chore(deps): bump the actions group across 1 directory with 2 updates

[dependabot]

Bumps the actions group with 2 updates in the / directory: @actions/exec and @actions/github.

Updates @actions/exec from 1.1.1 to 3.0.0

Changelog

Sourced from @​actions/exec's changelog.

3.0.0

• Breaking change: Package is now ESM-only
  • CommonJS consumers must use dynamic import() instead of require()

2.0.0

• Add support for Node 24 #2110
• Bump @​actions/io dependency from ^1.0.1 to ^2.0.0

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​actions/exec since your current version.

Updates @actions/github from 8.0.1 to 9.1.1

Changelog

Sourced from @​actions/github's changelog.

9.1.1

• Bump undici from 6.23.0 to 6.24.0 #2346

9.1.0

• Append actions_orchestration_id to user-agent when the ACTIONS_ORCHESTRATION_ID environment variable is set #2364

9.0.0

• Breaking change: Package is now ESM-only
  • CommonJS consumers must use dynamic import() instead of require()
  • Example: const { getOctokit, context } = await import('@actions/github')
• Fix TypeScript compilation by migrating to ESM, enabling proper imports from @octokit/core/types

Commits

• See full diff in compare view

[justaugustus]

@dependabot recreate

[justaugustus]

@copilot — Fix the failing checks. You may need to rebuild the dist directory to do this.

[Copilot]

@copilot — Fix the failing checks. You may need to rebuild the dist directory to do this.

Fixed in commit 589853a. Both @actions/github 9.1.1 and @actions/exec 3.0.0 are now ESM-only packages, so I created src/github-loader.js and src/exec-loader.js with dynamic import() singletons (following the same pattern as the existing core-loader.js and got-loader.js), updated src/action.js to use them, and rebuilt the dist directory.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• iojs.org
  • Triggering command: /usr/bin/curl curl -q --fail --compressed -L -s REDACTED -o - /home/REDACTED/.nvm/package.json /home/REDACTED/.nvm/rename_test.sh /home/REDACTED/.nvm/test (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)