github-actions: bump actions/github-script from 7.1.0 to 9.0.0
Open
Number: #1203
Type: Pull Request
State: Open
Type: Pull Request
State: Open
Author:
dependabot[bot]
Association: Unknown
Comments: 1
Association: Unknown
Comments: 1
Created:
April 16, 2026 at 01:33 AM UTC
(about 2 months ago)
(about 2 months ago)
Updated:
April 16, 2026 at 01:38 AM UTC
(about 2 months ago)
(about 2 months ago)
Labels:
dependencies github_actions
dependencies github_actions
Description:
Bumps actions/github-script from 7.1.0 to 9.0.0.
Release notes
Sourced from actions/github-script's releases.
v9.0.0
New features:
getOctokitfactory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients withgetOctokitfor details and examples.- Orchestration ID in user-agent — The
ACTIONS_ORCHESTRATION_IDenvironment variable is automatically appended to the user-agent string for request tracing.Breaking changes:
require('@actions/github')no longer works in scripts. The upgrade to@actions/githubv9 (ESM-only) meansrequire('@actions/github')will fail at runtime. If you previously used patterns likeconst { getOctokit } = require('@actions/github')to create secondary clients, use the new injectedgetOctokitfunction instead — it's available directly in the script context with no imports needed.getOctokitis now an injected function parameter. Scripts that declareconst getOctokit = ...orlet getOctokit = ...will get aSyntaxErrorbecause JavaScript does not allowconst/letredeclaration of function parameters. Use the injectedgetOctokitdirectly, or usevar getOctokit = ...if you need to redeclare it.- If your script accesses other
@actions/githubinternals beyond the standardgithub/octokitclient, you may need to update those references for v9 compatibility.What's Changed
- Add ACTIONS_ORCHESTRATION_ID to user-agent string by
@Copilotin actions/github-script#695- ci: use deployment: false for integration test environments by
@salmanmkcin actions/github-script#712- feat!: add getOctokit to script context, upgrade
@actions/githubv9,@octokit/corev7, and related packages by@salmanmkcin actions/github-script#700New Contributors
@Copilotmade their first contribution in actions/github-script#695Full Changelog: https://github.com/actions/github-script/compare/v8.0.0...v9.0.0
v8.0.0
What's Changed
- Update Node.js version support to 24.x by
@salmanmkcin actions/github-script#637- README for updating actions/github-script from v7 to v8 by
@sneha-kripin actions/github-script#653⚠️ Minimum Compatible Runner Version
v2.327.1
Release NotesMake sure your runner is updated to this version or newer to use this release.
New Contributors
@salmanmkcmade their first contribution in actions/github-script#637@sneha-kripmade their first contribution in actions/github-script#653Full Changelog: https://github.com/actions/github-script/compare/v7.1.0...v8.0.0
Commits
3a2844bMerge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re...ca10bbdfix: use@octokit/core/types import for v7 compatibility86e48e2merge: incorporate main branch changesc108472chore: rebuild dist for v9 upgrade and getOctokit factoryafff112Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag...ff8117eci: fix user-agent test to handle orchestration ID81c6b78ci: use deployment: false to suppress deployment noise from integration tests3953cafdocs: update README examples from@v8to@v9, add getOctokit docs and v9 brea...c17d55bci: add getOctokit integration test joba047196test: add getOctokit integration tests via callAsyncFunction- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Package Dependencies
Technical Details
| ID: | 15335832 |
| UUID: | 4272659381 |
| Node ID: | PR_kwDOHvKt1c7S0xgz |
| Host: | GitHub |
| Repository: | NHSDigital/NRLF |