Skip to content

Bump @actions/io from 1.1.3 to 3.0.2 in /bundle-verifier - #69

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/bundle-verifier/actions/io-3.0.2
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/bundle-verifier/actions/io-3.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 22, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @actions/io from 1.1.3 to 3.0.2.

Changelog

Sourced from @​actions/io's changelog.

3.0.2

  • Fix: update lock file version

3.0.1

  • Fix: export @actions/io/lib/io-util

3.0.0

  • Breaking change: Package is now ESM-only
    • CommonJS consumers must use dynamic import() instead of require()

2.0.0

  • Add support for Node 24 #2110
  • Ensures consistent behavior for paths on Node 24 with Windows
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​actions/io since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 22, 2026
@dependabot dependabot Bot changed the title Bump @actions/io from 1.0.2 to 3.0.2 in /bundle-verifier Bump @actions/io from 1.1.3 to 3.0.2 in /bundle-verifier Jul 22, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/bundle-verifier/actions/io-3.0.2 branch from e42c071 to 82708f2 Compare July 22, 2026 14:34
@snecklifter

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/bundle-verifier/actions/io-3.0.2 branch from 82708f2 to ebdb583 Compare July 22, 2026 14:51
Bumps [@actions/io](https://github.com/actions/toolkit/tree/HEAD/packages/io) from 1.1.3 to 3.0.2.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/io/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/io)

---
updated-dependencies:
- dependency-name: "@actions/io"
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/bundle-verifier/actions/io-3.0.2 branch from ebdb583 to f489814 Compare July 22, 2026 14:54
snecklifter added a commit that referenced this pull request Jul 22, 2026
bundle-verifier:
- Upgrade @actions/core, exec, io from v1 to v2 (CJS + Node 24)
- Upgrade @vercel/ncc from 0.38 to 0.44 (Node 24 build support)
- Modernize tsconfig: target es2022, add skipLibCheck

action-io-generator:
- Upgrade @typescript-eslint/parser and eslint-plugin from v7 to v8
- Override removed @typescript-eslint/semi rule in local eslintrc
- Upgrade @types/node to ^24

Dependabot:
- Ignore @actions/* >=3 (ESM-only, needs bundler migration)
- Ignore typescript >=7 (ecosystem not ready)

Supersedes Dependabot PRs #67, #68, #69, #73, #76.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown
Contributor Author

Looks like @actions/io is no longer being updated by Dependabot, so this is no longer needed.

@snecklifter

Copy link
Copy Markdown
Contributor

Superseded by #79. Upgraded to @actions/* v2 (CJS + Node 24 support). v3 is ESM-only and incompatible with ncc — migrating to a different bundler is tracked as future work.

@dependabot dependabot Bot closed this Jul 22, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/bundle-verifier/actions/io-3.0.2 branch July 22, 2026 15:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant