Skip to content

fix(deps): bump @actions/core from 1.11.1 to 3.0.0 - #337

Merged
parkerbxyz merged 2 commits into
nextfrom
dependabot/npm_and_yarn/actions/core-3.0.0
Mar 13, 2026
Merged

fix(deps): bump @actions/core from 1.11.1 to 3.0.0#337
parkerbxyz merged 2 commits into
nextfrom
dependabot/npm_and_yarn/actions/core-3.0.0

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubMar 3, 2026

Copy link
Copy Markdown
Contributor

Bumps @actions/core from 1.11.1 to 3.0.0.

Changelog

Sourced from @​actions/core's changelog.

3.0.0

  • Breaking change: Package is now ESM-only
    • CommonJS consumers must use dynamic import() instead of require()

2.0.3

  • Bump @actions/http-client to 3.0.2

2.0.1

  • Bump @​actions/exec from 1.1.1 to 2.0.0 #2199

2.0.0

  • Add support for Node 24 #2110
  • Bump @​actions/http-client from 2.0.1 to 3.0.0
Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​actions/core since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 3, 2026
@dependabot
dependabotBot requested a review from a team as a code ownerMarch 3, 2026 20:24
@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 3, 2026
@parkerbxyz
parkerbxyz changed the base branch from main to nextMarch 13, 2026 21:53
@parkerbxyz

Copy link
Copy Markdown
Contributor

@dependabot recreate

@dependabot
dependabotBot changed the base branch from next to mainMarch 13, 2026 22:14
@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/actions/core-3.0.0 branch from 9af4f0b to 06ba1b2CompareMarch 13, 2026 22:14
@parkerbxyz
parkerbxyzforce-pushed the dependabot/npm_and_yarn/actions/core-3.0.0 branch from f9a9a63 to 024dbd0CompareMarch 13, 2026 22:18
@parkerbxyz
parkerbxyz changed the base branch from main to nextMarch 13, 2026 22:20
@parkerbxyz

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot@github

dependabotBot commented on behalf of githubMar 13, 2026

Copy link
Copy Markdown
ContributorAuthor

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

parkerbxyzand others added 2 commits March 13, 2026 15:26
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@actions/core v3.0.0 is a pure ESM package with only named exports.
Change `import core from` to `import * as core from` in all source files.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@parkerbxyz
parkerbxyzforce-pushed the dependabot/npm_and_yarn/actions/core-3.0.0 branch from 10bdf88 to 529c560CompareMarch 13, 2026 22:26
@parkerbxyz
parkerbxyz merged commit d5bf4ce into nextMar 13, 2026
3 checks passed
@parkerbxyz
parkerbxyz deleted the dependabot/npm_and_yarn/actions/core-3.0.0 branch March 13, 2026 22:27
parkerbxyz added a commit that referenced this pull request Mar 13, 2026
Bumps
[@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core)
from 1.11.1 to 3.0.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md"><code>@​actions/core</code>'s
changelog</a>.</em></p>
<blockquote>
<h2>3.0.0</h2>
<ul>
<li><strong>Breaking change</strong>: Package is now ESM-only
<ul>
<li>CommonJS consumers must use dynamic <code>import()</code> instead of
<code>require()</code></li>
</ul>
</li>
</ul>
<h2>2.0.3</h2>
<ul>
<li>Bump <code>@actions/http-client</code> to <code>3.0.2</code></li>
</ul>
<h2>2.0.1</h2>
<ul>
<li>Bump <code>@​actions/exec</code> from 1.1.1 to 2.0.0 <a
href="https://redirect.github.com/actions/toolkit/pull/2199">#2199</a></li>
</ul>
<h2>2.0.0</h2>
<ul>
<li>Add support for Node 24 <a
href="https://redirect.github.com/actions/toolkit/pull/2110">#2110</a></li>
<li>Bump <code>@​actions/http-client</code> from 2.0.1 to 3.0.0</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/actions/toolkit/commits/HEAD/packages/core">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by [GitHub Actions](<a
href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a>
Actions), a new releaser for <code>@​actions/core</code> since your
current version.</p>
</details>
<br />
[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@actions/core&package-manager=npm_and_yarn&previous-version=1.11.1&new-version=3.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
---------
Co-authored-by: Parker Brown <17183625+parkerbxyz@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
create-app-token-action-releaserBot pushed a commit that referenced this pull request Mar 13, 2026
## [2.2.2](v2.2.1...v2.2.2) (2026-03-13)
### Bug Fixes
* **deps:** bump @actions/core from 1.11.1 to 3.0.0 ([#337](#337)) ([b044133](b044133))
* **deps:** bump minimatch from 9.0.5 to 9.0.9 ([#335](#335)) ([5cbc656](5cbc656))
* **deps:** bump the production-dependencies group with 4 updates ([#336](#336)) ([6bda5bc](6bda5bc))
* **deps:** bump undici from 7.16.0 to 7.18.2 ([#323](#323)) ([b4f638f](b4f638f))
create-app-token-action-releaserBot pushed a commit that referenced this pull request Mar 13, 2026
# [3.0.0-beta.6](v3.0.0-beta.5...v3.0.0-beta.6) (2026-03-13)
### Bug Fixes
* **deps:** bump @actions/core from 1.11.1 to 3.0.0 ([#337](#337)) ([b044133](b044133))
* **deps:** bump minimatch from 9.0.5 to 9.0.9 ([#335](#335)) ([5cbc656](5cbc656))
* **deps:** bump the production-dependencies group with 4 updates ([#336](#336)) ([6bda5bc](6bda5bc))
* **deps:** bump undici from 7.16.0 to 7.18.2 ([#323](#323)) ([b4f638f](b4f638f))
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@parkerbxyz