Skip to content

Conversation

@TingluoHuang
Copy link
Member

No description provided.

Copilot AI review requested due to automatic review settings January 8, 2026 14:34
@TingluoHuang TingluoHuang requested a review from a team as a code owner January 8, 2026 14:34
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR bumps the @actions/attest package from version 2.1.0 to 3.0.0 to align with major version updates in its core dependencies. The major version bump is appropriate given that all three primary dependencies are receiving major version updates.

Key Changes:

  • Update @actions/core from 1.11.1 to 2.0.2 (major version bump)
  • Update @actions/github from 6.0.0 to 7.0.0 (major version bump)
  • Update @actions/http-client from 2.2.3 to 3.0.1 (major version bump)

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File Description
packages/attest/package.json Bumps package version to 3.0.0 and updates three dependency versions
packages/attest/package-lock.json Updates lockfile with new dependency versions and their transitive dependencies
packages/attest/RELEASES.md Adds release notes for version 3.0.0 documenting the dependency updates
Files not reviewed (1)
  • packages/attest/package-lock.json: Language not supported

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

salmanmkc
salmanmkc previously approved these changes Jan 8, 2026
@crazy-max
Copy link

If @actions/glob could be updated as well, that would be nice 🙏

"@actions/core": "^1.9.1",
"minimatch": "^3.0.4"

(relates to #2217)

@TingluoHuang TingluoHuang changed the title Bump version to 3.0.0 and update dependencies for @actions/core, @actions/github, and @actions/http-client Bump version to 2.2.0 and update dependencies for @actions/core, @actions/github, and @actions/http-client Jan 8, 2026
@TingluoHuang TingluoHuang merged commit 7ae5c2f into main Jan 8, 2026
19 of 20 checks passed
@TingluoHuang TingluoHuang deleted the users/tihuang/bump branch January 8, 2026 16:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants