docs(cache): add PR reference to v5.0.1 release notes

Merge remote-tracking branch 'origin/main' into cache-v5.0.1-release
Merge pull request #2213 from actions/fix-cache-storage-blob
2025-12-12 14:53:26 +00:00 · 2025-12-12 14:50:27 +00:00 · 2025-12-12 14:40:41 +00:00 · 2025-12-12 14:05:14 +00:00 · 2025-12-12 13:42:58 +00:00 · 2025-12-12 13:41:31 +00:00
7 changed files with 119 additions and 53 deletions
@@ -69,16 +69,16 @@ jobs:
      id-token: write
    steps:

+      - name: Set Node.js 24.x
+        uses: actions/setup-node@v5
+        with:
+          node-version: 24.x
+
      - name: download artifact
        uses: actions/download-artifact@v4
        with:
          name: ${{ github.event.inputs.package }}

-      - name: setup authentication
-        run: echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" >> .npmrc
-        env:
-          NPM_TOKEN: ${{ secrets.TOKEN }}
-
      - name: publish
        run: npm publish --provenance *.tgz

@@ -1,5 +1,11 @@
 # @actions/artifact Releases

+### 5.0.0
+
+- Dependency updates for Node.js 24 runtime support
+- Update `@actions/core` to v2
+- Update `@actions/http-client` to v3
+
 ### 4.0.0

 - Add support for Node 24 [#2110](https://github.com/actions/toolkit/pull/2110)
@@ -1,17 +1,17 @@
 {
  "name": "@actions/artifact",
-  "version": "4.0.0",
+  "version": "5.0.0",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@actions/artifact",
-      "version": "4.0.0",
+      "version": "5.0.0",
      "license": "MIT",
      "dependencies": {
-        "@actions/core": "^1.10.0",
+        "@actions/core": "^2.0.0",
        "@actions/github": "^6.0.1",
-        "@actions/http-client": "^2.1.0",
+        "@actions/http-client": "^3.0.0",
        "@azure/core-http": "^3.0.5",
        "@azure/storage-blob": "^12.15.0",
        "@octokit/core": "^5.2.1",
@@ -33,22 +33,22 @@
      }
    },
    "node_modules/@actions/core": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.11.1.tgz",
-      "integrity": "sha512-hXJCSrkwfA46Vd9Z3q4cpEpHB1rL5NG04+/rbqW9d3+CSvtB1tYe8UTpAlixa1vj0m/ULglfEK2UKxMGxCxv5A==",
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/@actions/core/-/core-2.0.1.tgz",
+      "integrity": "sha512-oBfqT3GwkvLlo1fjvhQLQxuwZCGTarTE5OuZ2Wg10hvhBj7LRIlF611WT4aZS6fDhO5ZKlY7lCAZTlpmyaHaeg==",
      "license": "MIT",
      "dependencies": {
-        "@actions/exec": "^1.1.1",
-        "@actions/http-client": "^2.0.1"
+        "@actions/exec": "^2.0.0",
+        "@actions/http-client": "^3.0.0"
      }
    },
    "node_modules/@actions/exec": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@actions/exec/-/exec-1.1.1.tgz",
-      "integrity": "sha512-+sCcHHbVdk93a0XT19ECtO/gIXoxvdsgQLzb2fE2/5sIZmWQuluYyjPQtrtTHdU1YzTZ7bAPN4sITq2xi1679w==",
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/@actions/exec/-/exec-2.0.0.tgz",
+      "integrity": "sha512-k8ngrX2voJ/RIN6r9xB82NVqKpnMRtxDoiO+g3olkIUpQNqjArXrCQceduQZCQj3P3xm32pChRLqRrtXTlqhIw==",
      "license": "MIT",
      "dependencies": {
-        "@actions/io": "^1.0.1"
+        "@actions/io": "^2.0.0"
      }
    },
    "node_modules/@actions/github": {
@@ -66,7 +66,7 @@
        "undici": "^5.28.5"
      }
    },
-    "node_modules/@actions/http-client": {
+    "node_modules/@actions/github/node_modules/@actions/http-client": {
      "version": "2.2.3",
      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-2.2.3.tgz",
      "integrity": "sha512-mx8hyJi/hjFvbPokCg4uRd4ZX78t+YyRPtnKWwIl+RzNaVuFpQHfmlGVfsKEJN8LwTCvL+DfVgAM04XaHkm6bA==",
@@ -76,10 +76,20 @@
        "undici": "^5.25.4"
      }
    },
+    "node_modules/@actions/http-client": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-3.0.0.tgz",
+      "integrity": "sha512-1s3tXAfVMSz9a4ZEBkXXRQD4QhY3+GAsWSbaYpeknPOKEeyRiU3lH+bHiLMZdo2x/fIeQ/hscL1wCkDLVM2DZQ==",
+      "license": "MIT",
+      "dependencies": {
+        "tunnel": "^0.0.6",
+        "undici": "^5.28.5"
+      }
+    },
    "node_modules/@actions/io": {
-      "version": "1.1.3",
-      "resolved": "https://registry.npmjs.org/@actions/io/-/io-1.1.3.tgz",
-      "integrity": "sha512-wi9JjgKLYS7U/z8PPbco+PvTb/nRWjeoFlJ1Qer83k/3C5PHQi28hiVdeE2kHXmIL99mQFawx8qt/JPjZilJ8Q==",
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/@actions/io/-/io-2.0.0.tgz",
+      "integrity": "sha512-Jv33IN09XLO+0HS79aaODsvIRyduiF7NY/F6LYeK5oeUmrsz7aFdRphQjFoESF4jS7lMauDOttKALcpapVDIAg==",
      "license": "MIT"
    },
    "node_modules/@azure/abort-controller": {
@@ -2385,7 +2395,6 @@
      "version": "5.9.2",
      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.2.tgz",
      "integrity": "sha512-CWBzXQrc/qOkhidw1OzBTQuYRbfyxDXJMVJ1XNwUHGROVmuaeiEm3OslpZ1RV96d7SKKjZKrSJu3+t/xlw3R9A==",
-      "dev": true,
      "license": "Apache-2.0",
      "bin": {
        "tsc": "bin/tsc",
@@ -1,6 +1,6 @@
 {
  "name": "@actions/artifact",
-  "version": "4.0.0",
+  "version": "5.0.0",
  "preview": true,
  "description": "Actions artifact lib",
  "keywords": [
@@ -40,9 +40,9 @@
    "url": "https://github.com/actions/toolkit/issues"
  },
  "dependencies": {
-    "@actions/core": "^1.10.0",
+    "@actions/core": "^2.0.0",
    "@actions/github": "^6.0.1",
-    "@actions/http-client": "^2.1.0",
+    "@actions/http-client": "^3.0.0",
    "@azure/core-http": "^3.0.5",
    "@azure/storage-blob": "^12.15.0",
    "@octokit/core": "^5.2.1",
@@ -1,5 +1,22 @@
 # @actions/cache Releases

+### 5.0.1
+
+- Fix Node.js 24 punycode deprecation warning by updating `@azure/storage-blob` from `^12.13.0` to `^12.29.1` [#2213](https://github.com/actions/toolkit/pull/2213)
+- Newer storage-blob uses `@azure/core-rest-pipeline` instead of deprecated `@azure/core-http`, which eliminates the transitive dependency on `node-fetch@2` → `whatwg-url@5` → `tr46@0.0.3` that used the deprecated punycode module
+
+### 5.0.0
+
+- Remove `@azure/ms-rest-js` dependency [#2197](https://github.com/actions/toolkit/pull/2197)
+  - The `TransferProgressEvent` type is now imported from `@azure/core-rest-pipeline` instead of `@azure/ms-rest-js`
+- Bump `@actions/core` from `^1.11.1` to `^2.0.0` [#2198](https://github.com/actions/toolkit/pull/2198)
+- Bump `@actions/exec` from `^1.0.1` to `^2.0.0` [#2198](https://github.com/actions/toolkit/pull/2198)
+- Bump `@actions/glob` from `^0.1.0` to `^0.5.0` [#2198](https://github.com/actions/toolkit/pull/2198)
+- Bump `@actions/http-client` from `^2.1.1` to `^3.0.0` [#2198](https://github.com/actions/toolkit/pull/2198)
+- Bump `@actions/io` from `^1.0.1` to `^2.0.0` [#2198](https://github.com/actions/toolkit/pull/2198)
+- Add support for Node.js 24 [#2110](https://github.com/actions/toolkit/pull/2110)
+- Add `node-fetch` override to resolve audit vulnerabilities [#2110](https://github.com/actions/toolkit/pull/2110)
+
 ### 4.1.0

 - Remove client side 10GiB cache size limit check & update twirp client [#2118](https://github.com/actions/toolkit/pull/2118)
