Skip to content

Bump @actions/exec from 1.1.1 to 3.0.0 - #623

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/actions/exec-3.0.0
Closed

Bump @actions/exec from 1.1.1 to 3.0.0#623
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/actions/exec-3.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor

Bumps @actions/exec from 1.1.1 to 3.0.0.

Changelog

Sourced from @​actions/exec's changelog.

3.0.0

  • Breaking change: Package is now ESM-only
    • CommonJS consumers must use dynamic import() instead of require()

2.0.0

  • Add support for Node 24 #2110
  • Bump @​actions/io dependency from ^1.0.1 to ^2.0.0
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​actions/exec since your current version.


@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/actions/exec-3.0.0 branch from 39ce6d0 to 503e1bb Compare August 25, 2026 03:28
Bumps [@actions/exec](https://github.com/actions/toolkit/tree/HEAD/packages/exec) from 1.1.1 to 3.0.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/exec/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/exec)

---
updated-dependencies:
- dependency-name: "@actions/exec"
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/actions/exec-3.0.0 branch from 503e1bb to 3c76bbe Compare August 25, 2026 04:26
MaddyMicrosoft added a commit that referenced this pull request Aug 25, 2026
@actions/exec 3.0.0 and @actions/core 3.0.1 ship as ESM-only
(package.json "type": "module"), which the CommonJS ncc bundle cannot
require() (see the failing bumps in #623 and #624, same failure mode as the
already-capped @actions/io). Extend the existing ESM cap to these two packages
so Dependabot stays on their 2.x (CommonJS) line until the action migrates to
ESM. @actions/http-client 3.x remains CommonJS and is intentionally not capped.

Co-authored-by: Maddison Das <272712104+MaddyMicrosoft@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor Author

Looks like @actions/exec is no longer being updated by Dependabot, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 25, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/actions/exec-3.0.0 branch August 25, 2026 06:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants