Skip to content

Upgrade @actions dependencies to Node 24 compatible versions - #1259

Merged
HarithaVattikuti merged 7 commits into
actions:mainfrom
salmanmkc:upgrade-actions-deps
Jan 20, 2026
Merged

Upgrade @actions dependencies to Node 24 compatible versions#1259
HarithaVattikuti merged 7 commits into
actions:mainfrom
salmanmkc:upgrade-actions-deps

Conversation

@salmanmkc

Copy link
Copy Markdown
Contributor

Summary

Upgrades the @actions dependencies to their latest major versions for Node 24 compatibility.

Package Upgrades

Package From To
@actions/cache ^4.0.3 ^5.0.1
@actions/core ^1.10.0 ^2.0.1
@actions/exec ^1.1.0 ^2.0.0
@actions/http-client ^2.2.3 ^3.0.0
@actions/io ^1.0.2 ^2.0.0

License Updates

  • Add blueoak-1.0.0 to allowed licenses (new transitive dependency: sax)
  • Add @actions/http-client to reviewed licenses (MIT licensed but detected as 'other')

Additional Changes

  • Ran npm audit fix to resolve vulnerabilities

Testing

  • All 206 tests pass
  • licensed cache && licensed status passes with 0 errors
  • Build completes successfully

Upgrades the following @actions packages:
- @actions/cache: ^4.0.3 → ^5.0.1
- @actions/core: ^1.10.0 → ^2.0.1
- @actions/exec: ^1.1.0 → ^2.0.0
- @actions/http-client: ^2.2.3 → ^3.0.0
- @actions/io: ^1.0.2 → ^2.0.0

License updates:
- Add blueoak-1.0.0 to allowed licenses (new transitive dependency: sax)
- Add @actions/http-client to reviewed licenses (MIT licensed but detected as 'other')

Also ran npm audit fix to resolve vulnerabilities.
@salmanmkc
salmanmkc requested a review from a team as a code owner December 16, 2025 16:25
Copilot AI review requested due to automatic review settings December 16, 2025 16:25

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR upgrades five @actions packages to their latest major versions to achieve Node 24 compatibility. As a result of the dependency upgrades, several transitive dependencies are removed or updated, and license configuration files are updated accordingly.

  • Upgraded core GitHub Actions toolkit packages from v1/v2/v4 to v2/v3/v5
  • Updated license configuration to accommodate new dependencies
  • Resolved security vulnerabilities via npm audit fix

Reviewed changes

Copilot reviewed 67 out of 75 changed files in this pull request and generated no comments.

Show a summary per file
File Description
package.json Updated 5 @actions packages to Node 24 compatible versions
.licensed.yml Added blueoak-1.0.0 license and @actions/http-client to reviewed list
.licenses/npm/*.dep.yml (removed) Removed license files for dependencies no longer in use
.licenses/npm/*.dep.yml (added) Added license files for new transitive dependencies
.licenses/npm/*.dep.yml (modified) Updated license files for existing dependencies with version changes

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@xavier2k6

Copy link
Copy Markdown

Closes