ci(deps): bump the gh-actions group across 1 directory with 3 updates

[dependabot]

Bumps the gh-actions group with 3 updates in the / directory: actions/github-script, leafo/gh-actions-lua and googleapis/release-please-action.

Updates actions/github-script from 8 to 9

Release notes

Sourced from actions/github-script's releases.

v9.0.0

New features:

• getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.
• Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

• require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.
• getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.
• If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.

What's Changed

• Add ACTIONS_ORCHESTRATION_ID to user-agent string by @​Copilot in actions/github-script#695
• ci: use deployment: false for integration test environments by @​salmanmkc in actions/github-script#712
• feat!: add getOctokit to script context, upgrade @​actions/github v9, @​octokit/core v7, and related packages by @​salmanmkc in actions/github-script#700

New Contributors

• @​Copilot made their first contribution in actions/github-script#695

Full Changelog: actions/github-script@v8.0.0...v9.0.0

Commits

• 3a2844b Merge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re...
• ca10bbd fix: use @​octokit/core/types import for v7 compatibility
• 86e48e2 merge: incorporate main branch changes
• c108472 chore: rebuild dist for v9 upgrade and getOctokit factory
• afff112 Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag...
• ff8117e ci: fix user-agent test to handle orchestration ID
• 81c6b78 ci: use deployment: false to suppress deployment noise from integration tests
• 3953caf docs: update README examples from @​v8 to @​v9, add getOctokit docs and v9 brea...
• c17d55b ci: add getOctokit integration test job
• a047196 test: add getOctokit integration tests via callAsyncFunction
• Additional commits viewable in compare view

Updates leafo/gh-actions-lua from 12 to 13

Release notes

Sourced from leafo/gh-actions-lua's releases.

v13

What's new in v13

Lua 5.5 support

• New 5.5 version alias pointing to Lua 5.5.0 (released 2025-12-15)
• Default luaVersion is now 5.5 (previously 5.4)

ESM migration

main.js has been converted to ES modules to match the latest @actions/* toolkit packages, which went ESM-only in their most recent majors. No user-facing behavior change — same action API, same inputs.

Dependency upgrades

Package	Before	After
@actions/core	1.11.1	3.0.1
@actions/cache	4.1.0	6.0.0
@actions/exec	1.1.1	3.0.0
@actions/io	1.1.3	3.0.2
@actions/tool-cache	2.0.2	4.0.0

Release tarballs refreshed

• New: 5.5.0.tar.gz
• 5.3.6.tar.gz replaces 5.3.5.tar.gz
• 5.4.8.tar.gz replaces 5.4.1.tar.gz

README / example updates

The example snippets now use:

• actions/checkout@v6 (was @master / @v4) — silences the Node.js 20 deprecation warning
• step-security/msvc-dev-cmd@v1 in place of ilammy/msvc-dev-cmd@v1 — same input surface, runs on Node.js 24, actively maintained

Full changelog: leafo/gh-actions-lua@v12...v13

v13.0.0

What's new in v13

Lua 5.5 support

• New 5.5 version alias pointing to Lua 5.5.0 (released 2025-12-15)
• Default luaVersion is now 5.5 (previously 5.4)

ESM migration

main.js has been converted to ES modules to match the latest @actions/* toolkit packages, which went ESM-only in their most recent majors. No user-facing behavior change — same action API, same inputs.

Dependency upgrades

Package	Before	After
@actions/core	1.11.1	3.0.1
@actions/cache	4.1.0	6.0.0
@actions/exec	1.1.1	3.0.0
@actions/io	1.1.3	3.0.2
@actions/tool-cache	2.0.2	4.0.0

... (truncated)

Commits

• 6919171 update readme for v13
• ae535d3 try changing ilammy/msvc-dev-cmd@v1 to step-security/msvc-dev-cmd@v1
• 9a00dba update vendored deps
• 3f7a3ed bump some stuff to get rid of warnings
• 4e7e30f update publish versions
• fd32011 lua 5.5 alias, make default version lua 5.5
• See full diff in compare view

Updates googleapis/release-please-action from 4 to 5

Release notes

Sourced from googleapis/release-please-action's releases.

v5.0.0

5.0.0 (2026-04-22)

⚠ BREAKING CHANGES

• upgrade to node24 (#1188)

Features

• upgrade to node24 (#1188) (46dfc01)

Bug Fixes

• bump release-please from 17.3.0 to 17.6.0 (#1199) (f533c26)

v4.4.1

4.4.1 (2026-02-20)

Bug Fixes

• bump release-please from 17.1.3 to 17.3.0 (#1183) (ef9c274)

v4.4.0

4.4.0 (2025-10-09)

Features

• add ability to select versioning-strategy and release-as (#1121) (ee0f5ba)

Bug Fixes

• changelog-host parameter ignored when using manifest configuration (#1151) (535c413)
• bump mocha from 11.7.1 to 11.7.2 in the npm_and_yarn group across 1 directory (#1149) (3612a99)
• bump release-please from 17.1.2 to 17.1.3 (#1158) (66fbfe9)

v4.3.0

4.3.0 (2025-08-20)

Features

• deps: update release-please to 17.1.2 (f07192c)

v4.2.0

4.2.0 (2025-03-07)

... (truncated)

Changelog

Sourced from googleapis/release-please-action's changelog.

4.1.1 (2024-05-14)

Bug Fixes

• bump release-please from 16.10.0 to 16.10.2 (#969) (aa764e0)
• bump the npm_and_yarn group with 1 update (#967) (ce529d4)

4.1.0 (2024-03-11)

Features

• add changelog-host input to action.yml (#948) (863b06f)

4.0.3 (2024-03-11)

Bug Fixes

• bump release-please from 16.5.0 to 16.10.0 (#953) (d7e88e0)

4.0.2 (2023-12-18)

Bug Fixes

• bump release-please from 16.4.0 to 16.5.0 (#905) (df71963)
• log release-please version (#910) (2a496d1), closes #325

4.0.1 (2023-12-07)

Bug Fixes

• bump release-please from 16.3.1 to 16.4.0 (#897) (2463dad)

4.0.0 (2023-12-01)

⚠ BREAKING CHANGES

• remove most configuration options in favor of manifest configuration to configure the release-please-action
• rewrite in typescript
• remove command option in favor of setting release-type and skip-github-release/skip-github-pull-request
• run on node20
• deps: upgrade release-please to v16
• v4 release

Features

... (truncated)

Commits

• 45996ed chore(main): release 5.0.0 (#1200)
• a8121b9 chore: build dist (#1201)
• f533c26 fix: bump release-please from 17.3.0 to 17.6.0 (#1199)
• 46dfc01 feat!: upgrade to node24 (#1188)
• See full diff in compare view