Skip to content

chore(deps): update actions/github-script action to v9#1670

Merged
gh-worker-dd-mergequeue-cf854d[bot] merged 1 commit into
mainfrom
renovate/actions-github-script-9.x
May 18, 2026
Merged

chore(deps): update actions/github-script action to v9#1670
gh-worker-dd-mergequeue-cf854d[bot] merged 1 commit into
mainfrom
renovate/actions-github-script-9.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 18, 2026

This PR contains the following updates:

Package Type Update Change
actions/github-script action major v8.0.0v9.0.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

actions/github-script (actions/github-script)

v9.0.0

Compare Source

New features:

  • getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.
  • Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

  • require('@​actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@​actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@​actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.
  • getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.
  • If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.
What's Changed
New Contributors

Full Changelog: actions/github-script@v8.0.0...v9.0.0

v9

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from a team as a code owner May 18, 2026 01:36
@dd-octo-sts dd-octo-sts Bot added the area/ci CI/CD, automated testing, etc. label May 18, 2026
@pr-commenter
Copy link
Copy Markdown

pr-commenter Bot commented May 18, 2026

Binary Size Analysis (Agent Data Plane)

Target: efb3648 (baseline) vs 93e2a4c (comparison) diff
Analysis Type: Stripped binaries (debug symbols excluded)
Baseline Size: 37.49 MiB
Comparison Size: 37.49 MiB
Size Change: +8 B (+0.00%)
Pass/Fail Threshold: +5%
Result: PASSED ✅

Changes by Module

Module File Size Symbols
anon.4f8fd67d74ae1f1600187cfeb0121be9.1.llvm.10682628371379254812 +130 B 1
anon.4f8fd67d74ae1f1600187cfeb0121be9.1.llvm.1114295448818188403 -129 B 1
anon.4f8fd67d74ae1f1600187cfeb0121be9.4.llvm.10682628371379254812 +115 B 1
anon.4f8fd67d74ae1f1600187cfeb0121be9.4.llvm.1114295448818188403 -114 B 1
anon.4f8fd67d74ae1f1600187cfeb0121be9.3.llvm.10682628371379254812 +109 B 1
anon.4f8fd67d74ae1f1600187cfeb0121be9.3.llvm.1114295448818188403 -108 B 1
anon.4f8fd67d74ae1f1600187cfeb0121be9.0.llvm.10682628371379254812 +97 B 1
anon.4f8fd67d74ae1f1600187cfeb0121be9.0.llvm.1114295448818188403 -96 B 1
anon.4f8fd67d74ae1f1600187cfeb0121be9.2.llvm.10682628371379254812 +95 B 1
anon.4f8fd67d74ae1f1600187cfeb0121be9.2.llvm.1114295448818188403 -94 B 1
[Unmapped] +3 B 1

Detailed Symbol Changes

    FILE SIZE        VM SIZE    
 --------------  -------------- 
  [NEW]    +130  [NEW]     +40    anon.4f8fd67d74ae1f1600187cfeb0121be9.1.llvm.10682628371379254812
  [NEW]    +115  [NEW]     +25    anon.4f8fd67d74ae1f1600187cfeb0121be9.4.llvm.10682628371379254812
  [NEW]    +109  [NEW]     +19    anon.4f8fd67d74ae1f1600187cfeb0121be9.3.llvm.10682628371379254812
  [NEW]     +97  [NEW]      +7    anon.4f8fd67d74ae1f1600187cfeb0121be9.0.llvm.10682628371379254812
  [NEW]     +95  [NEW]      +5    anon.4f8fd67d74ae1f1600187cfeb0121be9.2.llvm.10682628371379254812
  +0.0%      +3  [ = ]       0    [Unmapped]
  [DEL]     -94  [DEL]      -5    anon.4f8fd67d74ae1f1600187cfeb0121be9.2.llvm.1114295448818188403
  [DEL]     -96  [DEL]      -7    anon.4f8fd67d74ae1f1600187cfeb0121be9.0.llvm.1114295448818188403
  [DEL]    -108  [DEL]     -19    anon.4f8fd67d74ae1f1600187cfeb0121be9.3.llvm.1114295448818188403
  [DEL]    -114  [DEL]     -25    anon.4f8fd67d74ae1f1600187cfeb0121be9.4.llvm.1114295448818188403
  [DEL]    -129  [DEL]     -40    anon.4f8fd67d74ae1f1600187cfeb0121be9.1.llvm.1114295448818188403
  +0.0%      +8  [ = ]       0    TOTAL

@pr-commenter
Copy link
Copy Markdown

pr-commenter Bot commented May 18, 2026

Regression Detector (Agent Data Plane)

