Bump dependencies for github-actions package and align Node.js dev version to 20

[eason9487]

Changes proposed in this Pull Request:

Update major dependencies and align Node.js requirement to 20 in packages/github-actions.

• @actions/core: ^2.0.1 -> ^3.0.0
• @actions/github: ^6.0.1 -> ^9.0.0
• semver: ^7.7.3 -> ^7.7.4
• Node.js engine: >=18 -> >=20
• Update node-version example in prepare-node README to match

@actions/core v3 and @actions/github v9 are now ESM-only and no longer provide default exports. All import X from statements have been updated to import * as X from to match.

Risk assessment

• The @actions/github upgrade also pulls in major bumps to Octokit internals (@octokit/core v5 -> v7, @octokit/plugin-rest-endpoint-methods v10 -> v17, etc.). All REST API calls used in this package remain compatible with the new versions.
• Octokit internals major bumps: All REST API calls verified compatible.
• uploadReleaseAsset with binary data + custom headers: Verified compatible. data parameter still accepts Buffer.
• Error object structure (@octokit/request-error v7 removed deprecation and once): Only standard properties (status, message, stack) are used. No impact.

Validation

1. Tested with 7d9404c and eason9487/gha-playground@fb127b7 to trigger a GitHub Actions run for the publish-extension-dev-build action
2. The GitHub Actions run was successful
   
3. A dev-build was created
   

[Copilot]

Pull request overview

This pull request updates major dependencies for the github-actions package to their latest ESM-only versions and aligns the Node.js runtime requirement to v20. The changes include updating @actions/core from v2 to v3, @actions/github from v6 to v9, and semver from 7.7.3 to 7.7.4. All import statements have been consistently migrated from default imports to namespace imports to accommodate the ESM-only nature of the updated packages.

Changes:

• Updated @actions/core to v3.0.0 and @actions/github to v9.0.0 (both now ESM-only)
• Changed all imports from import X from to import * as X from for @actions packages
• Bumped Node.js engine requirement from >=18 to >=20
• Updated documentation example to reflect Node.js v20

Reviewed changes

Copilot reviewed 7 out of 8 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
packages/github-actions/package.json	Updated dependency versions and Node.js engine requirement to >=20
packages/github-actions/package-lock.json	Lockfile updated with new dependency versions and transitive dependencies
packages/github-actions/utils/repo-tool.js	Changed @actions/github import to namespace import
packages/github-actions/utils/handle-action-errors.js	Changed @actions/core import to namespace import
packages/github-actions/actions/update-version-tags/src/update-version-tags.js	Changed both @actions imports to namespace imports
packages/github-actions/actions/get-release-notes/src/get-release-notes.js	Changed both @actions imports to namespace imports
packages/github-actions/actions/get-plugin-releases/src/get-plugin-releases.js	Changed @actions/core import to namespace import
packages/github-actions/actions/prepare-node/README.md	Updated example node-version from 18 to 20

Files not reviewed (1)

• packages/github-actions/package-lock.json: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.