From 98f3aa9c27c3d6da66cf51b7d38fb7511df72d3a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 9 Jan 2026 10:04:51 -0800
Subject: [PATCH] Bump @actions/core from 1.11.1 to 2.0.1 (#776)

* Bump @actions/core from 1.11.1 to 2.0.1

Dependabot couldn't find the original pull request head commit, 51395a15a0b53caf9b7a6a27f5c39648a958aaa3.

* rebuild dist

Signed-off-by: Brian DeHamer <bdehamer@github.com>

---------

Signed-off-by: Brian DeHamer <bdehamer@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brian DeHamer <bdehamer@github.com>
---
 dist/index.js     | Bin 2936974 -> 3072769 bytes
 package-lock.json |  50 ++++++++++++++++++++++++++++++++++++++++------
 package.json      |   2 +-
 3 files changed, 45 insertions(+), 7 deletions(-)

diff --git a/dist/index.js b/dist/index.js
index 168b0085b4c0cad051b9a9f12ac46619d16f6d8e..9ce3c1c8e3b1f085a111223a9313d8d37acb213d 100644
GIT binary patch
delta 7141
zcmb_geRLF6mOt+$)#)T8A*2%$lE5PgNq6itq(c&tHbQhnSi^S&XZc7f-PK8v{-UZo
zp#>*oWEF*RV9LXDX2%h55oLGzuvco;qZ=F@=Qyq(gM+gxAfEB4tiS<u_qd*;yZ61S
z?lcC@%pa4(rMs){yYIgH@w@lFNB1Yt=x<&^$1>&%txb*Y#)NhLq2`Qv^V+oi&#%)L
z9L&0a^|5k`7inwb+k|;7?&j9S`S_VEll$c8k?c(1ZqlMVT|%3?t;In<Tsghg!Z{t<
zws;54cB58p(XLwD+?a^$`q8Y+xs7w(^!T?zjaKs9lWD)sK6gNHx6YZ<OvUen>cpYM
zizusUUgMlbhl9@CGQCV2eZB&>x#_0<ybX!(p8vgI>hp(}<_jQPJ2@)qyW5K|VoiQK
zPm8>^!&LIy*Ivms1Sd|8ZpchbKXoWm;DX_IRu=uro%_Ca@S_ieR`<L)ZHdwI+pJtG
zZEUp95SUnXQLV{jXQI2UmfQ77h3LnE!4A9rNw4U|FA21*9!;j5l_+j$Vuo<gV>8iI
z{d6TdF$p(uwbxUy=njKjZ)ikqNN8?$x3$qhH=3K-*4o^n{{vWSE&rO7tO$DLLOiw1
zU`;+fVlnvN@#BlNiKEfQ8HobfkLgbjXD!y|Z>iLt0ooDoD_X3oF-avN@rHvzG2|oB
zuy%ZztyPJILXwh0>fs+*5D^tIm||%l-2+nUS4a#>u!_h`lGb~uWTb&~`h0R!4u`}5
zi74TSq(o)d#2;2jG;O7QP>MGUiGi3zBBHFQj<mgklB$aR5;68l{$ksNyn&ccBExcY
zAYB??t4Kjn85vaBkM02(wv2_mOc4@}MI*5&JE$6wys{Vw#F;)pF&dS8M2#wPsGpre
zjrxEU1dHrHiFESiT%chRP#`KP5k+Fc(hTQfMp2nrdbuH0;uS;iD->120Wus`2K|BX
zFzJ&9#34DXIGKv76iq7TBwj@lqY@EAp>R}WI;&0+6xBh(Ed)Q9cY<L>a%tD%3r7}6
zo5f%xATc?;y}i+RL{hzq9Eq|Avu6|TSUB#msD#+r#^o{w?yNfum)q-1o;oMla=(+*
zam#`6#uuCRuXA`z>B~Iap6#T)-CW$>e$!>J#$2`v4lIV~)%Q_x*F-hI91T)vh^awX
zRJD`3B|q$0-MO-kFtyY$1R6I+njVH4+Q$24jhK5t>@hD(V9zKw;KYqYpRa+LHhEx!
zc{Pi~Mt9Q$>2S#8iuU&Fd6{gmK78biz}E#lI3VoV^OQY8M$E8mh(+aq9EH$J#w8E5
zNO)LMR32}USYJT)lFsFeQ#?HQ)R=dG#T(dY6+fCY=~*X{6a@mx#sfs!90@DY)uJMc
zeE|rSUHAQ?wr)#T;@`F`%mxU!SI`O{-mbOmEYdobTD2eSnW>?jwpl5uo*YAf>Vgw5
z7a_$ui22Q<{r%qQ+Snr%+P^$rq&5BW7VW)X&CtGl(xDyRKSR56pu8cu)F<`D`e7me
z9GA$|gvb2TqrLldMQR0vyzG_Wo$+OSjU4ia;W7L0XxWFWw1*E@mL&J-SHiIfyyc%B
z?etMnk$MGYf-GVp`^~Q&?I*{p5{q|!DQME3TY0pYxMs#m1K|-s!hY@v^C@6LpTy%x
z@-eS2;23iwh>=48BQY=FLK<)o6E#2#PiFRtA<&5ImjQTqIK%P4cX1{?5bjqQWcp%W
zc<YN9umo#T00Qz{WLXHTrAYm<3RoohoaqW1B8TMw4?@sgks<++iQ|wdvL&(#AW7`?
z_4N)iJRpUnAxR-J<Ypuyi4cjP5FnQt4oD_GIk{#Wv;f2nPnw{hx>)q5#d}PZ{ILK>
zdpJo{0t5y8QKgUyHDO5N&QwMKc^NL7aox@YK;3|_hoZnE9)5YfPz3;$2Vt$r5Ca2-
zAXtpmkmEk~Qw*5z?^)RewFHWl1g8WD2KW_aj(@7$9}=T61?rG}Rp+V^Q!J}FO!QJv
z6s!oS&)mcm4u_ybh<-ol&*}(U%8lS*z5*Xf0OK(LNp3O`9HN?$!^D}v19s#d?USI^
zKy84s!|Tj|Jd#$Mn6JP~LC}=MLTrD@mo)01gZY(a5P(wLdfZq>VKQ`J+Av=-=gQs8
zl#mlu;z*wtpl);gzPZgURUFk*7+_B_a<pgbp`0v*+QrVzkCSHBD66vLAxG2!V1&2=
zFGHY-JY~#Ka=}`A?>#EFKs(c<oz!eeZgzjK!^1XOW)$jnQe|=)j3Ba#sRCfD{d&*(
z#QdM>C{g&>POKF^R-AZy@0%#`#^ZsE#D-t0IC14y8A#i-@9sqZzB~9A&3537miyF`
ziIY#oQDVixZ76Z^>8(f`eP*xbeD<7n%i#@)rw^Yt7M=U2|7B7uv?<44)vg|UB60M1
zPgYv{^s^U>v|}$%(ViIdB#yrLDNell@`sofb>$W(z8KRp1oyngmL~1cYqgf9*17W<
z9oo6uTnY60&J5ad0o`sH5*5-T(vz2wE%C{32}5P0F}quP{M01v())SZ#XnSQJ*UdF
ztshLL8LU74)2XktZ{EL_C^+4Xv<F9v6Z=01vW~7mFxt}tpH9)<`e+gT_O}+RcKq`)
z`hv&Wo>+Q*tyQaETaq~c`G4A}QiMwBvxR6ny|V<B=obpnW~4t-gr30K8?Is+E<rN{
zt}yhFZe2NnR!z!eM}by<J$<J?uTXFOH7a1c-Yd|RZ=zxve-pLR-@J)D^x`p#m3}@K
z=hL&TIFFt^iz+Do9r}eZx2dJAS>OLVv^GbdaT>jnrGI@EZOp?xjkNIss?HXb{#Xz)
zSfyA010*^>L6x-Z5-Ox!{``D;+hu5(U%rHf>4J>~7J9y;&O$%DjB;t@BHEMP)957O
zzKu5#b>%8*qU)c{&!Ll_DbA$fYv@zD;_F!@^!00~IQI?!2H3V6x+ePZB{YpzT}7Sr
zv&(4jUtR1U|LPJu_48k%cn$qgcV6zuUAz$u5ot3N1D09?kad9OMot1)LmL!RLadwf
zNq#XFhyt{*zk0F=I?4dR7UU=3KVKY*1^Zxex(o)uW`hjv2ejW3S=8OV+~ffq3&sFk
zpw1XgG%E*&cm}EMMi-RS!R)iQn!Ib*n*w=jXKZTp&Cn!6(FJ8?XmO3Rj0;`}r%Ez+
z8<@>h5Cg+vTxFU-`v;bQh30<tfIKJ>)8`G$=?*7>GR4YfQd@H@kne*+Nw0o^id|_j
zvdFM0RF#3SF9~hQgU;q6*qYgNM=8Fa_U=LgUEZB*5mvL7l1?te^XXeVtF1YP*6b-g
zDcDQ$0x|@lDZGQe=d+d2Z9kr6@r?692h-6(>I}csk@@DqxnNf`yowJlb_Z!szM!Mo
zHMMm2nd+>`sUeJWlMdQbhNsb7jC1m3Ke0n!XAWs}6LHw+@~v3~^hzhP(q+rDEd}GR
zjZ-XnA%B{7<TFd@_g<v5(8fM1&P{tsuf9TTbnL;pY>RPDTDdHL2Hm|^$fWzK?AF}0
z(^K(Zg>s>XMJV00!ai;4Dq~9H?ttJ_`3&dho+%&Uy+yh^&BG@>LOP95NQT{ncz`yO
z6--f4#JIzZ!RzEf8H)vc*TvEh^CjP5ge4EKv!sE%VnTS5@DaK}l~@BZK2-t-3~q)4
zugfJ!E9h%jTfv4mqKbYg8c!X8PY=Va<B!0^K>SKLNP3``y>qinzy1Q*VE7HQPH{+v
zVVK3a7djp$iD3Ynv{|zOhD*jb&l6E)Z4mDkp%H@g;zC$=r~-h1$vFssxr}+(F1h+$
zRQwbb(K%O8HeGrdO)79CRUD7|8{p~gQXIQcBDm<QSCEaqy0dypdN!;Wt0|+sk6N?n
zwrj+KR@0?Ziz{jPqRmQsH=)c*Z(6KC|6+!{nI^QriKo)Bx2nr&`ww&T>9PMQPp00<
zRk*DBdyCVO%e65qhwLy0(!xX4HX1oo(@=avZrb}~&1|}FCC<4?Y8}0T>MYPl!5`fh
z&Msfy5DP&x%b{eG4+H-9VHO%jB`tgmqeJuUCn1S-zM=v%f%$jSgx$BOTA;fzvRs#X
zDf4M#|DH9)G*^0VMrv~_>9G^VdE8_ZlD+Vu>I&LhhI0xGq)FPTj(+?ws@mI)rtB4J
ztT`zJS#7`$*@ZH*OauP8Y}bEMhEGg0It04MYI!8BfynB>PCcs`k7514T5+YI*LUEb
zWBO<b`dq*Al^|l?g-nt*OJ0Zu_Tiy(>XBW)w-Vi%sXsRpEx_9OvfFZvX3I%>`aF7T
z4f;laeyCUv)*}I>38IS{q50rVjPn6ht342J*B@_0zpt{nc=p-r>Kra;_#vGnyF)+N
zjY{)x{OapI<Rtov2he*N8TL6&I`bi9Lk_+9A+$-*PwYbfok(p9y&GKIt)OQX;)C?D
zyKpa8zy`NKJ{S@P;athD9@^Ojz`bM%u1*cOvbr)1_0<P#$*&&z#9G`!&u+jowcB6v
z=(88$$%ytW#-EJT^BLz3sFHvpGP^cnO_wo4!MK~;h@pWANo(YgFFdT0jpjuKpRd@2
z!saOwRYbVQ0HEm;y@P5%R0lZZuwQT;<bzNTMnHO>aoI6E!tUyphJBK2qe^Zi?zzy(
zvu1vADD~7m$4MsaN$fsZ0Z<AnaiYe9%q*%SS?3LK2MfSX16)1hN^pW|k_r=Za(DM!
zHfe>2U>zS_QulE%2g`89(g(IMhI=pQYfOZS1nA>~fzViDTpJqmExRFM_nX|5$w`<V
z`zEJ&1OOHk2Vi9*Kii(T=RiR*uK!3M%$ATnU_vovO=gmDgMu#r!BY+ZwHaUoW`vT4
z0wAuRos+ssN_x@mSK;P{{xpW~qDLkn3qAXKT{iu0d9h{0uezXQ1Z7oHA)bvuGuQ{%
zuxI|UDJ->#lWoinGT{vE>;x(0Cu(jgoF=x_EVZeiN;?byAvA7A-5&QkcX<viSc9jR
zk=j}^(-7*CLOyj3M3ud6-MTuuX@|XtE<cxN$*tL9Fx<ax9o>H}uR`k`%*%wM-LH54
z4Q@dtkdv&?!4;Y6QXv5x{PdK(V=JZm?#2h`+Adtqrjy+<JmdS*Nu&$Uppn1J%A^an
z*IMYQE?nxlvB2m6>&W7=1U*DLM__!<=l~^dp@h1Z;Bq~(1ZQA<_cD9|m8SEX>~cU_
zE~b>Mr9D@(E&97F@EaM06S(O|YjCNy;A*k{?mhS^JUyL(xg2ck7*8vDd`opDFR^<g
zC{sUvFTRBJQ)}`6A(TV+KVUD)azW40FZ<|wd#b0?Q|s{$(qF`qFG@Gy*VzbMqT70~
zH62@BUUo(2jf~&v1&824aA^F25?r~E!5w^f=!zjcEp@|Z<Yb4Dn;t4|$5ncZA12Ej
zHvIV@FmK{2R|r?pZEGAkx;TJs0(~%ukNibz_PsDGQ-3ss{~7CDn{Y5ge>)22p|{>u
zn=3TB!h;U_aSU(L2Z!(<1^sWgVyo4fOhCG80GDa~Q}P}<z8wQ)0A&IRKo+1ZAS+Nd
zP!3Qo&?F$npAS?3G#RK6XbMmfkPWC9s03&#P$^Iu&@`ZOpbDT$py@y}fC$h`pemqh
bpc<fAK(#=1Kz1MpP(9Es`tj|~vv>bLu1N2{

delta 491
zcmW;GO-R#m7zc2k-|zq5{#&`WTDsOYxAii0ZWb!yAr^LsT|yanP(jgK^hTH1B?_Up
z!z4ENRR=LUMJcf#^q>}PViD0I^c0c@!`j78U3TmH-{Auf58vnI?x!^>JlFI_X4Lt9
z;ZoH;(OI0|@aPMfEB*X!o3gUJIYY&<{2g_>TUdHG|HH|Z{boN%I&yE=<QEO9nR@VX
zIm+pnh&t^FeRXw`7$YA^eO)I@KYf2o^2AwDkk~)UxK@(-!RH<aJ2S$*QZ?C|ZC1^_
zFNLn{ydrMTiIk--eITp2R3GNqak0{&9{I`56(4;uRBuGq`9_k~OqB}LL%y7lzhpDd
zi!u6RDWgyRwgdkh{P&zR;%ar8MmRJjg@;i_lKk_D{9d*rH%%4J86&Fknp$|SL@NQc
zcipJ-nPpmb@Uy%zK<eT<8slqkY3kJd^nw8<IKT-OxWEku;2^Ys2M&Q3d~g_!fFF)R
tE3`oXjzJKPLkPkUfp&;O4B~JCPJ;c%X-Gf^bV3&-p&L@1UPx~Z{Ri@`x;p>>

diff --git a/package-lock.json b/package-lock.json
index f91ebbd..03489f9 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,7 +10,7 @@
       "license": "MIT",
       "dependencies": {
         "@actions/attest": "^2.1.0",
-        "@actions/core": "^1.11.1"
+        "@actions/core": "^2.0.1"
       },
       "devDependencies": {
         "@eslint/js": "^9.39.2",
@@ -48,23 +48,60 @@
         "jose": "^5.10.0"
       }
     },
-    "node_modules/@actions/core": {
+    "node_modules/@actions/attest/node_modules/@actions/core": {
       "version": "1.11.1",
       "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.11.1.tgz",
       "integrity": "sha512-hXJCSrkwfA46Vd9Z3q4cpEpHB1rL5NG04+/rbqW9d3+CSvtB1tYe8UTpAlixa1vj0m/ULglfEK2UKxMGxCxv5A==",
+      "license": "MIT",
       "dependencies": {
         "@actions/exec": "^1.1.1",
         "@actions/http-client": "^2.0.1"
       }
     },
-    "node_modules/@actions/exec": {
+    "node_modules/@actions/attest/node_modules/@actions/exec": {
       "version": "1.1.1",
       "resolved": "https://registry.npmjs.org/@actions/exec/-/exec-1.1.1.tgz",
       "integrity": "sha512-+sCcHHbVdk93a0XT19ECtO/gIXoxvdsgQLzb2fE2/5sIZmWQuluYyjPQtrtTHdU1YzTZ7bAPN4sITq2xi1679w==",
+      "license": "MIT",
       "dependencies": {
         "@actions/io": "^1.0.1"
       }
     },
+    "node_modules/@actions/attest/node_modules/@actions/io": {
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/@actions/io/-/io-1.1.3.tgz",
+      "integrity": "sha512-wi9JjgKLYS7U/z8PPbco+PvTb/nRWjeoFlJ1Qer83k/3C5PHQi28hiVdeE2kHXmIL99mQFawx8qt/JPjZilJ8Q==",
+      "license": "MIT"
+    },
+    "node_modules/@actions/core": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/@actions/core/-/core-2.0.1.tgz",
+      "integrity": "sha512-oBfqT3GwkvLlo1fjvhQLQxuwZCGTarTE5OuZ2Wg10hvhBj7LRIlF611WT4aZS6fDhO5ZKlY7lCAZTlpmyaHaeg==",
+      "license": "MIT",
+      "dependencies": {
+        "@actions/exec": "^2.0.0",
+        "@actions/http-client": "^3.0.0"
+      }
+    },
+    "node_modules/@actions/core/node_modules/@actions/http-client": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-3.0.0.tgz",
+      "integrity": "sha512-1s3tXAfVMSz9a4ZEBkXXRQD4QhY3+GAsWSbaYpeknPOKEeyRiU3lH+bHiLMZdo2x/fIeQ/hscL1wCkDLVM2DZQ==",
+      "license": "MIT",
+      "dependencies": {
+        "tunnel": "^0.0.6",
+        "undici": "^5.28.5"
+      }
+    },
+    "node_modules/@actions/exec": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/@actions/exec/-/exec-2.0.0.tgz",
+      "integrity": "sha512-k8ngrX2voJ/RIN6r9xB82NVqKpnMRtxDoiO+g3olkIUpQNqjArXrCQceduQZCQj3P3xm32pChRLqRrtXTlqhIw==",
+      "license": "MIT",
+      "dependencies": {
+        "@actions/io": "^2.0.0"
+      }
+    },
     "node_modules/@actions/github": {
       "version": "6.0.0",
       "license": "MIT",
@@ -85,9 +122,10 @@
       }
     },
     "node_modules/@actions/io": {
-      "version": "1.1.3",
-      "resolved": "https://registry.npmjs.org/@actions/io/-/io-1.1.3.tgz",
-      "integrity": "sha512-wi9JjgKLYS7U/z8PPbco+PvTb/nRWjeoFlJ1Qer83k/3C5PHQi28hiVdeE2kHXmIL99mQFawx8qt/JPjZilJ8Q=="
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/@actions/io/-/io-2.0.0.tgz",
+      "integrity": "sha512-Jv33IN09XLO+0HS79aaODsvIRyduiF7NY/F6LYeK5oeUmrsz7aFdRphQjFoESF4jS7lMauDOttKALcpapVDIAg==",
+      "license": "MIT"
     },
     "node_modules/@ampproject/remapping": {
       "version": "2.2.1",
diff --git a/package.json b/package.json
index 0358c57..a8daaee 100644
--- a/package.json
+++ b/package.json
@@ -71,7 +71,7 @@
   },
   "dependencies": {
     "@actions/attest": "^2.1.0",
-    "@actions/core": "^1.11.1"
+    "@actions/core": "^2.0.1"
   },
   "devDependencies": {
     "@eslint/js": "^9.39.2",