Skip to content

Bump @actions/core from 1.11.1 to 2.0.3 - #630

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/actions/core-2.0.3
Open

Bump @actions/core from 1.11.1 to 2.0.3#630
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/actions/core-2.0.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor

Bumps @actions/core from 1.11.1 to 2.0.3.

Changelog

Sourced from @​actions/core's changelog.

2.0.3

  • Bump @actions/http-client to 3.0.2

2.0.1

  • Bump @​actions/exec from 1.1.1 to 2.0.0 #2199

2.0.0

  • Add support for Node 24 #2110
  • Bump @​actions/http-client from 2.0.1 to 3.0.0
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​actions/core since your current version.


@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 25, 2026
@MaddyMicrosoft

Copy link
Copy Markdown
Member

Build + lint + CodeQL pass; the only red checks are the secrets-gated integration jobs that don't run on Dependabot PRs.

This is a runtime dependency. The v2 major is "Add support for Node 24" (the action already runs on node24), and no API the action uses was removed (the TS build passing confirms this). Low risk, but since it's on the runtime path and the live/integration tests didn't run here, worth validating with a live-test run that has secret access before merging.

Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.11.1 to 2.0.3.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/actions/core-2.0.3 branch from c1743a2 to f6a8c08 Compare September 9, 2026 06:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant