getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.
Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.
Breaking changes:
require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.
getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.
If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.
What's Changed
Add ACTIONS_ORCHESTRATION_ID to user-agent string by @Copilot in #695
ci: use deployment: false for integration test environments by @salmanmkc in #712
make octokit instance available as octokit on top of github, to make it easier to seamlessly copy examples from GitHub rest api or octokit documentations by @iamstarkov in #508
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/github-script](https://github.com/actions/github-script) | action | major | `v7.0.1` → `v9.0.0` |
---
### Release Notes
<details>
<summary>actions/github-script (actions/github-script)</summary>
### [`v9.0.0`](https://github.com/actions/github-script/releases/tag/v9.0.0)
[Compare Source](https://github.com/actions/github-script/compare/v9.0.0...v9.0.0)
**New features:**
- **`getOctokit` factory function** — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See [Creating additional clients with `getOctokit`](https://github.com/actions/github-script#creating-additional-clients-with-getoctokit) for details and examples.
- **Orchestration ID in user-agent** — The `ACTIONS_ORCHESTRATION_ID` environment variable is automatically appended to the user-agent string for request tracing.
**Breaking changes:**
- **`require('@actions/github')` no longer works in scripts.** The upgrade to `@actions/github` v9 (ESM-only) means `require('@actions/github')` will fail at runtime. If you previously used patterns like `const { getOctokit } = require('@actions/github')` to create secondary clients, use the new injected `getOctokit` function instead — it's available directly in the script context with no imports needed.
- `getOctokit` is now an injected function parameter. Scripts that declare `const getOctokit = ...` or `let getOctokit = ...` will get a `SyntaxError` because JavaScript does not allow `const`/`let` redeclaration of function parameters. Use the injected `getOctokit` directly, or use `var getOctokit = ...` if you need to redeclare it.
- If your script accesses other `@actions/github` internals beyond the standard `github`/`octokit` client, you may need to update those references for v9 compatibility.
#### What's Changed
- Add ACTIONS\_ORCHESTRATION\_ID to user-agent string by [@​Copilot](https://github.com/Copilot) in [#​695](https://github.com/actions/github-script/pull/695)
- ci: use deployment: false for integration test environments by [@​salmanmkc](https://github.com/salmanmkc) in [#​712](https://github.com/actions/github-script/pull/712)
- feat!: add getOctokit to script context, upgrade [@​actions/github](https://github.com/actions/github) v9, [@​octokit/core](https://github.com/octokit/core) v7, and related packages by [@​salmanmkc](https://github.com/salmanmkc) in [#​700](https://github.com/actions/github-script/pull/700)
#### New Contributors
- [@​Copilot](https://github.com/Copilot) made their first contribution in [#​695](https://github.com/actions/github-script/pull/695)
**Full Changelog**: <https://github.com/actions/github-script/compare/v8.0.0...v9.0.0>
### [`v9`](https://github.com/actions/github-script/compare/v8.0.0...v9.0.0)
[Compare Source](https://github.com/actions/github-script/compare/v8.0.0...v9.0.0)
### [`v8.0.0`](https://github.com/actions/github-script/compare/v8.0.0...v8.0.0)
[Compare Source](https://github.com/actions/github-script/compare/v8.0.0...v8.0.0)
### [`v8`](https://github.com/actions/github-script/releases/tag/v8): .0.0
[Compare Source](https://github.com/actions/github-script/compare/v7.1.0...v8.0.0)
#### What's Changed
- Update Node.js version support to 24.x by [@​salmanmkc](https://github.com/salmanmkc) in [#​637](https://github.com/actions/github-script/pull/637)
- README for updating actions/github-script from v7 to v8 by [@​sneha-krip](https://github.com/sneha-krip) in [#​653](https://github.com/actions/github-script/pull/653)
#### ⚠️ Minimum Compatible Runner Version
**v2.327.1**\
[Release Notes](https://github.com/actions/runner/releases/tag/v2.327.1)
Make sure your runner is updated to this version or newer to use this release.
#### New Contributors
- [@​salmanmkc](https://github.com/salmanmkc) made their first contribution in [#​637](https://github.com/actions/github-script/pull/637)
- [@​sneha-krip](https://github.com/sneha-krip) made their first contribution in [#​653](https://github.com/actions/github-script/pull/653)
**Full Changelog**: <https://github.com/actions/github-script/compare/v7.1.0...v8.0.0>
### [`v7.1.0`](https://github.com/actions/github-script/releases/tag/v7.1.0)
[Compare Source](https://github.com/actions/github-script/compare/v7.0.1...v7.1.0)
#### What's Changed
- Upgrade husky to v9 by [@​benelan](https://github.com/benelan) in [#​482](https://github.com/actions/github-script/pull/482)
- Add workflow file for publishing releases to immutable action package by [@​Jcambass](https://github.com/Jcambass) in [#​485](https://github.com/actions/github-script/pull/485)
- Upgrade IA Publish by [@​Jcambass](https://github.com/Jcambass) in [#​486](https://github.com/actions/github-script/pull/486)
- Fix workflow status badges by [@​joshmgross](https://github.com/joshmgross) in [#​497](https://github.com/actions/github-script/pull/497)
- Update usage of `actions/upload-artifact` by [@​joshmgross](https://github.com/joshmgross) in [#​512](https://github.com/actions/github-script/pull/512)
- Clear up package name confusion by [@​joshmgross](https://github.com/joshmgross) in [#​514](https://github.com/actions/github-script/pull/514)
- Update dependencies with `npm audit fix` by [@​joshmgross](https://github.com/joshmgross) in [#​515](https://github.com/actions/github-script/pull/515)
- Specify that the used script is JavaScript by [@​timotk](https://github.com/timotk) in [#​478](https://github.com/actions/github-script/pull/478)
- chore: Add Dependabot for NPM and Actions by [@​nschonni](https://github.com/nschonni) in [#​472](https://github.com/actions/github-script/pull/472)
- Define `permissions` in workflows and update actions by [@​joshmgross](https://github.com/joshmgross) in [#​531](https://github.com/actions/github-script/pull/531)
- chore: Add Dependabot for .github/actions/install-dependencies by [@​nschonni](https://github.com/nschonni) in [#​532](https://github.com/actions/github-script/pull/532)
- chore: Remove .vscode settings by [@​nschonni](https://github.com/nschonni) in [#​533](https://github.com/actions/github-script/pull/533)
- ci: Use github/setup-licensed by [@​nschonni](https://github.com/nschonni) in [#​473](https://github.com/actions/github-script/pull/473)
- make octokit instance available as octokit on top of github, to make it easier to seamlessly copy examples from GitHub rest api or octokit documentations by [@​iamstarkov](https://github.com/iamstarkov) in [#​508](https://github.com/actions/github-script/pull/508)
- Remove `octokit` README updates for v7 by [@​joshmgross](https://github.com/joshmgross) in [#​557](https://github.com/actions/github-script/pull/557)
- docs: add "exec" usage examples by [@​neilime](https://github.com/neilime) in [#​546](https://github.com/actions/github-script/pull/546)
- Bump ruby/setup-ruby from 1.213.0 to 1.222.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​563](https://github.com/actions/github-script/pull/563)
- Bump ruby/setup-ruby from 1.222.0 to 1.229.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​575](https://github.com/actions/github-script/pull/575)
- Clearly document passing inputs to the `script` by [@​joshmgross](https://github.com/joshmgross) in [#​603](https://github.com/actions/github-script/pull/603)
- Update README.md by [@​nebuk89](https://github.com/nebuk89) in [#​610](https://github.com/actions/github-script/pull/610)
#### New Contributors
- [@​benelan](https://github.com/benelan) made their first contribution in [#​482](https://github.com/actions/github-script/pull/482)
- [@​Jcambass](https://github.com/Jcambass) made their first contribution in [#​485](https://github.com/actions/github-script/pull/485)
- [@​timotk](https://github.com/timotk) made their first contribution in [#​478](https://github.com/actions/github-script/pull/478)
- [@​iamstarkov](https://github.com/iamstarkov) made their first contribution in [#​508](https://github.com/actions/github-script/pull/508)
- [@​neilime](https://github.com/neilime) made their first contribution in [#​546](https://github.com/actions/github-script/pull/546)
- [@​nebuk89](https://github.com/nebuk89) made their first contribution in [#​610](https://github.com/actions/github-script/pull/610)
**Full Changelog**: <https://github.com/actions/github-script/compare/v7...v7.1.0>
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zNy4xIiwidXBkYXRlZEluVmVyIjoiNDQuMzcuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJyZW5vdmF0ZS9hdXRvbWVyZ2UiLCJyZW5vdmF0ZS9naXRodWItYWN0aW9uIl19-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
v7.0.1→v9.0.0Release Notes
actions/github-script (actions/github-script)
v9.0.0Compare Source
New features:
getOctokitfactory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients withgetOctokitfor details and examples.ACTIONS_ORCHESTRATION_IDenvironment variable is automatically appended to the user-agent string for request tracing.Breaking changes:
require('@actions/github')no longer works in scripts. The upgrade to@actions/githubv9 (ESM-only) meansrequire('@actions/github')will fail at runtime. If you previously used patterns likeconst { getOctokit } = require('@actions/github')to create secondary clients, use the new injectedgetOctokitfunction instead — it's available directly in the script context with no imports needed.getOctokitis now an injected function parameter. Scripts that declareconst getOctokit = ...orlet getOctokit = ...will get aSyntaxErrorbecause JavaScript does not allowconst/letredeclaration of function parameters. Use the injectedgetOctokitdirectly, or usevar getOctokit = ...if you need to redeclare it.@actions/githubinternals beyond the standardgithub/octokitclient, you may need to update those references for v9 compatibility.What's Changed
New Contributors
Full Changelog: https://github.com/actions/github-script/compare/v8.0.0...v9.0.0
v9Compare Source
v8.0.0Compare Source
v8: .0.0Compare Source
What's Changed
⚠️ Minimum Compatible Runner Version
v2.327.1
Release Notes
Make sure your runner is updated to this version or newer to use this release.
New Contributors
Full Changelog: https://github.com/actions/github-script/compare/v7.1.0...v8.0.0
v7.1.0Compare Source
What's Changed
actions/upload-artifactby @joshmgross in #512npm audit fixby @joshmgross in #515permissionsin workflows and update actions by @joshmgross in #531octokitREADME updates for v7 by @joshmgross in #557scriptby @joshmgross in #603New Contributors
Full Changelog: https://github.com/actions/github-script/compare/v7...v7.1.0
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate CLI.
1b074a9315tof4680ebe2c