Skip to content

Upgrade @actions dependencies#1525

Draft
Copilot wants to merge 2 commits intomainfrom
copilot/upgrade-actions-dependencies
Draft

Upgrade @actions dependencies#1525
Copilot wants to merge 2 commits intomainfrom
copilot/upgrade-actions-dependencies

Conversation

Copy link
Copy Markdown

Copilot AI commented Apr 9, 2026

Description:
Upgrades the following @actions toolkit dependencies to their latest versions:

Package Old Version New Version
@actions/core ^1.11.1 ^2.0.3
@actions/cache ^5.0.1 ^5.0.5
@actions/glob ^0.5.0 ^0.5.1
@actions/http-client ^2.2.1 ^3.0.2
@actions/tool-cache ^2.0.2 ^3.0.1
@actions/io ^1.0.2 ^2.0.0

Changes included:

  • Updated package.json with new version ranges
  • Updated package-lock.json via npm install
  • Ran npm audit fix to address vulnerabilities
  • Rebuilt dist/ files via npm run build
  • Updated .licenses/npm/ files:
    • cache.dep.yml: 5.0.1 → 5.0.5
    • glob.dep.yml: 0.5.0 → 0.5.1
    • tool-cache.dep.yml: 2.0.2 → 3.0.1
    • Replaced core-1.11.1.dep.yml + core-2.0.1.dep.yml with core.dep.yml at 2.0.3
    • Replaced undici-6.23.0.dep.yml with undici-6.24.1.dep.yml (transitive dep update)
    • brace-expansion.dep.yml: 1.1.12 → 1.1.13 (transitive dep update)
    • fast-xml-builder.dep.yml: 1.0.0 → 1.1.4 (transitive dep update)
    • fast-xml-parser.dep.yml: 5.4.1 → 5.5.11 (transitive dep update)
    • strnum.dep.yml: 2.1.2 → 2.2.3 (transitive dep update)
    • path-expression-matcher.dep.yml: added new record for 1.4.0 (new transitive dep from fast-xml-parser upgrade)

Related issue:

Check list:

  • Mark if documentation changes are required.
  • Mark if tests were added or updated to cover the changes.

- @actions/core: ^1.11.1 → ^2.0.3
- @actions/cache: ^5.0.1 → ^5.0.5
- @actions/glob: ^0.5.0 → ^0.5.1
- @actions/http-client: ^2.2.1 → ^3.0.2
- @actions/tool-cache: ^2.0.2 → ^3.0.1
- @actions/io: ^1.0.2 → ^2.0.0
- Run npm audit fix
- Update license files for new versions
- Rebuild dist files

Agent-Logs-Url: https://github.com/actions/setup-node/sessions/872a3dbf-9b85-446b-963b-9127718d9560

Co-authored-by: gowridurgad <159780674+gowridurgad@users.noreply.github.com>
@gowridurgad
Copy link
Copy Markdown
Contributor

@copilot Fix the License failures

Update 5 license records that were out of date after the dependency
upgrade:
- brace-expansion: 1.1.12 → 1.1.13
- fast-xml-builder: 1.0.0 → 1.1.4
- fast-xml-parser: 5.4.1 → 5.5.11
- strnum: 2.1.2 → 2.2.3
- path-expression-matcher: add new record (version 1.4.0, new transitive dep)

Rebuild dist/ files to reflect updated lock file

Agent-Logs-Url: https://github.com/actions/setup-node/sessions/fb0e70ce-ad19-48df-88a4-97f3bdc896cb

Co-authored-by: gowridurgad <159780674+gowridurgad@users.noreply.github.com>
Copy link
Copy Markdown
Author

Copilot AI commented Apr 9, 2026

@copilot Fix the License failures

Fixed in commit 1a0a013. The Licensed CI was failing due to 5 outdated/missing license records introduced by the transitive dependency upgrades:

  • brace-expansion: bumped 1.1.12 → 1.1.13
  • fast-xml-builder: bumped 1.0.0 → 1.1.4
  • fast-xml-parser: bumped 5.4.1 → 5.5.11
  • strnum: bumped 2.1.2 → 2.2.3
  • path-expression-matcher: added new record for 1.4.0 (new transitive dependency from fast-xml-parser upgrade)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants