FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Bump @actions/tool-cache from 2.0.2 to 3.0.0 by dependabot[bot] · Pull Request #3400 · github/codeql-action · GitHub

/ codeql-action Public

Bump @actions/tool-cache from 2.0.2 to 3.0.0 - #3400

Merged
mbg merged 2 commits into
mainfrom
dependabot/npm_and_yarn/actions/tool-cache-3.0.0
Jan 19, 2026
ConversationCommits (2)ChecksFiles changed
Merged

Bump @actions/tool-cache from 2.0.2 to 3.0.0#3400
mbg merged 2 commits into
mainfrom
dependabot/npm_and_yarn/actions/tool-cache-3.0.0

Conversation

dependabot Bot commented on behalf of github Jan 12, 2026

Copy link
Copy Markdown
Contributor

Bumps @actions/tool-cache from 2.0.2 to 3.0.0.

Changelog

Sourced from @​actions/tool-cache's changelog.

3.0.0

  • Update to v2.0.1 of @actions/core
  • Update to v2.0.0 of @actions/exec
  • Update to v3.0.1 of @actions/http-client
  • Update to v2.0.0 of @actions/io
Commits Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​actions/tool-cache since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bump @actions/tool-cache from 2.0.2 to 3.0.0
e20d24f 
Bumps [@actions/tool-cache](https://github.com/actions/toolkit/tree/HEAD/packages/tool-cache) from 2.0.2 to 3.0.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/tool-cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/tool-cache)

---
updated-dependencies:
- dependency-name: "@actions/tool-cache"
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
dependabot Bot added the Rebuild Re-transpile JS & re-generate workflows label Jan 12, 2026
dependabot Bot requested a review from a team as a code owner January 12, 2026 21:53
dependabot Bot added the Rebuild Re-transpile JS & re-generate workflows label Jan 12, 2026
github-actions Bot added size/XS Should be very easy to review and removed Rebuild Re-transpile JS & re-generate workflows labels Jan 12, 2026

github-actions Bot commented Jan 12, 2026

Copy link
Copy Markdown
Contributor

Pushed a commit to rebuild the Action. Please mark the PR as ready for review to trigger PR checks.

github-actions Bot marked this pull request as draft January 12, 2026 21:55
mbg marked this pull request as ready for review January 19, 2026 10:24
Copilot AI review requested due to automatic review settings January 19, 2026 10:24
mbg enabled auto-merge January 19, 2026 10:24
Copilot AI reviewed Jan 19, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Pull request overview

This PR updates the @actions/tool-cache dependency from version 2.0.2 to 3.0.0, a major version bump. The update also brings in updated transitive dependencies including @actions/http-client (3.0.0 → 3.0.1) and newer versions of @actions/core, @actions/exec, and @actions/io as peer dependencies of tool-cache.

Changes:

  • Update @actions/tool-cache from ^2.0.2 to ^3.0.0 in package.json
  • Update package-lock.json with new dependency versions and structure
  • Regenerate compiled JavaScript in lib/ directory to reflect the updated dependencies

Reviewed changes

Copilot reviewed 1 out of 14 changed files in this pull request and generated 4 comments.

File Description
package.json Updates @actions/tool-cache dependency version specification
package-lock.json Updates lockfile with new resolved versions and removes nested node_modules for tool-cache dependencies
lib/upload-sarif-action.js Generated JavaScript reflecting dependency updates, including new orchestration ID feature in http-client
lib/upload-sarif-action-post.js Generated JavaScript reflecting dependency updates, including new orchestration ID feature in http-client

Comment thread lib/start-proxy-action.js
@@ -107539,7 +104792,7 @@ var supportedAnalysisKinds = new Set(Object.values(AnalysisKind));
var core8 = __toESM(require_core());

Copilot AI Jan 19, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Unused variable core8.

Copilot uses AI. Check for mistakes.
Comment thread lib/start-proxy-action.js
@@ -107539,7 +104792,7 @@ var supportedAnalysisKinds = new Set(Object.values(AnalysisKind));
var core8 = __toESM(require_core());

// src/config/db-config.ts
var jsonschema = __toESM(require_lib5());
var jsonschema = __toESM(require_lib4());

Copilot AI Jan 19, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Unused variable jsonschema.

Copilot uses AI. Check for mistakes.
Comment thread lib/start-proxy-action.js
@@ -107539,7 +104792,7 @@ var supportedAnalysisKinds = new Set(Object.values(AnalysisKind));
var core8 = __toESM(require_core());

// src/config/db-config.ts
var jsonschema = __toESM(require_lib5());
var jsonschema = __toESM(require_lib4());
var semver2 = __toESM(require_semver2());

Copilot AI Jan 19, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Unused variable semver2.

Copilot uses AI. Check for mistakes.
Comment thread lib/start-proxy-action.js
@@ -107539,7 +104792,7 @@ var supportedAnalysisKinds = new Set(Object.values(AnalysisKind));
var core8 = __toESM(require_core());

// src/config/db-config.ts
var jsonschema = __toESM(require_lib5());
var jsonschema = __toESM(require_lib4());
var semver2 = __toESM(require_semver2());
var PACK_IDENTIFIER_PATTERN = (function() {

Copilot AI Jan 19, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Unused variable PACK_IDENTIFIER_PATTERN.

Copilot uses AI. Check for mistakes.
mbg merged commit 070e2a5 into main Jan 19, 2026
240 checks passed
mbg deleted the dependabot/npm_and_yarn/actions/tool-cache-3.0.0 branch January 19, 2026 10:49
This was referenced Jan 23, 2026
Merged
Merged
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
mbg mbg approved these changes

Assignees

No one assigned

Labels

size/XS Should be very easy to review

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

Back | FazBrowse Home | New Git URL