Skip to content

Bump @actions/core from 1.11.1 to 3.0.1 - #624

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/actions/core-3.0.1
Closed

Bump @actions/core from 1.11.1 to 3.0.1#624
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/actions/core-3.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor

Bumps @actions/core from 1.11.1 to 3.0.1.

Changelog

Sourced from @​actions/core's changelog.

3.0.1

  • Bump undici from 6.23.0 to 6.24.1 #2348

3.0.0

  • Breaking change: Package is now ESM-only
    • CommonJS consumers must use dynamic import() instead of require()

2.0.3

  • Bump @actions/http-client to 3.0.2

2.0.1

  • Bump @​actions/exec from 1.1.1 to 2.0.0 #2199

2.0.0

  • Add support for Node 24 #2110
  • Bump @​actions/http-client from 2.0.1 to 3.0.0
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​actions/core since your current version.


@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/actions/core-3.0.1 branch from c15d338 to 530174f Compare August 25, 2026 03:28
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.11.1 to 3.0.1.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump @actions/core from 1.9.1 to 3.0.1 Bump @actions/core from 1.11.1 to 3.0.1 Aug 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/actions/core-3.0.1 branch from 530174f to 5f38c67 Compare August 25, 2026 04:26
MaddyMicrosoft added a commit that referenced this pull request Aug 25, 2026
@actions/exec 3.0.0 and @actions/core 3.0.1 ship as ESM-only
(package.json "type": "module"), which the CommonJS ncc bundle cannot
require() (see the failing bumps in #623 and #624, same failure mode as the
already-capped @actions/io). Extend the existing ESM cap to these two packages
so Dependabot stays on their 2.x (CommonJS) line until the action migrates to
ESM. @actions/http-client 3.x remains CommonJS and is intentionally not capped.

Co-authored-by: Maddison Das <272712104+MaddyMicrosoft@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor Author

Looks like @actions/core is no longer being updated by Dependabot, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 25, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/actions/core-3.0.1 branch August 25, 2026 06:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants