Skip to content

chore(deps): bump the action-tools group across 1 directory with 6 updates#206

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/action-tools-1c0f609ab8
Open

chore(deps): bump the action-tools group across 1 directory with 6 updates#206
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/action-tools-1c0f609ab8

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026 •
edited
Loading

Bumps the action-tools group with 6 updates in the / directory:

Package From To
@actions/core 1.11.1 3.0.0
@actions/exec 1.1.1 3.0.0
@actions/glob 0.5.0 0.6.1
@actions/http-client 2.2.3 4.0.0
@actions/io 1.1.3 3.0.2
@actions/tool-cache 2.0.2 4.0.0

Updates @actions/core from 1.11.1 to 3.0.0

Changelog

Sourced from @​actions/core's changelog.

3.0.0

  • Breaking change: Package is now ESM-only
    • CommonJS consumers must use dynamic import() instead of require()

2.0.3

  • Bump @actions/http-client to 3.0.2

2.0.1

  • Bump @​actions/exec from 1.1.1 to 2.0.0 #2199

2.0.0

  • Add support for Node 24 #2110
  • Bump @​actions/http-client from 2.0.1 to 3.0.0
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​actions/core since your current version.


Updates @actions/exec from 1.1.1 to 3.0.0

Changelog

Sourced from @​actions/exec's changelog.

3.0.0

  • Breaking change: Package is now ESM-only
    • CommonJS consumers must use dynamic import() instead of require()

2.0.0

  • Add support for Node 24 #2110
  • Bump @​actions/io dependency from ^1.0.1 to ^2.0.0
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​actions/exec since your current version.


Updates @actions/glob from 0.5.0 to 0.6.1

Changelog

Sourced from @​actions/glob's changelog.

0.6.1

  • Fix a bad import for minimatch

0.6.0

  • Breaking change: Package is now ESM-only
    • CommonJS consumers must use dynamic import() instead of require()

0.5.1

  • Bump @actions/core to 2.0.3
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​actions/glob since your current version.


Updates @actions/http-client from 2.2.3 to 4.0.0

Changelog

Sourced from @​actions/http-client's changelog.

4.0.0

  • Breaking change: Package is now ESM-only
    • CommonJS consumers must use dynamic import() instead of require()

3.0.2

  • Bump undici from 5.28.5 to 6.23.0

3.0.1

  • Add support for ACTIONS_ORCHESTRATION_ID in user-agent and default user-agent #2229

3.0.0

  • Add support for Node 24 #2110
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​actions/http-client since your current version.


Updates @actions/io from 1.1.3 to 3.0.2

Changelog

Sourced from @​actions/io's changelog.

3.0.2

  • Fix: update lock file version

3.0.1

  • Fix: export @actions/io/lib/io-util

3.0.0

  • Breaking change: Package is now ESM-only
    • CommonJS consumers must use dynamic import() instead of require()

2.0.0

  • Add support for Node 24 #2110
  • Ensures consistent behavior for paths on Node 24 with Windows
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​actions/io since your current version.


Updates @actions/tool-cache from 2.0.2 to 4.0.0

Changelog

Sourced from @​actions/tool-cache's changelog.

4.0.0

  • Breaking change: Package is now ESM-only
    • CommonJS consumers must use dynamic import() instead of require()

3.0.1

  • Bump @actions/http-client to 3.0.2

3.0.0

  • Update to v2.0.1 of @actions/core
  • Update to v2.0.0 of @actions/exec
  • Update to v3.0.1 of @actions/http-client
  • Update to v2.0.0 of @actions/io
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​actions/tool-cache since your current version.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 20, 2026
@dependabot
chore(deps): bump the action-tools group with 6 updates
a2ddb08 
Bumps the action-tools group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `1.11.1` | `3.0.0` |
| [@actions/exec](https://github.com/actions/toolkit/tree/HEAD/packages/exec) | `1.1.1` | `3.0.0` |
| [@actions/glob](https://github.com/actions/toolkit/tree/HEAD/packages/glob) | `0.5.0` | `0.6.1` |
| [@actions/http-client](https://github.com/actions/toolkit/tree/HEAD/packages/http-client) | `2.2.3` | `4.0.0` |
| [@actions/io](https://github.com/actions/toolkit/tree/HEAD/packages/io) | `1.1.3` | `3.0.2` |
| [@actions/tool-cache](https://github.com/actions/toolkit/tree/HEAD/packages/tool-cache) | `2.0.2` | `4.0.0` |


Updates `@actions/core` from 1.11.1 to 3.0.0
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `@actions/exec` from 1.1.1 to 3.0.0
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/exec/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/exec)

Updates `@actions/glob` from 0.5.0 to 0.6.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/glob/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/glob)

Updates `@actions/http-client` from 2.2.3 to 4.0.0
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/http-client/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/@actions/cache@4.0.0/packages/http-client)

Updates `@actions/io` from 1.1.3 to 3.0.2
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/io/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/io)

Updates `@actions/tool-cache` from 2.0.2 to 4.0.0
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/tool-cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/@actions/cache@4.0.0/packages/tool-cache)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: action-tools
- dependency-name: "@actions/exec"
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: action-tools
- dependency-name: "@actions/glob"
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: action-tools
- dependency-name: "@actions/http-client"
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: action-tools
- dependency-name: "@actions/io"
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: action-tools
- dependency-name: "@actions/tool-cache"
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: action-tools
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the action-tools group with 6 updates chore(deps): bump the action-tools group across 1 directory with 6 updates Apr 21, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/action-tools-1c0f609ab8 branch from c7c0e7c to a2ddb08 Compare April 21, 2026 14:06
This was referenced Apr 21, 2026
Closed
Open
dhensby added a commit to dhensby/setup-sqlserver that referenced this pull request Apr 22, 2026
@dhensby
chore(deps): upgrade @actions/* toolkit to ESM majors
2eed313 
Bump the `@actions/*` runtime dependencies to their ESM-only major releases
now that the action itself runs as a native ESM module:

- `@actions/core` 1 → 3
- `@actions/exec` 1 → 3
- `@actions/glob` 0.5 → 0.6
- `@actions/http-client` 2 → 4
- `@actions/io` 1 → 3
- `@actions/tool-cache` 2 → 4

No source changes are required for this bump: the public surface we use
(`core.getInput`, `core.platform`, `exec.exec`, `glob.create`,
`HttpClient#get`, `io.mv`, `tc.downloadTool`/`cacheFile`/`cacheDir`/`find`)
is unchanged across these majors, and tests mock the packages at the
module-resolution layer via `node:test`'s `mock.module()`.

Supersedes Dependabot tediousjs#206.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants