Skip to content

fix(deps): bump @actions/core from 1.11.1 to 3.0.0#337

Merged
parkerbxyz merged 2 commits intonextfrom
dependabot/npm_and_yarn/actions/core-3.0.0
Mar 13, 2026
Merged

fix(deps): bump @actions/core from 1.11.1 to 3.0.0#337
parkerbxyz merged 2 commits intonextfrom
dependabot/npm_and_yarn/actions/core-3.0.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 3, 2026

Bumps @actions/core from 1.11.1 to 3.0.0.

Changelog

Sourced from @​actions/core's changelog.

3.0.0

  • Breaking change: Package is now ESM-only
    • CommonJS consumers must use dynamic import() instead of require()

2.0.3

  • Bump @actions/http-client to 3.0.2

2.0.1

  • Bump @​actions/exec from 1.1.1 to 2.0.0 #2199

2.0.0

  • Add support for Node 24 #2110
  • Bump @​actions/http-client from 2.0.1 to 3.0.0
Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​actions/core since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 3, 2026
@dependabot dependabot bot requested a review from a team as a code owner March 3, 2026 20:24
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 3, 2026
@parkerbxyz parkerbxyz changed the base branch from main to next March 13, 2026 21:53
@parkerbxyz
Copy link
Contributor

@dependabot recreate

@dependabot dependabot bot changed the base branch from next to main March 13, 2026 22:14
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/actions/core-3.0.0 branch from 9af4f0b to 06ba1b2 Compare March 13, 2026 22:14
@parkerbxyz parkerbxyz force-pushed the dependabot/npm_and_yarn/actions/core-3.0.0 branch from f9a9a63 to 024dbd0 Compare March 13, 2026 22:18
@parkerbxyz parkerbxyz changed the base branch from main to next March 13, 2026 22:20
@parkerbxyz
Copy link
Contributor

@dependabot rebase

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 13, 2026

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

parkerbxyz and others added 2 commits March 13, 2026 15:26
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@actions/core v3.0.0 is a pure ESM package with only named exports.
Change `import core from` to `import * as core from` in all source files.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@parkerbxyz parkerbxyz force-pushed the dependabot/npm_and_yarn/actions/core-3.0.0 branch from 10bdf88 to 529c560 Compare March 13, 2026 22:26
@parkerbxyz parkerbxyz merged commit d5bf4ce into next Mar 13, 2026
3 checks passed
@parkerbxyz parkerbxyz deleted the dependabot/npm_and_yarn/actions/core-3.0.0 branch March 13, 2026 22:27
parkerbxyz added a commit that referenced this pull request Mar 13, 2026
Bumps
[@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core)
from 1.11.1 to 3.0.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md"><code>@​actions/core</code>'s
changelog</a>.</em></p>
<blockquote>
<h2>3.0.0</h2>
<ul>
<li><strong>Breaking change</strong>: Package is now ESM-only
<ul>
<li>CommonJS consumers must use dynamic <code>import()</code> instead of
<code>require()</code></li>
</ul>
</li>
</ul>
<h2>2.0.3</h2>
<ul>
<li>Bump <code>@actions/http-client</code> to <code>3.0.2</code></li>
</ul>
<h2>2.0.1</h2>
<ul>
<li>Bump <code>@​actions/exec</code> from 1.1.1 to 2.0.0 <a
href="https://redirect.github.com/actions/toolkit/pull/2199">#2199</a></li>
</ul>
<h2>2.0.0</h2>
<ul>
<li>Add support for Node 24 <a
href="https://redirect.github.com/actions/toolkit/pull/2110">#2110</a></li>
<li>Bump <code>@​actions/http-client</code> from 2.0.1 to 3.0.0</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/actions/toolkit/commits/HEAD/packages/core">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by [GitHub Actions](<a
href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a>
Actions), a new releaser for <code>@​actions/core</code> since your
current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@actions/core&package-manager=npm_and_yarn&previous-version=1.11.1&new-version=3.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Co-authored-by: Parker Brown <17183625+parkerbxyz@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
create-app-token-action-releaser bot pushed a commit that referenced this pull request Mar 13, 2026
## [2.2.2](v2.2.1...v2.2.2) (2026-03-13)

### Bug Fixes

* **deps:** bump @actions/core from 1.11.1 to 3.0.0 ([#337](#337)) ([b044133](b044133))
* **deps:** bump minimatch from 9.0.5 to 9.0.9 ([#335](#335)) ([5cbc656](5cbc656))
* **deps:** bump the production-dependencies group with 4 updates ([#336](#336)) ([6bda5bc](6bda5bc))
* **deps:** bump undici from 7.16.0 to 7.18.2 ([#323](#323)) ([b4f638f](b4f638f))
create-app-token-action-releaser bot pushed a commit that referenced this pull request Mar 13, 2026
# [3.0.0-beta.6](v3.0.0-beta.5...v3.0.0-beta.6) (2026-03-13)

### Bug Fixes

* **deps:** bump @actions/core from 1.11.1 to 3.0.0 ([#337](#337)) ([b044133](b044133))
* **deps:** bump minimatch from 9.0.5 to 9.0.9 ([#335](#335)) ([5cbc656](5cbc656))
* **deps:** bump the production-dependencies group with 4 updates ([#336](#336)) ([6bda5bc](6bda5bc))
* **deps:** bump undici from 7.16.0 to 7.18.2 ([#323](#323)) ([b4f638f](b4f638f))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant