From 6b8a0d01d020e7e006f5b3d678043771e42ed9a7 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 15 Aug 2026 02:47:02 +0000
Subject: [PATCH 1/3] Initial plan


From 3059e28da6e3ef66a29624ae0c28a28d86ab6968 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 15 Aug 2026 02:48:01 +0000
Subject: [PATCH 2/3] Fix snyk-security.yml: upgrade actions, Node 20, fix
 sarif upload condition

Co-authored-by: Mapuppy09 <144494139+Mapuppy09@users.noreply.github.com>
---
 .github/workflows/snyk-security.yml | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/snyk-security.yml b/.github/workflows/snyk-security.yml
index 5fe9bb9c62cdb..68015f1371a68 100644
--- a/.github/workflows/snyk-security.yml
+++ b/.github/workflows/snyk-security.yml
@@ -24,13 +24,13 @@ jobs:
     steps:
       # Check out code
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       
       # Set up Node.js
       - name: Set up Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
-          node-version: '18'
+          node-version: '20'
           cache: 'npm'
       
       # Install dependencies
@@ -43,12 +43,12 @@ jobs:
         env:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
         with:
-          args: --severity-threshold=high
+          args: --severity-threshold=high --sarif-file-output=snyk.sarif
       
       # Upload results to GitHub Security tab
       - name: Upload Snyk results
-        uses: github/codeql-action/upload-sarif@v2
-        if: always()
+        uses: github/codeql-action/upload-sarif@v3
+        if: always() && hashFiles('snyk.sarif') != ''
         with:
           sarif_file: snyk.sarif
 
@@ -58,12 +58,12 @@ jobs:
     
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       
       - name: Set up Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
-          node-version: '18'
+          node-version: '20'
           cache: 'npm'
       
       - name: Audit dependencies
@@ -76,12 +76,12 @@ jobs:
     
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       
       - name: Set up Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
-          node-version: '18'
+          node-version: '20'
           cache: 'npm'
       
       - name: Install dependencies

From fababfed3be27a8782dbb27351ee06c84f0d6a86 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 15 Aug 2026 02:57:52 +0000
Subject: [PATCH 3/3] Fix deprecated action versions in codeql-analysis.yml and
 create-node-pr.yml

Co-authored-by: Mapuppy09 <144494139+Mapuppy09@users.noreply.github.com>
---
 .github/workflows/codeql-analysis.yml | 4 ++--
 .github/workflows/create-node-pr.yml  | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 1e05817c06c03..4fb4fb7c4ce11 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -31,8 +31,8 @@ jobs:
           git config --global user.email "npm-cli+bot@github.com"
           git config --global user.name "npm CLI robot"
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2
+        uses: github/codeql-action/init@v3
         with:
           languages: javascript
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2
+        uses: github/codeql-action/analyze@v3
diff --git a/.github/workflows/create-node-pr.yml b/.github/workflows/create-node-pr.yml
index c903220dbd2ca..15220f922267e 100644
--- a/.github/workflows/create-node-pr.yml
+++ b/.github/workflows/create-node-pr.yml
@@ -45,7 +45,7 @@ jobs:
       - name: Reset Deps
         run: node scripts/resetdeps.js
       - name: Checkout Node
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           token: ${{ secrets.NODE_PULL_REQUEST_TOKEN }}
           repository: nodejs/node