Upgrade @actions/github to ^9.0.0 and @octokit/request-error to ^7.1.0 (#678)

truggeri · web-flow · commit 13d82742f9de · 2026-03-26T11:55:44.000-07:00
Breaking changes addressed:
- @actions/github 9.0.0: Package is now ESM-only. The ./lib/context
  subpath is no longer in the exports map, so a local github-context.ts
  shim derives the Context type and constructor from the context singleton.
- @octokit/request-error 7.x: Removed headers from RequestErrorOptions.
  Updated test constructor call accordingly.
- @octokit/request-error bumped to ^7.1.0 to align with the version
  used transitively by @actions/github 9.x (prevents instanceof mismatches).
diff --git a/dist/index.js b/dist/index.js
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -24,8 +24,8 @@
   "license": "MIT",
   "dependencies": {
     "@actions/core": "^3.0.0",
-    "@actions/github": "^6.0.1",
-    "@octokit/request-error": "^5.1.1",
+    "@actions/github": "^9.0.0",
+    "@octokit/request-error": "^7.1.0",
     "pluralize": "^8.0.0"
   },
   "devDependencies": {
diff --git a/src/dependabot/github-context.ts b/src/dependabot/github-context.ts
@@ -0,0 +1,8 @@
+import * as github from '@actions/github'
+
+// Re-export the Context type derived from the context singleton.
+// @actions/github v9 does not export the Context class directly from its exports map.
+export type Context = typeof github.context
+
+// The Context constructor (used in dry-run and tests to create fresh instances)
+export const Context = github.context.constructor as new () => Context
diff --git a/src/dependabot/util.ts b/src/dependabot/util.ts
@@ -1,4 +1,4 @@
-import { Context } from '@actions/github/lib/context'
+import type { Context } from './github-context'
 
 export function parseNwo (nwo: string): {owner: string; repo: string} {
   const [owner, name] = nwo.split('/')
diff --git a/src/dependabot/verified_commits.test.ts b/src/dependabot/verified_commits.test.ts
@@ -1,7 +1,7 @@
 import * as github from '@actions/github'
 import * as core from '@actions/core'
 import nock from 'nock'
-import { Context } from '@actions/github/lib/context'
+import { Context } from './github-context'
 import { getAlert, getMessage, trimSlashes, getCompatibility } from './verified_commits'
 
 beforeAll(() => {
diff --git a/src/dependabot/verified_commits.ts b/src/dependabot/verified_commits.ts
@@ -1,6 +1,6 @@
 import * as core from '@actions/core'
 import { GitHub } from '@actions/github/lib/utils'
-import { Context } from '@actions/github/lib/context'
+import type { Context } from './github-context'
 import type { dependencyAlert } from './update_metadata'
 import https from 'https'
 
diff --git a/src/dry-run.ts b/src/dry-run.ts
@@ -1,6 +1,6 @@
  
 import * as github from '@actions/github'
-import { Context } from '@actions/github/lib/context'
+import { Context } from './dependabot/github-context'
 import * as dotenv from 'dotenv'
 import { Argv } from 'yargs'
 import { hideBin } from 'yargs/helpers'
diff --git a/src/main.test.ts b/src/main.test.ts
@@ -522,7 +522,6 @@ test('it sets the action to failed if there is a request error', async () => {
   jest.spyOn(util, 'getBranchNames').mockReturnValue({ headName: 'dependabot|nuget|feature1', baseName: 'main' })
   jest.spyOn(dependabotCommits, 'getMessage').mockImplementation(jest.fn(
     () => Promise.reject(new RequestError('Something bad happened!', 500, {
-      headers: {},
       request: {
         method: 'GET',
         url: 'https://api.github.com/repos/dependabot/dependabot/pulls/101/commits',

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-import { Context } from '@actions/github/lib/context'`
	`1`	`+import type { Context } from './github-context'`
`2`	`2`
`3`	`3`	`export function parseNwo (nwo: string): {owner: string; repo: string} {`
`4`	`4`	`const [owner, name] = nwo.split('/')`