Bump the production-dependencies group with 3 updates

[dependabot]

Bumps the production-dependencies group with 3 updates: @actions/core, @actions/github and @octokit/action.

Updates @actions/core from 1.11.1 to 3.0.1

Changelog

Sourced from @​actions/core's changelog.

3.0.1

• Bump undici from 6.23.0 to 6.24.1 #2348

3.0.0

• Breaking change: Package is now ESM-only
  • CommonJS consumers must use dynamic import() instead of require()

2.0.3

• Bump @actions/http-client to 3.0.2

2.0.1

• Bump @​actions/exec from 1.1.1 to 2.0.0 #2199

2.0.0

• Add support for Node 24 #2110
• Bump @​actions/http-client from 2.0.1 to 3.0.0

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​actions/core since your current version.

Updates @actions/github from 6.0.1 to 9.1.1

Changelog

Sourced from @​actions/github's changelog.

9.1.1

• Bump undici from 6.23.0 to 6.24.0 #2346

9.1.0

• Append actions_orchestration_id to user-agent when the ACTIONS_ORCHESTRATION_ID environment variable is set #2364

9.0.0

• Breaking change: Package is now ESM-only
  • CommonJS consumers must use dynamic import() instead of require()
  • Example: const { getOctokit, context } = await import('@actions/github')
• Fix TypeScript compilation by migrating to ESM, enabling proper imports from @octokit/core/types

8.0.1

• Update undici to 6.23.0
• Update @actions/http-client to 3.0.2

8.0.0

• Update @​octokit dependencies
  • @octokit/core ^7.0.6
  • @octokit/plugin-paginate-rest ^14.0.0
  • @octokit/plugin-rest-endpoint-methods ^17.0.0
  • @octokit/request ^10.0.7
  • @octokit/request-error ^7.1.0
• Breaking change: Minimum Node.js version is now 20 (previously 18)

7.0.0

• Update to v3.0.1 of @actions/http-client

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​actions/github since your current version.

Updates @octokit/action from 6.1.0 to 8.0.4

Release notes

Sourced from @​octokit/action's releases.

v8.0.4

8.0.4 (2025-11-04)

Bug Fixes

• deps: update dependency undici to v7 (#662) (48feb05)

v8.0.3

8.0.3 (2025-11-03)

Bug Fixes

• deps: update octokit monorepo (major) (#710) (385e049)

v8.0.2

8.0.2 (2025-05-26)

Bug Fixes

• deps: update dependency @​octokit/plugin-rest-endpoint-methods to v16 (#703) (25f537f)

v8.0.1

8.0.1 (2025-05-21)

Bug Fixes

• deps: update octokit monorepo (major) (#702) (76679e4)

v8.0.0

8.0.0 (2025-05-20)

Continuous Integration

• stop testing against NodeJS v18 (#700) (b6a290e)

BREAKING CHANGES

• Drop support for NodeJS v18

• build: set minimal node version in build script to v20

• ci: stop testing against NodeJS v18

v7.0.2

... (truncated)

Commits

• 1c4486a chore(deps): update dependency prettier to v3.6.2 (#705)
• 24ae278 chore(deps): update dependency @​types/node to v24 (#718)
• 48feb05 fix(deps): update dependency undici to v7 (#662)
• f394dee chore(deps): update vitest monorepo to v4 (major) (#717)
• ce067a1 build(deps): lock file maintenance (#712)
• 77396df ci(action): update actions/checkout action to v5 (#707)
• 385e049 fix(deps): update octokit monorepo (major) (#710)
• f0edfd1 ci(action): update actions/setup-node action to v6 (#715)
• 3e52577 ci(action): update peter-evans/create-or-update-comment action to v5 (#713)
• 99dc11f ci(action): update github/codeql-action action to v4 (#714)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[felickz]

@copilot fix the failing CI (https://github.com/advanced-security/secret-scanning-notifications/actions/runs/33928593560/job/101202360222?pr=229 https://github.com/advanced-security/secret-scanning-notifications/actions/runs/33928593560/job/101202360093?pr=229 https://github.com/advanced-security/secret-scanning-notifications/actions/runs/33928593381/job/101202359248?pr=229) for this PR

[felickz]

@copilot resolve the merge conflicts in this pull request - rebuild dist too

[Copilot]

@copilot fix the failing CI (https://github.com/advanced-security/secret-scanning-notifications/actions/runs/33928593560/job/101202360222?pr=229 https://github.com/advanced-security/secret-scanning-no...

Fixed the ESM compatibility failures in 7a65d44. npm run all now passes (15 tests), and changed files were scanned for secrets. Code review passed with no security findings; CodeQL timed out on its final run.

[Copilot]

@copilot resolve the merge conflicts in this pull request - rebuild dist too

Resolved the conflicts by merging the current main branch in 4b4e656 and rebuilt dist/. npm run all passes (15 tests), secret scanning passed, and CodeQL found no alerts.