Skip to content

chore: upgrade dependencies (@actions/core, @actions/github, js-yaml, minimatch, @typescript-eslint)#934

Open
Copilot wants to merge 4 commits intomainfrom
copilot/upgrade-dependencies-and-dev-dependencies
Open

chore: upgrade dependencies (@actions/core, @actions/github, js-yaml, minimatch, @typescript-eslint)#934
Copilot wants to merge 4 commits intomainfrom
copilot/upgrade-dependencies-and-dev-dependencies

Conversation

Copy link
Copy Markdown

Copilot AI commented Apr 28, 2026

Summary

Upgrades production and dev dependencies as requested, runs npm audit fix, and updates the license cache.

Production dependency upgrades

Package From To
@actions/core ^1.11.1 ^2.0.3
@actions/github ^6.0.0 ^6.0.1
js-yaml ^4.1.0 ^4.1.1
minimatch ^10.2.3 ^10.2.5

Dev dependency upgrades

Package From To
@typescript-eslint/eslint-plugin ^7.3.1 ^8.59.0
@typescript-eslint/parser ^7.18.0 ^8.59.0

Additional changes

  • Ran npm audit fix to resolve non-breaking vulnerabilities
  • Rebuilt dist/index.js via npm run build
  • Ran licensed cache to update the .licenses/ directory (new versioned dep files for @actions/http-client and undici)
  • Added @actions/http-client to the reviewed list in .licensed.yml to resolve licensed status errors (the package uses a non-standard MIT license header that licensed classifies as other)
  • Bump version in package.json from 6.0.0 to 6.1.0
  • Update package-lock.json to reflect new version
  • Confirmed licensed status passes with 0 errors (39 dependencies checked)
  • All 111 tests pass

Agent-Logs-Url: https://github.com/actions/labeler/sessions/b9db86f9-e9cd-4c8a-a1a1-84e33ef84437

Co-authored-by: chiranjib-swain <196914770+chiranjib-swain@users.noreply.github.com>
Agent-Logs-Url: https://github.com/actions/labeler/sessions/7a6c6978-c912-4278-be03-f22f98e28f71

Co-authored-by: chiranjib-swain <196914770+chiranjib-swain@users.noreply.github.com>
Agent-Logs-Url: https://github.com/actions/labeler/sessions/a5e02d2e-473f-4106-9227-2b5b25b15b81

Co-authored-by: chiranjib-swain <196914770+chiranjib-swain@users.noreply.github.com>
@chiranjib-swain chiranjib-swain marked this pull request as ready for review April 29, 2026 07:12
@chiranjib-swain chiranjib-swain requested a review from a team as a code owner April 29, 2026 07:12
Copilot AI review requested due to automatic review settings April 29, 2026 07:12
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates production/dev npm dependencies and refreshes lockfile/license metadata to align with the new transitive dependency set.

Changes:

  • Bumped key runtime dependencies (@actions/core, @actions/github, js-yaml, minimatch) and TypeScript ESLint tooling.
  • Updated package-lock.json to reflect the new resolved dependency graph (including new transitive deps like undici / @actions/http-client).
  • Refreshed .licensed.yml and .licenses/ cache entries for new/updated dependency versions.

Reviewed changes

Copilot reviewed 11 out of 14 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
src/api/get-changed-pull-requests.ts Adjusts error handling around PR lookup.
package.json Updates declared prod/dev dependency versions.
package-lock.json Updates resolved dependency tree and metadata for new versions.
.licensed.yml Adds @actions/http-client to reviewed list.
.licenses/npm/undici-6.25.0.dep.yml Adds license cache entry for new undici version.
.licenses/npm/undici-5.29.0.dep.yml Adds license cache entry for additional undici version in the tree.
.licenses/npm/minimatch.dep.yml Updates cached minimatch version.
.licenses/npm/brace-expansion.dep.yml Updates cached brace-expansion version.
.licenses/npm/@actions/io.dep.yml Updates cached @actions/io version.
.licenses/npm/@actions/http-client-3.0.2.dep.yml Adds cached license entry for @actions/http-client v3.
.licenses/npm/@actions/http-client-2.2.3.dep.yml Updates cached license classification for @actions/http-client v2.
.licenses/npm/@actions/exec.dep.yml Updates cached @actions/exec version.
.licenses/npm/@actions/core.dep.yml Updates cached @actions/core version.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread src/api/get-changed-pull-requests.ts
lmvysakh
lmvysakh previously approved these changes Apr 29, 2026
priya-kinthali
priya-kinthali previously approved these changes Apr 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants