From 734aeb208a29d1fc1e93d87de5eebcbe56c44771 Mon Sep 17 00:00:00 2001 From: "snyk-io[bot]" <141718529+snyk-io[bot]@users.noreply.github.com> Date: Thu, 29 Jan 2026 11:44:18 +0000 Subject: [PATCH 1/2] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-UNDICI-14943963 --- package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index 3b2a9400..dc930cad 100644 --- a/package.json +++ b/package.json @@ -25,10 +25,10 @@ "license": "Apache-2.0", "packageManager": "yarn@3.6.3", "dependencies": { - "@actions/core": "^1.10.1", + "@actions/core": "^2.0.0", "@aws-sdk/client-ecr": "^3.529.1", "@aws-sdk/client-ecr-public": "^3.529.1", - "@docker/actions-toolkit": "^0.23.0", + "@docker/actions-toolkit": "^0.71.0", "http-proxy-agent": "^7.0.2", "https-proxy-agent": "^7.0.4" }, From 1c753e897a821fbd2d049793f30d6007f916957b Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 3 Feb 2026 03:38:47 +0000 Subject: [PATCH 2/2] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-UNDICI-14943963