- Notifications
You must be signed in to change notification settings - Fork689
Upgrade @actions dependencies to Node 24 compatible versions#1259
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.
Already on GitHub?Sign in to your account
base:main
Are you sure you want to change the base?
Uh oh!
There was an error while loading.Please reload this page.
Conversation
Upgrades the following@actions packages:- @actions/cache: ^4.0.3 → ^5.0.1- @actions/core: ^1.10.0 → ^2.0.1- @actions/exec: ^1.1.0 → ^2.0.0- @actions/http-client: ^2.2.3 → ^3.0.0- @actions/io: ^1.0.2 → ^2.0.0License updates:- Add blueoak-1.0.0 to allowed licenses (new transitive dependency: sax)- Add @actions/http-client to reviewed licenses (MIT licensed but detected as 'other')Also ran npm audit fix to resolve vulnerabilities.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others.Learn more.
Pull request overview
This PR upgrades five@actions packages to their latest major versions to achieve Node 24 compatibility. As a result of the dependency upgrades, several transitive dependencies are removed or updated, and license configuration files are updated accordingly.
- Upgraded core GitHub Actions toolkit packages from v1/v2/v4 to v2/v3/v5
- Updated license configuration to accommodate new dependencies
- Resolved security vulnerabilities via
npm audit fix
Reviewed changes
Copilot reviewed 67 out of 75 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| package.json | Updated 5@actions packages to Node 24 compatible versions |
| .licensed.yml | Added blueoak-1.0.0 license and @actions/http-client to reviewed list |
| .licenses/npm/*.dep.yml (removed) | Removed license files for dependencies no longer in use |
| .licenses/npm/*.dep.yml (added) | Added license files for new transitive dependencies |
| .licenses/npm/*.dep.yml (modified) | Updated license files for existing dependencies with version changes |
💡Add Copilot custom instructions for smarter, more guided reviews.Learn how to get started.
Summary
Upgrades the
@actionsdependencies to their latest major versions for Node 24 compatibility.Package Upgrades
@actions/cache@actions/core@actions/exec@actions/http-client@actions/ioLicense Updates
blueoak-1.0.0to allowed licenses (new transitive dependency:sax)@actions/http-clientto reviewed licenses (MIT licensed but detected as 'other')Additional Changes
npm audit fixto resolve vulnerabilitiesTesting
licensed cache && licensed statuspasses with 0 errors