chore(deps): bump the production-dependencies group with 3 updates by dependabot[bot] · Pull Request #348 · afc163/surge-preview

dependabot · 2026-06-11T04:03:03Z

Bumps the production-dependencies group with 3 updates: @actions/core, @actions/exec and @actions/github.

Updates @actions/core from 1.11.1 to 3.0.1

Changelog

Sourced from @actions/core's changelog.

3.0.1

Bump undici from 6.23.0 to 6.24.1 #2348

3.0.0

Breaking change: Package is now ESM-only

CommonJS consumers must use dynamic import() instead of require()

2.0.3

Bump @actions/http-client to 3.0.2

2.0.1

Bump @actions/exec from 1.1.1 to 2.0.0 #2199

2.0.0

Add support for Node 24 #2110

Bump @actions/http-client from 2.0.1 to 3.0.0

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @actions/core since your current version.

Updates @actions/exec from 1.1.1 to 3.0.0

Changelog

Sourced from @actions/exec's changelog.

3.0.0

Breaking change: Package is now ESM-only

CommonJS consumers must use dynamic import() instead of require()

2.0.0

Add support for Node 24 #2110

Bump @actions/io dependency from ^1.0.1 to ^2.0.0

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @actions/exec since your current version.

Updates @actions/github from 5.1.1 to 9.1.1

Changelog

Sourced from @actions/github's changelog.

9.1.1

Bump undici from 6.23.0 to 6.24.0 #2346

9.1.0

Append actions_orchestration_id to user-agent when the ACTIONS_ORCHESTRATION_ID environment variable is set #2364

9.0.0

Breaking change: Package is now ESM-only

CommonJS consumers must use dynamic import() instead of require()

Example: const { getOctokit, context } = await import('@actions/github')

Fix TypeScript compilation by migrating to ESM, enabling proper imports from @octokit/core/types

8.0.1

Update undici to 6.23.0

Update @actions/http-client to 3.0.2

8.0.0

Update @octokit dependencies

@octokit/core ^7.0.6

@octokit/plugin-paginate-rest ^14.0.0

@octokit/plugin-rest-endpoint-methods ^17.0.0

@octokit/request ^10.0.7

@octokit/request-error ^7.1.0

Breaking change: Minimum Node.js version is now 20 (previously 18)

7.0.0

Update to v3.0.1 of @actions/http-client

6.0.1

Dependency updates #2043

Add context.runAttempt #1588

6.0.0

Support the latest Octokit in @actions/github #1553

Drop support of NodeJS v14, v16

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @actions/github since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 3 updates: [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core), [@actions/exec](https://github.com/actions/toolkit/tree/HEAD/packages/exec) and [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github). Updates `@actions/core` from 1.11.1 to 3.0.1 - [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core) Updates `@actions/exec` from 1.1.1 to 3.0.0 - [Changelog](https://github.com/actions/toolkit/blob/main/packages/exec/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/exec) Updates `@actions/github` from 5.1.1 to 9.1.1 - [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github) --- updated-dependencies: - dependency-name: "@actions/core" dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@actions/exec" dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@actions/github" dependency-version: 9.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

pr-code-reviewer · 2026-06-11T04:03:08Z

👋 Hi there!

Everything looks good!

_{^{Automatically generated with the help of gpt-3.5-turbo.

Feedback? Please don't hesitate to drop me an email at webber@takken.io.}}

github-actions · 2026-06-11T04:03:13Z

❌ Deploy failed

	❌ Failed
	🔗 Preview ~~https://afc163-surge-preview-preview2-pr-348.surge.sh~~ _{(may be unavailable)}
	📝 Commit	`8eb04a7`
	🪵 Logs	View logs

📋 Build log (last lines)


added 364 packages, and audited 365 packages in 13s

67 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities

> surge-preview@1.13.0 build-preview
> node ./utils/gen-preview.js public/preview2

node:internal/modules/cjs/loader:671
      throw e;
      ^

Error [ERR_PACKAGE_PATH_NOT_EXPORTED]: No "exports" main defined in /home/runner/work/surge-preview/surge-preview/node_modules/@actions/github/package.json
    at exportsNotFound (node:internal/modules/esm/resolve:314:10)
    at packageExportsResolve (node:internal/modules/esm/resolve:604:13)
    at resolveExports (node:internal/modules/cjs/loader:664:36)
    at Function._findPath (node:internal/modules/cjs/loader:731:31)
    at Function._resolveFilename (node:internal/modules/cjs/loader:1415:27)
    at defaultResolveImpl (node:internal/modules/cjs/loader:1040:19)
    at resolveForCJSWithHooks (node:internal/modules/cjs/loader:1045:22)
    at Function._load (node:internal/modules/cjs/loader:1216:25)
    at wrapModuleLoad (node:internal/modules/cjs/loader:254:19)
    at Module.require (node:internal/modules/cjs/loader:1527:12) {
  code: 'ERR_PACKAGE_PATH_NOT_EXPORTED'
}

Node.js v22.22.3

_{🤖 Powered by surge-preview}

github-actions · 2026-06-11T04:03:14Z

❌ Deploy failed

	❌ Failed
	🔗 Preview ~~https://afc163-surge-preview-preview-pr-348.surge.sh~~ _{(may be unavailable)}
	📝 Commit	`8eb04a7`
	🪵 Logs	View logs

📋 Build log (last lines)


added 364 packages, and audited 365 packages in 12s

67 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities

> surge-preview@1.13.0 build-preview
> node ./utils/gen-preview.js public/preview

node:internal/modules/cjs/loader:671
      throw e;
      ^

Error [ERR_PACKAGE_PATH_NOT_EXPORTED]: No "exports" main defined in /home/runner/work/surge-preview/surge-preview/node_modules/@actions/github/package.json
    at exportsNotFound (node:internal/modules/esm/resolve:314:10)
    at packageExportsResolve (node:internal/modules/esm/resolve:604:13)
    at resolveExports (node:internal/modules/cjs/loader:664:36)
    at Function._findPath (node:internal/modules/cjs/loader:731:31)
    at Function._resolveFilename (node:internal/modules/cjs/loader:1415:27)
    at defaultResolveImpl (node:internal/modules/cjs/loader:1040:19)
    at resolveForCJSWithHooks (node:internal/modules/cjs/loader:1045:22)
    at Function._load (node:internal/modules/cjs/loader:1216:25)
    at wrapModuleLoad (node:internal/modules/cjs/loader:254:19)
    at Module.require (node:internal/modules/cjs/loader:1527:12) {
  code: 'ERR_PACKAGE_PATH_NOT_EXPORTED'
}

Node.js v22.22.3

_{🤖 Powered by surge-preview}

socket-security · 2026-06-11T04:03:23Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/@actions/exec@3.0.0
	npm/@actions/github@9.1.1
	npm/@actions/core@3.0.1

View full report

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 11, 2026

dosubot Bot added the size:XS This PR changes 0-9 lines, ignoring generated files. label Jun 11, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the production-dependencies group with 3 updates#348

chore(deps): bump the production-dependencies group with 3 updates#348
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-34ee95b8b3

dependabot Bot commented on behalf of github Jun 11, 2026 •

edited

Loading

Uh oh!

pr-code-reviewer Bot commented Jun 11, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 11, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 11, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.0.1

3.0.0

2.0.3

2.0.1

2.0.0

3.0.0

2.0.0

9.1.1

9.1.0

9.0.0

8.0.1

8.0.0

7.0.0

6.0.1

6.0.0

Uh oh!

pr-code-reviewer Bot commented Jun 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

👋 Hi there!

Uh oh!

github-actions Bot commented Jun 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌ Deploy failed

Uh oh!

github-actions Bot commented Jun 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌ Deploy failed

Uh oh!

socket-security Bot commented Jun 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 11, 2026 •

edited

Loading

pr-code-reviewer Bot commented Jun 11, 2026 •

edited

Loading

github-actions Bot commented Jun 11, 2026 •

edited

Loading

github-actions Bot commented Jun 11, 2026 •

edited

Loading