chore: bump actions/github-script from 3.1.0 to 9.0.0 - #310
github-actions[bot] merged 1 commit into
Conversation
Bumps [actions/github-script](https://github.com/actions/github-script) from 3.1.0 to 9.0.0. - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@v3.1...v9.0.0) --- updated-dependencies: - dependency-name: actions/github-script dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
PR SummaryLow Risk Overview Reviewed by Cursor Bugbot for commit c017356. Bugbot is set up for automated code reviews on this repo. Configure here. |
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit c017356. Configure here.
| echo ${{ github.event.workflow_run.event }} | ||
| - name: 'Download artifact' | ||
| uses: actions/github-script@v3.1.0 | ||
| uses: actions/github-script@v9.0.0 |
There was a problem hiding this comment.
API calls use removed github.actions namespace
High Severity
The script calls github.actions.listWorkflowRunArtifacts() and github.actions.downloadArtifact(), but actions/github-script v5+ moved all REST endpoint methods under the github.rest namespace. With v9, github.actions is undefined, causing a TypeError at runtime. These need to be github.rest.actions.listWorkflowRunArtifacts() and github.rest.actions.downloadArtifact() respectively.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit c017356. Configure here.
Bumps actions/github-script from 3.1.0 to 9.0.0.
Release notes
Sourced from actions/github-script's releases.
... (truncated)
Commits
3a2844bMerge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re...ca10bbdfix: use@octokit/core/types import for v7 compatibility86e48e2merge: incorporate main branch changesc108472chore: rebuild dist for v9 upgrade and getOctokit factoryafff112Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag...ff8117eci: fix user-agent test to handle orchestration ID81c6b78ci: use deployment: false to suppress deployment noise from integration tests3953cafdocs: update README examples from@v8to@v9, add getOctokit docs and v9 brea...c17d55bci: add getOctokit integration test joba047196test: add getOctokit integration tests via callAsyncFunctionDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)