refactor: replace uuid dep with Node.js built-in crypto.randomUUID (#4377 )

Replace the third-party `uuid` package with the native `crypto.randomUUID()` function available in Node.js, reducing the bundle size and external dependencies. - Remove `uuid` from `dependencies` in `package.json` - Replace `import {v4 as uuidv4} from 'uuid'` with `import {randomUUID} from 'crypto'` in `src/create-or-update-branch.ts` - Replace all `uuidv4()` calls with `randomUUID()` in `__test__/create-or-update-branch.int.test.ts` - Rebuild `dist/index.js`, removing ~680 lines of bundled `uuid` library code - Update `package-lock.json` to reflect removed dependency
build(deps-dev): bump the npm group with 2 updates (#4372 )
2026-05-15 02:54:48 +00:00 · 2026-05-06 12:10:34 +01:00 · 2026-05-01 14:37:34 +00:00 · 2026-04-10 17:35:29 +01:00 · 2026-04-10 17:23:55 +01:00 · 2026-04-01 15:23:34 +00:00
26 changed files with 5361 additions and 30014 deletions
@@ -3,18 +3,27 @@ updates:
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
-      interval: "weekly"
+      interval: "monthly"
      day: "tuesday"
    labels:
      - "dependencies"
-
+    groups:
+      github-actions:
+        applies-to: version-updates
+        patterns:
+          - "*"
  - package-ecosystem: "npm"
    directory: "/"
    schedule:
-      interval: "weekly"
+      interval: "monthly"
      day: "tuesday"
    ignore:
      - dependency-name: "*"
        update-types: ["version-update:semver-major"]
    labels:
      - "dependencies"
+    groups:
+      npm:
+        applies-to: version-updates
+        patterns:
+          - "*"
@@ -19,21 +19,21 @@ jobs:
  build:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
        with:
-          node-version: 20.x
+          node-version-file: package.json
          cache: npm
      - run: npm ci
      - run: npm run build
      - run: npm run format-check
      - run: npm run lint
      - run: npm run test
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
        with:
          name: dist
          path: dist
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
        with:
          name: action.yml
          path: action.yml
@@ -46,16 +46,16 @@ jobs:
      matrix:
        target: [built, committed]
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
        with:
          ref: main
      - if: matrix.target == 'built' || github.event_name == 'pull_request'
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
        with:
          name: dist
          path: dist
      - if: matrix.target == 'built' || github.event_name == 'pull_request'
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
        with:
          name: action.yml
          path: .
@@ -92,7 +92,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Find Comment
-        uses: peter-evans/find-comment@v3
+        uses: peter-evans/find-comment@v4
        id: fc
        with:
          issue-number: ${{ github.event.number }}
@@ -101,7 +101,7 @@ jobs:

      - if: steps.fc.outputs.comment-id == ''
        name: Create comment
-        uses: peter-evans/create-or-update-comment@v4
+        uses: peter-evans/create-or-update-comment@v5
        with:
          issue-number: ${{ github.event.number }}
          body: |
@@ -118,13 +118,13 @@ jobs:
    needs: [test]
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/download-artifact@v4
+      - uses: actions/checkout@v6
+      - uses: actions/download-artifact@v8
        with:
          name: dist
          path: dist
      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
          token: ${{ secrets.ACTIONS_BOT_TOKEN }}
          commit-message: 'build: update distribution'
@@ -6,7 +6,7 @@ jobs:
  createPullRequest:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6

      - name: Make changes to pull request
        run: date +%s > report.txt
@@ -29,8 +29,8 @@ jobs:
          labels: |
            report
            automated pr
-          assignees: peter-evans
-          reviewers: peter-evans
+          assignees: retepsnave
+          reviewers: retepsnave
          milestone: 1
          draft: false
          branch: example-patches
@@ -42,7 +42,7 @@ jobs:
          echo "Pull Request URL - ${{ steps.cpr.outputs.pull-request-url }}"

      - name: Add reaction
-        uses: peter-evans/create-or-update-comment@v4
+        uses: peter-evans/create-or-update-comment@v5
        with:
          repository: ${{ github.event.client_payload.github.payload.repository.full_name }}
          comment-id: ${{ github.event.client_payload.github.payload.comment.id }}
@@ -7,7 +7,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Slash Command Dispatch
-        uses: peter-evans/slash-command-dispatch@v4
+        uses: peter-evans/slash-command-dispatch@v5
        with:
          token: ${{ secrets.ACTIONS_BOT_TOKEN }}
          config: >
@@ -18,12 +18,6 @@ jobs:
                "repository": "peter-evans/create-pull-request-tests",
                "named_args": true
              },
-              {
-                "command": "testv5",
-                "permission": "admin",
-                "repository": "peter-evans/create-pull-request-tests",
-                "named_args": true
-              },
              {
                "command": "clean",
                "permission": "admin",
@@ -11,14 +11,14 @@ on:
        type: choice
        description: The major version tag to update
        options:
-          - v6
          - v7
+          - v8

 jobs:
  tag:
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
      with:
        token: ${{ secrets.ACTIONS_BOT_TOKEN }}
        fetch-depth: 0
@@ -15,27 +15,27 @@ Create Pull Request action will:
   - tracked (modified) files
   - commits made during the workflow that have not been pushed
 2. Commit all changes to a new branch, or update an existing pull request branch.
-3. Create a pull request to merge the new branch into the base&mdash;the branch checked out in the workflow.
+3. Create or update a pull request to merge the branch into the base&mdash;the branch checked out in the workflow.

 ## Documentation

 - [Concepts, guidelines and advanced usage](docs/concepts-guidelines.md)
 - [Examples](docs/examples.md)
- [Updating to v7](docs/updating.md)
+- [Updating between versions](docs/updating.md)
 - [Common issues](docs/common-issues.md)

 ## Usage

 ```yml
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6

      # Make changes to pull request here

      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
 ```

-You can also pin to a [specific release](https://github.com/peter-evans/create-pull-request/releases) version in the format `@v7.x.x`
+You can also pin to a [specific release](https://github.com/peter-evans/create-pull-request/releases) version in the format `@v8.x.x`

 ### Workflow permissions

@@ -53,7 +53,7 @@ All inputs are **optional**. If not set, sensible defaults will be used.
 | `token` | The token that the action will use to create and update the pull request. See [token](#token). | `GITHUB_TOKEN` |
 | `branch-token` | The token that the action will use to create and update the branch. See [branch-token](#branch-token). | Defaults to the value of `token` |
 | `path` | Relative path under `GITHUB_WORKSPACE` to the repository. | `GITHUB_WORKSPACE` |
-| `add-paths` | A comma or newline-separated list of file paths to commit. Paths should follow git's [pathspec](https://git-scm.com/docs/gitglossary#Documentation/gitglossary.txt-aiddefpathspecapathspec) syntax. If no paths are specified, all new and modified files are added. See [Add specific paths](#add-specific-paths). | |
+| `add-paths` | A comma or newline-separated list of file paths to commit. Paths should follow git's [pathspec](https://git-scm.com/docs/gitglossary#Documentation/gitglossary.txt-aiddefpathspecapathspec) syntax. See [Add specific paths](#add-specific-paths). | If no paths are specified, all new and modified files are added. |
 | `commit-message` | The message to use when committing changes. See [commit-message](#commit-message). | `[create-pull-request] automated change` |
 | `committer` | The committer name and email address in the format `Display Name <email@address.com>`. Defaults to the GitHub Actions bot user on github.com. | `github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>` |
 | `author` | The author name and email address in the format `Display Name <email@address.com>`. Defaults to the user who triggered the workflow run. | `${{ github.actor }} <${{ github.actor_id }}+${{ github.actor }}@users.noreply.github.com>` |
@@ -99,7 +99,7 @@ Other token options:
 #### branch-token

 The action first creates a branch, and then creates a pull request for the branch.
-For some rare use cases it can be useful, or even neccessary, to use different tokens for these operations.
+For some rare use cases it can be useful, or even necessary, to use different tokens for these operations.
 It is not advisable to use this input unless you know you need to.

 #### commit-message
@@ -131,7 +131,7 @@ If you want branches to be deleted immediately on merge then you should use GitH
 For self-hosted runners behind a corporate proxy set the `https_proxy` environment variable.
 ```yml
      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        env:
          https_proxy: http://<proxy_address>:<port>
 ```
@@ -153,7 +153,7 @@ Note that in order to read the step outputs the action step must have an id.
 ```yml
      - name: Create Pull Request
        id: cpr
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
      - name: Check outputs
        if: ${{ steps.cpr.outputs.pull-request-number }}
        run: |
@@ -216,7 +216,7 @@ File changes that do not match one of the paths will be stashed and restored aft

 ```yml
      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
          add-paths: |
            *.java
@@ -230,7 +230,7 @@ Note that the repository must be checked out on a branch with a remote, it won't

 ```yml
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
      - name: Create commits
        run: |
          git config user.name 'Peter Evans'
@@ -243,7 +243,7 @@ Note that the repository must be checked out on a branch with a remote, it won't
      - name: Uncommitted change
        run: date +%s > report.txt
      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
 ```

 ### Auto-merge
@@ -263,14 +263,14 @@ jobs:
  createPullRequest:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6

      - name: Make changes to pull request
        run: date +%s > report.txt

      - name: Create Pull Request
        id: cpr
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
          token: ${{ secrets.PAT }}
          commit-message: Update report
@@ -4,10 +4,10 @@ import {
  getWorkingBaseAndType,
  buildBranchCommits
 } from '../lib/create-or-update-branch'
+import {randomUUID} from 'crypto'
 import * as fs from 'fs'
 import {GitCommandManager} from '../lib/git-command-manager'
 import * as path from 'path'
-import {v4 as uuidv4} from 'uuid'

 const REPO_PATH = '/git/local/repos/test-base'
 const REMOTE_NAME = 'origin'
@@ -31,7 +31,7 @@ const ADD_PATHS_MULTI = ['a', 'b']
 const ADD_PATHS_WILDCARD = ['a/*.txt', 'b/*.txt']

 async function createFile(filename: string, content?: string): Promise<string> {
-  const _content = content ? content : uuidv4()
+  const _content = content ? content : randomUUID()
  const filepath = path.join(REPO_PATH, filename)
  await fs.promises.mkdir(path.dirname(filepath), {recursive: true})
  await fs.promises.writeFile(filepath, _content, {encoding: 'utf8'})
@@ -82,7 +82,7 @@ async function createCommits(
    } else {
      result.changes = await createChanges()
    }
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    await git.exec(['add', '-A'])
    await git.commit(['-m', commitMessage])
    result.commitMsgs.unshift(commitMessage)
@@ -313,7 +313,7 @@ describe('create-or-update-branch tests', () => {
  })

  it('tests no changes resulting in no new branch being created', async () => {
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -330,7 +330,7 @@ describe('create-or-update-branch tests', () => {
  it('tests create and update with a tracked file change', async () => {
    // Create a tracked file change
    const trackedContent = await createFile(TRACKED_FILE)
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -359,7 +359,7 @@ describe('create-or-update-branch tests', () => {

    // Create a tracked file change
    const _trackedContent = await createFile(TRACKED_FILE)
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -381,7 +381,7 @@ describe('create-or-update-branch tests', () => {
  it('tests create and update with an untracked file change', async () => {
    // Create an untracked file change
    const untrackedContent = await createFile(UNTRACKED_FILE)
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -410,7 +410,7 @@ describe('create-or-update-branch tests', () => {

    // Create an untracked file change
    const _untrackedContent = await createFile(UNTRACKED_FILE)
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -434,7 +434,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -464,7 +464,7 @@ describe('create-or-update-branch tests', () => {

    // Create identical tracked and untracked file changes
    await createChanges(changes.tracked, changes.untracked)
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -486,7 +486,7 @@ describe('create-or-update-branch tests', () => {
  it('tests create and update with commits on the base inbetween', async () => {
    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -524,7 +524,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const _changes = await createChanges()
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -556,7 +556,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -585,7 +585,7 @@ describe('create-or-update-branch tests', () => {
    await beforeTest()

    // Running with no update effectively reverts the branch back to match the base
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -607,7 +607,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -648,7 +648,7 @@ describe('create-or-update-branch tests', () => {
      commits.changes.tracked,
      commits.changes.untracked
    )
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -673,7 +673,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -703,7 +703,7 @@ describe('create-or-update-branch tests', () => {

    // Create a commit on the base with a partial merge of the changes
    await createFile(TRACKED_FILE, changes.tracked)
-    const baseCommitMessage = uuidv4()
+    const baseCommitMessage = randomUUID()
    await git.exec(['add', '-A'])
    await git.commit(['-m', baseCommitMessage])
    await git.push([
@@ -714,7 +714,7 @@ describe('create-or-update-branch tests', () => {

    // Create the same tracked and untracked file changes
    const _changes = await createChanges(changes.tracked, changes.untracked)
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -746,7 +746,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -790,7 +790,7 @@ describe('create-or-update-branch tests', () => {

    // Create the same tracked and untracked file changes (no change on update)
    const _changes = await createChanges(changes.tracked, changes.untracked)
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -816,7 +816,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -845,7 +845,7 @@ describe('create-or-update-branch tests', () => {
    await beforeTest()

    // Force push the base branch to a different commit
-    const amendedCommitMessage = uuidv4()
+    const amendedCommitMessage = randomUUID()
    await git.commit(['--amend', '-m', amendedCommitMessage])
    await git.push([
      '--force',
@@ -855,7 +855,7 @@ describe('create-or-update-branch tests', () => {

    // Create the same tracked and untracked file changes (no change on update)
    const _changes = await createChanges(changes.tracked, changes.untracked)
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -878,7 +878,7 @@ describe('create-or-update-branch tests', () => {
  it('tests create and update with commits on the working base (during the workflow)', async () => {
    // Create commits on the working base
    const commits = await createCommits(git)
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -910,7 +910,7 @@ describe('create-or-update-branch tests', () => {

    // Create commits on the working base
    const _commits = await createCommits(git)
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -937,7 +937,7 @@ describe('create-or-update-branch tests', () => {
    const commits = await createCommits(git)
    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -973,7 +973,7 @@ describe('create-or-update-branch tests', () => {
    const _commits = await createCommits(git)
    // Create tracked and untracked file changes
    const _changes = await createChanges()
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -1002,7 +1002,7 @@ describe('create-or-update-branch tests', () => {
    const commits = await createCommits(git)
    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -1046,7 +1046,7 @@ describe('create-or-update-branch tests', () => {
    const _commits = await createCommits(git)
    // Create tracked and untracked file changes
    const _changes = await createChanges()
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -1074,7 +1074,7 @@ describe('create-or-update-branch tests', () => {
  it('tests create and update using a different remote from the base', async () => {
    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -1104,7 +1104,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const _changes = await createChanges()
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -1127,7 +1127,7 @@ describe('create-or-update-branch tests', () => {
  it('tests create and update with signoff on commit', async () => {
    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -1164,7 +1164,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const _changes = await createChanges()
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -1194,7 +1194,7 @@ describe('create-or-update-branch tests', () => {
  it('tests create and update with multiple add-paths', async () => {
    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -1224,7 +1224,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const _changes = await createChanges()
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -1247,7 +1247,7 @@ describe('create-or-update-branch tests', () => {
  it('tests create and update with wildcard add-paths', async () => {
    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -1277,7 +1277,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const _changes = await createChanges()
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -1300,7 +1300,7 @@ describe('create-or-update-branch tests', () => {
  it('tests create with add-paths resolving to no changes when other changes exist', async () => {
    // Create tracked and untracked file changes
    await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -1321,7 +1321,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const resultA = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -1365,7 +1365,7 @@ describe('create-or-update-branch tests', () => {
    // Set the working base to a branch that is not the pull request base
    await git.checkout(NOT_BASE_BRANCH)

-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -1386,7 +1386,7 @@ describe('create-or-update-branch tests', () => {

    // Create a tracked file change
    const trackedContent = await createFile(TRACKED_FILE)
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -1418,7 +1418,7 @@ describe('create-or-update-branch tests', () => {

    // Create a tracked file change
    const _trackedContent = await createFile(TRACKED_FILE)
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -1443,7 +1443,7 @@ describe('create-or-update-branch tests', () => {

    // Create an untracked file change
    const untrackedContent = await createFile(UNTRACKED_FILE)
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -1475,7 +1475,7 @@ describe('create-or-update-branch tests', () => {

    // Create an untracked file change
    const _untrackedContent = await createFile(UNTRACKED_FILE)
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -1502,7 +1502,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -1535,7 +1535,7 @@ describe('create-or-update-branch tests', () => {

    // Create identical tracked and untracked file changes
    await createChanges(changes.tracked, changes.untracked)
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -1560,7 +1560,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -1601,7 +1601,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const _changes = await createChanges()
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -1635,7 +1635,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -1667,7 +1667,7 @@ describe('create-or-update-branch tests', () => {
    await git.checkout(NOT_BASE_BRANCH)

    // Running with no update effectively reverts the branch back to match the base
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -1694,7 +1694,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -1738,7 +1738,7 @@ describe('create-or-update-branch tests', () => {
      commits.changes.tracked,
      commits.changes.untracked
    )
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -1768,7 +1768,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -1798,7 +1798,7 @@ describe('create-or-update-branch tests', () => {

    // Create a commit on the base with a partial merge of the changes
    await createFile(TRACKED_FILE, changes.tracked)
-    const baseCommitMessage = uuidv4()
+    const baseCommitMessage = randomUUID()
    await git.exec(['add', '-A'])
    await git.commit(['-m', baseCommitMessage])
    await git.push([
@@ -1812,7 +1812,7 @@ describe('create-or-update-branch tests', () => {

    // Create the same tracked and untracked file changes
    const _changes = await createChanges(changes.tracked, changes.untracked)
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -1846,7 +1846,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -1893,7 +1893,7 @@ describe('create-or-update-branch tests', () => {

    // Create the same tracked and untracked file changes (no change on update)
    const _changes = await createChanges(changes.tracked, changes.untracked)
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -1924,7 +1924,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -1953,7 +1953,7 @@ describe('create-or-update-branch tests', () => {
    await beforeTest()

    // Force push the base branch to a different commit
-    const amendedCommitMessage = uuidv4()
+    const amendedCommitMessage = randomUUID()
    await git.commit(['--amend', '-m', amendedCommitMessage])
    await git.push([
      '--force',
@@ -1966,7 +1966,7 @@ describe('create-or-update-branch tests', () => {

    // Create the same tracked and untracked file changes (no change on update)
    const _changes = await createChanges(changes.tracked, changes.untracked)
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -1992,7 +1992,7 @@ describe('create-or-update-branch tests', () => {

    // Create commits on the working base
    const commits = await createCommits(git)
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -2027,7 +2027,7 @@ describe('create-or-update-branch tests', () => {

    // Create commits on the working base
    const _commits = await createCommits(git)
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -2057,7 +2057,7 @@ describe('create-or-update-branch tests', () => {
    const commits = await createCommits(git)
    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -2096,7 +2096,7 @@ describe('create-or-update-branch tests', () => {
    const _commits = await createCommits(git)
    // Create tracked and untracked file changes
    const _changes = await createChanges()
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -2128,7 +2128,7 @@ describe('create-or-update-branch tests', () => {
    const commits = await createCommits(git)
    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -2175,7 +2175,7 @@ describe('create-or-update-branch tests', () => {
    const _commits = await createCommits(git)
    // Create tracked and untracked file changes
    const _changes = await createChanges()
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -2205,7 +2205,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -2238,7 +2238,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const _changes = await createChanges()
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -2268,7 +2268,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -2302,7 +2302,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const _changes = await createChanges()
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -2329,7 +2329,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -2371,7 +2371,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const _changes = await createChanges()
-    const _commitMessage = uuidv4()
+    const _commitMessage = randomUUID()
    const _result = await createOrUpdateBranch(
      git,
      _commitMessage,
@@ -2403,7 +2403,7 @@ describe('create-or-update-branch tests', () => {

    // Create commits on the working base
    const commits = await createCommits(git)
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const result = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -2428,7 +2428,7 @@ describe('create-or-update-branch tests', () => {

    // Create tracked and untracked file changes
    const changes = await createChanges()
-    const commitMessage = uuidv4()
+    const commitMessage = randomUUID()
    const resultA = await createOrUpdateBranch(
      git,
      commitMessage,
@@ -19,15 +19,15 @@ git clone git://127.0.0.1/repos/test-base.git /git/local/repos/test-base
 cd /git/local/repos/test-base
 git config --global user.email "you@example.com"
 git config --global user.name "Your Name"
-echo "#test-base" > README_TEMP.md
+echo "#test-base" > README→TEMP.md
 git add .
 git commit -m "initial commit"
 git commit --allow-empty -m "empty commit for tests"
-echo "#test-base :sparkles:" > README_TEMP.md
+echo "#test-base :sparkles:" > README→TEMP.md
 git add .
 git commit -m "add sparkles" -m "Change description:
- updates README_TEMP.md to add sparkles to the title"
-mv README_TEMP.md README.md
+- updates README→TEMP.md to add sparkles to the title"
+mv README→TEMP.md README.md
 git add .
 git commit -m "rename readme"
 git push -u
@@ -20,7 +20,7 @@ describe('git-command-manager integration tests', () => {
    expect(initialCommit.signed).toBeFalsy()
    expect(initialCommit.changes[0].mode).toEqual('100644')
    expect(initialCommit.changes[0].status).toEqual('A')
-    expect(initialCommit.changes[0].path).toEqual('README_TEMP.md')
+    expect(initialCommit.changes[0].path).toEqual('README→TEMP.md') // filename contains unicode

    expect(emptyCommit.subject).toEqual('empty commit for tests')
    expect(emptyCommit.tree).toEqual(initialCommit.tree) // empty commits have no tree and reference the parent's
@@ -33,7 +33,7 @@ describe('git-command-manager integration tests', () => {
    expect(modifiedCommit.signed).toBeFalsy()
    expect(modifiedCommit.changes[0].mode).toEqual('100644')
    expect(modifiedCommit.changes[0].status).toEqual('M')
-    expect(modifiedCommit.changes[0].path).toEqual('README_TEMP.md')
+    expect(modifiedCommit.changes[0].path).toEqual('README→TEMP.md')

    expect(headCommit.subject).toEqual('rename readme')
    expect(headCommit.parents[0]).toEqual(modifiedCommit.sha)
@@ -43,6 +43,6 @@ describe('git-command-manager integration tests', () => {
    expect(headCommit.changes[0].path).toEqual('README.md')
    expect(headCommit.changes[1].mode).toEqual('100644')
    expect(headCommit.changes[1].status).toEqual('D')
-    expect(headCommit.changes[1].path).toEqual('README_TEMP.md')
+    expect(headCommit.changes[1].path).toEqual('README→TEMP.md')
  })
 })
@@ -118,3 +118,71 @@ describe('utils tests', () => {
    }
  })
 })
+
+describe('retryWithBackoff', () => {
+  const makeConsistencyError = () => {
+    const error = new Error(
+      'Validation Failed: "Could not resolve to a node with the global id of \'PR_abc123\'."'
+    )
+    ;(error as any).status = 422
+    return error
+  }
+
+  const shouldRetry = (e: unknown): boolean =>
+    e instanceof Error &&
+    (e as any).status === 422 &&
+    e.message.includes('Could not resolve to a node')
+
+  test('succeeds on first attempt without retrying', async () => {
+    const fn = jest.fn().mockResolvedValue('success')
+    const result = await utils.retryWithBackoff(fn, shouldRetry, 2, 1)
+    expect(result).toBe('success')
+    expect(fn).toHaveBeenCalledTimes(1)
+  })
+
+  test('retries on eventual consistency 422 and succeeds', async () => {
+    const fn = jest
+      .fn()
+      .mockRejectedValueOnce(makeConsistencyError())
+      .mockResolvedValue('success')
+    const result = await utils.retryWithBackoff(fn, shouldRetry, 2, 1)
+    expect(result).toBe('success')
+    expect(fn).toHaveBeenCalledTimes(2)
+  })
+
+  test('exhausts retries on persistent 422 and throws', async () => {
+    const fn = jest.fn().mockRejectedValue(makeConsistencyError())
+    await expect(utils.retryWithBackoff(fn, shouldRetry, 2, 1)).rejects.toThrow(
+      'Could not resolve to a node'
+    )
+    expect(fn).toHaveBeenCalledTimes(3) // 1 initial + 2 retries
+  })
+
+  test('does not retry on non-422 errors', async () => {
+    const error = new Error('Forbidden')
+    ;(error as any).status = 403
+    const fn = jest.fn().mockRejectedValue(error)
+    await expect(utils.retryWithBackoff(fn, shouldRetry, 2, 1)).rejects.toThrow(
+      'Forbidden'
+    )
+    expect(fn).toHaveBeenCalledTimes(1)
+  })
+
+  test('does not retry on 422 without the consistency error message', async () => {
+    const error = new Error('Validation Failed: invalid label')
+    ;(error as any).status = 422
+    const fn = jest.fn().mockRejectedValue(error)
+    await expect(utils.retryWithBackoff(fn, shouldRetry, 2, 1)).rejects.toThrow(
+      'Validation Failed: invalid label'
+    )
+    expect(fn).toHaveBeenCalledTimes(1)
+  })
+
+  test('does not retry on plain Error objects', async () => {
+    const fn = jest.fn().mockRejectedValue(new Error('Something broke'))
+    await expect(utils.retryWithBackoff(fn, shouldRetry, 2, 1)).rejects.toThrow(
+      'Something broke'
+    )
+    expect(fn).toHaveBeenCalledTimes(1)
+  })
+})
@@ -94,7 +94,7 @@ outputs:
  pull-request-branch:
    description: 'The pull request branch name'
 runs:
-  using: 'node20'
+  using: 'node24'
  main: 'dist/index.js'
 branding:
  icon: 'git-pull-request'
@@ -0,0 +1,16 @@
+"use strict";
+exports.id = 790;
+exports.ids = [790];
+exports.modules = {
+
+/***/ 790:
+/***/ ((__unused_webpack_module, exports, __webpack_require__) => {
+
+var y=Object.defineProperty;var c=(R,o)=>y(R,"name",{value:o,configurable:!0});const node=__webpack_require__(117);__webpack_require__(7067),__webpack_require__(4708),__webpack_require__(8522),__webpack_require__(7075),__webpack_require__(4573),__webpack_require__(7975),__webpack_require__(3465),__webpack_require__(3136),__webpack_require__(7030),__webpack_require__(3024),__webpack_require__(6760);let s=0;const S={START_BOUNDARY:s++,HEADER_FIELD_START:s++,HEADER_FIELD:s++,HEADER_VALUE_START:s++,HEADER_VALUE:s++,HEADER_VALUE_ALMOST_DONE:s++,HEADERS_ALMOST_DONE:s++,PART_DATA_START:s++,PART_DATA:s++,END:s++};let f=1;const F={PART_BOUNDARY:f,LAST_BOUNDARY:f*=2},LF=10,CR=13,SPACE=32,HYPHEN=45,COLON=58,A=97,Z=122,lower=c(R=>R|32,"lower"),noop=c(()=>{},"noop"),g=class g{constructor(o){this.index=0,this.flags=0,this.onHeaderEnd=noop,this.onHeaderField=noop,this.onHeadersEnd=noop,this.onHeaderValue=noop,this.onPartBegin=noop,this.onPartData=noop,this.onPartEnd=noop,this.boundaryChars={},o=`\r
+--`+o;const t=new Uint8Array(o.length);for(let n=0;n<o.length;n++)t[n]=o.charCodeAt(n),this.boundaryChars[t[n]]=!0;this.boundary=t,this.lookbehind=new Uint8Array(this.boundary.length+8),this.state=S.START_BOUNDARY}write(o){let t=0;const n=o.length;let E=this.index,{lookbehind:l,boundary:h,boundaryChars:H,index:e,state:a,flags:d}=this;const b=this.boundary.length,m=b-1,O=o.length;let r,P;const u=c(D=>{this[D+"Mark"]=t},"mark"),i=c(D=>{delete this[D+"Mark"]},"clear"),T=c((D,p,_,N)=>{(p===void 0||p!==_)&&this[D](N&&N.subarray(p,_))},"callback"),L=c((D,p)=>{const _=D+"Mark";_ in this&&(p?(T(D,this[_],t,o),delete this[_]):(T(D,this[_],o.length,o),this[_]=0))},"dataCallback");for(t=0;t<n;t++)switch(r=o[t],a){case S.START_BOUNDARY:if(e===h.length-2){if(r===HYPHEN)d|=F.LAST_BOUNDARY;else if(r!==CR)return;e++;break}else if(e-1===h.length-2){if(d&F.LAST_BOUNDARY&&r===HYPHEN)a=S.END,d=0;else if(!(d&F.LAST_BOUNDARY)&&r===LF)e=0,T("onPartBegin"),a=S.HEADER_FIELD_START;else return;break}r!==h[e+2]&&(e=-2),r===h[e+2]&&e++;break;case S.HEADER_FIELD_START:a=S.HEADER_FIELD,u("onHeaderField"),e=0;case S.HEADER_FIELD:if(r===CR){i("onHeaderField"),a=S.HEADERS_ALMOST_DONE;break}if(e++,r===HYPHEN)break;if(r===COLON){if(e===1)return;L("onHeaderField",!0),a=S.HEADER_VALUE_START;break}if(P=lower(r),P<A||P>Z)return;break;case S.HEADER_VALUE_START:if(r===SPACE)break;u("onHeaderValue"),a=S.HEADER_VALUE;case S.HEADER_VALUE:r===CR&&(L("onHeaderValue",!0),T("onHeaderEnd"),a=S.HEADER_VALUE_ALMOST_DONE);break;case S.HEADER_VALUE_ALMOST_DONE:if(r!==LF)return;a=S.HEADER_FIELD_START;break;case S.HEADERS_ALMOST_DONE:if(r!==LF)return;T("onHeadersEnd"),a=S.PART_DATA_START;break;case S.PART_DATA_START:a=S.PART_DATA,u("onPartData");case S.PART_DATA:if(E=e,e===0){for(t+=m;t<O&&!(o[t]in H);)t+=b;t-=m,r=o[t]}if(e<h.length)h[e]===r?(e===0&&L("onPartData",!0),e++):e=0;else if(e===h.length)e++,r===CR?d|=F.PART_BOUNDARY:r===HYPHEN?d|=F.LAST_BOUNDARY:e=0;else if(e-1===h.length)if(d&F.PART_BOUNDARY){if(e=0,r===LF){d&=~F.PART_BOUNDARY,T("onPartEnd"),T("onPartBegin"),a=S.HEADER_FIELD_START;break}}else d&F.LAST_BOUNDARY&&r===HYPHEN?(T("onPartEnd"),a=S.END,d=0):e=0;if(e>0)l[e-1]=r;else if(E>0){const D=new Uint8Array(l.buffer,l.byteOffset,l.byteLength);T("onPartData",0,E,D),E=0,u("onPartData"),t--}break;case S.END:break;default:throw new Error(`Unexpected state entered: ${a}`)}L("onHeaderField"),L("onHeaderValue"),L("onPartData"),this.index=e,this.state=a,this.flags=d}end(){if(this.state===S.HEADER_FIELD_START&&this.index===0||this.state===S.PART_DATA&&this.index===this.boundary.length)this.onPartEnd();else if(this.state!==S.END)throw new Error("MultipartParser.end(): stream ended unexpectedly")}};c(g,"MultipartParser");let MultipartParser=g;function _fileName(R){const o=R.match(/\bfilename=("(.*?)"|([^()<>@,;:\\"/[\]?={}\s\t]+))($|;\s)/i);if(!o)return;const t=o[2]||o[3]||"";let n=t.slice(t.lastIndexOf("\\")+1);return n=n.replace(/%22/g,'"'),n=n.replace(/&#(\d{4});/g,(E,l)=>String.fromCharCode(l)),n}c(_fileName,"_fileName");async function toFormData(R,o){if(!/multipart/i.test(o))throw new TypeError("Failed to fetch");const t=o.match(/boundary=(?:"([^"]+)"|([^;]+))/i);if(!t)throw new TypeError("no or bad content-type header, no multipart boundary");const n=new MultipartParser(t[1]||t[2]);let E,l,h,H,e,a;const d=[],b=new node.FormData,m=c(i=>{h+=u.decode(i,{stream:!0})},"onPartData"),O=c(i=>{d.push(i)},"appendToFile"),r=c(()=>{const i=new node.File(d,a,{type:e});b.append(H,i)},"appendFileToFormData"),P=c(()=>{b.append(H,h)},"appendEntryToFormData"),u=new TextDecoder("utf-8");u.decode(),n.onPartBegin=function(){n.onPartData=m,n.onPartEnd=P,E="",l="",h="",H="",e="",a=null,d.length=0},n.onHeaderField=function(i){E+=u.decode(i,{stream:!0})},n.onHeaderValue=function(i){l+=u.decode(i,{stream:!0})},n.onHeaderEnd=function(){if(l+=u.decode(),E=E.toLowerCase(),E==="content-disposition"){const i=l.match(/\bname=("([^"]*)"|([^()<>@,;:\\"/[\]?={}\s\t]+))/i);i&&(H=i[2]||i[3]||""),a=_fileName(l),a&&(n.onPartData=O,n.onPartEnd=r)}else E==="content-type"&&(e=l);l="",E=""};for await(const i of R)n.write(i);return n.end(),b}c(toFormData,"toFormData"),exports.toFormData=toFormData;
+
+
+/***/ })
+
+};
+;
@@ -37,7 +37,7 @@ So the straightforward solution is to just not install them during the workflow

 - If hooks are automatically enabled by a framework, use an option provided by the framework to disable them. For example, for Husky users, they can be disabled with the `--ignore-scripts` flag, or by setting the `HUSKY` environment variable when the action runs.
  ```yml
-  uses: peter-evans/create-pull-request@v7
+  uses: peter-evans/create-pull-request@v8
  env:
    HUSKY: '0'
  ```
@@ -25,7 +25,7 @@ This document covers terminology, how the action works, general usage guidelines

 ## Terminology

-[Pull requests](https://docs.github.com/en/github/collaborating-with-issues-and-pull-requests/about-pull-requests#about-pull-requests) are proposed changes to a repository branch that can be reviewed by a repository's collaborators before being accepted or rejected. 
+[Pull requests](https://docs.github.com/en/github/collaborating-with-issues-and-pull-requests/about-pull-requests#about-pull-requests) are proposed changes to a repository branch that can be reviewed by a repository's collaborators before being accepted or rejected.

 A pull request references two branches:

@@ -40,7 +40,7 @@ For each [event type](https://docs.github.com/en/actions/reference/events-that-t
 The default can be overridden by specifying a `ref` on checkout.

 ```yml
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
        with:
          ref: develop
 ```
@@ -77,7 +77,7 @@ jobs:
  example:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 ```

 There may be use cases where it makes sense to execute the workflow on a branch that is not the base of the pull request. In these cases, the base branch can be specified with the `base` action input. The action will attempt to rebase changes made during the workflow on to the actual base.
@@ -92,7 +92,7 @@ In these cases, you *must supply* the `base` input so the action can rebase chan
 Workflows triggered by [`pull_request`](https://docs.github.com/en/actions/reference/events-that-trigger-workflows#pull_request) events will by default check out a merge commit. Set the `base` input as follows to base the new pull request on the current pull request's branch.

 ```yml
-      - uses: peter-evans/create-pull-request@v7
+      - uses: peter-evans/create-pull-request@v8
        with:
          base: ${{ github.head_ref }}
 ```
@@ -100,7 +100,7 @@ Workflows triggered by [`pull_request`](https://docs.github.com/en/actions/refer
 Workflows triggered by [`release`](https://docs.github.com/en/actions/reference/events-that-trigger-workflows#release) events will by default check out a tag. For most use cases, you will need to set the `base` input to the branch name of the tagged commit.

 ```yml
-      - uses: peter-evans/create-pull-request@v7
+      - uses: peter-evans/create-pull-request@v8
        with:
          base: main
 ```
@@ -150,7 +150,7 @@ There are a number of workarounds with different pros and cons.

 - Use the default `GITHUB_TOKEN` and allow the action to create pull requests that have no checks enabled. Manually close pull requests and immediately reopen them. This will enable `on: pull_request` workflows to run and be added as checks. To prevent merging of pull requests without checks erroneously, use [branch protection rules](https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/defining-the-mergeability-of-pull-requests).

- Create draft pull requests by setting the `draft: always-true` input, and configure your workflow to trigger `on: ready_for_review`. The workflow will run when users manually click the "Ready for review" button on the draft pull requests. If the pull request is updated by the action, the `always-true` mode ensures that the pull request will be converted back to a draft.
+- Create draft pull requests by setting the `draft: always-true` input, and configure your workflow to trigger `ready_for_review` in `on: pull_request`. The workflow will run when users manually click the "Ready for review" button on the draft pull requests. If the pull request is updated by the action, the `always-true` mode ensures that the pull request will be converted back to a draft.

 - Use a [Personal Access Token (PAT)](https://docs.github.com/en/github/authenticating-to-github/creating-a-personal-access-token) created on an account that has write access to the repository that pull requests are being created in. This is the standard workaround and [recommended by GitHub](https://docs.github.com/en/actions/using-workflows/triggering-a-workflow#triggering-a-workflow-from-a-workflow). It's advisable to use a dedicated [machine account](https://docs.github.com/en/github/site-policy/github-terms-of-service#3-account-requirements) that has collaborator access to the repository, rather than creating a PAT on a personal user account. Also note that because the account that owns the PAT will be the creator of pull requests, that user account will be unable to perform actions such as request changes or approve the pull request.

@@ -179,14 +179,14 @@ This action uses [ncc](https://github.com/vercel/ncc) to compile the Node.js cod
 Checking out a branch from a different repository from where the workflow is executing will make *that repository* the target for the created pull request. In this case, the `GITHUB_TOKEN` will not work and one of the other [token options](../README.md#token) must be used.

 ```yml
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
        with:
          token: ${{ secrets.PAT }}
          repository: owner/repo

      # Make changes to pull request here

-      - uses: peter-evans/create-pull-request@v7
+      - uses: peter-evans/create-pull-request@v8
        with:
          token: ${{ secrets.PAT }}
 ```
@@ -197,8 +197,9 @@ Checking out a branch from a different repository from where the workflow is exe
 Allowing the action to push with a configured deploy key will trigger `on: push` workflows. This makes it an alternative to using a PAT to trigger checks for pull requests.

 > [!NOTE]
-> You cannot use deploy keys alone to [create a pull request in a remote repository](#creating-pull-requests-in-a-remote-repository) because then using a PAT would become a requirement.
+> - You cannot use deploy keys alone to [create a pull request in a remote repository](#creating-pull-requests-in-a-remote-repository) because then using a PAT would become a requirement.
 > This method only makes sense if creating a pull request in the repository where the workflow is running.
+> - You cannot use deploy keys with [commit signature verification for bots](#commit-signature-verification-for-bots) (`sign-commits: true`).

 How to use SSH (deploy keys) with create-pull-request action:

@@ -209,14 +210,14 @@ How to use SSH (deploy keys) with create-pull-request action:

 ```yml
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
        with:
          ssh-key: ${{ secrets.SSH_PRIVATE_KEY }}

      # Make changes to pull request here

      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
 ```

 ### Push pull request branches to a fork
@@ -231,17 +232,17 @@ It will use their own fork to push code and create the pull request.

 1. Create a new GitHub user and login.
 2. Fork the repository that you will be creating pull requests in.
-3. Create a Classic [Personal Access Token (PAT)](https://docs.github.com/en/github/authenticating-to-github/creating-a-personal-access-token) with `repo` scope.
+3. Create a Classic [Personal Access Token (PAT)](https://docs.github.com/en/github/authenticating-to-github/creating-a-personal-access-token) with `repo` and `workflow` scopes.
 4. Logout and log back into your main user account.
 5. Add a secret to your repository containing the above PAT.
 6. As shown in the following example workflow, set the `push-to-fork` input to the full repository name of the fork.

 ```yaml
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6

      # Make changes to pull request here

-      - uses: peter-evans/create-pull-request@v7
+      - uses: peter-evans/create-pull-request@v8
        with:
          token: ${{ secrets.MACHINE_USER_PAT }}
          push-to-fork: machine-user/fork-of-repository
@@ -271,7 +272,7 @@ The `token` input will then default to the repository's `GITHUB_TOKEN`, which wi

 The following is an example of pushing to a fork using GitHub App tokens.
 ```yaml
-      - uses: actions/create-github-app-token@v1
+      - uses: actions/create-github-app-token@v2
        id: generate-token
        with:
          app-id: ${{ secrets.APP_ID }}
@@ -279,12 +280,12 @@ The following is an example of pushing to a fork using GitHub App tokens.
          owner: owner
          repositories: fork-of-repo

-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6

      # Make changes to pull request here

      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
          branch-token: ${{ steps.generate-token.outputs.token }}
          push-to-fork: owner/fork-of-repo
@@ -318,18 +319,18 @@ GitHub App generated tokens can be configured with fine-grained permissions and

 ```yaml
    steps:
-      - uses: actions/create-github-app-token@v1
+      - uses: actions/create-github-app-token@v2
        id: generate-token
        with:
          app-id: ${{ secrets.APP_ID }}
          private-key: ${{ secrets.APP_PRIVATE_KEY }}

-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6

      # Make changes to pull request here

      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
          token: ${{ steps.generate-token.outputs.token }}
 ```
@@ -341,7 +342,7 @@ For this case a token must be generated from the GitHub App installation of the
 In the following example, a pull request is being created in remote repo `owner/repo`.
 ```yaml
    steps:
-      - uses: actions/create-github-app-token@v1
+      - uses: actions/create-github-app-token@v2
        id: generate-token
        with:
          app-id: ${{ secrets.APP_ID }}
@@ -349,7 +350,7 @@ In the following example, a pull request is being created in remote repo `owner/
          owner: owner
          repositories: repo

-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
        with:
          token: ${{ steps.generate-token.outputs.token }} # necessary if the repo is private
          repository: owner/repo
@@ -357,7 +358,7 @@ In the following example, a pull request is being created in remote repo `owner/
      # Make changes to pull request here

      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
          token: ${{ steps.generate-token.outputs.token }}
 ```
@@ -373,7 +374,7 @@ The action supports two methods to sign commits, [commit signature verification

 The action can sign commits as `github-actions[bot]` when using the repository's default `GITHUB_TOKEN`, or your own bot when using [GitHub App tokens](#authenticating-with-github-app-generated-tokens).

-> [!IMPORTANT]  
+> [!IMPORTANT]
 > - When setting `sign-commits: true` the action will ignore the `committer` and `author` inputs.
 > - If you attempt to use a [Personal Access Token (PAT)](https://docs.github.com/en/github/authenticating-to-github/creating-a-personal-access-token) the action will create the pull request, but commits will *not* be signed. Commit signing is only supported with bot generated tokens.
 > - The GitHub API has a 40MiB limit when creating git blobs. An error will be raised if there are files in the pull request larger than this. If you hit this limit, use [GPG commit signature verification](#gpg-commit-signature-verification) instead.
@@ -381,12 +382,12 @@ The action can sign commits as `github-actions[bot]` when using the repository's
 In this example the `token` input is not supplied, so the action will use the repository's default `GITHUB_TOKEN`. This will sign commits as `github-actions[bot]`.
 ```yaml
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6

      # Make changes to pull request here

      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
          sign-commits: true
 ```
@@ -394,9 +395,9 @@ In this example the `token` input is not supplied, so the action will use the re
 In this example, the `token` input is generated using a GitHub App. This will sign commits as `<application-name>[bot]`.
 ```yaml
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6

-      - uses: actions/create-github-app-token@v1
+      - uses: actions/create-github-app-token@v2
        id: generate-token
        with:
          app-id: ${{ secrets.APP_ID }}
@@ -405,7 +406,7 @@ In this example, the `token` input is generated using a GitHub App. This will si
      # Make changes to pull request here

      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
          token: ${{ steps.generate-token.outputs.token }}
          sign-commits: true
@@ -436,7 +437,7 @@ The action can use GPG to sign commits with a GPG key that you generate yourself

 ```yaml
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6

      - uses: crazy-max/ghaction-import-gpg@v5
        with:
@@ -448,7 +449,7 @@ The action can use GPG to sign commits with a GPG key that you generate yourself
      # Make changes to pull request here

      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
          token: ${{ secrets.PAT }}
          committer: example <email@example.com>
@@ -473,12 +474,12 @@ jobs:
      - name: Install dependencies
        run: apk --no-cache add git

-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6

      # Make changes to pull request here

      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
 ```

 **Ubuntu container example:**
@@ -496,10 +497,10 @@ jobs:
          add-apt-repository -y ppa:git-core/ppa
          apt-get install -y git

-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6

      # Make changes to pull request here

      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
 ```
@@ -22,7 +22,7 @@
  - [Dynamic configuration using variables](#dynamic-configuration-using-variables)
  - [Using a markdown template](#using-a-markdown-template)
  - [Debugging GitHub Actions](#debugging-github-actions)
-
+  - [Show an annotation message for a created pull request](#show-an-annotation-message-for-a-created-pull-request)

 ## Use case: Create a pull request to update X on push

@@ -42,14 +42,14 @@ jobs:
  updateAuthors:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
        with:
          fetch-depth: 0
      - name: Update AUTHORS
        run: |
          git log --format='%aN <%aE>%n%cN <%cE>' | sort -u > AUTHORS
      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
          commit-message: update authors
          title: Update AUTHORS
@@ -73,7 +73,7 @@ jobs:
  productionPromotion:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
        with:
          ref: production
      - name: Reset promotion branch
@@ -81,7 +81,7 @@ jobs:
          git fetch origin main:main
          git reset --hard main
      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
          branch: production-promotion
 ```
@@ -106,7 +106,7 @@ jobs:
  updateChangelog:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
        with:
          fetch-depth: 0
      - name: Update Changelog
@@ -116,7 +116,7 @@ jobs:
          ./git-chglog -o CHANGELOG.md
          rm git-chglog
      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
          commit-message: update changelog
          title: Update Changelog
@@ -144,7 +144,7 @@ jobs:
  update-dep:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
      - uses: actions/setup-node@v3
        with:
          node-version: '16.x'
@@ -153,7 +153,7 @@ jobs:
          npx -p npm-check-updates ncu -u
          npm install
      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
            token: ${{ secrets.PAT }}
            commit-message: Update dependencies
@@ -180,7 +180,7 @@ jobs:
  build:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
      - uses: actions/setup-node@v3
        with:
          node-version: 16.x
@@ -204,7 +204,7 @@ jobs:
  update-dep:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
      - uses: actions/setup-java@v2
        with:
          distribution: 'temurin'
@@ -214,7 +214,7 @@ jobs:
      - name: Perform dependency resolution and write new lockfiles
        run: ./gradlew dependencies --write-locks
      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
            token: ${{ secrets.PAT }}
            commit-message: Update dependencies
@@ -242,14 +242,14 @@ jobs:
  update-dep:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
      - name: Update dependencies
        run: |
          cargo install cargo-edit
          cargo update
          cargo upgrade --to-lockfile
      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
            token: ${{ secrets.PAT }}
            commit-message: Update dependencies
@@ -277,7 +277,7 @@ jobs:
  updateSwagger:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
      - name: Get Latest Swagger UI Release
        id: swagger-ui
        run: |
@@ -307,7 +307,7 @@ jobs:
          # Update current release
          echo ${{ steps.swagger-ui.outputs.release_tag }} > swagger-ui.version
      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
          commit-message: Update swagger-ui to ${{ steps.swagger-ui.outputs.release_tag }}
          title: Update SwaggerUI to ${{ steps.swagger-ui.outputs.release_tag }}
@@ -324,7 +324,7 @@ jobs:

 ### Keep a fork up-to-date with its upstream

-This example is designed to be run in a seperate repository from the fork repository itself.
+This example is designed to be run in a separate repository from the fork repository itself.
 The aim of this is to prevent committing anything to the fork's default branch would cause it to differ from the upstream.

 In the following example workflow, `owner/repo` is the upstream repository and `fork-owner/repo` is the fork. It assumes the default branch of the upstream repository is called `main`.
@@ -342,7 +342,7 @@ jobs:
  updateFork:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
        with:
          repository: fork-owner/repo
      - name: Reset the default branch with upstream changes
@@ -351,7 +351,7 @@ jobs:
          git fetch upstream main:upstream-main
          git reset --hard upstream-main
      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
          token: ${{ secrets.PAT }}
          branch: upstream-changes
@@ -370,7 +370,7 @@ jobs:
  format:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
      - name: Download website
        run: |
          wget \
@@ -384,7 +384,7 @@ jobs:
            --domains quotes.toscrape.com \
            http://quotes.toscrape.com/
      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
          commit-message: update local website copy
          title: Automated Updates to Local Website Copy
@@ -466,7 +466,7 @@ jobs:
    if: startsWith(github.head_ref, 'autopep8-patches') == false && github.event.pull_request.head.repo.full_name == github.repository
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
        with:
          ref: ${{ github.head_ref }}
      - name: autopep8
@@ -481,7 +481,7 @@ jobs:
          echo "branch-name=$branch-name" >> $GITHUB_OUTPUT
      - name: Create Pull Request
        if: steps.autopep8.outputs.exit-code == 2
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
          commit-message: autopep8 action fixes
          title: Fixes by autopep8 action
@@ -515,13 +515,13 @@ jobs:
    if: startsWith(github.ref, 'refs/heads/')
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
      ...

  someOtherJob:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
      ...
 ```

@@ -540,7 +540,7 @@ Note that the step where output variables are defined must have an id.
          echo "pr_title=$pr_title" >> $GITHUB_OUTPUT
          echo "pr_body=$pr_body" >> $GITHUB_OUTPUT
      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
          title: ${{ steps.vars.outputs.pr_title }}
          body: ${{ steps.vars.outputs.pr_body }}
@@ -566,7 +566,7 @@ The template is rendered using the [render-template](https://github.com/chuhlomi
            bar: that

      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
        with:
          body: ${{ steps.template.outputs.result }}
 ```
@@ -612,3 +612,30 @@ To enable step debug logging set the secret `ACTIONS_STEP_DEBUG` to `true` in th
          MATRIX_CONTEXT: ${{ toJson(matrix) }}
        run: echo "$MATRIX_CONTEXT"
 ```
+
+### Show an annotation message for a created pull request
+
+Showing an annotation message for a created or updated pull request allows you to confirm the pull request easily, such as by visiting the link. This can be achieved by adding a step that uses the [`notice` workflow command](https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/workflow-commands-for-github-actions?tool=bash#setting-a-notice-message).
+
+For example:
+
+```yml
+- name: Create Pull Request
+  id: cpr
+  uses: peter-evans/create-pull-request@v8
+
+- name: Show message for created Pull Request
+  if: ${{ steps.cpr.outputs.pull-request-url && steps.cpr.outputs.pull-request-operation != 'none' }}
+  shell: bash
+  env:
+    PR_URL: ${{ steps.cpr.outputs.pull-request-url }}
+    PR_OPERATION: ${{ steps.cpr.outputs.pull-request-operation }}
+  run: |
+    echo "::notice::${PR_URL} was ${PR_OPERATION}."
+```
+
+In this example, when a pull request is created, you will be able to see the following message on an action run page (e.g., `/actions/runs/12812393039`):
+
+```
+https://github.com/peter-evans/create-pull-request/pull/1 was created.
+```
@@ -1,3 +1,14 @@
+## Updating from `v7` to `v8`
+
+### Behaviour changes
+
+- If using self-hosted runners or GitHub Enterprise Server, there are minimum requirements for `v8` to run. See "What's new" below for details.
+
+### What's new
+
+- Updated runtime to Node.js 24
+  - The action now requires a minimum version of [v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) for the Actions runner. Update self-hosted runners to v2.327.1 or later to ensure compatibility.
+
 ## Updating from `v6` to `v7`

 ### Behaviour changes
@@ -1,9 +1,12 @@
 {
  "name": "create-pull-request",
-  "version": "7.0.0",
+  "version": "8.0.0",
  "private": true,
  "description": "Creates a pull request for changes to your repository in the actions workspace",
  "main": "lib/main.js",
+  "engines": {
+    "node": ">=24.4.0"
+  },
  "scripts": {
    "build": "tsc && ncc build",
    "format": "prettier --write '**/*.ts'",
@@ -29,35 +32,36 @@
  },
  "homepage": "https://github.com/peter-evans/create-pull-request",
  "dependencies": {
-    "@actions/core": "^1.10.1",
+    "@actions/core": "^1.11.1",
    "@actions/exec": "^1.1.1",
-    "@octokit/core": "^6.1.2",
-    "@octokit/plugin-paginate-rest": "^11.3.3",
-    "@octokit/plugin-rest-endpoint-methods": "^13.2.4",
-    "@octokit/plugin-throttling": "^9.3.1",
-    "p-limit": "^6.1.0",
-    "proxy-from-env": "^1.1.0",
-    "undici": "^6.19.8",
-    "uuid": "^9.0.1"
+    "@octokit/core": "^6.1.6",
+    "@octokit/plugin-paginate-rest": "^11.6.0",
+    "@octokit/plugin-rest-endpoint-methods": "^13.5.0",
+    "@octokit/plugin-retry": "^7.2.1",
+    "@octokit/plugin-throttling": "^9.6.1",
+    "@octokit/request-error": "^6.1.8",
+    "node-fetch-native": "^1.6.7",
+    "p-limit": "^6.2.0"
  },
  "devDependencies": {
-    "@types/jest": "^29.5.13",
-    "@types/node": "^18.19.50",
+    "@types/jest": "^29.5.14",
+    "@types/node": "^18.19.130",
    "@typescript-eslint/eslint-plugin": "^7.18.0",
    "@typescript-eslint/parser": "^7.18.0",
-    "@vercel/ncc": "^0.38.1",
+    "@vercel/ncc": "^0.38.4",
    "eslint": "^8.57.1",
-    "eslint-import-resolver-typescript": "^3.6.3",
+    "eslint-import-resolver-typescript": "^3.10.1",
    "eslint-plugin-github": "^4.10.2",
-    "eslint-plugin-import": "^2.30.0",
+    "eslint-plugin-import": "^2.32.0",
    "eslint-plugin-jest": "^27.9.0",
-    "eslint-plugin-prettier": "^5.2.1",
+    "eslint-plugin-prettier": "^5.5.5",
    "jest": "^29.7.0",
    "jest-circus": "^29.7.0",
-    "jest-environment-jsdom": "^29.7.0",
-    "js-yaml": "^4.1.0",
-    "prettier": "^3.3.3",
-    "ts-jest": "^29.2.5",
-    "typescript": "^5.6.2"
+    "jest-environment-jsdom": "^30.3.0",
+    "js-yaml": "^4.1.1",
+    "prettier": "^3.8.3",
+    "ts-jest": "^29.4.9",
+    "typescript": "^5.9.3",
+    "undici": "^6.25.0"
  }
 }
@@ -1,6 +1,6 @@
 import * as core from '@actions/core'
+import {randomUUID} from 'crypto'
 import {GitCommandManager, Commit} from './git-command-manager'
-import {v4 as uuidv4} from 'uuid'
 import * as utils from './utils'

 const CHERRYPICK_EMPTY =
@@ -19,7 +19,7 @@ export async function getWorkingBaseAndType(
 ): Promise<[string, WorkingBaseType]> {
  const symbolicRefResult = await git.exec(
    ['symbolic-ref', 'HEAD', '--short'],
-    true
+    {allowAllExitCodes: true}
  )
  if (symbolicRefResult.exitCode == 0) {
    // A ref is checked out
@@ -189,7 +189,7 @@ export async function createOrUpdateBranch(
  const baseRemote = 'origin'

  // Save the working base changes to a temporary branch
-  const tempBranch = uuidv4()
+  const tempBranch = randomUUID()
  await git.checkout(tempBranch, 'HEAD')
  // Commit any uncommitted changes
  if (await git.isDirty(true, addPaths)) {
@@ -200,7 +200,7 @@ export async function createOrUpdateBranch(
    } else {
      aopts.push('-A')
    }
-    await git.exec(aopts, true)
+    await git.exec(aopts, {allowAllExitCodes: true})
    const popts = ['-m', commitMessage]
    if (signoff) {
      popts.push('--signoff')
@@ -121,12 +121,20 @@ export async function createPullRequest(inputs: Inputs): Promise<void> {
        `The 'base' and 'branch' for a pull request must be different branches. Unable to continue.`
      )
    }
-    // For self-hosted runners the repository state persists between runs.
-    // This command prunes the stale remote ref when the pull request branch was
-    // deleted after being merged or closed. Without this the push using
-    // '--force-with-lease' fails due to "stale info."
-    // https://github.com/peter-evans/create-pull-request/issues/633
-    await git.exec(['remote', 'prune', branchRemoteName])
+    if (utils.isSelfHosted()) {
+      // For self-hosted runners the repository state persists between runs.
+      // This command prunes the stale remote ref when the pull request branch was
+      // deleted after being merged or closed. Without this the push using
+      // '--force-with-lease' fails due to "stale info."
+      // https://github.com/peter-evans/create-pull-request/issues/633
+      try {
+        await git.exec(['remote', 'prune', branchRemoteName])
+      } catch (error) {
+        core.warning(
+          `Failed to prune remote '${branchRemoteName}': ${(error as Error).message}`
+        )
+      }
+    }
    core.endGroup()

    // Apply the branch suffix if set
@@ -211,6 +219,7 @@ export async function createPullRequest(inputs: Inputs): Promise<void> {
        const stashed = await git.stashPush(['--include-untracked'])
        await git.checkout(inputs.branch)
        const pushSignedCommitsResult = await ghBranch.pushSignedCommits(
+          git,
          result.branchCommits,
          result.baseCommit,
          repoPath,
@@ -2,6 +2,7 @@ import * as exec from '@actions/exec'
 import * as io from '@actions/io'
 import * as utils from './utils'
 import * as path from 'path'
+import stream, {Writable} from 'stream'

 const tagsRefSpec = '+refs/tags/*:refs/tags/*'

@@ -21,6 +22,12 @@ export type Commit = {
  unparsedChanges: string[]
 }

+export type ExecOpts = {
+  allowAllExitCodes?: boolean
+  encoding?: 'utf8' | 'base64'
+  suppressGitCmdOutput?: boolean
+}
+
 export class GitCommandManager {
  private gitPath: string
  private workingDirectory: string
@@ -66,7 +73,7 @@ export class GitCommandManager {
      args.push(...options)
    }

-    return await this.exec(args, allowAllExitCodes)
+    return await this.exec(args, {allowAllExitCodes: allowAllExitCodes})
  }

  async commit(
@@ -82,7 +89,7 @@ export class GitCommandManager {
      args.push(...options)
    }

-    return await this.exec(args, allowAllExitCodes)
+    return await this.exec(args, {allowAllExitCodes: allowAllExitCodes})
  }

  async config(
@@ -113,7 +120,7 @@ export class GitCommandManager {
        configKey,
        configValue
      ],
-      true
+      {allowAllExitCodes: true}
    )
    return output.exitCode === 0
  }
@@ -156,15 +163,20 @@ export class GitCommandManager {

  async getCommit(ref: string): Promise<Commit> {
    const endOfBody = '###EOB###'
-    const output = await this.exec([
-      'show',
-      '--raw',
-      '--cc',
-      '--no-renames',
-      '--no-abbrev',
-      `--format=%H%n%T%n%P%n%G?%n%s%n%b%n${endOfBody}`,
-      ref
-    ])
+    const output = await this.exec(
+      [
+        '-c',
+        'core.quotePath=false',
+        'show',
+        '--raw',
+        '--cc',
+        '--no-renames',
+        '--no-abbrev',
+        `--format=%H%n%T%n%P%n%G?%n%s%n%b%n${endOfBody}`,
+        ref
+      ],
+      {suppressGitCmdOutput: true}
+    )
    const lines = output.stdout.split('\n')
    const endOfBodyIndex = lines.lastIndexOf(endOfBody)
    const detailLines = lines.slice(0, endOfBodyIndex)
@@ -220,7 +232,7 @@ export class GitCommandManager {
    if (options) {
      args.push(...options)
    }
-    const output = await this.exec(args, true)
+    const output = await this.exec(args, {allowAllExitCodes: true})
    return output.exitCode === 1
  }

@@ -276,6 +288,15 @@ export class GitCommandManager {
    return output.stdout.trim()
  }

+  async showFileAtRefBase64(ref: string, path: string): Promise<string> {
+    const args = ['show', `${ref}:${path}`]
+    const output = await this.exec(args, {
+      encoding: 'base64',
+      suppressGitCmdOutput: true
+    })
+    return output.stdout.trim()
+  }
+
  async stashPush(options?: string[]): Promise<boolean> {
    const args = ['stash', 'push']
    if (options) {
@@ -324,7 +345,7 @@ export class GitCommandManager {
        configKey,
        configValue
      ],
-      true
+      {allowAllExitCodes: true}
    )
    return output.exitCode === 0
  }
@@ -332,7 +353,7 @@ export class GitCommandManager {
  async tryGetRemoteUrl(): Promise<string> {
    const output = await this.exec(
      ['config', '--local', '--get', 'remote.origin.url'],
-      true
+      {allowAllExitCodes: true}
    )

    if (output.exitCode !== 0) {
@@ -347,16 +368,30 @@ export class GitCommandManager {
    return stdout
  }

-  async exec(args: string[], allowAllExitCodes = false): Promise<GitOutput> {
+  async exec(
+    args: string[],
+    {
+      encoding = 'utf8',
+      allowAllExitCodes = false,
+      suppressGitCmdOutput = false
+    }: ExecOpts = {}
+  ): Promise<GitOutput> {
    const result = new GitOutput()

+    if (process.env['CPR_SHOW_GIT_CMD_OUTPUT']) {
+      // debug mode overrides the suppressGitCmdOutput option
+      suppressGitCmdOutput = false
+    }
+
    const env = {}
    for (const key of Object.keys(process.env)) {
      env[key] = process.env[key]
    }

-    const stdout: string[] = []
-    const stderr: string[] = []
+    const stdout: Buffer[] = []
+    let stdoutLength = 0
+    const stderr: Buffer[] = []
+    let stderrLength = 0

    const options = {
      cwd: this.workingDirectory,
@@ -364,17 +399,21 @@ export class GitCommandManager {
      ignoreReturnCode: allowAllExitCodes,
      listeners: {
        stdout: (data: Buffer) => {
-          stdout.push(data.toString())
+          stdout.push(data)
+          stdoutLength += data.length
        },
        stderr: (data: Buffer) => {
-          stderr.push(data.toString())
+          stderr.push(data)
+          stderrLength += data.length
        }
-      }
+      },
+      outStream: outStreamHandler(process.stdout, suppressGitCmdOutput),
+      errStream: outStreamHandler(process.stderr, suppressGitCmdOutput)
    }

    result.exitCode = await exec.exec(`"${this.gitPath}"`, args, options)
-    result.stdout = stdout.join('')
-    result.stderr = stderr.join('')
+    result.stdout = Buffer.concat(stdout, stdoutLength).toString(encoding)
+    result.stderr = Buffer.concat(stderr, stderrLength).toString(encoding)
    return result
  }
 }
@@ -384,3 +423,24 @@ class GitOutput {
  stderr = ''
  exitCode = 0
 }
+
+const outStreamHandler = (
+  outStream: Writable,
+  suppressGitCmdOutput: boolean
+): Writable => {
+  return new stream.Writable({
+    write(chunk, _, next) {
+      if (suppressGitCmdOutput) {
+        const lines = chunk.toString().trimEnd().split('\n')
+        for (const line of lines) {
+          if (line.startsWith('[command]')) {
+            outStream.write(`${line}\n`)
+          }
+        }
+      } else {
+        outStream.write(chunk)
+      }
+      next()
+    }
+  })
+}
@@ -22,6 +22,7 @@ export class GitConfigHelper {
  private extraheaderConfigPlaceholderValue = 'AUTHORIZATION: basic ***'
  private extraheaderConfigValueRegex = '^AUTHORIZATION:'
  private persistedExtraheaderConfigValue = ''
+  private backedUpCredentialFiles: string[] = []

  private constructor(git: GitCommandManager) {
    this.git = git
@@ -121,11 +122,15 @@ export class GitConfigHelper {
  async savePersistedAuth(): Promise<void> {
    const serverUrl = new URL(`https://${this.getGitRemote().hostname}`)
    this.extraheaderConfigKey = `http.${serverUrl.origin}/.extraheader`
+    // Backup checkout@v6 credential files if they exist
+    await this.hideCredentialFiles()
    // Save and unset persisted extraheader credential in git config if it exists
    this.persistedExtraheaderConfigValue = await this.getAndUnset()
  }

  async restorePersistedAuth(): Promise<void> {
+    // Restore checkout@v6 credential files if they were backed up
+    await this.unhideCredentialFiles()
    if (this.persistedExtraheaderConfigValue) {
      try {
        await this.setExtraheaderConfig(this.persistedExtraheaderConfigValue)
@@ -169,6 +174,51 @@ export class GitConfigHelper {
    )
  }

+  private async hideCredentialFiles(): Promise<void> {
+    // Temporarily hide checkout@v6 credential files to avoid duplicate auth headers
+    const runnerTemp = process.env['RUNNER_TEMP']
+    if (!runnerTemp) {
+      return
+    }
+
+    try {
+      const files = await fs.promises.readdir(runnerTemp)
+      for (const file of files) {
+        if (file.startsWith('git-credentials-') && file.endsWith('.config')) {
+          const sourcePath = path.join(runnerTemp, file)
+          const backupPath = `${sourcePath}.bak`
+          await fs.promises.rename(sourcePath, backupPath)
+          this.backedUpCredentialFiles.push(backupPath)
+          core.info(
+            `Temporarily hiding checkout credential file: ${file} (will be restored after)`
+          )
+        }
+      }
+    } catch (e) {
+      // If directory doesn't exist or we can't read it, just continue
+      core.debug(
+        `Could not backup credential files: ${utils.getErrorMessage(e)}`
+      )
+    }
+  }
+
+  private async unhideCredentialFiles(): Promise<void> {
+    // Restore checkout@v6 credential files that were backed up
+    for (const backupPath of this.backedUpCredentialFiles) {
+      try {
+        const originalPath = backupPath.replace(/\.bak$/, '')
+        await fs.promises.rename(backupPath, originalPath)
+        const fileName = path.basename(originalPath)
+        core.info(`Restored checkout credential file: ${fileName}`)
+      } catch (e) {
+        core.warning(
+          `Failed to restore credential file ${backupPath}: ${utils.getErrorMessage(e)}`
+        )
+      }
+    }
+    this.backedUpCredentialFiles = []
+  }
+
  private async getAndUnset(): Promise<string> {
    let configValue = ''
    // Save and unset persisted extraheader credential in git config if it exists
@@ -1,7 +1,13 @@
 import * as core from '@actions/core'
+import {RequestError} from '@octokit/request-error'
 import {Inputs} from './create-pull-request'
-import {Commit} from './git-command-manager'
-import {Octokit, OctokitOptions, throttleOptions} from './octokit-client'
+import {Commit, GitCommandManager} from './git-command-manager'
+import {
+  Octokit,
+  OctokitOptions,
+  retryOptions,
+  throttleOptions
+} from './octokit-client'
 import pLimit from 'p-limit'
 import * as utils from './utils'

@@ -52,6 +58,7 @@ export class GitHubHelper {
      options.baseUrl = 'https://api.github.com'
    }
    options.throttle = throttleOptions
+    options.retry = retryOptions
    this.octokit = new Octokit(options)
  }

@@ -63,6 +70,50 @@ export class GitHubHelper {
    }
  }

+  private async getPullNumber(
+    baseRepository: string,
+    headBranch: string,
+    baseBranch: string
+  ): Promise<number> {
+    const {data: pulls} = await this.octokit.rest.pulls.list({
+      ...this.parseRepository(baseRepository),
+      state: 'open',
+      head: headBranch,
+      base: baseBranch
+    })
+    let pullNumber: number | undefined = undefined
+    if (pulls?.length === 0 || pulls === null || pulls === undefined) {
+      // This is a fallback due to a bug that affects the list endpoint when called on forks with the same owner as the repository parent.
+      core.info(
+        `Pull request not found via list endpoint; attempting fallback mechanism`
+      )
+      for await (const response of this.octokit.paginate.iterator(
+        this.octokit.rest.pulls.list,
+        {
+          ...this.parseRepository(baseRepository),
+          state: 'open',
+          base: baseBranch
+        }
+      )) {
+        const existingPull = response.data.find(
+          pull => pull.head.label === headBranch
+        )
+        if (existingPull !== undefined) {
+          pullNumber = existingPull.number
+          break
+        }
+      }
+    } else {
+      pullNumber = pulls[0].number
+    }
+    if (pullNumber === undefined) {
+      throw new Error(
+        `Failed to find pull request number for branch ${headBranch}`
+      )
+    }
+    return pullNumber
+  }
+
  private async createOrUpdate(
    inputs: Inputs,
    baseRepository: string,
@@ -113,16 +164,15 @@ export class GitHubHelper {

    // Update the pull request that exists for this branch and base
    core.info(`Fetching existing pull request`)
-    const {data: pulls} = await this.octokit.rest.pulls.list({
-      ...this.parseRepository(baseRepository),
-      state: 'open',
-      head: headBranch,
-      base: inputs.base
-    })
+    const pullNumber = await this.getPullNumber(
+      baseRepository,
+      headBranch,
+      inputs.base
+    )
    core.info(`Attempting update of pull request`)
    const {data: pull} = await this.octokit.rest.pulls.update({
      ...this.parseRepository(baseRepository),
-      pull_number: pulls[0].number,
+      pull_number: pullNumber,
      title: inputs.title,
      body: inputs.body
    })
@@ -160,32 +210,51 @@ export class GitHubHelper {
      headRepository
    )

+    // After creating a new PR, follow-up API calls can fail with a 422
+    // "Could not resolve to a node" error due to GitHub API eventual
+    // consistency. Wrap post-creation calls with targeted retry logic.
+    // See: https://github.com/peter-evans/create-pull-request/issues/4321
+    const isEventualConsistencyError = (e: unknown): boolean =>
+      e instanceof RequestError &&
+      e.status === 422 &&
+      e.message.includes('Could not resolve to a node')
+    const withRetryForNewPr = <T>(fn: () => Promise<T>): Promise<T> =>
+      pull.created
+        ? utils.retryWithBackoff(fn, isEventualConsistencyError)
+        : fn()
+
    // Apply milestone
    if (inputs.milestone) {
      core.info(`Applying milestone '${inputs.milestone}'`)
-      await this.octokit.rest.issues.update({
-        ...this.parseRepository(baseRepository),
-        issue_number: pull.number,
-        milestone: inputs.milestone
-      })
+      await withRetryForNewPr(() =>
+        this.octokit.rest.issues.update({
+          ...this.parseRepository(baseRepository),
+          issue_number: pull.number,
+          milestone: inputs.milestone
+        })
+      )
    }
    // Apply labels
    if (inputs.labels.length > 0) {
      core.info(`Applying labels '${inputs.labels}'`)
-      await this.octokit.rest.issues.addLabels({
-        ...this.parseRepository(baseRepository),
-        issue_number: pull.number,
-        labels: inputs.labels
-      })
+      await withRetryForNewPr(() =>
+        this.octokit.rest.issues.addLabels({
+          ...this.parseRepository(baseRepository),
+          issue_number: pull.number,
+          labels: inputs.labels
+        })
+      )
    }
    // Apply assignees
    if (inputs.assignees.length > 0) {
      core.info(`Applying assignees '${inputs.assignees}'`)
-      await this.octokit.rest.issues.addAssignees({
-        ...this.parseRepository(baseRepository),
-        issue_number: pull.number,
-        assignees: inputs.assignees
-      })
+      await withRetryForNewPr(() =>
+        this.octokit.rest.issues.addAssignees({
+          ...this.parseRepository(baseRepository),
+          issue_number: pull.number,
+          assignees: inputs.assignees
+        })
+      )
    }

    // Request reviewers and team reviewers
@@ -201,11 +270,13 @@ export class GitHubHelper {
    }
    if (Object.keys(requestReviewersParams).length > 0) {
      try {
-        await this.octokit.rest.pulls.requestReviewers({
-          ...this.parseRepository(baseRepository),
-          pull_number: pull.number,
-          ...requestReviewersParams
-        })
+        await withRetryForNewPr(() =>
+          this.octokit.rest.pulls.requestReviewers({
+            ...this.parseRepository(baseRepository),
+            pull_number: pull.number,
+            ...requestReviewersParams
+          })
+        )
      } catch (e) {
        if (utils.getErrorMessage(e).includes(ERROR_PR_REVIEW_TOKEN_SCOPE)) {
          core.error(
@@ -220,6 +291,7 @@ export class GitHubHelper {
  }

  async pushSignedCommits(
+    git: GitCommandManager,
    branchCommits: Commit[],
    baseCommit: Commit,
    repoPath: string,
@@ -233,6 +305,7 @@ export class GitHubHelper {
    }
    for (const commit of branchCommits) {
      headCommit = await this.createCommit(
+        git,
        commit,
        headCommit,
        repoPath,
@@ -244,6 +317,7 @@ export class GitHubHelper {
  }

  private async createCommit(
+    git: GitCommandManager,
    commit: Commit,
    parentCommit: CommitResponse,
    repoPath: string,
@@ -269,10 +343,10 @@ export class GitHubHelper {
            let sha: string | null = null
            if (status === 'A' || status === 'M') {
              try {
-                const {data: blob} = await blobCreationLimit(() =>
+                const {data: blob} = await blobCreationLimit(async () =>
                  this.octokit.rest.git.createBlob({
                    ...repository,
-                    content: utils.readFileBase64([repoPath, path]),
+                    content: await git.showFileAtRefBase64(commit.sha, path),
                    encoding: 'base64'
                  })
                )
@@ -2,9 +2,9 @@ import * as core from '@actions/core'
 import {Octokit as OctokitCore} from '@octokit/core'
 import {paginateRest} from '@octokit/plugin-paginate-rest'
 import {restEndpointMethods} from '@octokit/plugin-rest-endpoint-methods'
+import {retry} from '@octokit/plugin-retry'
 import {throttling} from '@octokit/plugin-throttling'
-import {getProxyForUrl} from 'proxy-from-env'
-import {ProxyAgent, fetch as undiciFetch} from 'undici'
+import {fetch} from 'node-fetch-native/proxy'
 export {RestEndpointMethodTypes} from '@octokit/plugin-rest-endpoint-methods'
 // eslint-disable-next-line import/no-unresolved
 export {OctokitOptions} from '@octokit/core/dist-types/types'
@@ -12,6 +12,7 @@ export {OctokitOptions} from '@octokit/core/dist-types/types'
 export const Octokit = OctokitCore.plugin(
  paginateRest,
  restEndpointMethods,
+  retry,
  throttling,
  autoProxyAgent
 )
@@ -33,23 +34,14 @@ export const throttleOptions = {
  }
 }

-const proxyFetch =
-  (proxyUrl: string): typeof undiciFetch =>
-  (url, opts) => {
-    return undiciFetch(url, {
-      ...opts,
-      dispatcher: new ProxyAgent({
-        uri: proxyUrl
-      })
-    })
-  }
+export const retryOptions = {
+  // 429 is handled by the throttling plugin, so we exclude it from retry
+  doNotRetry: [400, 401, 403, 404, 410, 422, 429, 451]
+}

 // Octokit plugin to support the standard environment variables http_proxy, https_proxy and no_proxy
 function autoProxyAgent(octokit: OctokitCore) {
  octokit.hook.before('request', options => {
-    const proxy = getProxyForUrl(options.baseUrl)
-    if (proxy) {
-      options.request.fetch = proxyFetch(proxy)
-    }
+    options.request.fetch = fetch
  })
 }
@@ -126,16 +126,6 @@ export function readFile(path: string): string {
  return fs.readFileSync(path, 'utf-8')
 }

-export function readFileBase64(pathParts: string[]): string {
-  const resolvedPath = path.resolve(...pathParts)
-  if (fs.lstatSync(resolvedPath).isSymbolicLink()) {
-    return fs
-      .readlinkSync(resolvedPath, {encoding: 'buffer'})
-      .toString('base64')
-  }
-  return fs.readFileSync(resolvedPath).toString('base64')
-}
-
 /* eslint-disable  @typescript-eslint/no-explicit-any */
 function hasErrorCode(error: any): error is {code: string} {
  return typeof (error && error.code) === 'string'
@@ -145,3 +135,32 @@ export function getErrorMessage(error: unknown) {
  if (error instanceof Error) return error.message
  return String(error)
 }
+
+export const isSelfHosted = (): boolean =>
+  process.env['RUNNER_ENVIRONMENT'] !== 'github-hosted' &&
+  (process.env['AGENT_ISSELFHOSTED'] === '1' ||
+    process.env['AGENT_ISSELFHOSTED'] === undefined)
+
+export async function retryWithBackoff<T>(
+  fn: () => Promise<T>,
+  shouldRetry: (error: unknown) => boolean,
+  maxRetries = 2,
+  delayMs = 1000
+): Promise<T> {
+  for (let attempt = 0; attempt <= maxRetries; attempt++) {
+    try {
+      return await fn()
+    } catch (e) {
+      if (attempt < maxRetries && shouldRetry(e)) {
+        const delay = delayMs * Math.pow(2, attempt)
+        core.info(
+          `Request failed (attempt ${attempt + 1}/${maxRetries + 1}), retrying in ${delay}ms...`
+        )
+        await new Promise(resolve => setTimeout(resolve, delay))
+      } else {
+        throw e
+      }
+    }
+  }
+  throw new Error('Unexpected: retry loop exited without return or throw')
+}