From e5f19d1cc4b0ece019be4007e08dd899d6321f39 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 22 Apr 2026 14:16:28 +0000
Subject: [PATCH] fix(deps): bump @actions/core from 2.0.3 to 3.0.1

Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 2.0.3 to 3.0.1.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 64 +++++++++++++++++++++++++++++++++--------------
 package.json      |  2 +-
 2 files changed, 46 insertions(+), 20 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 0c40d760..49f2b500 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9,7 +9,7 @@
             "version": "1.12.0",
             "license": "MIT",
             "dependencies": {
-                "@actions/core": "2.0.3",
+                "@actions/core": "3.0.1",
                 "@actions/exec": "2.0.0",
                 "@microsoft/security-devops-actions-toolkit": "1.11.0"
             },
@@ -28,15 +28,27 @@
             }
         },
         "node_modules/@actions/core": {
-            "version": "2.0.3",
-            "resolved": "https://registry.npmjs.org/@actions/core/-/core-2.0.3.tgz",
-            "integrity": "sha512-Od9Thc3T1mQJYddvVPM4QGiLUewdh+3txmDYHHxoNdkqysR1MbCT+rFOtNUxYAz+7+6RIsqipVahY2GJqGPyxA==",
-            "license": "MIT",
+            "version": "3.0.1",
+            "resolved": "https://registry.npmjs.org/@actions/core/-/core-3.0.1.tgz",
+            "integrity": "sha512-a6d/Nwahm9fliVGRhdhofo40HjHQasUPusmc7vBfyky+7Z+P2A1J68zyFVaNcEclc/Se+eO595oAr5nwEIoIUA==",
+            "dependencies": {
+                "@actions/exec": "^3.0.0",
+                "@actions/http-client": "^4.0.0"
+            }
+        },
+        "node_modules/@actions/core/node_modules/@actions/exec": {
+            "version": "3.0.0",
+            "resolved": "https://registry.npmjs.org/@actions/exec/-/exec-3.0.0.tgz",
+            "integrity": "sha512-6xH/puSoNBXb72VPlZVm7vQ+svQpFyA96qdDBvhB8eNZOE8LtPf9L4oAsfzK/crCL8YZ+19fKYVnM63Sl+Xzlw==",
             "dependencies": {
-                "@actions/exec": "^2.0.0",
-                "@actions/http-client": "^3.0.2"
+                "@actions/io": "^3.0.2"
             }
         },
+        "node_modules/@actions/core/node_modules/@actions/io": {
+            "version": "3.0.2",
+            "resolved": "https://registry.npmjs.org/@actions/io/-/io-3.0.2.tgz",
+            "integrity": "sha512-nRBchcMM+QK1pdjO7/idu86rbJI5YHUKCvKs0KxnSYbVe3F51UfGxuZX4Qy/fWlp6l7gWFwIkrOzN+oUK03kfw=="
+        },
         "node_modules/@actions/exec": {
             "version": "2.0.0",
             "resolved": "https://registry.npmjs.org/@actions/exec/-/exec-2.0.0.tgz",
@@ -47,10 +59,9 @@
             }
         },
         "node_modules/@actions/http-client": {
-            "version": "3.0.2",
-            "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-3.0.2.tgz",
-            "integrity": "sha512-JP38FYYpyqvUsz+Igqlc/JG6YO9PaKuvqjM3iGvaLqFnJ7TFmcLyy2IDrY0bI0qCQug8E9K+elv5ZNfw62ZJzA==",
-            "license": "MIT",
+            "version": "4.0.1",
+            "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-4.0.1.tgz",
+            "integrity": "sha512-+Nvd1ImaOZBSoPbsUtEhv+1z99H12xzncCkz0a3RuehINE81FZSe2QTj3uvAPTcJX/SCzUQHQ0D1GrPMbrPitg==",
             "dependencies": {
                 "tunnel": "^0.0.6",
                 "undici": "^6.23.0"
@@ -3834,12 +3845,27 @@
     },
     "dependencies": {
         "@actions/core": {
-            "version": "2.0.3",
-            "resolved": "https://registry.npmjs.org/@actions/core/-/core-2.0.3.tgz",
-            "integrity": "sha512-Od9Thc3T1mQJYddvVPM4QGiLUewdh+3txmDYHHxoNdkqysR1MbCT+rFOtNUxYAz+7+6RIsqipVahY2GJqGPyxA==",
+            "version": "3.0.1",
+            "resolved": "https://registry.npmjs.org/@actions/core/-/core-3.0.1.tgz",
+            "integrity": "sha512-a6d/Nwahm9fliVGRhdhofo40HjHQasUPusmc7vBfyky+7Z+P2A1J68zyFVaNcEclc/Se+eO595oAr5nwEIoIUA==",
             "requires": {
-                "@actions/exec": "^2.0.0",
-                "@actions/http-client": "^3.0.2"
+                "@actions/exec": "^3.0.0",
+                "@actions/http-client": "^4.0.0"
+            },
+            "dependencies": {
+                "@actions/exec": {
+                    "version": "3.0.0",
+                    "resolved": "https://registry.npmjs.org/@actions/exec/-/exec-3.0.0.tgz",
+                    "integrity": "sha512-6xH/puSoNBXb72VPlZVm7vQ+svQpFyA96qdDBvhB8eNZOE8LtPf9L4oAsfzK/crCL8YZ+19fKYVnM63Sl+Xzlw==",
+                    "requires": {
+                        "@actions/io": "^3.0.2"
+                    }
+                },
+                "@actions/io": {
+                    "version": "3.0.2",
+                    "resolved": "https://registry.npmjs.org/@actions/io/-/io-3.0.2.tgz",
+                    "integrity": "sha512-nRBchcMM+QK1pdjO7/idu86rbJI5YHUKCvKs0KxnSYbVe3F51UfGxuZX4Qy/fWlp6l7gWFwIkrOzN+oUK03kfw=="
+                }
             }
         },
         "@actions/exec": {
@@ -3851,9 +3877,9 @@
             }
         },
         "@actions/http-client": {
-            "version": "3.0.2",
-            "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-3.0.2.tgz",
-            "integrity": "sha512-JP38FYYpyqvUsz+Igqlc/JG6YO9PaKuvqjM3iGvaLqFnJ7TFmcLyy2IDrY0bI0qCQug8E9K+elv5ZNfw62ZJzA==",
+            "version": "4.0.1",
+            "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-4.0.1.tgz",
+            "integrity": "sha512-+Nvd1ImaOZBSoPbsUtEhv+1z99H12xzncCkz0a3RuehINE81FZSe2QTj3uvAPTcJX/SCzUQHQ0D1GrPMbrPitg==",
             "requires": {
                 "tunnel": "^0.0.6",
                 "undici": ">=6.24.1"
diff --git a/package.json b/package.json
index 9f525a83..1570390b 100644
--- a/package.json
+++ b/package.json
@@ -19,7 +19,7 @@
     "author": "Microsoft Corporation",
     "license": "MIT",
     "dependencies": {
-        "@actions/core": "2.0.3",
+        "@actions/core": "3.0.1",
         "@actions/exec": "2.0.0",
         "@microsoft/security-devops-actions-toolkit": "1.11.0"
     },