Skip to content

Bump @actions/core from 1.11.1 to 2.0.3#380

Merged
hsbt merged 1 commit intomainfrom
update-actions-core
Mar 24, 2026
Merged

Bump @actions/core from 1.11.1 to 2.0.3#380
hsbt merged 1 commit intomainfrom
update-actions-core

Conversation

@hsbt
Copy link
Copy Markdown
Member

@hsbt hsbt commented Mar 24, 2026

v3.0.0 is ESM-only which is incompatible with the current ncc/CJS build setup. Use v2.0.3 instead which adds Node 24 support while remaining CJS-compatible.

v3.0.0 is ESM-only which is incompatible with the current ncc/CJS build
setup. Use v2.0.3 instead which adds Node 24 support while remaining
CJS-compatible.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Copilot AI review requested due to automatic review settings March 24, 2026 08:37
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the GitHub Actions runtime dependency to a CJS-compatible major version that supports newer Node runtimes while avoiding the ESM-only v3 line.

Changes:

  • Bump @actions/core dependency from ^1.11.1 to ^2.0.3.
  • Refresh generated dist/licenses.txt to reflect updated bundled dependency licensing.

Reviewed changes

Copilot reviewed 1 out of 5 changed files in this pull request and generated 1 comment.

File Description
package.json Updates @actions/core to v2.0.3 for Node 24 support while keeping CJS compatibility.
dist/licenses.txt Updates the bundled third-party license list consistent with regenerated artifacts.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread package.json
"license": "MIT",
"dependencies": {
"@actions/core": "^1.11.1",
"@actions/core": "^2.0.3",
Copy link

Copilot AI Mar 24, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

For GitHub Actions that commit dist/ artifacts, using a caret range can make builds non-reproducible (a fresh install later may pick up a newer 2.x). Consider pinning to an exact version (e.g., 2.0.3) or using a more restrictive range if reproducible builds are a goal.

Suggested change
"@actions/core": "^2.0.3",
"@actions/core": "2.0.3",

Copilot uses AI. Check for mistakes.
@hsbt hsbt merged commit fb7041d into main Mar 24, 2026
17 checks passed
@hsbt hsbt deleted the update-actions-core branch March 24, 2026 08:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants