From 8e85a3cf1418b864b528ed9c756cd9c84932d442 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 3 Feb 2025 17:07:49 -0800
Subject: [PATCH] fix(deps): bump the production-dependencies group with 3
 updates (#203)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the production-dependencies group with 3 updates:
[@octokit/auth-app](https://github.com/octokit/auth-app.js),
[@octokit/request](https://github.com/octokit/request.js) and
[undici](https://github.com/nodejs/undici).

Updates `@octokit/auth-app` from 7.1.3 to 7.1.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/octokit/auth-app.js/releases"><code>@​octokit/auth-app</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v7.1.4</h2>
<h2><a
href="https://github.com/octokit/auth-app.js/compare/v7.1.3...v7.1.4">7.1.4</a>
(2025-01-08)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> bump Octokit deps to fix Deno compat (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/665">#665</a>)
(<a
href="https://github.com/octokit/auth-app.js/commit/33fd19f025b0445bc79db12d23cf84d572ae25f7">33fd19f</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/octokit/auth-app.js/commit/33fd19f025b0445bc79db12d23cf84d572ae25f7"><code>33fd19f</code></a>
fix(deps): bump Octokit deps to fix Deno compat (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/665">#665</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/b86b96d83bd8a6959e666363db99aa7af460ad20"><code>b86b96d</code></a>
build(deps): lock file maintenance (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/663">#663</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/40a2a1de946b414773cd22047aa829e6c23ee003"><code>40a2a1d</code></a>
build(deps): lock file maintenance (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/662">#662</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/8a51c1f161105edb0d3569d97284db00d247564d"><code>8a51c1f</code></a>
build(deps): lock file maintenance (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/661">#661</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/32db237e6229c62f2301ca3a968ca863703d4f85"><code>32db237</code></a>
chore(deps): update dependency prettier to v3.4.2 (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/659">#659</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/3fab008efa5a6b05722d2542be5e32517a999046"><code>3fab008</code></a>
build(deps): lock file maintenance (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/660">#660</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/4a8092130326d2598230bc2c7ab0f77ef7a29ad6"><code>4a80921</code></a>
build(deps): lock file maintenance (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/658">#658</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/3563f331c465e9d478fd477d855950d7df28d7d5"><code>3563f33</code></a>
chore(deps): update dependency prettier to v3.4.0 (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/656">#656</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/f723dba9ed761bbb18509c760f455343a1bcb5dc"><code>f723dba</code></a>
build(deps): lock file maintenance (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/657">#657</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/8ebaca1062432d1c412733f460697a1d12f27563"><code>8ebaca1</code></a>
build(deps): lock file maintenance (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/655">#655</a>)</li>
<li>See full diff in <a
href="https://github.com/octokit/auth-app.js/compare/v7.1.3...v7.1.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `@octokit/request` from 9.1.4 to 9.2.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/octokit/request.js/releases"><code>@​octokit/request</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v9.2.0</h2>
<h1><a
href="https://github.com/octokit/request.js/compare/v9.1.4...v9.2.0">9.2.0</a>
(2025-01-16)</h1>
<h3>Features</h3>
<ul>
<li>correctly parse response bodies as JSON where the Content-Type is
<code>application/scim+json</code> (<a
href="https://redirect.github.com/octokit/request.js/issues/731">#731</a>)
(<a
href="https://github.com/octokit/request.js/commit/00bf316136acf001344a5bacff906f1748e6c368">00bf316</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/octokit/request.js/commit/00bf316136acf001344a5bacff906f1748e6c368"><code>00bf316</code></a>
feat: correctly parse response bodies as JSON where the Content-Type is
`appl...</li>
<li>See full diff in <a
href="https://github.com/octokit/request.js/compare/v9.1.4...v9.2.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `undici` from 7.2.0 to 7.3.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nodejs/undici/releases">undici's
releases</a>.</em></p>
<blockquote>
<h2>v7.3.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: sqlite null ref by <a
href="https://github.com/ronag"><code>@​ronag</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/4016">nodejs/undici#4016</a></li>
<li>fix: sqlite remove unnecessary parameter by <a
href="https://github.com/ronag"><code>@​ronag</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/4017">nodejs/undici#4017</a></li>
<li>feat: sqlite add set and minor cleanup by <a
href="https://github.com/ronag"><code>@​ronag</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/4018">nodejs/undici#4018</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v7.2.3...v7.3.0">https://github.com/nodejs/undici/compare/v7.2.3...v7.3.0</a></p>
<h2>v7.2.3</h2>
<h1>⚠️ Security Release ⚠️</h1>
<p>Fixes CVE CVE-2025-22150 <a
href="https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975">https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975</a>
(embargoed until 22-01-2025).</p>
<h2>What's Changed</h2>
<ul>
<li>Fix typo in update cache tests action by <a
href="https://github.com/flakey5"><code>@​flakey5</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/4008">nodejs/undici#4008</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v7.2.2...v7.2.3">https://github.com/nodejs/undici/compare/v7.2.2...v7.2.3</a></p>
<h2>v7.2.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Update WPT by <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>
in <a
href="https://redirect.github.com/nodejs/undici/pull/3991">nodejs/undici#3991</a></li>
<li>fix: dual-stack retries infinite loop by <a
href="https://github.com/luddd3"><code>@​luddd3</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/4001">nodejs/undici#4001</a></li>
<li>build(deps): bump codecov/codecov-action from 5.0.7 to 5.1.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3980">nodejs/undici#3980</a></li>
<li>build(deps): bump github/codeql-action from 3.27.0 to 3.28.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/4003">nodejs/undici#4003</a></li>
<li>tests: Update Cache Tests by <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>
in <a
href="https://redirect.github.com/nodejs/undici/pull/3965">nodejs/undici#3965</a></li>
<li>ReadableStreamFrom pull until cannot on empty enqueu by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/4002">nodejs/undici#4002</a></li>
<li>Resolve circular dependency by <a
href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/4006">nodejs/undici#4006</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v7.2.1...v7.2.2">https://github.com/nodejs/undici/compare/v7.2.1...v7.2.2</a></p>
<h2>v7.2.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(3951): typo on errorede dns lookup by <a
href="https://github.com/metcoder95"><code>@​metcoder95</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3956">nodejs/undici#3956</a></li>
<li>feat: add missing error type by <a
href="https://github.com/Gigioliva"><code>@​Gigioliva</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3964">nodejs/undici#3964</a></li>
<li>websocket: improve frame parsing by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3447">nodejs/undici#3447</a></li>
<li>fix(<a
href="https://redirect.github.com/nodejs/undici/issues/3966">#3966</a>):
account for network errors by <a
href="https://github.com/metcoder95"><code>@​metcoder95</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3967">nodejs/undici#3967</a></li>
<li>build(deps-dev): bump <code>@​fastify/busboy</code> from 3.1.0 to
3.1.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3971">nodejs/undici#3971</a></li>
<li>Update WPT by <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>
in <a
href="https://redirect.github.com/nodejs/undici/pull/3954">nodejs/undici#3954</a></li>
<li>docs: fix dispatcher stream example links by <a
href="https://github.com/luddd3"><code>@​luddd3</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3972">nodejs/undici#3972</a></li>
<li>fix: <code>undici:request:headers</code> does not indicate
completion of a response by <a
href="https://github.com/legendecas"><code>@​legendecas</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3974">nodejs/undici#3974</a></li>
<li>build(deps): bump cronometro from 3.0.2 to 4.0.1 in /benchmarks by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://redirect.github.com/nodejs/undici/pull/3976">nodejs/undici#3976</a></li>
<li>fix(<a
href="https://redirect.github.com/nodejs/undici/issues/3975">#3975</a>):
do not unref timeout by <a
href="https://github.com/metcoder95"><code>@​metcoder95</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3977">nodejs/undici#3977</a></li>
<li>fix: bad response on h2 server by <a
href="https://github.com/metcoder95"><code>@​metcoder95</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3978">nodejs/undici#3978</a></li>
<li>build(deps): bump peter-evans/create-pull-request from 7.0.5 to
7.0.6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3981">nodejs/undici#3981</a></li>
<li>build(deps): bump actions/upload-artifact from 4.4.3 to 4.5.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3983">nodejs/undici#3983</a></li>
<li>chore: ensure automated v7 release compared to v7 by <a
href="https://github.com/trivikr"><code>@​trivikr</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3986">nodejs/undici#3986</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nodejs/undici/commit/ee02abe641e8aec8f609752dc135feadb2a8bf30"><code>ee02abe</code></a>
Bumped v7.3.0 (<a
href="https://redirect.github.com/nodejs/undici/issues/4021">#4021</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/fe21269033eec441a46f95d6cd16b4236edb2b4c"><code>fe21269</code></a>
feat: sqlite add set and minor cleanup (<a
href="https://redirect.github.com/nodejs/undici/issues/4018">#4018</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/a364e7c03849c1dc308e5f031031aa92bfdae324"><code>a364e7c</code></a>
fix: sqlite remove unnecessary parameter (<a
href="https://redirect.github.com/nodejs/undici/issues/4017">#4017</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/d76f5cf2fba0f7f4160395e5c29eace40a7e5934"><code>d76f5cf</code></a>
fix: sqlite null ref (<a
href="https://redirect.github.com/nodejs/undici/issues/4016">#4016</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/83537aa55028bfeef5dd9504abfde63264c2df5d"><code>83537aa</code></a>
Bumped v7.2.3</li>
<li><a
href="https://github.com/nodejs/undici/commit/c2d78cd19fe4f4c621424491e26ce299e65e934a"><code>c2d78cd</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/nodejs/undici/commit/fa1d840682ed934314e837b807c2a3449c569798"><code>fa1d840</code></a>
Fix typo in update cache tests action (<a
href="https://redirect.github.com/nodejs/undici/issues/4008">#4008</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/bd98a6303e45d5e0d44192a93731b1defdb415f3"><code>bd98a63</code></a>
Bumped v7.2.2 (<a
href="https://redirect.github.com/nodejs/undici/issues/4007">#4007</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/e8a93e59246453e359ff02375d7111f8c10d4e40"><code>e8a93e5</code></a>
Resolve circular dependency (<a
href="https://redirect.github.com/nodejs/undici/issues/4006">#4006</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/b55476909055bf698cd8eeabe081daa1cc6d9d4c"><code>b554769</code></a>
Revert &quot;chore: update cache tests (<a
href="https://redirect.github.com/nodejs/undici/issues/3965">#3965</a>)&quot;</li>
<li>Additional commits viewable in <a
href="https://github.com/nodejs/undici/compare/v7.2.0...v7.3.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 package-lock.json | 109 +++++++++++++++++++++++++---------------------
 package.json      |   6 +--
 2 files changed, 62 insertions(+), 53 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index db28587..5b4bcfc 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,19 +1,19 @@
 {
   "name": "create-github-app-token",
-  "version": "1.11.1",
+  "version": "1.11.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "create-github-app-token",
-      "version": "1.11.1",
+      "version": "1.11.2",
       "license": "MIT",
       "dependencies": {
         "@actions/core": "^1.11.1",
-        "@octokit/auth-app": "^7.1.3",
-        "@octokit/request": "^9.1.4",
+        "@octokit/auth-app": "^7.1.4",
+        "@octokit/request": "^9.2.0",
         "p-retry": "^6.2.1",
-        "undici": "^7.2.0"
+        "undici": "^7.3.0"
       },
       "devDependencies": {
         "@sinonjs/fake-timers": "^14.0.0",
@@ -645,15 +645,16 @@
       }
     },
     "node_modules/@octokit/auth-app": {
-      "version": "7.1.3",
-      "resolved": "https://registry.npmjs.org/@octokit/auth-app/-/auth-app-7.1.3.tgz",
-      "integrity": "sha512-GZdkOp2kZTIy5dG9oXqvzUAZiPvDx4C/lMlN6yQjtG9d/+hYa7W8WXTJoOrXE8UdfL9A/sZMl206dmtkl9lwVQ==",
-      "dependencies": {
-        "@octokit/auth-oauth-app": "^8.1.0",
-        "@octokit/auth-oauth-user": "^5.1.0",
-        "@octokit/request": "^9.1.1",
-        "@octokit/request-error": "^6.1.1",
-        "@octokit/types": "^13.4.1",
+      "version": "7.1.4",
+      "resolved": "https://registry.npmjs.org/@octokit/auth-app/-/auth-app-7.1.4.tgz",
+      "integrity": "sha512-5F+3l/maq9JfWQ4bV28jT2G/K8eu9OJ317yzXPTGe4Kw+lKDhFaS4dQ3Ltmb6xImKxfCQdqDqMXODhc9YLipLw==",
+      "license": "MIT",
+      "dependencies": {
+        "@octokit/auth-oauth-app": "^8.1.2",
+        "@octokit/auth-oauth-user": "^5.1.2",
+        "@octokit/request": "^9.1.4",
+        "@octokit/request-error": "^6.1.6",
+        "@octokit/types": "^13.6.2",
         "toad-cache": "^3.7.0",
         "universal-github-app-jwt": "^2.2.0",
         "universal-user-agent": "^7.0.0"
@@ -663,14 +664,15 @@
       }
     },
     "node_modules/@octokit/auth-oauth-app": {
-      "version": "8.1.1",
-      "resolved": "https://registry.npmjs.org/@octokit/auth-oauth-app/-/auth-oauth-app-8.1.1.tgz",
-      "integrity": "sha512-5UtmxXAvU2wfcHIPPDWzVSAWXVJzG3NWsxb7zCFplCWEmMCArSZV0UQu5jw5goLQXbFyOr5onzEH37UJB3zQQg==",
+      "version": "8.1.2",
+      "resolved": "https://registry.npmjs.org/@octokit/auth-oauth-app/-/auth-oauth-app-8.1.2.tgz",
+      "integrity": "sha512-3woNZgq5/S6RS+9ZTq+JdymxVr7E0s4EYxF20ugQvgX3pomdPUL5r/XdTY9wALoBM2eHVy4ettr5fKpatyTyHw==",
+      "license": "MIT",
       "dependencies": {
-        "@octokit/auth-oauth-device": "^7.0.0",
-        "@octokit/auth-oauth-user": "^5.0.1",
-        "@octokit/request": "^9.0.0",
-        "@octokit/types": "^13.0.0",
+        "@octokit/auth-oauth-device": "^7.1.2",
+        "@octokit/auth-oauth-user": "^5.1.2",
+        "@octokit/request": "^9.1.4",
+        "@octokit/types": "^13.6.2",
         "universal-user-agent": "^7.0.0"
       },
       "engines": {
@@ -678,13 +680,14 @@
       }
     },
     "node_modules/@octokit/auth-oauth-device": {
-      "version": "7.1.1",
-      "resolved": "https://registry.npmjs.org/@octokit/auth-oauth-device/-/auth-oauth-device-7.1.1.tgz",
-      "integrity": "sha512-HWl8lYueHonuyjrKKIup/1tiy0xcmQCdq5ikvMO1YwkNNkxb6DXfrPjrMYItNLyCP/o2H87WuijuE+SlBTT8eg==",
+      "version": "7.1.2",
+      "resolved": "https://registry.npmjs.org/@octokit/auth-oauth-device/-/auth-oauth-device-7.1.2.tgz",
+      "integrity": "sha512-gTOIzDeV36OhVfxCl69FmvJix7tJIiU6dlxuzLVAzle7fYfO8UDyddr9B+o4CFQVaMBLMGZ9ak2CWMYcGeZnPw==",
+      "license": "MIT",
       "dependencies": {
-        "@octokit/oauth-methods": "^5.0.0",
-        "@octokit/request": "^9.0.0",
-        "@octokit/types": "^13.0.0",
+        "@octokit/oauth-methods": "^5.1.3",
+        "@octokit/request": "^9.1.4",
+        "@octokit/types": "^13.6.2",
         "universal-user-agent": "^7.0.0"
       },
       "engines": {
@@ -692,14 +695,15 @@
       }
     },
     "node_modules/@octokit/auth-oauth-user": {
-      "version": "5.1.1",
-      "resolved": "https://registry.npmjs.org/@octokit/auth-oauth-user/-/auth-oauth-user-5.1.1.tgz",
-      "integrity": "sha512-rRkMz0ErOppdvEfnemHJXgZ9vTPhBuC6yASeFaB7I2yLMd7QpjfrL1mnvRPlyKo+M6eeLxrKanXJ9Qte29SRsw==",
+      "version": "5.1.2",
+      "resolved": "https://registry.npmjs.org/@octokit/auth-oauth-user/-/auth-oauth-user-5.1.2.tgz",
+      "integrity": "sha512-PgVDDPJgZYb3qSEXK4moksA23tfn68zwSAsQKZ1uH6IV9IaNEYx35OXXI80STQaLYnmEE86AgU0tC1YkM4WjsA==",
+      "license": "MIT",
       "dependencies": {
-        "@octokit/auth-oauth-device": "^7.0.1",
-        "@octokit/oauth-methods": "^5.0.0",
-        "@octokit/request": "^9.0.1",
-        "@octokit/types": "^13.0.0",
+        "@octokit/auth-oauth-device": "^7.1.2",
+        "@octokit/oauth-methods": "^5.1.2",
+        "@octokit/request": "^9.1.4",
+        "@octokit/types": "^13.6.2",
         "universal-user-agent": "^7.0.0"
       },
       "engines": {
@@ -722,19 +726,21 @@
       "version": "7.1.1",
       "resolved": "https://registry.npmjs.org/@octokit/oauth-authorization-url/-/oauth-authorization-url-7.1.1.tgz",
       "integrity": "sha512-ooXV8GBSabSWyhLUowlMIVd9l1s2nsOGQdlP2SQ4LnkEsGXzeCvbSbCPdZThXhEFzleGPwbapT0Sb+YhXRyjCA==",
+      "license": "MIT",
       "engines": {
         "node": ">= 18"
       }
     },
     "node_modules/@octokit/oauth-methods": {
-      "version": "5.1.2",
-      "resolved": "https://registry.npmjs.org/@octokit/oauth-methods/-/oauth-methods-5.1.2.tgz",
-      "integrity": "sha512-C5lglRD+sBlbrhCUTxgJAFjWgJlmTx5bQ7Ch0+2uqRjYv7Cfb5xpX4WuSC9UgQna3sqRGBL9EImX9PvTpMaQ7g==",
+      "version": "5.1.3",
+      "resolved": "https://registry.npmjs.org/@octokit/oauth-methods/-/oauth-methods-5.1.3.tgz",
+      "integrity": "sha512-M+bDBi5H8FnH0xhCTg0m9hvcnppdDnxUqbZyOkxlLblKpLAR+eT2nbDPvJDp0eLrvJWA1I8OX0KHf/sBMQARRA==",
+      "license": "MIT",
       "dependencies": {
         "@octokit/oauth-authorization-url": "^7.0.0",
-        "@octokit/request": "^9.1.0",
-        "@octokit/request-error": "^6.1.0",
-        "@octokit/types": "^13.0.0"
+        "@octokit/request": "^9.1.4",
+        "@octokit/request-error": "^6.1.6",
+        "@octokit/types": "^13.6.2"
       },
       "engines": {
         "node": ">= 18"
@@ -746,9 +752,10 @@
       "integrity": "sha512-QBhVjcUa9W7Wwhm6DBFu6ZZ+1/t/oYxqc2tp81Pi41YNuJinbFRx8B133qVOrAaBbF7D/m0Et6f9/pZt9Rc+tg=="
     },
     "node_modules/@octokit/request": {
-      "version": "9.1.4",
-      "resolved": "https://registry.npmjs.org/@octokit/request/-/request-9.1.4.tgz",
-      "integrity": "sha512-tMbOwGm6wDII6vygP3wUVqFTw3Aoo0FnVQyhihh8vVq12uO3P+vQZeo2CKMpWtPSogpACD0yyZAlVlQnjW71DA==",
+      "version": "9.2.0",
+      "resolved": "https://registry.npmjs.org/@octokit/request/-/request-9.2.0.tgz",
+      "integrity": "sha512-kXLfcxhC4ozCnAXy2ff+cSxpcF0A1UqxjvYMqNuPIeOAzJbVWQ+dy5G2fTylofB/gTbObT8O6JORab+5XtA1Kw==",
+      "license": "MIT",
       "dependencies": {
         "@octokit/endpoint": "^10.0.0",
         "@octokit/request-error": "^6.0.1",
@@ -761,11 +768,12 @@
       }
     },
     "node_modules/@octokit/request-error": {
-      "version": "6.1.1",
-      "resolved": "https://registry.npmjs.org/@octokit/request-error/-/request-error-6.1.1.tgz",
-      "integrity": "sha512-1mw1gqT3fR/WFvnoVpY/zUM2o/XkMs/2AszUUG9I69xn0JFLv6PGkPhNk5lbfvROs79wiS0bqiJNxfCZcRJJdg==",
+      "version": "6.1.6",
+      "resolved": "https://registry.npmjs.org/@octokit/request-error/-/request-error-6.1.6.tgz",
+      "integrity": "sha512-pqnVKYo/at0NuOjinrgcQYpEbv4snvP3bKMRqHaD9kIsk9u1LCpb2smHZi8/qJfgeNqLo5hNW4Z7FezNdEo0xg==",
+      "license": "MIT",
       "dependencies": {
-        "@octokit/types": "^13.0.0"
+        "@octokit/types": "^13.6.2"
       },
       "engines": {
         "node": ">= 18"
@@ -3602,9 +3610,10 @@
       }
     },
     "node_modules/undici": {
-      "version": "7.2.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-7.2.0.tgz",
-      "integrity": "sha512-klt+0S55GBViA9nsq48/NSCo4YX5mjydjypxD7UmHh/brMu8h/Mhd/F7qAeoH2NOO8SDTk6kjnTFc4WpzmfYpQ==",
+      "version": "7.3.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.3.0.tgz",
+      "integrity": "sha512-Qy96NND4Dou5jKoSJ2gm8ax8AJM/Ey9o9mz7KN1bb9GP+G0l20Zw8afxTnY2f4b7hmhn/z8aC2kfArVQlAhFBw==",
+      "license": "MIT",
       "engines": {
         "node": ">=20.18.1"
       }
diff --git a/package.json b/package.json
index 989a491..f1da29f 100644
--- a/package.json
+++ b/package.json
@@ -13,10 +13,10 @@
   "license": "MIT",
   "dependencies": {
     "@actions/core": "^1.11.1",
-    "@octokit/auth-app": "^7.1.3",
-    "@octokit/request": "^9.1.4",
+    "@octokit/auth-app": "^7.1.4",
+    "@octokit/request": "^9.2.0",
     "p-retry": "^6.2.1",
-    "undici": "^7.2.0"
+    "undici": "^7.3.0"
   },
   "devDependencies": {
     "@sinonjs/fake-timers": "^14.0.0",