Skip to content

Bump @octokit/plugin-paginate-rest, @actions/artifact and @actions/github#73

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-8ccf443914
Open

Bump @octokit/plugin-paginate-rest, @actions/artifact and @actions/github#73
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-8ccf443914

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Nov 14, 2025

Bumps @octokit/plugin-paginate-rest to 9.2.2 and updates ancestor dependencies @octokit/plugin-paginate-rest, @actions/artifact and @actions/github. These dependencies need to be updated together.

Updates @octokit/plugin-paginate-rest from 2.21.3 to 9.2.2

Release notes

Sourced from @​octokit/plugin-paginate-rest's releases.

v9.2.2

9.2.2 (2025-02-15)

Bug Fixes

v9.2.1

9.2.1 (2024-03-01)

Bug Fixes

  • pkg: pin @octokit/core peerDependency to v5 (#599) (5b84386)

v9.2.0

9.2.0 (2024-02-22)

Features

  • new /orgs/{org}/organization-roles/{role_id}/teams and /orgs/{org}/organization-roles/{role_id}/users endpoints (#594) (75aeaaf)

v9.1.5

9.1.5 (2023-12-04)

Bug Fixes

v9.1.4

9.1.4 (2023-11-12)

Bug Fixes

v9.1.3

9.1.3 (2023-11-09)

Bug Fixes

v9.1.2

9.1.2 (2023-10-26)

... (truncated)

Commits
  • e1e4489 fix: ReDos regex vulnerability, reported by @​DayShift (#660)
  • 5b84386 fix(pkg): pin @octokit/core peerDependency to v5 (#599)
  • fa01f94 ci(action): update actions/add-to-project action to v0.6.0 (#598)
  • 75aeaaf feat: new /orgs/{org}/organization-roles/{role_id}/teams and `/orgs/{org}/o...
  • 54d6bcf chore(deps): update dependency prettier to v3.2.5
  • 1bfa2f8 chore(deps): update dependency npm-run-all2 to v6
  • eb4a8fe chore(deps): replace dependency npm-run-all with npm-run-all2 ^5.0.0
  • 11ef779 chore(deps): update dependency esbuild to ^0.20.0
  • 2b6cc98 ci(action): update peter-evans/create-or-update-comment action to v4
  • d7c9de5 chore(deps): update dependency prettier to v3.2.4 (#588)
  • Additional commits viewable in compare view

Updates @actions/artifact from 2.1.7 to 4.0.0

Changelog

Sourced from @​actions/artifact's changelog.

4.0.0

  • Add support for Node 24 #2110
  • Fix: artifact pagination bugs and configurable artifact count limits #2165
  • Fix: reject the promise on timeout #2124
  • Update dependency versions

2.3.3

  • Dependency updates #2049

2.3.2

  • Added masking for Shared Access Signature (SAS) artifact URLs #1982
  • Change hash to digest for consistent terminology across runner logs #1991

2.3.1

  • Fix comment typo on expectedHash. #1986

2.3.0

  • Allow ArtifactClient to perform digest comparisons, if supplied. #1975

2.2.2

  • Default concurrency to 5 for uploading artifacts #1962

2.2.1

  • Add ACTIONS_ARTIFACT_UPLOAD_CONCURRENCY and ACTIONS_ARTIFACT_UPLOAD_TIMEOUT_MS environment variables #1928

2.2.0

  • Return artifact digest on upload #1896

2.1.11

  • Fixed a bug with relative symlinks resolution #1844
  • Use native crypto #1815

2.1.10

  • Fixed a regression with symlinks not being automatically resolved #1830
  • Fixed a regression with chunk timeout #1786

2.1.9

  • Fixed artifact upload chunk timeout logic #1774
  • Use lazy stream to prevent issues with open file limits #1771

... (truncated)

Commits

Updates @actions/github from 5.1.1 to 6.0.1

Changelog

Sourced from @​actions/github's changelog.

6.0.1

  • Dependency updates #2043
  • Add context.runAttempt #1588

6.0.0

  • Support the latest Octokit in @​actions/github #1553
    • Drop support of NodeJS v14, v16
Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

…thub

Bumps [@octokit/plugin-paginate-rest](https://github.com/octokit/plugin-paginate-rest.js) to 9.2.2 and updates ancestor dependencies [@octokit/plugin-paginate-rest](https://github.com/octokit/plugin-paginate-rest.js), [@actions/artifact](https://github.com/actions/toolkit/tree/HEAD/packages/artifact) and [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github). These dependencies need to be updated together.


Updates `@octokit/plugin-paginate-rest` from 2.21.3 to 9.2.2
- [Release notes](https://github.com/octokit/plugin-paginate-rest.js/releases)
- [Commits](octokit/plugin-paginate-rest.js@v2.21.3...v9.2.2)

Updates `@actions/artifact` from 2.1.7 to 4.0.0
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/artifact/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/@actions/cache@4.0.0/packages/artifact)

Updates `@actions/github` from 5.1.1 to 6.0.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

---
updated-dependencies:
- dependency-name: "@octokit/plugin-paginate-rest"
  dependency-version: 9.2.2
  dependency-type: indirect
- dependency-name: "@actions/artifact"
  dependency-version: 4.0.0
  dependency-type: direct:production
- dependency-name: "@actions/github"
  dependency-version: 6.0.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 14, 2025
@dependabot dependabot Bot requested a review from lerebear as a code owner November 14, 2025 23:59
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Nov 14, 2025
@github-actions github-actions Bot added the sizeup/xl May be very difficult to review label Nov 14, 2025
@github-actions
Copy link
Copy Markdown

👋 @dependabot[bot] this pull request exceeds the configured reviewability score threshold of 100. Your actual score was 613.

Research has shown that this makes it harder for reviewers to provide quality feedback.

We recommend that you reduce the size of this PR by separating commits into stacked PRs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code sizeup/xl May be very difficult to review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants