Skip to content

⬆️ Bump @actions/tool-cache from 3.0.0 to 4.0.0 - #32

Merged
RobertoGraham merged 4 commits into
mainfrom
dependabot/npm_and_yarn/actions/tool-cache-4.0.0
Mar 31, 2026
Merged

RobertoGraham merged 4 commits into
mainfrom
dependabot/npm_and_yarn/actions/tool-cache-4.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jan 30, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @actions/tool-cache from 3.0.0 to 4.0.0.

Changelog

Sourced from @​actions/tool-cache's changelog.

4.0.0

  • Breaking change: Package is now ESM-only
    • CommonJS consumers must use dynamic import() instead of require()

3.0.1

  • Bump @actions/http-client to 3.0.2
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 30, 2026
@dependabot
dependabot Bot requested a review from RobertoGraham as a code owner January 30, 2026 09:09
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 30, 2026
@RobertoGraham

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [@actions/tool-cache](https://github.com/actions/toolkit/tree/HEAD/packages/tool-cache) from 3.0.0 to 4.0.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/tool-cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/@actions/cache@4.0.0/packages/tool-cache)

---
updated-dependencies:
- dependency-name: "@actions/tool-cache"
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/actions/tool-cache-4.0.0 branch from f89c30c to 4ce493e Compare March 31, 2026 23:02
@RobertoGraham

Copy link
Copy Markdown
Owner

@copilot, address the breaking change.

Copilot AI commented Mar 31, 2026 •

Copy link
Copy Markdown
Contributor

@copilot, address the breaking change.

In commit f74f675, replaced require('@actions/tool-cache') with await import('@actions/tool-cache'). The package is now ESM-only in 4.0.0, and since find, downloadTool, extractTar, and cacheDir are all named exports on the module namespace object, no other changes are needed.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • unpkg.com
    • Triggering command: /usr/bin/curl curl -s REDACTED (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

@RobertoGraham
RobertoGraham merged commit 97652ea into main Mar 31, 2026
1 check passed
@RobertoGraham
RobertoGraham deleted the dependabot/npm_and_yarn/actions/tool-cache-4.0.0 branch March 31, 2026 23:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants