Bump actions/github-script from 7 to 9 by dependabot[bot] · Pull Request #115 · ThousandBirdsInc/chidori

dependabot · 2026-07-14T23:47:22Z

Bumps actions/github-script from 7 to 9.

Release notes

Sourced from actions/github-script's releases.

v9.0.0

New features:

getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.

Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.

getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.

If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.

What's Changed

Add ACTIONS_ORCHESTRATION_ID to user-agent string by @Copilot in actions/github-script#695

ci: use deployment: false for integration test environments by @salmanmkc in actions/github-script#712

feat!: add getOctokit to script context, upgrade @actions/github v9, @octokit/core v7, and related packages by @salmanmkc in actions/github-script#700

New Contributors

@Copilot made their first contribution in actions/github-script#695

Full Changelog: actions/github-script@v8.0.0...v9.0.0

v8.0.0

What's Changed

Update Node.js version support to 24.x by @salmanmkc in actions/github-script#637

README for updating actions/github-script from v7 to v8 by @sneha-krip in actions/github-script#653

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

New Contributors

@salmanmkc made their first contribution in actions/github-script#637

@sneha-krip made their first contribution in actions/github-script#653

Full Changelog: actions/github-script@v7.1.0...v8.0.0

v7.1.0

What's Changed

Upgrade husky to v9 by @benelan in actions/github-script#482

Add workflow file for publishing releases to immutable action package by @Jcambass in actions/github-script#485

Upgrade IA Publish by @Jcambass in actions/github-script#486

Fix workflow status badges by @joshmgross in actions/github-script#497

Update usage of actions/upload-artifact by @joshmgross in actions/github-script#512

Clear up package name confusion by @joshmgross in actions/github-script#514

Update dependencies with npm audit fix by @joshmgross in actions/github-script#515

Specify that the used script is JavaScript by @timotk in actions/github-script#478

chore: Add Dependabot for NPM and Actions by @nschonni in actions/github-script#472

... (truncated)

Commits

3a2844b Merge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re...
ca10bbd fix: use @octokit/core/types import for v7 compatibility
86e48e2 merge: incorporate main branch changes
c108472 chore: rebuild dist for v9 upgrade and getOctokit factory
afff112 Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag...
ff8117e ci: fix user-agent test to handle orchestration ID
81c6b78 ci: use deployment: false to suppress deployment noise from integration tests
3953caf docs: update README examples from @v8 to @v9, add getOctokit docs and v9 brea...
c17d55b ci: add getOctokit integration test job
a047196 test: add getOctokit integration tests via callAsyncFunction
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/github-script](https://github.com/actions/github-script) from 7 to 9. - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@v7...v9) --- updated-dependencies: - dependency-name: actions/github-script dependency-version: '9' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-14T23:50:35Z

chidori-js cross-runtime benchmarks

Same workloads run under chidori-js, Node.js, Bun, CPython (5 timed run(s) + 1 warmup each, median reported; CPython runs each workload's hand-ported .py twin). All workloads cross-checked to produce identical results.

Startup baselines: chidori 2.7ms · node 23.1ms · bun 9.9ms · cpython 10.4ms

Execution-only time (startup baseline subtracted)

workload	chidori	node	bun	cpython	fastest
arith_loop	18.1ms (4.9×)	3.7ms	4.5ms (1.2×)	134.6ms (36.2×)	node
array_hof	32.3ms (2.8×)	20.9ms (1.8×)	11.3ms	48.1ms (4.2×)	bun
array_push_sum	17.8ms (1.5×)	12.2ms (1.0×)	11.9ms	86.1ms (7.2×)	bun
array_sum	94.4ms (2.9×)	32.5ms	51.3ms (1.6×)	438.6ms (13.5×)	node
closures	22.4ms (14.4×)	1.6ms	2.5ms (1.6×)	121.6ms (78.0×)	node
fib_recursive	42.4ms (6.4×)	8.7ms (1.3×)	6.6ms	85.8ms (12.9×)	bun
json_roundtrip	99.8ms (4.7×)	40.9ms (1.9×)	21.4ms	148.7ms (6.9×)	bun
mixed_helpers	161.7ms (10.7×)	15.1ms	18.7ms (1.2×)	105.4ms (7.0×)	node
mutual_recursion	63.2ms (11.6×)	8.0ms (1.5×)	5.5ms	195.1ms (35.7×)	bun
property_access	13.9ms (5.1×)	2.7ms	3.6ms (1.3×)	137.9ms (50.5×)	node
sort	99.5ms (1.8×)	87.8ms (1.6×)	56.1ms	117.0ms (2.1×)	bun
string_build	8.0ms (3.3×)	6.1ms (2.5×)	2.4ms	263.6ms (108.8×)	bun
string_scan	11.9ms (2.7×)	6.7ms (1.5×)	4.4ms	20.5ms (4.7×)	bun
typed_array	28.0ms (3.0×)	20.0ms (2.2×)	9.2ms	117.6ms (12.8×)	bun

