Update npm dependencies: @actions/github v8, @vitest, prettier, @types/node

[Copilot]

Bundle update for 5 npm packages in actions/setup/js/:

• @actions/github: 7.0.0 → 8.0.1 (major)
• @vitest/ui: 4.0.17 → 4.0.18
• @vitest/coverage-v8: 4.0.17 → 4.0.18
• prettier: 3.8.0 → 3.8.1
• @types/node: 25.0.9 → 25.1.0

Notes

The @actions/github major version bump is non-breaking for our usage. Codebase uses standard github.rest API patterns that remain stable across v7→v8:

// Existing usage pattern - compatible with v8
const repoPermission = await github.rest.repos.getCollaboratorPermissionLevel({
  owner: owner,
  repo: repo,
  username: actor,
});

All 3,082 JavaScript tests pass. No security vulnerabilities introduced.

Original prompt

---

This section details on the original issue you should resolve

<issue_title>[dependabot-burner] Dependabot bundle — npm — actions/setup/js/package.json (2026-01-29)</issue_title>
<issue_description>Runtime: npm
Manifest: actions/setup/js/package.json

PRs in this bundle

• Bump @vitest/ui from 4.0.17 to 4.0.18 in /actions/setup/js #12011 — Bump @vitest/ui from 4.0.17 to 4.0.18
• Bump @actions/github from 7.0.0 to 8.0.0 in /actions/setup/js #12012 — Bump @actions/github from 7.0.0 to 8.0.0
• Bump prettier from 3.8.0 to 3.8.1 in /actions/setup/js #12014 — Bump prettier from 3.8.0 to 3.8.1
• Bump @types/node from 25.0.9 to 25.0.10 in /actions/setup/js #12016 — Bump @types/node from 25.0.9 to 25.0.10
• Bump @vitest/coverage-v8 from 4.0.17 to 4.0.18 in /actions/setup/js #12017 — Bump @vitest/coverage-v8 from 4.0.17 to 4.0.18

Research

@vitest/ui (4.0.17 → 4.0.18) & @vitest/coverage-v8 (4.0.17 → 4.0.18)

• Risk: Low — Patch version bump
• Breaking changes: None expected
• Notes: Coordinated vitest ecosystem update

@actions/github (7.0.0 → 8.0.0)

• Risk: Medium — Major version bump
• Breaking changes: Possible API changes in GitHub Actions toolkit
• Migration notes: Review changelog for API compatibility
• Action required: Test actions that use @actions/github

prettier (3.8.0 → 3.8.1)

• Risk: Low — Patch version bump
• Breaking changes: None expected
• Notes: Formatting bug fixes only

@types/node (25.0.9 → 25.0.10)

• Risk: Low — Type definitions update
• Breaking changes: None expected
• Notes: TypeScript type improvements only

Overall risk: Medium — @actions/github major version needs testing; others are low risk.

AI generated by Dependabot Burner

Comments on the Issue (you are @copilot in this section)

• Fixes [dependabot-burner] Dependabot bundle — npm — actions/setup/js/package.json (2026-01-29) #12582

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.