Upgrade @actions dependencies

[Copilot]

Summary

Upgrades the following @actions dependencies to their latest versions:

Package	From	To
@actions/core	^2.0.1	^2.0.3
@actions/cache	^5.0.1	^5.0.5
@actions/glob	^0.5.0	^0.5.1
@actions/http-client	^3.0.0	^3.0.2
@actions/tool-cache	^2.0.2	^3.0.1

Changes

• Updated version constraints in package.json
• Ran npm install to update package-lock.json
• Ran npm audit fix — resolved 6 vulnerabilities (0 remaining)
• Ran licensed cache to update license files in .licenses/
• Ran licensed status — 44 dependencies checked, 0 errors found
• Rebuilt dist/ with updated dependencies

Verification

• ✅ npm audit — 0 vulnerabilities
• ✅ licensed status — 44 dependencies, 0 errors
• ✅ All 206 tests pass

[Copilot]

Pull request overview

Updates the GitHub Actions toolkit dependencies used by this repository’s Node-based action, along with regenerated lockfile and license metadata, to keep the build and distributed dist/ output aligned with the latest upstream packages.

Changes:

• Bumped @actions/* package versions in package.json (including a major bump of @actions/tool-cache to v3).
• Updated package-lock.json to reflect the new dependency graph (including undici v6 and related transitive updates).
• Refreshed .licenses/ dependency license manifests to match the updated lockfile.

Reviewed changes

Copilot reviewed 16 out of 22 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
package.json	Updates @actions/* dependency version ranges.
package-lock.json	Regenerates resolved versions/integrity for updated direct + transitive deps.
.licenses/npm/undici.dep.yml	Updates license metadata for undici v6.24.1.
.licenses/npm/strnum.dep.yml	Updates license metadata for strnum v2.2.3.
.licenses/npm/path-expression-matcher.dep.yml	Adds/corrects license metadata for newly introduced transitive dependency.
.licenses/npm/fast-xml-parser.dep.yml	Updates license metadata for fast-xml-parser v5.5.10.
.licenses/npm/fast-xml-builder.dep.yml	Updates license metadata for fast-xml-builder v1.1.4.
.licenses/npm/brace-expansion.dep.yml	Updates license metadata for brace-expansion v1.1.13.
.licenses/npm/@fastify/busboy.dep.yml	Removes license metadata for dependency no longer present.
.licenses/npm/@actions/tool-cache.dep.yml	Updates license metadata for @actions/tool-cache v3.0.1.
.licenses/npm/@actions/io.dep.yml	Adds license metadata for @actions/io v2.0.0.
.licenses/npm/@actions/io-1.1.3.dep.yml	Removes license metadata for @actions/io v1.1.3 (no longer present).
.licenses/npm/@actions/http-client.dep.yml	Adds/updates license metadata for @actions/http-client v3.0.2.
.licenses/npm/@actions/http-client-2.2.3.dep.yml	Removes license metadata for @actions/http-client v2.2.3 (no longer present).
.licenses/npm/@actions/glob.dep.yml	Updates license metadata for @actions/glob v0.5.1.
.licenses/npm/@actions/exec.dep.yml	Adds license metadata for @actions/exec v2.0.0.
.licenses/npm/@actions/exec-1.1.1.dep.yml	Removes license metadata for @actions/exec v1.1.1 (no longer present).
.licenses/npm/@actions/core.dep.yml	Updates license metadata for @actions/core v2.0.3.
.licenses/npm/@actions/core-1.11.1.dep.yml	Removes license metadata for @actions/core v1.11.1 (no longer present).
.licenses/npm/@actions/cache.dep.yml	Updates license metadata for @actions/cache v5.0.5.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[pathum2583-eng]

gh pr checkout copilot/upgrade-actions-dependencies

[pathum2583-eng]

https://github.com/apps/copilot-swe-agent