Upgrade @actions dependencies

[Copilot]

Description:
Upgrades the following @actions toolkit dependencies to their latest versions:

Package	Old Version	New Version
@actions/core	^1.11.1	^2.0.3
@actions/cache	^5.0.1	^5.0.5
@actions/exec	^1.1.1	^2.0.0
@actions/glob	^0.5.0	^0.5.1
@actions/http-client	^2.2.1	^3.0.2
@actions/tool-cache	^2.0.2	^3.0.1
@actions/io	^1.0.2	^2.0.0

Changes included:

• Updated package.json with new version ranges
• Updated package-lock.json via npm install
• Ran npm audit fix to address vulnerabilities
• Rebuilt dist/ files via npm run build
• Updated .licenses/npm/ files:
  • cache.dep.yml: 5.0.1 → 5.0.5
  • glob.dep.yml: 0.5.0 → 0.5.1
  • tool-cache.dep.yml: 2.0.2 → 3.0.1
  • Replaced core-1.11.1.dep.yml + core-2.0.1.dep.yml with core.dep.yml at 2.0.3
  • Replaced undici-6.23.0.dep.yml with undici-6.24.1.dep.yml (transitive dep update)
  • brace-expansion.dep.yml: 1.1.12 → 1.1.13 (transitive dep update)
  • fast-xml-builder.dep.yml: 1.0.0 → 1.1.4 (transitive dep update)
  • fast-xml-parser.dep.yml: 5.4.1 → 5.5.11 (transitive dep update)
  • strnum.dep.yml: 2.1.2 → 2.2.3 (transitive dep update)
  • path-expression-matcher.dep.yml: added new record for 1.4.0 (new transitive dep from fast-xml-parser upgrade)
  • Replaced exec-1.1.1.dep.yml + exec-2.0.0.dep.yml with exec.dep.yml at 2.0.0 (ran licensed cache)
  • Replaced io-1.1.3.dep.yml + io-2.0.0.dep.yml with io.dep.yml at 2.0.0 (ran licensed cache)

Related issue:

Check list:

• Mark if documentation changes are required.
• Mark if tests were added or updated to cover the changes.

[gowridurgad]

@copilot Fix the License failures

[Copilot]

@copilot Fix the License failures

Fixed in commit 1a0a013. The Licensed CI was failing due to 5 outdated/missing license records introduced by the transitive dependency upgrades:

• brace-expansion: bumped 1.1.12 → 1.1.13
• fast-xml-builder: bumped 1.0.0 → 1.1.4
• fast-xml-parser: bumped 5.4.1 → 5.5.11
• strnum: bumped 2.1.2 → 2.2.3
• path-expression-matcher: added new record for 1.4.0 (new transitive dependency from fast-xml-parser upgrade)

[gowridurgad]

@copilot, Upgrade @actions/exec from ^1.1.1 to ^2.0.0 Run the appropriate license commands such as licensed status and licensed cache and fix any licensing issues.

[Copilot]

@copilot, Upgrade @actions/exec from ^1.1.1 to ^2.0.0 Run the appropriate license commands such as licensed status and licensed cache and fix any licensing issues.

Done in commit 6677855.

• Upgraded @actions/exec from ^1.1.1 to ^2.0.0 in package.json
• Ran licensed status (found 2 errors) and licensed cache to regenerate records:
  • Removed exec-1.1.1.dep.yml and exec-2.0.0.dep.yml → replaced with unified exec.dep.yml (v2.0.0)
  • Removed io-1.1.3.dep.yml and io-2.0.0.dep.yml → replaced with unified io.dep.yml (v2.0.0)
    (The old @actions/exec@1.1.1 had a nested @actions/io@1.1.3; upgrading to v2.0.0 deduplicates both into single versions)
• licensed status now reports 0 errors across all 64 dependencies
• All 223 tests pass

[Copilot]

Pull request overview

Updates this action’s Node.js toolkit dependencies and associated lock/license metadata to newer @actions/* versions, aligning runtime dependencies with the latest toolkit releases.

Changes:

• Bumped @actions/* runtime dependencies in package.json.
• Refreshed package-lock.json (including transitive upgrades from npm audit fix).
• Updated .licenses/npm/** records to reflect upgraded/added/removed dependencies.

Reviewed changes

Copilot reviewed 14 out of 19 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
package.json	Updates @actions/* dependency version ranges.
package-lock.json	Locks new versions; includes new nested dependency resolutions and transitive upgrades.
.licenses/npm/undici-6.24.1.dep.yml	Updates undici license record version.
.licenses/npm/strnum.dep.yml	Updates strnum license record version.
.licenses/npm/path-expression-matcher.dep.yml	Adds new license record for a new transitive dependency.
.licenses/npm/fast-xml-parser.dep.yml	Updates fast-xml-parser license record version.
.licenses/npm/fast-xml-builder.dep.yml	Updates fast-xml-builder license record version.
.licenses/npm/brace-expansion.dep.yml	Updates brace-expansion license record version.
.licenses/npm/@actions/tool-cache.dep.yml	Updates tool-cache license record version.
.licenses/npm/@actions/io.dep.yml	Adds consolidated @actions/io license record at v2.0.0.
.licenses/npm/@actions/io-1.1.3.dep.yml	Removes old @actions/io license record.
.licenses/npm/@actions/glob.dep.yml	Updates glob license record version.
.licenses/npm/@actions/exec.dep.yml	Adds consolidated @actions/exec license record at v2.0.0.
.licenses/npm/@actions/exec-1.1.1.dep.yml	Removes old @actions/exec license record.
.licenses/npm/@actions/core.dep.yml	Updates core license record version.
.licenses/npm/@actions/core-1.11.1.dep.yml	Removes old @actions/core license record.
.licenses/npm/@actions/cache.dep.yml	Updates cache license record version.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.