@@ -9,14 +9,14 @@
      "version": "5.0.0",
      "license": "MIT",
      "dependencies": {
-        "@actions/core": "^1.11.1",
-        "@actions/exec": "^1.0.1",
-        "@actions/glob": "^0.1.0",
-        "@actions/http-client": "^2.1.1",
-        "@actions/io": "^1.0.1",
+        "@actions/core": "^2.0.0",
+        "@actions/exec": "^2.0.0",
+        "@actions/glob": "^0.5.0",
+        "@actions/http-client": "^3.0.0",
+        "@actions/io": "^2.0.0",
        "@azure/abort-controller": "^1.1.0",
        "@azure/core-rest-pipeline": "^1.22.0",
-        "@azure/storage-blob": "^12.13.0",
+        "@azure/storage-blob": "^12.29.1",
        "@protobuf-ts/runtime-rpc": "^2.11.1",
        "semver": "^6.3.1"
      },
@@ -28,6 +28,35 @@
      }
    },
    "node_modules/@actions/core": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/@actions/core/-/core-2.0.1.tgz",
+      "integrity": "sha512-oBfqT3GwkvLlo1fjvhQLQxuwZCGTarTE5OuZ2Wg10hvhBj7LRIlF611WT4aZS6fDhO5ZKlY7lCAZTlpmyaHaeg==",
+      "license": "MIT",
+      "dependencies": {
+        "@actions/exec": "^2.0.0",
+        "@actions/http-client": "^3.0.0"
+      }
+    },
+    "node_modules/@actions/exec": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/@actions/exec/-/exec-2.0.0.tgz",
+      "integrity": "sha512-k8ngrX2voJ/RIN6r9xB82NVqKpnMRtxDoiO+g3olkIUpQNqjArXrCQceduQZCQj3P3xm32pChRLqRrtXTlqhIw==",
+      "license": "MIT",
+      "dependencies": {
+        "@actions/io": "^2.0.0"
+      }
+    },
+    "node_modules/@actions/glob": {
+      "version": "0.5.0",
+      "resolved": "https://registry.npmjs.org/@actions/glob/-/glob-0.5.0.tgz",
+      "integrity": "sha512-tST2rjPvJLRZLuT9NMUtyBjvj9Yo0MiJS3ow004slMvm8GFM+Zv9HvMJ7HWzfUyJnGrJvDsYkWBaaG3YKXRtCw==",
+      "license": "MIT",
+      "dependencies": {
+        "@actions/core": "^1.9.1",
+        "minimatch": "^3.0.4"
+      }
+    },
+    "node_modules/@actions/glob/node_modules/@actions/core": {
      "version": "1.11.1",
      "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.11.1.tgz",
      "integrity": "sha512-hXJCSrkwfA46Vd9Z3q4cpEpHB1rL5NG04+/rbqW9d3+CSvtB1tYe8UTpAlixa1vj0m/ULglfEK2UKxMGxCxv5A==",
@@ -37,7 +66,7 @@
        "@actions/http-client": "^2.0.1"
      }
    },
-    "node_modules/@actions/exec": {
+    "node_modules/@actions/glob/node_modules/@actions/exec": {
      "version": "1.1.1",
      "resolved": "https://registry.npmjs.org/@actions/exec/-/exec-1.1.1.tgz",
      "integrity": "sha512-+sCcHHbVdk93a0XT19ECtO/gIXoxvdsgQLzb2fE2/5sIZmWQuluYyjPQtrtTHdU1YzTZ7bAPN4sITq2xi1679w==",
@@ -46,17 +75,7 @@
        "@actions/io": "^1.0.1"
      }
    },
-    "node_modules/@actions/glob": {
-      "version": "0.1.2",
-      "resolved": "https://registry.npmjs.org/@actions/glob/-/glob-0.1.2.tgz",
-      "integrity": "sha512-SclLR7Ia5sEqjkJTPs7Sd86maMDw43p769YxBOxvPvEWuPEhpAnBsQfENOpXjFYMmhCqd127bmf+YdvJqVqR4A==",
-      "license": "MIT",
-      "dependencies": {
-        "@actions/core": "^1.2.6",
-        "minimatch": "^3.0.4"
-      }
-    },
-    "node_modules/@actions/http-client": {
+    "node_modules/@actions/glob/node_modules/@actions/http-client": {
      "version": "2.2.3",
      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-2.2.3.tgz",
      "integrity": "sha512-mx8hyJi/hjFvbPokCg4uRd4ZX78t+YyRPtnKWwIl+RzNaVuFpQHfmlGVfsKEJN8LwTCvL+DfVgAM04XaHkm6bA==",
@@ -66,12 +85,28 @@
        "undici": "^5.25.4"
      }
    },
-    "node_modules/@actions/io": {
+    "node_modules/@actions/glob/node_modules/@actions/io": {
      "version": "1.1.3",
      "resolved": "https://registry.npmjs.org/@actions/io/-/io-1.1.3.tgz",
      "integrity": "sha512-wi9JjgKLYS7U/z8PPbco+PvTb/nRWjeoFlJ1Qer83k/3C5PHQi28hiVdeE2kHXmIL99mQFawx8qt/JPjZilJ8Q==",
      "license": "MIT"
    },
+    "node_modules/@actions/http-client": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-3.0.0.tgz",
+      "integrity": "sha512-1s3tXAfVMSz9a4ZEBkXXRQD4QhY3+GAsWSbaYpeknPOKEeyRiU3lH+bHiLMZdo2x/fIeQ/hscL1wCkDLVM2DZQ==",
+      "license": "MIT",
+      "dependencies": {
+        "tunnel": "^0.0.6",
+        "undici": "^5.28.5"
+      }
+    },
+    "node_modules/@actions/io": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/@actions/io/-/io-2.0.0.tgz",
+      "integrity": "sha512-Jv33IN09XLO+0HS79aaODsvIRyduiF7NY/F6LYeK5oeUmrsz7aFdRphQjFoESF4jS7lMauDOttKALcpapVDIAg==",
+      "license": "MIT"
+    },
    "node_modules/@azure/abort-controller": {
      "version": "1.1.0",
      "resolved": "https://registry.npmjs.org/@azure/abort-controller/-/abort-controller-1.1.0.tgz",
@@ -673,7 +708,6 @@
      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
      "dev": true,
      "license": "Apache-2.0",
-      "peer": true,
      "bin": {
        "tsc": "bin/tsc",
        "tsserver": "bin/tsserver"
@@ -1,6 +1,6 @@
 {
  "name": "@actions/cache",
-  "version": "5.0.0",
+  "version": "5.0.1",
  "preview": true,
  "description": "Actions cache lib",
  "keywords": [
@@ -37,15 +37,15 @@
    "url": "https://github.com/actions/toolkit/issues"
  },
  "dependencies": {
-    "@actions/core": "^1.11.1",
-    "@actions/exec": "^1.0.1",
-    "@actions/glob": "^0.1.0",
+    "@actions/core": "^2.0.0",
+    "@actions/exec": "^2.0.0",
+    "@actions/glob": "^0.5.0",
    "@protobuf-ts/runtime-rpc": "^2.11.1",
-    "@actions/http-client": "^2.1.1",
-    "@actions/io": "^1.0.1",
+    "@actions/http-client": "^3.0.0",
+    "@actions/io": "^2.0.0",
    "@azure/abort-controller": "^1.1.0",
    "@azure/core-rest-pipeline": "^1.22.0",
-    "@azure/storage-blob": "^12.13.0",
+    "@azure/storage-blob": "^12.29.1",
    "semver": "^6.3.1"
  },
  "devDependencies": {
Author	SHA1	Message	Date
Salman Muin Kayser Chishti	c655f38a0f	docs(cache): add PR reference to v5.0.1 release notes	2025-12-12 14:53:26 +00:00
Salman Muin Kayser Chishti	cf8caa4e0d	Merge remote-tracking branch 'origin/main' into cache-v5.0.1-release	2025-12-12 14:50:27 +00:00
Salman Chishti	8734e578c6	Merge pull request #2213 from actions/fix-cache-storage-blob fix(cache): update @azure/storage-blob to fix Node.js 24 punycode deprecation	2025-12-12 14:40:41 +00:00
Salman Muin Kayser Chishti	74ac6db523	fix(cache): update @azure/storage-blob to ^12.29.1 to address punycode deprecation	2025-12-12 14:05:14 +00:00
Salman Muin Kayser Chishti	6fc2f678c8	docs(cache): bump to v5.0.1 and add release notes	2025-12-12 13:42:58 +00:00
Salman Muin Kayser Chishti	5ef62e14dd	fix(cache): update @azure/storage-blob to ^12.29.1 to fix punycode deprecation - Updated @azure/storage-blob from ^12.13.0 to ^12.29.1 - Newer storage-blob uses @azure/core-rest-pipeline instead of deprecated @azure/core-http - Fixes Node.js 24 deprecation warning for punycode module	2025-12-12 13:41:31 +00:00
Salman Chishti	5a8462ec27	Merge pull request #2210 from actions/prepare-artifact-release docs(artifact): add v5.0.0 release notes	2025-12-11 21:42:59 +00:00
Salman Muin Kayser Chishti	fcaf488df6	chore(artifact): bump version to v5.0.0	2025-12-11 20:45:49 +00:00
Salman Muin Kayser Chishti	2b48e40e62	docs(artifact): add v5.0.0 release notes	2025-12-11 20:37:18 +00:00
Salman Chishti	44ec738e27	Merge pull request #2209 from actions/version-bumps chore(artifact): bump dependencies for Node.js 24 support	2025-12-11 20:23:43 +00:00
Salman Muin Kayser Chishti	3af0128b01	chore(artifact): bump dependencies for Node.js 24 support	2025-12-11 19:20:51 +00:00
Salman Chishti	e74405f68c	Merge pull request #2194 from actions/prepare-cache-release-v5.0.0 Prepare cache v5 release	2025-12-11 16:00:48 +00:00
Salman Muin Kayser Chishti	cc6abe3c3a	chore(releases): update release notes for v5.0.0 to remove punycode deprecation warning	2025-12-11 14:43:23 +00:00
Salman Muin Kayser Chishti	c6502bc679	PR number update in releases	2025-12-11 14:33:30 +00:00
Salman Muin Kayser Chishti	bdd6eb4293	update releases	2025-12-11 14:32:58 +00:00
Salman Muin Kayser Chishti	6785788751	Merge remote-tracking branch 'origin/main' into prepare-cache-release-v5.0.0	2025-12-11 14:27:41 +00:00
Salman Chishti	ddf2d52556	Merge pull request #2198 from actions/cache-bump-deps chore(cache): bump @actions/* dependencies to v2/v3	2025-12-11 14:25:35 +00:00
Salman Muin Kayser Chishti	7c1b12a15e	chore(cache): update @actions/core to 2.0.1	2025-12-11 13:57:58 +00:00
Salman Muin Kayser Chishti	fdbf9e3ec2	Merge remote-tracking branch 'origin/main' into cache-bump-deps	2025-12-11 13:54:20 +00:00
Salman Muin Kayser Chishti	369aa55cdc	update to core 2.0.1 which has exec 2.0.0	2025-12-11 13:54:17 +00:00
Brian DeHamer	e1191599bb	Merge pull request #2203 from actions/node-update-for-publish Use node24 for publishing	2025-12-10 14:19:00 -08:00
Brian DeHamer	c043714a35	use node24 for publishing Signed-off-by: Brian DeHamer <bdehamer@github.com>	2025-12-10 14:14:15 -08:00
Brian DeHamer	3ac6e0fdf2	Merge pull request #2201 from actions/npm-trusted-publishing Enable npm trusted publishing	2025-12-10 13:32:35 -08:00
Brian DeHamer	d9f9074fee	npm trusted publishing Signed-off-by: Brian DeHamer <bdehamer@github.com>	2025-12-10 13:27:16 -08:00
Salman Chishti	2c52220624	Merge pull request #2199 from actions/core-bump-exec prepare @actions/exec 2.0.1 relesae + chore(core): bump @actions/exec from ^1.1.1 to ^2.0.0	2025-12-10 12:08:47 +00:00
Salman Muin Kayser Chishti	e48877e66c	chore(cache): bump @actions/* dependencies to v2/v3 - @actions/core: ^1.11.1 → ^2.0.0 - @actions/exec: ^1.0.1 → ^2.0.0 - @actions/glob: ^0.1.0 → ^0.5.0 - @actions/http-client: ^2.1.1 → ^3.0.0 - @actions/io: ^1.0.1 → ^2.0.0	2025-12-10 11:38:25 +00:00
Salman Muin Kayser Chishti	eb7ff8401e	chore(cache): regenerate package-lock.json with Node 24	2025-12-10 11:09:56 +00:00
Salman Muin Kayser Chishti	45ec4a2087	chore: update dependencies and remove deprecated package - Removed `@azure/ms-rest-js` dependency to fix Node.js 24+ punycode deprecation warning. - The `TransferProgressEvent` type is now imported from `@azure/core-rest-pipeline`. - Updated `package.json` to reflect the new dependency. - Updated tests to import `TransferProgressEvent` from the new package. - Updated `package-lock.json` to remove `@azure/ms-rest-js` and include `@azure/core-rest-pipeline`. - Bumped versions of several dependencies including `@azure/storage-blob` and `@azure/storage-common`.	2025-12-10 11:04:34 +00:00
Salman Muin Kayser Chishti	b0464628c0	Prepare cache v5 release	2025-12-09 16:11:32 +00:00