Skip to content

Bump @actions/core from 2.0.3 to 3.0.1 - #118

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/actions/core-3.0.1
Open

Bump @actions/core from 2.0.3 to 3.0.1#118
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/actions/core-3.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 22, 2026

Copy link
Copy Markdown
Contributor

Bumps @actions/core from 2.0.3 to 3.0.1.

Changelog

Sourced from @​actions/core's changelog.

3.0.1

  • Bump undici from 6.23.0 to 6.24.1 #2348

3.0.0

  • Breaking change: Package is now ESM-only
    • CommonJS consumers must use dynamic import() instead of require()
Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update JavaScript code labels Apr 22, 2026
@dependabot
dependabot Bot requested a review from dav3r as a code owner April 22, 2026 08:14
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 22, 2026
@dependabot
dependabot Bot requested review from felddy and jsf9k as code owners April 22, 2026 08:14
@dependabot dependabot Bot added the javascript Pull requests that update JavaScript code label Apr 22, 2026
@dependabot
dependabot Bot requested a review from mcdonnnj as a code owner April 22, 2026 08:14
@github-actions github-actions Bot added the version bump This issue or pull request increments the version number label Apr 22, 2026
@dav3r

dav3r commented Apr 22, 2026

Copy link
Copy Markdown
Member

It sounds like the verify failure is related to this breaking change in @actions/core 3.0.0: "CommonJS consumers must use dynamic import() instead of require()".

Guessing that we need to make that change here:

const core = require("@actions/core");

@mcdonnnj

mcdonnnj commented Apr 22, 2026

Copy link
Copy Markdown
Member

It sounds like the verify failure is related to this breaking change in @actions/core 3.0.0: "CommonJS consumers must use dynamic import() instead of require()".

Guessing that we need to make that change here:

const core = require("@actions/core");

I believe it requires conversion of this project to an ECMAScript module. That would be more than just a swap between import() and require().

Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 2.0.3 to 3.0.1.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/actions/core-3.0.1 branch from 0fef6b0 to dc57def Compare May 11, 2026 13:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update JavaScript code version bump This issue or pull request increments the version number

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants