Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 27, 2026

This PR contains the following updates:

Package Change Age Confidence
@actions/github (source) 6.0.09.0.0 age confidence

Release Notes

actions/toolkit (@​actions/github)

v9.0.0

  • Breaking change: Package is now ESM-only
    • CommonJS consumers must use dynamic import() instead of require()
    • Example: const { getOctokit, context } = await import('@​actions/github')
  • Fix TypeScript compilation by migrating to ESM, enabling proper imports from @octokit/core/types

v8.0.1

  • Update undici to 6.23.0
  • Update @actions/http-client to 3.0.2

v8.0.0

  • Update @​octokit dependencies
    • @octokit/core ^7.0.6
    • @octokit/plugin-paginate-rest ^14.0.0
    • @octokit/plugin-rest-endpoint-methods ^17.0.0
    • @octokit/request ^10.0.7
    • @octokit/request-error ^7.1.0
  • Breaking change: Minimum Node.js version is now 20 (previously 18)

v7.0.0

  • Update to v3.0.1 of @actions/http-client

v6.0.1


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added dependencies Pull requests that update a dependency file major npm labels Jan 27, 2026
@renovate renovate bot requested a review from a team as a code owner January 27, 2026 23:14
@renovate renovate bot force-pushed the renovate/actions-github-9.x branch from 032bfed to e673e15 Compare February 2, 2026 16:04
@@ -22,7 +22,7 @@
"homepage": "https://github.com/clevyr/deploy-matrix-action#readme",
"dependencies": {
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: The build tool @vercel/ncc cannot bundle the new ESM-only @actions/github dependency, creating a broken artifact that will cause the action to crash at runtime.
Severity: CRITICAL

Suggested Fix

Update the build process to correctly handle ESM modules. This can be achieved by either upgrading @vercel/ncc to a version with proper ESM support or replacing it with an alternative bundler like esbuild or webpack. Alternatively, revert the @actions/github dependency to a CommonJS-compatible version until the build system is updated.

Prompt for AI Agent
Review the code at the location below. A potential bug has been identified by an AI
agent.
Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not
valid.

Location: package.json#L23

Potential issue: The project's build tool, `@vercel/[email protected]`, does not correctly
handle the newly introduced ESM-only dependency `@actions/[email protected]`. While the build
command (`npm run build`) completes without error, it produces a non-functional
`dist/index.js` file that is missing the core application logic from `src/index.js`.
When the GitHub Action is triggered, it will attempt to execute this broken bundle,
resulting in a runtime crash and complete failure of the action.

Did we get this right? 👍 / 👎 to inform future reviews.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file major npm

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants