From 13ca90c5d0ecf0c6fbecef212298301fa97b6803 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 28 Jan 2026 22:54:18 +0000
Subject: [PATCH 1/2] build(deps): bump @actions/io from 2.0.0 to 3.0.2

Bumps [@actions/io](https://github.com/actions/toolkit/tree/HEAD/packages/io) from 2.0.0 to 3.0.2.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/io/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/io)

---
updated-dependencies:
- dependency-name: "@actions/io"
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package.json | 2 +-
 yarn.lock    | 9 ++++++++-
 2 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/package.json b/package.json
index a4f65de..a268a5d 100644
--- a/package.json
+++ b/package.json
@@ -52,7 +52,7 @@
     "@actions/exec": "^2.0.0",
     "@actions/github": "^9.0.0",
     "@actions/http-client": "^3.0.2",
-    "@actions/io": "^2.0.0",
+    "@actions/io": "^3.0.2",
     "@actions/tool-cache": "^3.0.1",
     "@azure/storage-blob": "^12.29.1",
     "@sigstore/bundle": "^4.0.0",
diff --git a/yarn.lock b/yarn.lock
index b7d7490..a9ac887 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -177,6 +177,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"@actions/io@npm:^3.0.2":
+  version: 3.0.2
+  resolution: "@actions/io@npm:3.0.2"
+  checksum: 10/ef17cb4ec0a2b640d5f4851446ad1c12bf4b2b1cf83741c5eecee4e8f50b3ca3ac9ae4084027dcaa1bf0c016d653dbc0e5fe20daedd39ee5fb6edb671f6e45b5
+  languageName: node
+  linkType: hard
+
 "@actions/tool-cache@npm:^3.0.1":
   version: 3.0.1
   resolution: "@actions/tool-cache@npm:3.0.1"
@@ -1194,7 +1201,7 @@ __metadata:
     "@actions/exec": "npm:^2.0.0"
     "@actions/github": "npm:^9.0.0"
     "@actions/http-client": "npm:^3.0.2"
-    "@actions/io": "npm:^2.0.0"
+    "@actions/io": "npm:^3.0.2"
     "@actions/tool-cache": "npm:^3.0.1"
     "@azure/storage-blob": "npm:^12.29.1"
     "@eslint/compat": "npm:^2.0.0"

From 72bdaca3a5565d17def412b4f45c71b53c67cdef Mon Sep 17 00:00:00 2001
From: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Date: Thu, 29 Jan 2026 01:03:38 +0100
Subject: [PATCH 2/2] map @actions/io to real entrypoint in Jest configs

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
---
 jest.config.cjs     | 3 ++-
 jest.config.itg.cjs | 3 ++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/jest.config.cjs b/jest.config.cjs
index ea3f583..4e872b7 100644
--- a/jest.config.cjs
+++ b/jest.config.cjs
@@ -46,9 +46,10 @@ module.exports = {
       }
     ]
   },
-  transformIgnorePatterns: ['/node_modules/(?!(?:@actions/github|@octokit|universal-user-agent|before-after-hook)/)'],
+  transformIgnorePatterns: ['/node_modules/(?!(?:@actions/github|@actions/io|@octokit|universal-user-agent|before-after-hook)/)'],
   moduleNameMapper: {
     '^@actions/github$': '<rootDir>/node_modules/@actions/github/lib/github.js',
+    '^@actions/io$': '<rootDir>/node_modules/@actions/io/lib/io.js',
     '^(\\.{1,2}/.*)\\.js$': '$1'
   },
   extensionsToTreatAsEsm: ['.ts'],
diff --git a/jest.config.itg.cjs b/jest.config.itg.cjs
index 97ac2b4..e01aeaf 100644
--- a/jest.config.itg.cjs
+++ b/jest.config.itg.cjs
@@ -29,9 +29,10 @@ module.exports = {
       }
     ]
   },
-  transformIgnorePatterns: ['/node_modules/(?!(?:@actions/github|@octokit|universal-user-agent|before-after-hook)/)'],
+  transformIgnorePatterns: ['/node_modules/(?!(?:@actions/github|@actions/io|@octokit|universal-user-agent|before-after-hook)/)'],
   moduleNameMapper: {
     '^@actions/github$': '<rootDir>/node_modules/@actions/github/lib/github.js',
+    '^@actions/io$': '<rootDir>/node_modules/@actions/io/lib/io.js',
     '^(\\.{1,2}/.*)\\.js$': '$1'
   },
   extensionsToTreatAsEsm: ['.ts'],