Skip to content

chore: upgrade dependencies and bump version to 10.3.0#1335

Merged
HarithaVattikuti merged 1 commit into
mainfrom
copilot/upgrade-dependencies-to-10-3-0
May 21, 2026
Merged

chore: upgrade dependencies and bump version to 10.3.0#1335
HarithaVattikuti merged 1 commit into
mainfrom
copilot/upgrade-dependencies-to-10-3-0

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented May 5, 2026

Description:
Upgrades several production and dev dependencies to their latest compatible versions, resolves audit vulnerabilities (excluding undici), and bumps the package version to 10.3.0.

Dependency changes (production):

  • @actions/cache: ^5.0.2^5.0.5
  • @actions/core: ^1.11.1^2.0.3
  • @octokit/core: ^5.2.0^5.2.2
  • @octokit/plugin-retry: ^4.1.1^6.1.0
  • semver: ^7.5.4^7.7.4

Dependency changes (dev):

  • @typescript-eslint/eslint-plugin: ^6.2.1^7.18.0
  • @typescript-eslint/parser: ^6.2.1^7.18.0
  • eslint: ^8.46.0^8.56.0
  • eslint-plugin-jest: ^27.2.3^27.7.0

Other changes:

  • Version bumped to 10.3.0 in package.json
  • package-lock.json updated
  • npm audit fix applied — all non-breaking vulnerabilities resolved; undici issues intentionally skipped (fix requires a breaking change to @actions/github)
  • No ESM migration introduced
  • No package.json overrides added
  • licensed cache run and license files updated; licensed status reports 0 errors
  • dist/index.js rebuilt

Related issue:
N/A

Check list:

  • Mark if documentation changes are required.
  • Mark if tests were added or updated to cover the changes.

Agent-Logs-Url: https://github.com/actions/stale/sessions/af04c6aa-aaef-4c90-afb1-a26bd3c983c5

Co-authored-by: chiranjib-swain <196914770+chiranjib-swain@users.noreply.github.com>
Copilot AI requested a review from chiranjib-swain May 5, 2026 12:46
@chiranjib-swain chiranjib-swain marked this pull request as ready for review May 6, 2026 05:27
@chiranjib-swain chiranjib-swain requested a review from a team as a code owner May 6, 2026 05:27
Copilot AI review requested due to automatic review settings May 6, 2026 05:27
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR upgrades production/dev npm dependencies to address security/audit findings, updates the generated lockfile and licensed metadata, and bumps the action/package version to 10.3.0.

Changes:

  • Bump package.json / package-lock.json version to 10.3.0 and update key dependencies (Actions toolkit, Octokit, semver, eslint/typescript-eslint).
  • Refresh package-lock.json to match updated dependency graph (including updated transitive dependencies).
  • Update/add/remove .licenses entries to reflect the new resolved dependency set.

Reviewed changes

Copilot reviewed 21 out of 26 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
package.json Bumps package version and updates direct production/dev dependency ranges.
package-lock.json Updates the resolved dependency tree to match the new ranges.
.licenses/npm/undici-6.25.0.dep.yml Updates undici licensed metadata to the newly resolved version.
.licenses/npm/strnum.dep.yml Updates licensed metadata for strnum.
.licenses/npm/semver-7.7.4.dep.yml Updates licensed metadata for semver.
.licenses/npm/path-expression-matcher.dep.yml Adds licensed metadata for a newly introduced transitive dependency.
.licenses/npm/minimatch.dep.yml Updates licensed metadata for minimatch.
.licenses/npm/fast-xml-parser.dep.yml Updates licensed metadata for fast-xml-parser.
.licenses/npm/fast-xml-builder.dep.yml Adds licensed metadata for a newly introduced transitive dependency.
.licenses/npm/brace-expansion.dep.yml Updates licensed metadata for brace-expansion.
.licenses/npm/@octokit/types-9.3.2.dep.yml Removes licensed metadata for a no-longer-resolved older @octokit/types version.
.licenses/npm/@octokit/plugin-retry.dep.yml Updates licensed metadata for @octokit/plugin-retry.
.licenses/npm/@octokit/openapi-types-18.1.1.dep.yml Removes licensed metadata for a no-longer-resolved older @octokit/openapi-types version.
.licenses/npm/@octokit/core.dep.yml Updates licensed metadata for @octokit/core.
.licenses/npm/@nodable/entities.dep.yml Adds licensed metadata for a newly introduced transitive dependency.
.licenses/npm/@actions/io.dep.yml Adds licensed metadata for @actions/io after dependency updates.
.licenses/npm/@actions/io-1.1.3.dep.yml Removes licensed metadata for an older @actions/io version no longer resolved.
.licenses/npm/@actions/http-client.dep.yml Adds licensed metadata for @actions/http-client after dependency updates.
.licenses/npm/@actions/http-client-2.2.0.dep.yml Removes licensed metadata for an older @actions/http-client version no longer resolved.
.licenses/npm/@actions/glob.dep.yml Updates licensed metadata for @actions/glob.
.licenses/npm/@actions/exec.dep.yml Adds licensed metadata for @actions/exec after dependency updates.
.licenses/npm/@actions/exec-1.1.1.dep.yml Removes licensed metadata for an older @actions/exec version no longer resolved.
.licenses/npm/@actions/core.dep.yml Updates licensed metadata for @actions/core.
.licenses/npm/@actions/core-1.11.1.dep.yml Removes licensed metadata for an older @actions/core version no longer resolved.
.licenses/npm/@actions/cache.dep.yml Updates licensed metadata for @actions/cache.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .licenses/npm/@nodable/entities.dep.yml
@HarithaVattikuti HarithaVattikuti merged commit eb5cf3a into main May 21, 2026
10 of 13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants