chore: bump @actions/* and fast-xml-parser dependencies

[Copilot]

Description:
Upgrades @actions packages and fast-xml-parser :

Dependency changes:

• @actions/core ^2.0.0 → ^2.0.3
• @actions/cache ^5.0.1 → ^5.0.5
• @actions/glob ^0.5.0 → ^0.5.1
• @actions/http-client ^3.0.0 → ^3.0.2
• @actions/io ^1.0.2 → ^2.0.0
• fast-xml-parser ^5.3.6 → ^5.5.11.

Related issue:

Check list:

• Mark if documentation changes are required.
• Mark if tests were added or updated to cover the changes.

[Copilot]

Pull request overview

Updates this action’s npm dependency set (Actions toolkit + fast-xml-parser) and refreshes .licensed metadata to reflect the new transitive dependency tree.

Changes:

• Bump @actions/* packages and fast-xml-parser versions in package.json.
• Refresh package-lock.json with resolved dependency updates (including new transitive deps like fast-xml-builder, path-expression-matcher, and updated undici trees).
• Add/update .licenses/npm/*.dep.yml entries to match new resolved versions.

Reviewed changes

Copilot reviewed 18 out of 24 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
package.json	Updates declared dependency ranges for Actions toolkit packages and fast-xml-parser.
package-lock.json	Updates resolved package versions/metadata after install/audit fix.
.licenses/npm/undici-6.24.1.dep.yml	Adds license record for the newly resolved undici@6.24.1.
.licenses/npm/undici-5.29.0.dep.yml	Adds/refreshes license record for the resolved undici@5.29.0.
.licenses/npm/strnum.dep.yml	Updates recorded strnum version to match lockfile resolution.
.licenses/npm/path-expression-matcher.dep.yml	Adds license record for new path-expression-matcher transitive dependency.
.licenses/npm/fast-xml-parser.dep.yml	Updates recorded fast-xml-parser version to match the bump.
.licenses/npm/fast-xml-builder.dep.yml	Adds license record for new fast-xml-builder transitive dependency.
.licenses/npm/brace-expansion.dep.yml	Updates recorded brace-expansion version to match lockfile resolution.
.licenses/npm/@octokit/types-12.3.0.dep.yml	Removes outdated license record for superseded @octokit/types version.
.licenses/npm/@octokit/plugin-rest-endpoint-methods.dep.yml	Updates recorded plugin version to match lockfile resolution.
.licenses/npm/@octokit/openapi-types-19.0.2.dep.yml	Removes outdated license record for superseded @octokit/openapi-types version.
.licenses/npm/@actions/io.dep.yml	Adds/updates license record for @actions/io@2.0.0.
.licenses/npm/@actions/io-1.1.3.dep.yml	Removes outdated license record for @actions/io@1.1.3.
.licenses/npm/@actions/http-client-3.0.2.dep.yml	Updates recorded @actions/http-client version to match the bump.
.licenses/npm/@actions/glob.dep.yml	Updates recorded @actions/glob version to match the bump.
.licenses/npm/@actions/github.dep.yml	Updates recorded @actions/github version to match lockfile resolution.
.licenses/npm/@actions/exec.dep.yml	Adds/updates license record for @actions/exec@2.0.0.
.licenses/npm/@actions/exec-1.1.1.dep.yml	Removes outdated license record for @actions/exec@1.1.1.
.licenses/npm/@actions/core.dep.yml	Updates recorded @actions/core version to match the bump.
.licenses/npm/@actions/core-1.11.1.dep.yml	Removes outdated license record for @actions/core@1.11.1.
.licenses/npm/@actions/cache.dep.yml	Updates recorded @actions/cache version to match the bump.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.