chore(deps): resolve open Dependabot alerts (#139)

* chore(deps): resolve open Dependabot alerts

Bumps top-level dependencies to pull in patched transitive packages
(undici, @octokit/request, @octokit/plugin-paginate-rest,
@octokit/request-error):

- @actions/core ^1.10.0 -> ^2.0.0
- @electron/github-app-auth ^2.0.0 -> ^3.0.0
- @octokit/rest ^19.0.11 -> ^20.0.2
- @octokit/graphql ^5.0.6 -> ^7.0.0 (dev)

* chore(deps): align @octokit/rest to ^22 and use dynamic import for ESM-only packages

Author: MarshallOfSound

package.json

@@ -29,15 +29,15 @@
   },
   "homepage": "https://github.com/electron/unreleased#readme",
   "dependencies": {
-    "@actions/core": "^1.10.0",
-    "@electron/github-app-auth": "^2.0.0",
-    "@octokit/rest": "^19.0.11",
+    "@actions/core": "^2.0.0",
+    "@electron/github-app-auth": "^3.0.0",
+    "@octokit/rest": "^22.0.0",
     "@slack/web-api": "^6.10.0",
     "body-parser": "^2.2.1",
     "express": "^5.0.1"
   },
   "devDependencies": {
-    "@octokit/graphql": "^5.0.6",
+    "@octokit/graphql": "^9.0.0",
     "eslint": "^9.12.0",
     "globals": "^15.11.0",
     "husky": "^9.1.6",

utils/octokit.js

@@ -1,19 +1,19 @@
-const {
-  appCredentialsFromString,
-  getAuthOptionsForRepo,
-} = require('@electron/github-app-auth');
 const {
   ORGANIZATION_NAME,
   REPO_NAME,
   UNRELEASED_GITHUB_APP_CREDS,
 } = require('../constants');
-const { Octokit } = require('@octokit/rest');
 
 let octokit;
 const getOctokit = async () => {
   if (octokit) return octokit;
 
+  const { Octokit } = await import('@octokit/rest');
+
   if (UNRELEASED_GITHUB_APP_CREDS) {
+    const { appCredentialsFromString, getAuthOptionsForRepo } = await import(
+      '@electron/github-app-auth'
+    );
     const creds = appCredentialsFromString(UNRELEASED_GITHUB_APP_CREDS);
     const authOpts = await getAuthOptionsForRepo(
       {

utils/unreleased-commits.js

@@ -1,10 +1,5 @@
 const { linkifyPRs, releaseIsDraft } = require('./helpers');
 const { getOctokit } = require('./octokit');
-const { graphql } = require('@octokit/graphql');
-const {
-  appCredentialsFromString,
-  getTokenForRepo,
-} = require('@electron/github-app-auth');
 
 const {
   EXCLUDED_COMMIT_PATTERN,
@@ -14,9 +9,14 @@ const {
 } = require('../constants');
 
 async function fetchTags() {
+  const { graphql } = await import('@octokit/graphql');
+
   let authorization;
 
   if (UNRELEASED_GITHUB_APP_CREDS) {
+    const { appCredentialsFromString, getTokenForRepo } = await import(
+      '@electron/github-app-auth'
+    );
     const creds = appCredentialsFromString(UNRELEASED_GITHUB_APP_CREDS);
     authorization = `token ${await getTokenForRepo(
       {