Upgrade @actions/github to v9 and @octokit/core to v7+ by Copilot · Pull Request #708 · actions/github-script

Copilot · 2026-03-23T20:17:29Z

Upgrades @actions/github from v6 to v9 and @octokit/core from v5 to v7, which are ESM-only packages requiring TypeScript module resolution changes.

Dependency versions

Package	Old	New
`@actions/github`	`^6.0.0`	`^9.0.0`
`@octokit/core`	`^5.0.1`	`^7.0.0`
`@octokit/plugin-request-log`	`^4.0.0`	`^6.0.0`
`@octokit/plugin-retry`	`^6.0.1`	`^8.0.0`

TypeScript config (`tsconfig.json`)

moduleResolution: "bundler" — required for ESM exports map resolution in @octokit/core v7 and @actions/github v9
module: "es2022" — required by bundler resolution
target: "es2022" — needed for ErrorOptions type used in @octokit/request-error
ts-jest configured with module: "commonjs" override to preserve CJS test execution

Import path fixes

src/retry-options.ts: @octokit/core/dist-types/types → @octokit/core/types (v7 subpath export)
src/async-function.ts: @actions/github/lib/context is no longer in the v9 exports map. Replaced with typeof context derived from @actions/github/lib/utils:

// Beforeimport{Context}from'@actions/github/lib/context'import{GitHub}from'@actions/github/lib/utils'// ...
context: Context// Afterimport{contextas_ghContext,GitHub}from'@actions/github/lib/utils'// ...
context: typeof_ghContext

Build script

Updated build:types to pass --target es2022 --module es2022 --moduleResolution bundler since it specifies files directly (bypasses tsconfig.json).

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

- @actions/github: ^6.0.0 → ^9.0.0 - @octokit/core: ^5.0.1 → ^7.0.0 - @octokit/plugin-request-log: ^4.0.0 → ^6.0.0 - @octokit/plugin-retry: ^6.0.1 → ^8.0.0 - Update tsconfig.json to use moduleResolution: "bundler" for ESM exports map support - Update import paths for new package structures - Update build:types script for compatible compiler options Co-authored-by: angel-jiakou <115738347+angel-jiakou@users.noreply.github.com> Agent-Logs-Url: https://github.com/actions/github-script/sessions/17de5ca1-8bdc-41e4-a06d-ab2d8c2e6e8c

github-actions · 2026-03-23T20:33:37Z

Hello from actions/github-script! (2f6961d)

Copilot

Pull request overview

Upgrades the Action’s GitHub/Octokit dependencies to ESM-only major versions and updates the TypeScript + test/build configuration and import paths to remain compatible.

Changes:

Upgrade @actions/github to v9 and @octokit/* dependencies to their v6/v7/v8 major versions.
Update TypeScript compilation settings for ESM (target/module es2022, moduleResolution: bundler) and adjust ts-jest to keep tests running in CJS.
Fix type/import paths impacted by the new packages’ exports maps and relax integration workflow user-agent assertions.

Reviewed changes

Copilot reviewed 28 out of 34 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
types/async-function.d.ts	Updates exported argument types to avoid removed `@actions/github/lib/context` path.
tsconfig.json	Switches project TS target/module to ES2022 and module resolution to bundler.
src/retry-options.ts	Updates Octokit type import to the new v7 exported subpath.
src/async-function.ts	Adjusts context typing approach to match `@actions/github` v9 export map changes.
package.json	Bumps deps, updates `build:types`, and adds `ts-jest` TS overrides.
package-lock.json	Lockfile updates for the new dependency graph and transitive packages.
.licenses/npm/wrappy.dep.yml	Removes cached license entry (dependency no longer in licensed set).
.licenses/npm/universal-user-agent.dep.yml	Updates cached license metadata version for transitive bump.
.licenses/npm/undici-6.24.1.dep.yml	Corrects cached license metadata to match `undici@6.24.1`.
.licenses/npm/undici-5.28.5.dep.yml	Adds cached license metadata for `undici@5.28.5`.
.licenses/npm/once.dep.yml	Removes cached license entry (dependency no longer in licensed set).
.licenses/npm/json-with-bigint.dep.yml	Adds cached license metadata for new transitive dependency.
.licenses/npm/fast-content-type-parse.dep.yml	Adds cached license metadata for new transitive dependency.
.licenses/npm/deprecation.dep.yml	Removes cached license entry (dependency removed from graph).
.licenses/npm/before-after-hook.dep.yml	Updates cached license metadata version for transitive bump.
.licenses/npm/@octokit/types.dep.yml	Updates cached license metadata version for transitive bump.
.licenses/npm/@octokit/types-12.0.0.dep.yml	Removes cached license entry for superseded version.
.licenses/npm/@octokit/request.dep.yml	Updates cached license metadata version for transitive bump.
.licenses/npm/@octokit/request-error.dep.yml	Updates cached license metadata version for transitive bump.
.licenses/npm/@octokit/plugin-retry.dep.yml	Updates cached license metadata version for transitive bump.
.licenses/npm/@octokit/plugin-rest-endpoint-methods.dep.yml	Updates cached license metadata version for transitive bump.
.licenses/npm/@octokit/plugin-request-log.dep.yml	Updates cached license metadata version for transitive bump.
.licenses/npm/@octokit/plugin-paginate-rest.dep.yml	Updates cached license metadata version for transitive bump.
.licenses/npm/@octokit/openapi-types.dep.yml	Updates cached license metadata version for transitive bump.
.licenses/npm/@octokit/openapi-types-19.0.0.dep.yml	Removes cached license entry for superseded version.
.licenses/npm/@octokit/graphql.dep.yml	Updates cached license metadata version for transitive bump.
.licenses/npm/@octokit/endpoint.dep.yml	Updates cached license metadata version for transitive bump.
.licenses/npm/@octokit/core.dep.yml	Updates cached license metadata version for direct dependency bump.
.licenses/npm/@octokit/auth-token.dep.yml	Updates cached license metadata version for transitive bump.
.licenses/npm/@actions/http-client-3.0.2.dep.yml	Adds cached license metadata for new transitive version.
.licenses/npm/@actions/http-client-2.2.0.dep.yml	Adds cached license metadata for existing transitive version.
.licenses/npm/@actions/github.dep.yml	Updates cached license metadata version for direct dependency bump.
.github/workflows/integration.yml	Adjusts user-agent integration assertions to allow the new user-agent format.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-03-23T23:36:32Z

+import {context as _ghContext, GitHub} from '@actions/github/lib/utils'
 import * as glob from '@actions/glob'


@actions/github/lib/utils is a deep import that isn’t part of the stable public API surface and has already changed once (lib/context disappeared in v9). Since this import is only used to derive types, prefer using public exports from @actions/github (e.g., typeof context for context and ReturnType<typeof getOctokit> for github/octokit) and make the import type-only so it can’t accidentally become a runtime dependency.

I think this comment is valid so I'm gonna make these public exports in case this import changes again.

@heavymachinery

danwkennedy

Looks fine so far but I'd upgrade all the Actions packages instead of just a few.

danwkennedy · 2026-03-27T13:07:21Z

@@ -40,12 +45,12 @@
 "dependencies": {
 "@actions/core": "^1.10.1",


All the @actions/* packages have been upgraded, I would pick up those new versions as well.

ericsciple

Hold — requires changes in main first to add a wrapper for getOctokit

Merges the @actions/github v9 upgrade branch into the createOctokit feature branch, combining ADR steps 1 and 3 into a single major release. Changes from v9 upgrade: - @actions/github 6.x → 9.0.0 (ESM-only) - @octokit/core v5→v7, plugin-request-log v4→v6, plugin-retry v6→v8 - tsconfig: moduleResolution bundler, module/target es2022 - ts-jest: module commonjs override for CJS test execution - License file updates for new dependency versions Conflict resolutions: - src/async-function.ts: v9 import style + createOctokit type - types/async-function.d.ts: aligned with .ts file - integration.yml: v9 UA checks + createOctokit test job - dist/index.js: rebuilt via ncc Additional fix: - getoctokit-integration.test.ts: use mock instead of direct @actions/github import (ESM-only v9 incompatible with Jest CJS) All 32 tests passing, TypeScript clean, lint clean.

salmanmkc · 2026-04-10T01:08:05Z

Closing in favour of #700

Initial plan
179b645

CopilotAI assigned Copilot and angel-jiakou Mar 23, 2026

Copilotstarted work on behalf of angel-jiakou March 23, 2026 20:17 View session

CopilotAI linked an issue Mar 23, 2026 that may be closed by this pull request
Upgrade @actions/github to v9 and @octokit/core to v7+ #707
Closed

CopilotAI changed the title ~~[WIP] Upgrade @actions/github to v9 and @octokit/core to v7~~Upgrade @actions/github to v9 and @octokit/core to v7+Mar 23, 2026

CopilotAI requested a review from angel-jiakou March 23, 2026 20:29

Copilotfinished work on behalf of angel-jiakou March 23, 2026 20:29

CopilotAItemporarily deployed to debug-integration-test March 23, 2026 20:33 Inactive

Fix user-agent integration test for orchestration ID
4b873e4

angel-jiakou temporarily deployed to debug-integration-test March 23, 2026 23:08 — with GitHub Actions Inactive

Update license cache for upgraded dependencies
fa89b8b

angel-jiakou temporarily deployed to debug-integration-test March 23, 2026 23:30 — with GitHub Actions Inactive

angel-jiakou marked this pull request as ready for review March 23, 2026 23:33

angel-jiakou requested a review from a team as a code owner March 23, 2026 23:33

CopilotAI review requested due to automatic review settings March 23, 2026 23:33

Copilotstarted reviewing on behalf of angel-jiakou March 23, 2026 23:33 View session

angel-jiakou approved these changes Mar 23, 2026
View reviewed changes

CopilotAI reviewed Mar 23, 2026
View reviewed changes

Address comment
c1a9577

angel-jiakou temporarily deployed to debug-integration-test March 26, 2026 22:05 — with GitHub Actions Inactive

angel-jiakou requested a review from danwkennedy March 26, 2026 22:08

danwkennedy reviewed Mar 27, 2026
View reviewed changes

ericsciple requested changes Apr 2, 2026
View reviewed changes

salmanmkc mentioned this pull request Apr 7, 2026
feat(github): add orchestration ID to user-agent in getOctokitOptions actions/toolkit#2364
Merged

salmanmkc closed this Apr 10, 2026

coderabbitaiBot mentioned this pull request Jul 30, 2026
ci: redesign CI authorization and build pipeline for master openshift-service-mesh/proxy#323
Open

Navigation Menu

Uh oh!

Upgrade @actions/github to v9 and @octokit/core to v7+ - #708

Upgrade @actions/github to v9 and @octokit/core to v7+#708
angel-jiakou with Copilot wants to merge 5 commits into
mainfrom
copilot/upgrade-actions-github-and-octokit

CopilotAI commented Mar 23, 2026•
edited
Loading

Uh oh!

github-actionsBot commented Mar 23, 2026•
edited
Loading

Uh oh!

CopilotAI left a comment

Uh oh!

CopilotAIMar 23, 2026

Uh oh!

angel-jiakouMar 26, 2026

Uh oh!

angel-jiakouMar 26, 2026

Uh oh!

danwkennedy left a comment

Uh oh!

danwkennedyMar 27, 2026

Uh oh!

ericsciple left a comment •
edited
Loading

Uh oh!

salmanmkc commented Apr 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

		import {context as _ghContext, GitHub} from '@actions/github/lib/utils'
		import * as glob from '@actions/glob'

		@@ -40,12 +45,12 @@
		"dependencies": {
		"@actions/core": "^1.10.1",

Uh oh!

Conversation

CopilotAI commented Mar 23, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency versions

TypeScript config (tsconfig.json)

Import path fixes

Build script

Uh oh!

github-actionsBot commented Mar 23, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

CopilotAI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

CopilotAIMar 23, 2026

Choose a reason for hiding this comment

Uh oh!

angel-jiakouMar 26, 2026

Choose a reason for hiding this comment

Uh oh!

angel-jiakouMar 26, 2026

Choose a reason for hiding this comment

Uh oh!

danwkennedy left a comment

Choose a reason for hiding this comment

Uh oh!

danwkennedyMar 27, 2026

Choose a reason for hiding this comment

Uh oh!

ericsciple left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

salmanmkc commented Apr 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

CopilotAI commented Mar 23, 2026•
edited
Loading

TypeScript config (`tsconfig.json`)

github-actionsBot commented Mar 23, 2026•
edited
Loading

ericsciple left a comment •
edited
Loading