deps: Update actions/github-script action to v9#11
Conversation
Up to standards ✅🟢 Issues
|
![codacy-production[bot]](https://avatars.githubusercontent.com/in/56611?s=60&v=4){kind=small}
There was a problem hiding this comment.
Pull Request Overview
A cross-correlation of agent findings reveals that key acceptance criteria for this version update remain unverified. Specifically, there is no validation that the embedded scripts comply with the target version's constraints—such as the removal of 'require' for '@actions/github' and the handling of the 'github' object. Furthermore, automated test scenarios for GraphQL execution and workflow context access are entirely missing, posing a significant risk of runtime failure in the triage-bot workflow.
Test suggestions
- Verify that the script successfully executes GraphQL queries using the v9 'github' object.
- Verify that the workflow context and 'core' utilities are correctly accessed within the v9 runtime environment.
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Verify that the script successfully executes GraphQL queries using the v9 'github' object.
2. Verify that the workflow context and 'core' utilities are correctly accessed within the v9 runtime environment.
TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback
renovate
Bot
force-pushed
the
renovate/actions-github-script-9.x
branch
from
5c01983 to
ad79d40
Compare
1 participant
This PR contains the following updates:
v7→v9Release Notes
actions/github-script (actions/github-script)
v9.0.0Compare Source
New features:
getOctokitfactory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients withgetOctokitfor details and examples.ACTIONS_ORCHESTRATION_IDenvironment variable is automatically appended to the user-agent string for request tracing.Breaking changes:
require('@​actions/github')no longer works in scripts. The upgrade to@actions/githubv9 (ESM-only) meansrequire('@​actions/github')will fail at runtime. If you previously used patterns likeconst { getOctokit } = require('@​actions/github')to create secondary clients, use the new injectedgetOctokitfunction instead — it's available directly in the script context with no imports needed.getOctokitis now an injected function parameter. Scripts that declareconst getOctokit = ...orlet getOctokit = ...will get aSyntaxErrorbecause JavaScript does not allowconst/letredeclaration of function parameters. Use the injectedgetOctokitdirectly, or usevar getOctokit = ...if you need to redeclare it.@actions/githubinternals beyond the standardgithub/octokitclient, you may need to update those references for v9 compatibility.What's Changed
New Contributors
Full Changelog: actions/github-script@v8.0.0...v9.0.0
v9Compare Source
v8.0.0Compare Source
v8: .0.0Compare Source
What's Changed
v2.327.1
Release Notes
Make sure your runner is updated to this version or newer to use this release.
New Contributors
Full Changelog: actions/github-script@v7.1.0...v8.0.0
v7.1.0Compare Source
What's Changed
actions/upload-artifactby @joshmgross in #512npm audit fixby @joshmgross in #515permissionsin workflows and update actions by @joshmgross in #531octokitREADME updates for v7 by @joshmgross in #557scriptby @joshmgross in #603New Contributors
Full Changelog: actions/github-script@v7...v7.1.0
v7.0.1Compare Source
What's Changed
baseUrlto undefined when input is not provided by @joshmgross in #439Full Changelog: actions/github-script@v7.0.0...v7.0.1
Configuration
📅 Schedule: (in timezone UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.