Bump the npm-production group across 1 directory with 3 updates

[dependabot]

Bumps the npm-production group with 3 updates in the / directory: @actions/core, @actions/github and slugify.

Updates @actions/core from 1.11.1 to 3.0.0

Changelog

Sourced from @​actions/core's changelog.

3.0.0

• Breaking change: Package is now ESM-only
  • CommonJS consumers must use dynamic import() instead of require()

2.0.3

• Bump @actions/http-client to 3.0.2

2.0.1

• Bump @​actions/exec from 1.1.1 to 2.0.0 #2199

2.0.0

• Add support for Node 24 #2110
• Bump @​actions/http-client from 2.0.1 to 3.0.0

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​actions/core since your current version.

Updates @actions/github from 6.0.1 to 9.0.0

Changelog

Sourced from @​actions/github's changelog.

9.0.0

• Breaking change: Package is now ESM-only
  • CommonJS consumers must use dynamic import() instead of require()
  • Example: const { getOctokit, context } = await import('@actions/github')
• Fix TypeScript compilation by migrating to ESM, enabling proper imports from @octokit/core/types

8.0.1

• Update undici to 6.23.0
• Update @actions/http-client to 3.0.2

8.0.0

• Update @​octokit dependencies
  • @octokit/core ^7.0.6
  • @octokit/plugin-paginate-rest ^14.0.0
  • @octokit/plugin-rest-endpoint-methods ^17.0.0
  • @octokit/request ^10.0.7
  • @octokit/request-error ^7.1.0
• Breaking change: Minimum Node.js version is now 20 (previously 18)

7.0.0

• Update to v3.0.1 of @actions/http-client

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​actions/github since your current version.

Updates slugify from 1.6.6 to 1.6.8

Changelog

Sourced from slugify's changelog.

Change Log

Commits

• fbbb8ff 1.6.8
• a71a725 patch: fix package.json
• 21b2bfc 1.6.7
• f1b83a4 fix: change declare module to namespace in slugify.d.ts (#206)
• b94fedb CI: add Node 24 (#202)
• c99c574 Add Node.js 22 to CI & update CI actions (#193)
• 4860d7e Merge pull request #188 from stscoundrel/patch-1
• 6dc0bba Run CI in Node.js 20
• daab928 Update changelog
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[tarampampam]

@copilot, fix the code building, and avoid using import * as ... from ... and import only the required stuff to make tree-shaking happier?

[Copilot]

@copilot, fix the code building, and avoid using import * as ... from ... and import only the required stuff to make tree-shaking happier?

Fixed in commit 2e8af19.

The root cause was that @actions/core v3.0.0 and @actions/github v9.0.0 are now ESM-only (their package.json exports only expose an import condition, no require), so ncc couldn't bundle them from CJS source.

Changes made:

• All source files converted from CommonJS (require/module.exports) to ESM (import/export)
• Added "type": "module" to package.json
• Used specific named imports throughout (e.g. import { getInput, setOutput, startGroup, endGroup, info, setFailed } from '@actions/core' and import { context } from '@actions/github') — no import * as anywhere
• Updated the test script to use node --experimental-vm-modules for Jest ESM support
• Build now succeeds; all 83 tests pass