Run ID: e1050b15-d2b5-4f09-a521-e31ed52ee5eb
Baseline: efb3648d · Comparison: 93e2a4cb · Diff

Optimization Goals: ✅ No significant changes detected

Fine details of change detection per experiment (35)

Experiments configured erratic: true are tagged (ignored) and skipped when determining which experiments regressed or improved. Experiments which are detected as erratic at runtime are tagged (erratic) to flag that the run's sample dispersion was high, but their regression / improvement signal still counts.

experiment goal Δ mean % links
dsd_uds_1mb_3k_contexts_cpu (erratic) cpu ⚪ +4.50 metrics profiles logs
otlp_ingest_metrics_5mb_memory memory ⚪ +3.37 metrics profiles logs
otlp_ingest_traces_ottl_filtering_5mb_cpu (erratic) cpu ⚪ +1.78 metrics profiles logs
dsd_uds_10mb_3k_contexts_cpu (erratic) cpu ⚪ +0.93 metrics profiles logs
otlp_ingest_traces_ottl_filtering_5mb_throughput throughput ⚪ -0.67 metrics profiles logs
quality_gates_rss_dsd_heavy memory ⚪ +0.60 metrics profiles logs
otlp_ingest_metrics_5mb_cpu (erratic) cpu ⚪ +0.57 metrics profiles logs
dsd_uds_500mb_3k_contexts_cpu (erratic) cpu ⚪ +0.57 metrics profiles logs
quality_gates_rss_dsd_medium memory ⚪ +0.38 metrics profiles logs
dsd_uds_10mb_3k_contexts_memory memory ⚪ +0.34 metrics profiles logs
dsd_uds_500mb_3k_contexts_memory memory ⚪ +0.29 metrics profiles logs
otlp_ingest_traces_ottl_transform_5mb_memory memory ⚪ +0.26 metrics profiles logs
quality_gates_rss_idle memory ⚪ +0.25 metrics profiles logs
otlp_ingest_traces_5mb_throughput throughput ⚪ -0.23 metrics profiles logs
otlp_ingest_traces_5mb_cpu (erratic) cpu ⚪ +0.17 metrics profiles logs
dsd_uds_512kb_3k_contexts_memory memory ⚪ +0.09 metrics profiles logs
dsd_uds_100mb_3k_contexts_cpu (erratic) cpu ⚪ +0.07 metrics profiles logs
dsd_uds_100mb_3k_contexts_memory memory ⚪ +0.03 metrics profiles logs
otlp_ingest_traces_ottl_transform_5mb_throughput throughput ⚪ -0.03 metrics profiles logs
dsd_uds_10mb_3k_contexts_throughput throughput ⚪ -0.02 metrics profiles logs
quality_gates_rss_dsd_ultraheavy memory ⚪ +0.01 metrics profiles logs
otlp_ingest_metrics_5mb_throughput throughput ⚪ -0.01 metrics profiles logs
dsd_uds_512kb_3k_contexts_throughput throughput ⚪ -0.00 metrics profiles logs
dsd_uds_1mb_3k_contexts_throughput throughput ⚪ -0.00 metrics profiles logs
otlp_ingest_logs_5mb_throughput (ignored) throughput ⚪ -0.00 metrics profiles logs
dsd_uds_100mb_3k_contexts_throughput throughput ⚪ +0.01 metrics profiles logs
quality_gates_rss_dsd_low memory ⚪ -0.06 metrics profiles logs
otlp_ingest_traces_5mb_memory memory ⚪ -0.13 metrics profiles logs
dsd_uds_1mb_3k_contexts_memory memory ⚪ -0.13 metrics profiles logs
dsd_uds_500mb_3k_contexts_throughput throughput ⚪ +0.13 metrics profiles logs
otlp_ingest_traces_ottl_transform_5mb_cpu (erratic) cpu ⚪ -0.19 metrics profiles logs
otlp_ingest_traces_ottl_filtering_5mb_memory memory ⚪ -0.20 metrics profiles logs
otlp_ingest_logs_5mb_cpu (ignored) cpu ⚪ -0.87 metrics profiles logs
dsd_uds_512kb_3k_contexts_cpu (erratic) cpu ⚪ -1.83 metrics profiles logs
otlp_ingest_logs_5mb_memory (ignored) memory ⚪ -6.67 metrics profiles logs
Bounds Checks: ✅ Passed (5)
experiment check replicates observed links
quality_gates_rss_dsd_heavy memory_usage 10/10 ✅ 123 MiB ≤ 140 MiB metrics profiles logs
quality_gates_rss_dsd_low memory_usage 10/10 ✅ 39.5 MiB ≤ 50 MiB metrics profiles logs
quality_gates_rss_dsd_medium memory_usage 10/10 ✅ 60.2 MiB ≤ 75 MiB metrics profiles logs
quality_gates_rss_dsd_ultraheavy memory_usage 10/10 ✅ 177 MiB ≤ 200 MiB metrics profiles logs
quality_gates_rss_idle memory_usage 10/10 ✅ 27 MiB ≤ 40 MiB metrics profiles logs
Explanation

A change is flagged as a regression when |Δ mean %| > 5.00% in the regressing direction for its optimization goal AND SMP marks the experiment as a regression (is_regression: true). Improvements use the matching criteria for the improving direction. Experiments configured erratic: true (tagged (ignored)) are skipped outright; experiments detected as erratic at runtime (tagged (erratic)) still count, since that flag describes sample dispersion rather than directional certainty. The Δ mean % cell is colored accordingly: 🟢 = improvement, 🔴 = regression, ⚪ = neutral. Reduction in CPU or memory is an improvement; reduction in ingress throughput is a regression.

@gh-worker-dd-mergequeue-cf854d gh-worker-dd-mergequeue-cf854d Bot merged commit 6273cc1 into main May 18, 2026
80 checks passed
dd-octo-sts Bot pushed a commit that referenced this pull request May 18, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/github-script](https://redirect.github.com/actions/github-script) | action | major | `v8.0.0` → `v9.0.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/1486) for more information.

---

### Release Notes

<details>
<summary>actions/github-script (actions/github-script)</summary>

### [`v9.0.0`](https://redirect.github.com/actions/github-script/releases/tag/v9.0.0)

[Compare Source](https://redirect.github.com/actions/github-script/compare/v9.0.0...v9.0.0)

**New features:**

- **`getOctokit` factory function** — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See [Creating additional clients with `getOctokit`](https://redirect.github.com/actions/github-script#creating-additional-clients-with-getoctokit) for details and examples.
- **Orchestration ID in user-agent** — The `ACTIONS_ORCHESTRATION_ID` environment variable is automatically appended to the user-agent string for request tracing.

**Breaking changes:**

- **`require('@&#8203;actions/github')` no longer works in scripts.** The upgrade to `@actions/github` v9 (ESM-only) means `require('@&#8203;actions/github')` will fail at runtime. If you previously used patterns like `const { getOctokit } = require('@&#8203;actions/github')` to create secondary clients, use the new injected `getOctokit` function instead — it's available directly in the script context with no imports needed.
- `getOctokit` is now an injected function parameter. Scripts that declare `const getOctokit = ...` or `let getOctokit = ...` will get a `SyntaxError` because JavaScript does not allow `const`/`let` redeclaration of function parameters. Use the injected `getOctokit` directly, or use `var getOctokit = ...` if you need to redeclare it.
- If your script accesses other `@actions/github` internals beyond the standard `github`/`octokit` client, you may need to update those references for v9 compatibility.

##### What's Changed

- Add ACTIONS\_ORCHESTRATION\_ID to user-agent string by [@&#8203;Copilot](https://redirect.github.com/Copilot) in [#&#8203;695](https://redirect.github.com/actions/github-script/pull/695)
- ci: use deployment: false for integration test environments by [@&#8203;salmanmkc](https://redirect.github.com/salmanmkc) in [#&#8203;712](https://redirect.github.com/actions/github-script/pull/712)
- feat!: add getOctokit to script context, upgrade [@&#8203;actions/github](https://redirect.github.com/actions/github) v9, [@&#8203;octokit/core](https://redirect.github.com/octokit/core) v7, and related packages by [@&#8203;salmanmkc](https://redirect.github.com/salmanmkc) in [#&#8203;700](https://redirect.github.com/actions/github-script/pull/700)

##### New Contributors

- [@&#8203;Copilot](https://redirect.github.com/Copilot) made their first contribution in [#&#8203;695](https://redirect.github.com/actions/github-script/pull/695)

**Full Changelog**: <actions/github-script@v8.0.0...v9.0.0>

### [`v9`](https://redirect.github.com/actions/github-script/compare/v8...v9)

[Compare Source](https://redirect.github.com/actions/github-script/compare/v8.0.0...v9.0.0)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/DataDog/saluki).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNzkuMyIsInVwZGF0ZWRJblZlciI6IjQzLjE3OS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: matt.briggs <matt.briggs@datadoghq.com> 6273cc1
@renovate renovate Bot deleted the renovate/actions-github-script-9.x branch May 18, 2026 12:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/ci CI/CD, automated testing, etc. mergequeue-status: done

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant