
Copilot wants to merge 1 commit intomainfrom
copilot/upgrade-actions-dependencies

Conversation

Copy link
Copy Markdown

Copilot AI commented Apr 8, 2026

Summary

Upgrades the following @actions dependencies to their latest versions:

Package From To
@actions/core ^2.0.1 ^2.0.3
@actions/cache ^5.0.1 ^5.0.5
@actions/glob ^0.5.0 ^0.5.1
@actions/http-client ^3.0.0 ^3.0.2
@actions/tool-cache ^2.0.2 ^3.0.1

Changes

  • Updated version constraints in package.json
  • Ran npm install to update package-lock.json
  • Ran npm audit fix — resolved 6 vulnerabilities (0 remaining)
  • Ran licensed cache to update license files in .licenses/
  • Ran licensed status — 44 dependencies checked, 0 errors found
  • Rebuilt dist/ with updated dependencies

Verification

  • npm audit — 0 vulnerabilities
  • licensed status — 44 dependencies, 0 errors
  • ✅ All 206 tests pass

Agent-Logs-Url: https://github.com/actions/setup-python/sessions/d7501c8f-2fae-40ed-a7fc-e78f5087585a

Co-authored-by: gowridurgad <159780674+gowridurgad@users.noreply.github.com>
Copilot AI requested a review from gowridurgad April 8, 2026 06:29
@gowridurgad gowridurgad marked this pull request as ready for review April 8, 2026 07:31
@gowridurgad gowridurgad requested a review from a team as a code owner April 8, 2026 07:31
Copilot AI review requested due to automatic review settings April 8, 2026 07:31
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the GitHub Actions toolkit dependencies used by this repository’s Node-based action, along with regenerated lockfile and license metadata, to keep the build and distributed dist/ output aligned with the latest upstream packages.

Changes:

  • Bumped @actions/* package versions in package.json (including a major bump of @actions/tool-cache to v3).
  • Updated package-lock.json to reflect the new dependency graph (including undici v6 and related transitive updates).
  • Refreshed .licenses/ dependency license manifests to match the updated lockfile.

Reviewed changes

Copilot reviewed 16 out of 22 changed files in this pull request and generated no comments.

Show a summary per file
File Description
package.json Updates @actions/* dependency version ranges.
package-lock.json Regenerates resolved versions/integrity for updated direct + transitive deps.
.licenses/npm/undici.dep.yml Updates license metadata for undici v6.24.1.
.licenses/npm/strnum.dep.yml Updates license metadata for strnum v2.2.3.
.licenses/npm/path-expression-matcher.dep.yml Adds/corrects license metadata for newly introduced transitive dependency.
.licenses/npm/fast-xml-parser.dep.yml Updates license metadata for fast-xml-parser v5.5.10.
.licenses/npm/fast-xml-builder.dep.yml Updates license metadata for fast-xml-builder v1.1.4.
.licenses/npm/brace-expansion.dep.yml Updates license metadata for brace-expansion v1.1.13.
.licenses/npm/@fastify/busboy.dep.yml Removes license metadata for dependency no longer present.
.licenses/npm/@actions/tool-cache.dep.yml Updates license metadata for @actions/tool-cache v3.0.1.
.licenses/npm/@actions/io.dep.yml Adds license metadata for @actions/io v2.0.0.
.licenses/npm/@actions/io-1.1.3.dep.yml Removes license metadata for @actions/io v1.1.3 (no longer present).
.licenses/npm/@actions/http-client.dep.yml Adds/updates license metadata for @actions/http-client v3.0.2.
.licenses/npm/@actions/http-client-2.2.3.dep.yml Removes license metadata for @actions/http-client v2.2.3 (no longer present).
.licenses/npm/@actions/glob.dep.yml Updates license metadata for @actions/glob v0.5.1.
.licenses/npm/@actions/exec.dep.yml Adds license metadata for @actions/exec v2.0.0.
.licenses/npm/@actions/exec-1.1.1.dep.yml Removes license metadata for @actions/exec v1.1.1 (no longer present).
.licenses/npm/@actions/core.dep.yml Updates license metadata for @actions/core v2.0.3.
.licenses/npm/@actions/core-1.11.1.dep.yml Removes license metadata for @actions/core v1.11.1 (no longer present).
.licenses/npm/@actions/cache.dep.yml Updates license metadata for @actions/cache v5.0.5.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants