From 9393de4c7214e915a5abed3ea653a76ad8e8afe6 Mon Sep 17 00:00:00 2001 From: Floatpane Bot Date: Sun, 3 May 2026 13:18:27 +0400 Subject: [PATCH] chore(deps): actions/github-script ^ v9 (#1221) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ## What? This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/github-script](https://redirect.github.com/actions/github-script) | action | major | `v7` → `v9` | --- ### Release Notes
actions/github-script (actions/github-script) ### [`v9`](https://redirect.github.com/actions/github-script/compare/v9.0.0...v9.0.0) [Compare Source](https://redirect.github.com/actions/github-script/compare/v9.0.0...v9.0.0) ### [`v9.0.0`](https://redirect.github.com/actions/github-script/releases/tag/v9.0.0) [Compare Source](https://redirect.github.com/actions/github-script/compare/v8.0.0...v9.0.0) **New features:** - **`getOctokit` factory function** — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See [Creating additional clients with `getOctokit`](https://redirect.github.com/actions/github-script#creating-additional-clients-with-getoctokit) for details and examples. - **Orchestration ID in user-agent** — The `ACTIONS_ORCHESTRATION_ID` environment variable is automatically appended to the user-agent string for request tracing. **Breaking changes:** - **`require('@​actions/github')` no longer works in scripts.** The upgrade to `@actions/github` v9 (ESM-only) means `require('@​actions/github')` will fail at runtime. If you previously used patterns like `const { getOctokit } = require('@​actions/github')` to create secondary clients, use the new injected `getOctokit` function instead — it's available directly in the script context with no imports needed. - `getOctokit` is now an injected function parameter. Scripts that declare `const getOctokit = ...` or `let getOctokit = ...` will get a `SyntaxError` because JavaScript does not allow `const`/`let` redeclaration of function parameters. Use the injected `getOctokit` directly, or use `var getOctokit = ...` if you need to redeclare it. - If your script accesses other `@actions/github` internals beyond the standard `github`/`octokit` client, you may need to update those references for v9 compatibility. ##### What's Changed - Add ACTIONS\_ORCHESTRATION\_ID to user-agent string by [@​Copilot](https://redirect.github.com/Copilot) in [#​695](https://redirect.github.com/actions/github-script/pull/695) - ci: use deployment: false for integration test environments by [@​salmanmkc](https://redirect.github.com/salmanmkc) in [#​712](https://redirect.github.com/actions/github-script/pull/712) - feat!: add getOctokit to script context, upgrade [@​actions/github](https://redirect.github.com/actions/github) v9, [@​octokit/core](https://redirect.github.com/octokit/core) v7, and related packages by [@​salmanmkc](https://redirect.github.com/salmanmkc) in [#​700](https://redirect.github.com/actions/github-script/pull/700) ##### New Contributors - [@​Copilot](https://redirect.github.com/Copilot) made their first contribution in [#​695](https://redirect.github.com/actions/github-script/pull/695) **Full Changelog**: ### [`v8`](https://redirect.github.com/actions/github-script/releases/tag/v8): .0.0 [Compare Source](https://redirect.github.com/actions/github-script/compare/v8.0.0...v8.0.0) ##### What's Changed - Update Node.js version support to 24.x by [@​salmanmkc](https://redirect.github.com/salmanmkc) in [#​637](https://redirect.github.com/actions/github-script/pull/637) - README for updating actions/github-script from v7 to v8 by [@​sneha-krip](https://redirect.github.com/sneha-krip) in [#​653](https://redirect.github.com/actions/github-script/pull/653) ##### ⚠️ Minimum Compatible Runner Version **v2.327.1**\ [Release Notes](https://redirect.github.com/actions/runner/releases/tag/v2.327.1) Make sure your runner is updated to this version or newer to use this release. ##### New Contributors - [@​salmanmkc](https://redirect.github.com/salmanmkc) made their first contribution in [#​637](https://redirect.github.com/actions/github-script/pull/637) - [@​sneha-krip](https://redirect.github.com/sneha-krip) made their first contribution in [#​653](https://redirect.github.com/actions/github-script/pull/653) **Full Changelog**: ### [`v8.0.0`](https://redirect.github.com/actions/github-script/compare/v7.1.0...v8.0.0) [Compare Source](https://redirect.github.com/actions/github-script/compare/v7.1.0...v8.0.0) ### [`v7.1.0`](https://redirect.github.com/actions/github-script/releases/tag/v7.1.0) [Compare Source](https://redirect.github.com/actions/github-script/compare/v7.0.1...v7.1.0) ##### What's Changed - Upgrade husky to v9 by [@​benelan](https://redirect.github.com/benelan) in [#​482](https://redirect.github.com/actions/github-script/pull/482) - Add workflow file for publishing releases to immutable action package by [@​Jcambass](https://redirect.github.com/Jcambass) in [#​485](https://redirect.github.com/actions/github-script/pull/485) - Upgrade IA Publish by [@​Jcambass](https://redirect.github.com/Jcambass) in [#​486](https://redirect.github.com/actions/github-script/pull/486) - Fix workflow status badges by [@​joshmgross](https://redirect.github.com/joshmgross) in [#​497](https://redirect.github.com/actions/github-script/pull/497) - Update usage of `actions/upload-artifact` by [@​joshmgross](https://redirect.github.com/joshmgross) in [#​512](https://redirect.github.com/actions/github-script/pull/512) - Clear up package name confusion by [@​joshmgross](https://redirect.github.com/joshmgross) in [#​514](https://redirect.github.com/actions/github-script/pull/514) - Update dependencies with `npm audit fix` by [@​joshmgross](https://redirect.github.com/joshmgross) in [#​515](https://redirect.github.com/actions/github-script/pull/515) - Specify that the used script is JavaScript by [@​timotk](https://redirect.github.com/timotk) in [#​478](https://redirect.github.com/actions/github-script/pull/478) - chore: Add Dependabot for NPM and Actions by [@​nschonni](https://redirect.github.com/nschonni) in [#​472](https://redirect.github.com/actions/github-script/pull/472) - Define `permissions` in workflows and update actions by [@​joshmgross](https://redirect.github.com/joshmgross) in [#​531](https://redirect.github.com/actions/github-script/pull/531) - chore: Add Dependabot for .github/actions/install-dependencies by [@​nschonni](https://redirect.github.com/nschonni) in [#​532](https://redirect.github.com/actions/github-script/pull/532) - chore: Remove .vscode settings by [@​nschonni](https://redirect.github.com/nschonni) in [#​533](https://redirect.github.com/actions/github-script/pull/533) - ci: Use github/setup-licensed by [@​nschonni](https://redirect.github.com/nschonni) in [#​473](https://redirect.github.com/actions/github-script/pull/473) - make octokit instance available as octokit on top of github, to make it easier to seamlessly copy examples from GitHub rest api or octokit documentations by [@​iamstarkov](https://redirect.github.com/iamstarkov) in [#​508](https://redirect.github.com/actions/github-script/pull/508) - Remove `octokit` README updates for v7 by [@​joshmgross](https://redirect.github.com/joshmgross) in [#​557](https://redirect.github.com/actions/github-script/pull/557) - docs: add "exec" usage examples by [@​neilime](https://redirect.github.com/neilime) in [#​546](https://redirect.github.com/actions/github-script/pull/546) - Bump ruby/setup-ruby from 1.213.0 to 1.222.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​563](https://redirect.github.com/actions/github-script/pull/563) - Bump ruby/setup-ruby from 1.222.0 to 1.229.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​575](https://redirect.github.com/actions/github-script/pull/575) - Clearly document passing inputs to the `script` by [@​joshmgross](https://redirect.github.com/joshmgross) in [#​603](https://redirect.github.com/actions/github-script/pull/603) - Update README.md by [@​nebuk89](https://redirect.github.com/nebuk89) in [#​610](https://redirect.github.com/actions/github-script/pull/610) ##### New Contributors - [@​benelan](https://redirect.github.com/benelan) made their first contribution in [#​482](https://redirect.github.com/actions/github-script/pull/482) - [@​Jcambass](https://redirect.github.com/Jcambass) made their first contribution in [#​485](https://redirect.github.com/actions/github-script/pull/485) - [@​timotk](https://redirect.github.com/timotk) made their first contribution in [#​478](https://redirect.github.com/actions/github-script/pull/478) - [@​iamstarkov](https://redirect.github.com/iamstarkov) made their first contribution in [#​508](https://redirect.github.com/actions/github-script/pull/508) - [@​neilime](https://redirect.github.com/neilime) made their first contribution in [#​546](https://redirect.github.com/actions/github-script/pull/546) - [@​nebuk89](https://redirect.github.com/nebuk89) made their first contribution in [#​610](https://redirect.github.com/actions/github-script/pull/610) **Full Changelog**: ### [`v7.0.1`](https://redirect.github.com/actions/github-script/releases/tag/v7.0.1) [Compare Source](https://redirect.github.com/actions/github-script/compare/v7...v7.0.1) ##### What's Changed - Avoid setting `baseUrl` to undefined when input is not provided by [@​joshmgross](https://redirect.github.com/joshmgross) in [#​439](https://redirect.github.com/actions/github-script/pull/439) **Full Changelog**:
## Why? Automated dependency update via Renovate. --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://redirect.github.com/renovatebot/renovate). --- .github/workflows/feature-popularity.yml | 4 ++-- .github/workflows/needs-response.yml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/feature-popularity.yml b/.github/workflows/feature-popularity.yml index 2b7025c96d81f7d0766c545257c4f99725b81f17..0352acf3ce0774205cca2a00eae11020d99a83ca 100644 --- a/.github/workflows/feature-popularity.yml +++ b/.github/workflows/feature-popularity.yml @@ -15,7 +15,7 @@ jobs: if: github.event_name == 'issues' && github.event.action == 'opened' && contains(github.event.issue.labels.*.name, 'enhancement') runs-on: ubuntu-latest steps: - - uses: actions/github-script@v7 + - uses: actions/github-script@v9 with: github-token: ${{ secrets.HOMEBREW_GITHUB_TOKEN }} script: | @@ -35,7 +35,7 @@ jobs: if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch' runs-on: ubuntu-latest steps: - - uses: actions/github-script@v7 + - uses: actions/github-script@v9 with: github-token: ${{ secrets.HOMEBREW_GITHUB_TOKEN }} script: | diff --git a/.github/workflows/needs-response.yml b/.github/workflows/needs-response.yml index c1cd71cb6b6d6d1f3a1b9325a64578dc18722448..a0b0199a261b63617b037151968f1478f12bc47b 100644 --- a/.github/workflows/needs-response.yml +++ b/.github/workflows/needs-response.yml @@ -16,7 +16,7 @@ jobs: if: > contains(fromJSON('["OWNER","MEMBER","COLLABORATOR"]'), github.event.comment.author_association) && github.event.comment.user.login != github.event.issue.user.login - uses: actions/github-script@v7 + uses: actions/github-script@v9 with: github-token: ${{ secrets.HOMEBREW_GITHUB_TOKEN }} script: | @@ -29,7 +29,7 @@ jobs: - name: Remove needs-response when issue author replies if: github.event.comment.user.login == github.event.issue.user.login - uses: actions/github-script@v7 + uses: actions/github-script@v9 with: github-token: ${{ secrets.HOMEBREW_GITHUB_TOKEN }} script: |