Skip to content

Bump @actions/core from 2.0.3 to 3.0.1 - #5

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/actions/core-3.0.1
Closed

Bump @actions/core from 2.0.3 to 3.0.1#5
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/actions/core-3.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown

Bumps @actions/core from 2.0.3 to 3.0.1.

Changelog

Sourced from @​actions/core's changelog.

3.0.1

  • Bump undici from 6.23.0 to 6.24.1 #2348

3.0.0

  • Breaking change: Package is now ESM-only
    • CommonJS consumers must use dynamic import() instead of require()
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 12, 2026
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 2.0.3 to 3.0.1.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump @actions/core from 1.11.1 to 3.0.1 Bump @actions/core from 2.0.3 to 3.0.1 Aug 13, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/actions/core-3.0.1 branch from 212df15 to 3274872 Compare August 13, 2026 16:41
@BrandonLWhite

Copy link
Copy Markdown
Member

Not taking this one. @actions/core@3.0.0+ is ESM-only (require() throws at runtime), and this repo's src/ and tests are CommonJS. #19 deliberately capped @actions/core at ^2.0.3 — the latest major that's still CommonJS-compatible — rather than following this bump. See the ESM-only note in .agents/INSTRUCTIONS.md.

@dependabot ignore this major version

@dependabot @github

dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you about version 3.x.x again, unless you re-open this PR.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/actions/core-3.0.1 branch August 13, 2026 16:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant