From 8546b8584e06a0c3dc1d3646c98779ccf6df234a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 12 Feb 2026 18:23:06 +0100
Subject: [PATCH] build(deps-dev): Bump @actions/core from 2.0.2 to 3.0.0 (#70)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps
[@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core)
from 2.0.2 to 3.0.0.
Changelog
Sourced from @actions/core's
changelog.
3.0.0
- Breaking change: Package is now ESM-only
- CommonJS consumers must use dynamic
import() instead of
require()
2.0.3
- Bump
@actions/http-client to 3.0.2
2.0.1
- Bump
@actions/exec from 1.1.1 to 2.0.0 #2199
2.0.0
- Add support for Node 24 #2110
- Bump
@actions/http-client from 2.0.1 to 3.0.0
1.11.1
- Fix uses of
crypto.randomUUID on Node 18 and earlier #1842
1.11.0
- Add platform info utilities #1551
- Remove dependency on
uuid package #1824
1.10.1
- Fix error message reference in oidc utils #1511
1.10.0
saveState and setOutput now use
environment files if available #1178getMultilineInput now correctly trims whitespace by
default #1185
1.9.1
- Randomize delimiter when calling
core.exportVariable
1.9.0
- Added
toPosixPath, toWin32Path and
toPlatformPath utilities #1102
1.8.2
- Update to v2.0.1 of
@actions/http-client #1087
1.8.1
... (truncated)
Commits
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
apps/backend/package.json | 2 +-
pnpm-lock.yaml | 36 ++++++++++++++++++++++--------------
2 files changed, 23 insertions(+), 15 deletions(-)
diff --git a/apps/backend/package.json b/apps/backend/package.json
index c62475ba..aac0359a 100644
--- a/apps/backend/package.json
+++ b/apps/backend/package.json
@@ -33,7 +33,7 @@
"author": "Anurag Hazra",
"license": "MIT",
"devDependencies": {
- "@actions/core": "^2.0.1",
+ "@actions/core": "^3.0.0",
"@actions/github": "^9.0.0",
"@jest/globals": "30.2.0",
"@testing-library/dom": "^10.4.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 9007394d..f6f0727f 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -91,8 +91,8 @@ importers:
version: 1.2.5
devDependencies:
'@actions/core':
- specifier: ^2.0.1
- version: 2.0.2
+ specifier: ^3.0.0
+ version: 3.0.0
'@actions/github':
specifier: ^9.0.0
version: 9.0.0
@@ -223,11 +223,11 @@ importers:
packages:
- '@actions/core@2.0.2':
- resolution: {integrity: sha512-Ast1V7yHbGAhplAsuVlnb/5J8Mtr/Zl6byPPL+Qjq3lmfIgWF1ak1iYfF/079cRERiuTALTXkSuEUdZeDCfGtA==}
+ '@actions/core@3.0.0':
+ resolution: {integrity: sha512-zYt6cz+ivnTmiT/ksRVriMBOiuoUpDCJJlZ5KPl2/FRdvwU3f7MPh9qftvbkXJThragzUZieit2nyHUyw53Seg==}
- '@actions/exec@2.0.0':
- resolution: {integrity: sha512-k8ngrX2voJ/RIN6r9xB82NVqKpnMRtxDoiO+g3olkIUpQNqjArXrCQceduQZCQj3P3xm32pChRLqRrtXTlqhIw==}
+ '@actions/exec@3.0.0':
+ resolution: {integrity: sha512-6xH/puSoNBXb72VPlZVm7vQ+svQpFyA96qdDBvhB8eNZOE8LtPf9L4oAsfzK/crCL8YZ+19fKYVnM63Sl+Xzlw==}
'@actions/github@9.0.0':
resolution: {integrity: sha512-yJ0RoswsAaKcvkmpCE4XxBRiy/whH2SdTBHWzs0gi4wkqTDhXMChjSdqBz/F4AeiDlP28rQqL33iHb+kjAMX6w==}
@@ -235,8 +235,11 @@ packages:
'@actions/http-client@3.0.2':
resolution: {integrity: sha512-JP38FYYpyqvUsz+Igqlc/JG6YO9PaKuvqjM3iGvaLqFnJ7TFmcLyy2IDrY0bI0qCQug8E9K+elv5ZNfw62ZJzA==}
- '@actions/io@2.0.0':
- resolution: {integrity: sha512-Jv33IN09XLO+0HS79aaODsvIRyduiF7NY/F6LYeK5oeUmrsz7aFdRphQjFoESF4jS7lMauDOttKALcpapVDIAg==}
+ '@actions/http-client@4.0.0':
+ resolution: {integrity: sha512-QuwPsgVMsD6qaPD57GLZi9sqzAZCtiJT8kVBCDpLtxhL5MydQ4gS+DrejtZZPdIYyB1e95uCK9Luyds7ybHI3g==}
+
+ '@actions/io@3.0.2':
+ resolution: {integrity: sha512-nRBchcMM+QK1pdjO7/idu86rbJI5YHUKCvKs0KxnSYbVe3F51UfGxuZX4Qy/fWlp6l7gWFwIkrOzN+oUK03kfw==}
'@adobe/css-tools@4.4.4':
resolution: {integrity: sha512-Elp+iwUx5rN5+Y8xLt5/GRoG20WGoDCQ/1Fb+1LiGtvwbDavuSk0jhD/eZdckHAuzcDzccnkv+rEjyWfRx18gg==}
@@ -4617,14 +4620,14 @@ packages:
snapshots:
- '@actions/core@2.0.2':
+ '@actions/core@3.0.0':
dependencies:
- '@actions/exec': 2.0.0
- '@actions/http-client': 3.0.2
+ '@actions/exec': 3.0.0
+ '@actions/http-client': 4.0.0
- '@actions/exec@2.0.0':
+ '@actions/exec@3.0.0':
dependencies:
- '@actions/io': 2.0.0
+ '@actions/io': 3.0.2
'@actions/github@9.0.0':
dependencies:
@@ -4641,7 +4644,12 @@ snapshots:
tunnel: 0.0.6
undici: 6.23.0
- '@actions/io@2.0.0': {}
+ '@actions/http-client@4.0.0':
+ dependencies:
+ tunnel: 0.0.6
+ undici: 6.23.0
+
+ '@actions/io@3.0.2': {}
'@adobe/css-tools@4.4.4': {}