Upgrade @actions dependencies to Node 24 compatible versions - #1259
Merged
Conversation
Upgrades the following @actions packages: - @actions/cache: ^4.0.3 → ^5.0.1 - @actions/core: ^1.10.0 → ^2.0.1 - @actions/exec: ^1.1.0 → ^2.0.0 - @actions/http-client: ^2.2.3 → ^3.0.0 - @actions/io: ^1.0.2 → ^2.0.0 License updates: - Add blueoak-1.0.0 to allowed licenses (new transitive dependency: sax) - Add @actions/http-client to reviewed licenses (MIT licensed but detected as 'other') Also ran npm audit fix to resolve vulnerabilities.
Contributor
There was a problem hiding this comment.
Pull request overview
This PR upgrades five @actions packages to their latest major versions to achieve Node 24 compatibility. As a result of the dependency upgrades, several transitive dependencies are removed or updated, and license configuration files are updated accordingly.
- Upgraded core GitHub Actions toolkit packages from v1/v2/v4 to v2/v3/v5
- Updated license configuration to accommodate new dependencies
- Resolved security vulnerabilities via
npm audit fix
Reviewed changes
Copilot reviewed 67 out of 75 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| package.json | Updated 5 @actions packages to Node 24 compatible versions |
| .licensed.yml | Added blueoak-1.0.0 license and @actions/http-client to reviewed list |
| .licenses/npm/*.dep.yml (removed) | Removed license files for dependencies no longer in use |
| .licenses/npm/*.dep.yml (added) | Added license files for new transitive dependencies |
| .licenses/npm/*.dep.yml (modified) | Updated license files for existing dependencies with version changes |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Summary
Upgrades the
@actionsdependencies to their latest major versions for Node 24 compatibility.Package Upgrades
@actions/cache@actions/core@actions/exec@actions/http-client@actions/ioLicense Updates
blueoak-1.0.0to allowed licenses (new transitive dependency:sax)@actions/http-clientto reviewed licenses (MIT licensed but detected as 'other')Additional Changes
npm audit fixto resolve vulnerabilitiesTesting
licensed cache && licensed statuspasses with 0 errors