[Snyk] Upgrade @octokit/core from 5.0.1 to 7.0.5

[nerdy-tech-com-gitub]

Snyk has created this PR to upgrade @octokit/core from 5.0.1 to 7.0.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 26 versions ahead of your current version.

• The recommended version was released 22 days ago.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Insecure Randomness SNYK-JS-UNDICI-8641354	89	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-OCTOKITPLUGINPAGINATEREST-8730855	89	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-OCTOKITREQUEST-8730853	89	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-OCTOKITREQUESTERROR-8730854	89	Proof of Concept
	Missing Release of Memory after Effective Lifetime SNYK-JS-UNDICI-10176064	89	Proof of Concept
	Information Exposure SNYK-JS-UNDICI-5962466	89	No Known Exploit
	Permissive Cross-domain Policy with Untrusted Domains SNYK-JS-UNDICI-6252336	89	No Known Exploit
	Improper Access Control SNYK-JS-UNDICI-6564963	89	No Known Exploit
	Improper Authorization SNYK-JS-UNDICI-6564964	89	No Known Exploit

Release notes

Package name: @octokit/core

• 7.0.5 - 2025-09-29
  

  7.0.5 (2025-09-29)

  Bug Fixes

  • deps: update octokit dependencies, and @ sinonjs/fake-timers (#749) (14d23a1)
• 7.0.4 - 2025-09-16
  

  7.0.4 (2025-09-16)

  Bug Fixes

  • deps: update dependency @ octokit/types to v15 (#748) (03b6c28)
• 7.0.3 - 2025-07-10
  

  7.0.3 (2025-07-10)

  Bug Fixes

  • add createLogger to ensure that pino does not break (#744) (0896c50)
• 7.0.2 - 2025-05-20
  

  7.0.2 (2025-05-20)

  Bug Fixes

  • deps: update octokit monorepo (major) (#742) (629fa4e)
• 7.0.1 - 2025-05-20
  

  7.0.1 (2025-05-20)

  Bug Fixes

  • deps: update dependency before-after-hook to v4 (#739) (2abf89e)
• 7.0.0 - 2025-05-20
  

  7.0.0 (2025-05-20)

  Continuous Integration

  • stop testing against NodeJS v18 (#738) (78747bf)

  BREAKING CHANGES

  • Drop support for NodeJS v18

  • build: set minimal node version in build script to v20

  • ci: stop testing against NodeJS v18

• 6.1.6 - 2025-07-11
  

  6.1.6 (2025-07-11)

  Bug Fixes

  • add createLogger to ensure that pino does not break (#744) (78c6df8)
• 6.1.5 - 2025-04-10
  

  6.1.5 (2025-04-10)

  Bug Fixes

  • deps: update dependency @ octokit/types to v14 (#731) (3700c41)
• 6.1.4 - 2025-02-13
• 6.1.3 - 2025-01-03
• 6.1.2 - 2024-04-09
• 6.1.1 - 2024-04-03
• 6.1.0 - 2024-04-03
• 6.0.1 - 2024-02-26
• 6.0.0 - 2024-02-25
• 6.0.0-beta.5 - 2024-02-25
• 6.0.0-beta.4 - 2024-02-25
• 6.0.0-beta.3 - 2024-02-25
• 6.0.0-beta.2 - 2024-02-25
• 6.0.0-beta.1 - 2024-02-24
• 5.2.2 - 2025-07-11
  

  5.2.2 (2025-07-11)

  Bug Fixes

  • add createLogger to ensure that pino does not break (#744) (00cc1ea)
• 5.2.1 - 2025-03-18
  

  5.2.1 (2025-03-18)

  Bug Fixes

  • bump Octokit packages (9a7f0ab)
• 5.2.0 - 2024-04-05
• 5.1.1 - 2024-04-05
• 5.1.0 - 2024-01-20
• 5.0.2 - 2023-11-22
• 5.0.1 - 2023-09-23

from @octokit/core GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs