Skip to content

Chore(deps): Bump actions/github-script from 8.0.0 to 9.0.0 - #7582

Merged
Vincent Biret (baywet) merged 1 commit into
mainfrom
dependabot/github_actions/actions/github-script-9.0.0
Sep 4, 2026
Merged

Vincent Biret (baywet) merged 1 commit into
mainfrom
dependabot/github_actions/actions/github-script-9.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 9, 2026 •

Copy link
Copy Markdown
Contributor

Bumps actions/github-script from 8.0.0 to 9.0.0.

Release notes

Sourced from actions/github-script's releases.

v9.0.0

New features:

  • getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.
  • Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

  • require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.
  • getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.
  • If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.

What's Changed

New Contributors

Full Changelog: actions/github-script@v8.0.0...v9.0.0

Commits
  • 3a2844b Merge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re...
  • ca10bbd fix: use @​octokit/core/types import for v7 compatibility
  • 86e48e2 merge: incorporate main branch changes
  • c108472 chore: rebuild dist for v9 upgrade and getOctokit factory
  • afff112 Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag...
  • ff8117e ci: fix user-agent test to handle orchestration ID
  • 81c6b78 ci: use deployment: false to suppress deployment noise from integration tests
  • 3953caf docs: update README examples from @​v8 to @​v9, add getOctokit docs and v9 brea...
  • c17d55b ci: add getOctokit integration test job
  • a047196 test: add getOctokit integration tests via callAsyncFunction
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Usage: [Issues, PRs], Target: dependencies in the project github_actions Pull requests that update GitHub Actions code labels Aug 9, 2026
Copilot AI balanced review requested due to automatic review settings August 9, 2026 14:32
@dependabot dependabot Bot added dependencies Usage: [Issues, PRs], Target: dependencies in the project github_actions Pull requests that update GitHub Actions code labels Aug 9, 2026
@dependabot
dependabot Bot temporarily deployed to github-app-auth August 9, 2026 14:32 Inactive
@dependabot
dependabot Bot temporarily deployed to github-app-auth August 9, 2026 14:32 Inactive
@dependabot
dependabot Bot temporarily deployed to github-app-auth August 9, 2026 14:32 Inactive
@dependabot
dependabot Bot temporarily deployed to github-app-auth August 9, 2026 14:33 Inactive

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates GitHub Actions workflows to use actions/github-script v9 (pinned by commit SHA) instead of v8, keeping CI and automation steps on a newer supported release.

Changes:

  • Bumped actions/github-script from v8 to v9.0.0 across multiple workflows.
  • Kept the action pinned to a specific commit SHA for supply-chain safety.

Reviewed changes

Copilot reviewed 12 out of 12 changed files in this pull request and generated no comments.

Show a summary per file
File Description
.github/workflows/python-merge-tests.yml Updates actions/github-script to v9 for merge test failure/cancel handling steps.
.github/workflows/python-integration-tests.yml Updates actions/github-script to v9 for integration test failure/cancel handling steps.
.github/workflows/python-dependency-maintenance.yml Updates actions/github-script to v9 for issue creation and tracking automation.
.github/workflows/merge-gatekeeper.yml Updates actions/github-script to v9 for required-check polling logic.
.github/workflows/limit-community-prs.yml Updates actions/github-script to v9 for membership checks and PR limit enforcement.
.github/workflows/label-title-prefix.yml Updates actions/github-script to v9 for automated title updates.
.github/workflows/label-pr.yml Updates actions/github-script to v9 for title-based label automation.
.github/workflows/label-issues.yml Updates actions/github-script to v9 for issue labeling automation.
.github/workflows/issue-triage.yml Updates actions/github-script to v9 for author membership checks.
.github/workflows/integration-tests-manual.yml Updates actions/github-script to v9 for resolving/authorizing checkout refs.
.github/workflows/dotnet-build-and-test.yml Updates actions/github-script to v9 for test failure/cancel handling steps.
.github/workflows/devflow-pr-review.yml Updates actions/github-script to v9 for team membership checks and command reactions.

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

@dependabot
dependabot Bot temporarily deployed to github-app-auth August 20, 2026 10:16 Inactive
@dependabot
dependabot Bot temporarily deployed to github-app-auth August 20, 2026 10:27 Inactive
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/github-script-9.0.0 branch from 45e2475 to 87c40a4 Compare August 20, 2026 10:27
@dependabot
dependabot Bot temporarily deployed to github-app-auth August 20, 2026 10:27 Inactive
@dependabot
dependabot Bot temporarily deployed to github-app-auth August 21, 2026 22:39 Inactive
@dependabot
dependabot Bot temporarily deployed to github-app-auth August 21, 2026 22:40 Inactive
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/github-script-9.0.0 branch from 87c40a4 to 7467264 Compare August 21, 2026 22:40
@dependabot
dependabot Bot temporarily deployed to github-app-auth August 21, 2026 22:40 Inactive
@dependabot
dependabot Bot temporarily deployed to github-app-auth September 2, 2026 11:26 Inactive
@dependabot dependabot Bot changed the title Bump actions/github-script from 8.0.0 to 9.0.0 Chore(deps): Bump actions/github-script from 8.0.0 to 9.0.0 Sep 2, 2026
@dependabot
dependabot Bot temporarily deployed to github-app-auth September 2, 2026 11:27 Inactive
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/github-script-9.0.0 branch from 7467264 to 02ef868 Compare September 2, 2026 11:27
@dependabot
dependabot Bot temporarily deployed to github-app-auth September 2, 2026 11:27 Inactive
@dependabot
dependabot Bot temporarily deployed to github-app-auth September 2, 2026 11:27 Inactive
@dependabot
dependabot Bot temporarily deployed to github-app-auth September 4, 2026 07:00 Inactive
@dependabot
dependabot Bot temporarily deployed to github-app-auth September 4, 2026 07:01 Inactive
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/github-script-9.0.0 branch from 02ef868 to 4c75883 Compare September 4, 2026 07:01
@dependabot
dependabot Bot temporarily deployed to github-app-auth September 4, 2026 07:01 Inactive
@dependabot
dependabot Bot temporarily deployed to github-app-auth September 4, 2026 07:02 Inactive
Bumps [actions/github-script](https://github.com/actions/github-script) from 8.0.0 to 9.0.0.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@ed59741...3a2844b)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot temporarily deployed to github-app-auth September 4, 2026 07:03 Inactive
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/github-script-9.0.0 branch from 4c75883 to c14dd42 Compare September 4, 2026 07:03
@dependabot
dependabot Bot temporarily deployed to github-app-auth September 4, 2026 07:03 Inactive
@dependabot
dependabot Bot temporarily deployed to github-app-auth September 4, 2026 07:03 Inactive
@baywet
Vincent Biret (baywet) added this pull request to the merge queue Sep 4, 2026
Merged via the queue into main with commit eff0674 Sep 4, 2026
22 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions/github-script-9.0.0 branch September 4, 2026 10:14

This branch was previously deployed

1 inactive deployment
github-app-auth — c14dd420 Deployed Sep 4, 2026 by dependabot[bot] via add_label #21895
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Usage: [Issues, PRs], Target: dependencies in the project github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants