Bump actions/github-script from 8 to 9

[dependabot]

Bumps actions/github-script from 8 to 9.

Release notes

Sourced from actions/github-script's releases.

v9.0.0

New features:

• getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.
• Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

• require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.
• getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.
• If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.

What's Changed

• Add ACTIONS_ORCHESTRATION_ID to user-agent string by @​Copilot in actions/github-script#695
• ci: use deployment: false for integration test environments by @​salmanmkc in actions/github-script#712
• feat!: add getOctokit to script context, upgrade @​actions/github v9, @​octokit/core v7, and related packages by @​salmanmkc in actions/github-script#700

New Contributors

• @​Copilot made their first contribution in actions/github-script#695

Full Changelog: actions/github-script@v8.0.0...v9.0.0

Commits

• 3a2844b Merge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re...
• ca10bbd fix: use @​octokit/core/types import for v7 compatibility
• 86e48e2 merge: incorporate main branch changes
• c108472 chore: rebuild dist for v9 upgrade and getOctokit factory
• afff112 Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag...
• ff8117e ci: fix user-agent test to handle orchestration ID
• 81c6b78 ci: use deployment: false to suppress deployment noise from integration tests
• 3953caf docs: update README examples from @​v8 to @​v9, add getOctokit docs and v9 brea...
• c17d55b ci: add getOctokit integration test job
• a047196 test: add getOctokit integration tests via callAsyncFunction
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

✅ E2E Test Results — Passed

Total	Passed	Failed	Skipped
44	44	0	0

Test Details

Test	Status	Duration
admin-apps.spec.ts › Admin - Multi-App Management › admin page shows Apps section with empty state	✅ Pass	0.9s
admin-apps.spec.ts › Admin - Multi-App Management › can create an app and form collapses after	✅ Pass	1.1s
admin-apps.spec.ts › Admin - Multi-App Management › token sections appear after creating an app	✅ Pass	0.7s
admin-apps.spec.ts › Admin - Multi-App Management › can edit an app via inline edit form	✅ Pass	1.0s
admin-apps.spec.ts › Admin - Multi-App Management › edit form cancel closes without saving	✅ Pass	0.8s
admin-apps.spec.ts › Admin - Multi-App Management › agent token fields hidden until app selected with multiple apps	✅ Pass	0.7s
admin-apps.spec.ts › Admin - Multi-App Management › created app appears in the apps table with correct details	✅ Pass	0.7s
admin-apps.spec.ts › Admin - Multi-App Management › can delete an app via the admin UI	✅ Pass	0.9s
admin-apps.spec.ts › Admin - Multi-App Management › multiple apps appear in the apps table	✅ Pass	0.7s
admin-apps.spec.ts › Admin - Multi-App Management › app selector is hidden when only one app exists	✅ Pass	0.7s
admin-apps.spec.ts › Admin - Multi-App Management › app selector appears when multiple apps exist	✅ Pass	0.7s
admin-apps.spec.ts › Admin - Multi-App Management › app selector auto-selects the default app	✅ Pass	0.7s
admin-apps.spec.ts › Admin - App API endpoints › GET /api/apps returns empty array when no apps exist	✅ Pass	0.1s
admin-apps.spec.ts › Admin - App API endpoints › POST /api/apps creates an app and returns it	✅ Pass	0.0s
admin-apps.spec.ts › Admin - App API endpoints › GET /api/apps/{id} returns app details	✅ Pass	0.0s
admin-apps.spec.ts › Admin - App API endpoints › DELETE /api/apps/{id} removes the app	✅ Pass	0.1s
admin-apps.spec.ts › Admin - App API endpoints › POST /api/apps rejects missing required fields	✅ Pass	0.0s
admin-apps.spec.ts › Admin - App API endpoints › app API endpoints require admin role	✅ Pass	0.0s
auth-api.spec.ts › Auth API › GET /auth/status returns unauthenticated without session	✅ Pass	0.0s
auth-api.spec.ts › Auth API › GET /auth/status returns authenticated with session	✅ Pass	0.0s
auth-api.spec.ts › Auth API › GET /auth/github redirects to GitHub OAuth	✅ Pass	0.0s
auth-api.spec.ts › Auth API › POST /auth/logout clears session	✅ Pass	0.0s
auth-api.spec.ts › Auth API › API endpoints require authentication	✅ Pass	0.0s
dashboard.spec.ts › Dashboard - no apps configured › hides token sections when no apps exist	✅ Pass	0.7s
dashboard.spec.ts › Dashboard › renders dashboard with user info	✅ Pass	0.3s
dashboard.spec.ts › Dashboard › shows Create Token section with form fields	✅ Pass	0.2s
dashboard.spec.ts › Dashboard › shows Active Tokens section	✅ Pass	0.2s
dashboard.spec.ts › Dashboard › duration dropdown has expected options	✅ Pass	0.2s
dashboard.spec.ts › Dashboard - multi-app selection › requires app selection before showing token form with multiple apps	✅ Pass	0.8s
dashboard.spec.ts › Dashboard - multi-app selection › auto-selects and shows form with single app	✅ Pass	0.7s
login.spec.ts › Login page › renders the login page with branding	✅ Pass	0.2s
login.spec.ts › Login page › has a Sign in with GitHub button linking to OAuth	✅ Pass	0.1s
login.spec.ts › Login page › unauthenticated root redirects to login	✅ Pass	0.1s
logout.spec.ts › Logout › sign out button logs user out and redirects to login	✅ Pass	0.4s
tokens.spec.ts › Token management › can create an open-scoped token (no repos, no permissions)	✅ Pass	1.0s
tokens.spec.ts › Token management › can create a scoped token with repository and permissions	✅ Pass	1.0s
tokens.spec.ts › Token management › can create a token with multiple repositories	✅ Pass	0.9s
tokens.spec.ts › Token management › created token appears in the Active Tokens list	✅ Pass	0.8s
tokens.spec.ts › Token management › can revoke a token	✅ Pass	1.0s
tokens.spec.ts › Token management › repo select uses multi mode	✅ Pass	0.7s
tokens.spec.ts › Token management › form labels indicate optional fields	✅ Pass	0.2s
tokens.spec.ts › Token management › permission select loads from API and shows available scopes	✅ Pass	0.7s
tokens.spec.ts › Token management › permission select respects API-returned scope restrictions	✅ Pass	0.7s
tokens.spec.ts › Token management › can create a scoped token with pull_requests permission	✅ Pass	1.3s

📸 Screenshots & report: Download artifacts
📊 Workflow run: View details

Run #442 · 2026-04-16 19:59:13 UTC