Total time including startup (raw wall-clock)

workload	chidori	node	bun	cpython
arith_loop	20.8ms	26.8ms	14.3ms	144.9ms
array_hof	35.0ms	44.0ms	21.2ms	58.5ms
array_push_sum	20.5ms	35.2ms	21.8ms	96.4ms
array_sum	97.1ms	55.6ms	61.2ms	448.9ms
closures	25.1ms	24.6ms	12.4ms	132.0ms
fib_recursive	45.1ms	31.8ms	16.5ms	96.2ms
json_roundtrip	102.5ms	64.0ms	31.3ms	159.0ms
mixed_helpers	164.3ms	38.2ms	28.6ms	115.8ms
mutual_recursion	65.9ms	31.1ms	15.3ms	205.5ms
property_access	16.6ms	25.8ms	13.4ms	148.2ms
sort	102.2ms	110.9ms	66.0ms	127.4ms
string_build	10.7ms	29.2ms	12.3ms	274.0ms
string_scan	14.6ms	29.8ms	14.3ms	30.9ms
typed_array	30.7ms	43.1ms	19.1ms	127.9ms

Peak memory (subprocess max RSS, median of 3 dedicated run(s))

workload	chidori	node	bun	cpython	smallest
(startup)	7.4MiB	40.8MiB (5.5×)	31.3MiB (4.2×)	9.5MiB (1.3×)	chidori
arith_loop	7.4MiB	45.4MiB (6.1×)	40.1MiB (5.4×)	9.5MiB (1.3×)	chidori
array_hof	19.5MiB	60.7MiB (3.1×)	51.5MiB (2.6×)	25.9MiB (1.3×)	chidori
array_push_sum	18.7MiB	58.6MiB (3.1×)	55.5MiB (3.0×)	28.6MiB (1.5×)	chidori
array_sum	16.5MiB	58.9MiB (3.6×)	40.7MiB (2.5×)	24.3MiB (1.5×)	chidori
closures	7.3MiB	44.6MiB (6.1×)	40.2MiB (5.5×)	9.5MiB (1.3×)	chidori
fib_recursive	7.5MiB	44.6MiB (6.0×)	39.4MiB (5.3×)	9.5MiB (1.3×)	chidori
json_roundtrip	8.0MiB	46.4MiB (5.8×)	46.4MiB (5.8×)	10.7MiB (1.4×)	chidori
mixed_helpers	8.0MiB	49.9MiB (6.3×)	62.0MiB (7.8×)	9.6MiB (1.2×)	chidori
mutual_recursion	7.3MiB	45.6MiB (6.2×)	41.7MiB (5.7×)	9.4MiB (1.3×)	chidori
property_access	7.5MiB	44.5MiB (5.9×)	40.4MiB (5.4×)	9.5MiB (1.3×)	chidori
sort	10.3MiB	58.4MiB (5.7×)	43.7MiB (4.2×)	11.7MiB (1.1×)	chidori
string_build	11.4MiB (1.2×)	48.2MiB (4.9×)	38.7MiB (4.0×)	9.8MiB	cpython
string_scan	8.5MiB	47.1MiB (5.5×)	36.5MiB (4.3×)	9.5MiB (1.1×)	chidori
typed_array	8.1MiB	47.8MiB (5.9×)	38.4MiB (4.8×)	10.7MiB (1.3×)	chidori

_{Numbers are machine- and load-dependent (shared CI runner) — read them as ratios, not absolutes. chidori-js is an interpreter, so it trails the V8/JSC JITs on compute but starts far faster and in far less memory; CPython (also an interpreter) is the like-for-like reference point. A ⚠️ marks a workload whose result disagreed across runtimes.}

In-process heap utilization (exact bytes, tracking allocator)

chidori-js heap utilization (exact, via tracking global allocator)

== realm: Engine::new() footprint ==
  retained  706.8 KiB   construction peak  707.0 KiB   churn  721.9 KiB in 8314 allocs   825 live objects

== compile: bytecode footprint (parse + lower, no execution) ==
  workload           retained       peak      churn   allocs
  arith_loop          5.8 KiB   41.7 KiB   62.0 KiB      258
  fib_recursive       7.4 KiB   42.8 KiB   59.3 KiB      277
  property_access     7.5 KiB   44.0 KiB   76.6 KiB      339
  array_push_sum      7.7 KiB   43.7 KiB   80.9 KiB      373
  array_hof          11.6 KiB   48.5 KiB   79.2 KiB      484
  string_build        5.5 KiB   41.0 KiB   55.6 KiB      177
  closures           10.6 KiB   46.8 KiB   78.4 KiB      421
  string_scan         9.6 KiB   46.9 KiB   92.4 KiB      408
  json_roundtrip     13.1 KiB   52.0 KiB   85.4 KiB      290
  object_literals     7.0 KiB   43.3 KiB   62.4 KiB      243
  typed_array        14.8 KiB   54.2 KiB  183.6 KiB      903
  mutual_recursion   16.0 KiB   53.9 KiB  104.6 KiB      696
  mixed_helpers      32.3 KiB   76.7 KiB  157.7 KiB      714

== eval: full run on a fresh engine (peak/retained over the realm baseline) ==
  workload               peak      churn   allocs   retained   after gc
  arith_loop         41.7 KiB   65.6 KiB      288    9.3 KiB    1.5 KiB
  fib_recursive      42.8 KiB   74.1 KiB      346   22.2 KiB   15.9 KiB
  property_access    44.0 KiB   82.1 KiB      385   12.6 KiB    2.7 KiB
  array_push_sum    204.4 KiB  277.7 KiB      423   12.4 KiB    2.6 KiB
  array_hof         136.4 KiB  205.3 KiB      571   17.3 KiB    2.7 KiB
  string_build      358.6 KiB  623.8 KiB    12.2k    9.8 KiB    2.3 KiB
  closures           46.8 KiB   86.4 KiB      491   18.5 KiB    4.4 KiB
  string_scan        71.2 KiB  186.6 KiB     2504   14.4 KiB    2.8 KiB
  json_roundtrip    584.1 KiB  11.49 MiB   124.4k  410.7 KiB   28.8 KiB
  object_literals   572.0 KiB   6.50 MiB    40.3k  102.1 KiB   26.6 KiB
  typed_array       145.2 KiB  314.2 KiB      955   20.2 KiB    2.7 KiB
  mutual_recursion  116.5 KiB  429.4 KiB    30.1k  116.5 KiB   99.6 KiB
  mixed_helpers     602.8 KiB   4.71 MiB    84.8k  310.8 KiB   29.7 KiB

== steady_state: 10 repeat runs on one engine (leak check; growth/run should be ~0) ==
  workload           growth/run     peak/run  churn/run
  arith_loop              605 B      2.1 KiB   11.1 KiB
  fib_recursive         1.4 KiB      4.1 KiB   12.6 KiB
  property_access         605 B      2.5 KiB   11.5 KiB
  array_push_sum          605 B    194.3 KiB  203.3 KiB
  array_hof               614 B    122.3 KiB  132.5 KiB
  string_build            605 B    351.0 KiB  575.0 KiB
  closures              1.2 KiB      4.2 KiB   15.1 KiB
  string_scan             614 B     59.4 KiB  100.4 KiB
  json_roundtrip          614 B    540.8 KiB  11.39 MiB
  object_literals         605 B    537.6 KiB   6.42 MiB
  typed_array             605 B    127.8 KiB  136.9 KiB
  mutual_recursion      1.9 KiB      5.9 KiB  240.4 KiB
  mixed_helpers         1.5 KiB    539.2 KiB   4.54 MiB

github-actions · 2026-07-14T23:54:48Z

Test262 conformance coverage

45448 / 48070 executed pass (94.55%) · 2622 fail · 2540 skip · 50610 total

Area	Pass	Fail	Skip	Pass-rate
`intl402`	1725	1540	54	52.83%
`built-ins`	20939	933	1771	95.73%
`language`	22784	149	715	99.35%
Total	45448	2622	2540	94.55%

Per-subdirectory breakdown (66 areas with failures)

Area	Pass	Fail	Skip	Pass-rate
`built-ins/Temporal`	3886	717	0	84.42%
`intl402/Temporal`	1367	662	0	67.37%
`intl402/DateTimeFormat`	3	240	1	1.23%
`intl402/NumberFormat`	135	113	1	54.44%
`intl402/DurationFormat`	0	110	0	0.00%
`intl402/ListFormat`	1	79	1	1.25%
`intl402/RelativeTimeFormat`	0	79	1	0.00%
`language/expressions`	10508	76	454	99.28%
`intl402/Segmenter`	2	75	2	2.60%
`intl402/Collator`	1	63	1	1.56%
`built-ins/RegExp`	1466	60	353	96.07%
`intl402/DisplayNames`	4	52	1	7.14%
`intl402/Intl`	33	33	0	50.00%
`language/statements`	9278	26	33	99.72%
`language/module-code`	562	20	17	96.56%
`built-ins/Array`	2956	14	111	99.53%
`built-ins/Object`	3392	12	7	99.65%
`built-ins/TypedArray`	1427	11	8	99.24%
`intl402/String`	8	11	0	42.11%
`built-ins/AsyncFromSyncIteratorPrototype`	28	10	0	73.68%
`built-ins/Function`	466	9	34	98.11%
`built-ins/Promise`	630	9	64	98.59%
`built-ins/TypedArrayConstructors`	705	9	24	98.74%
`language/global-code`	33	9	0	78.57%
`built-ins/Date`	583	8	3	98.65%
`language/eval-code`	338	8	1	97.69%
`built-ins/encodeURI`	24	7	0	77.42%
`built-ins/encodeURIComponent`	24	7	0	77.42%
`built-ins/NativeErrors`	82	6	6	93.18%
`built-ins/RegExpStringIteratorPrototype`	11	6	0	64.71%
`intl402/Locale`	101	6	45	94.39%
`intl402/BigInt`	6	5	0	54.55%
`built-ins/AsyncDisposableStack`	99	4	1	96.12%
`built-ins/DisposableStack`	88	4	1	95.65%
`built-ins/Number`	335	4	1	98.82%
`built-ins/Proxy`	270	4	37	98.54%
`intl402/PluralRules`	48	4	1	92.31%
`built-ins/AsyncGeneratorPrototype`	45	3	0	93.75%
`built-ins/DataView`	545	3	13	99.45%
`built-ins/String`	1210	3	10	99.75%
`built-ins/Symbol`	76	3	19	96.20%
`intl402/Date`	9	3	0	75.00%
`language/arguments-object`	258	3	2	98.85%
`built-ins/Error`	53	2	38	96.36%
`built-ins/Math`	325	2	0	99.39%
`built-ins/Reflect`	151	2	0	98.69%
`built-ins/Set`	379	2	2	99.48%
`built-ins/parseInt`	53	2	0	96.36%
`intl402/FallbackSymbol`	0	2	0	0.00%
`intl402/Number`	5	2	0	71.43%
`language/literals`	449	2	83	99.56%
`language/types`	109	2	2	98.20%
`built-ins/ArrayBuffer`	190	1	30	99.48%
`built-ins/BigInt`	75	1	1	98.68%
`built-ins/JSON`	141	1	23	99.30%
`built-ins/Map`	168	1	35	99.41%
`built-ins/SharedArrayBuffer`	102	1	1	99.03%
`built-ins/StringIteratorPrototype`	6	1	0	85.71%
`built-ins/WeakMap`	100	1	40	99.01%
`built-ins/WeakSet`	83	1	1	98.81%
`built-ins/decodeURI`	54	1	0	98.18%
`built-ins/decodeURIComponent`	55	1	0	98.21%
`intl402/Array`	1	1	0	50.00%
`language/destructuring`	18	1	0	94.74%
`language/function-code`	216	1	0	99.54%
`language/identifier-resolution`	13	1	0	92.86%

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 14, 2026

Navigation Menu

Uh oh!

Bump actions/github-script from 7 to 9 - #115

Bump actions/github-script from 7 to 9#115
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/github-script-9

dependabot Bot commented on behalf of github Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 14, 2026

v9.0.0

What's Changed

New Contributors

v8.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

New Contributors

v7.1.0

What's Changed

Uh oh!

github-actions Bot commented Jul 14, 2026

chidori-js cross-runtime benchmarks

Execution-only time (startup baseline subtracted)

Total time including startup (raw wall-clock)

Peak memory (subprocess max RSS, median of 3 dedicated run(s))

In-process heap utilization (exact bytes, tracking allocator)

Uh oh!

github-actions Bot commented Jul 14, 2026

Test262 conformance coverage

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants