chore: bump @actions/* and fast-xml-parser dependencies

[Copilot]

Description:

Upgrades the following @actions dependencies to their latest versions:

Package	From	To
@actions/core	^2.0.0	^2.0.3
@actions/cache	^5.0.1	^5.0.5
@actions/glob	^0.5.0	^0.5.1
@actions/http-client	^3.0.0	^3.0.2
@actions/io	^1.0.2	^2.0.0
@fast-xml-parser	^5.3.6	^5.5.11

[Copilot]

Pull request overview

Updates this action’s npm dependency set (Actions toolkit + fast-xml-parser) and refreshes .licensed metadata to reflect the new transitive dependency tree.

Changes:

• Bump @actions/* packages and fast-xml-parser versions in package.json.
• Refresh package-lock.json with resolved dependency updates (including new transitive deps like fast-xml-builder, path-expression-matcher, and updated undici trees).
• Add/update .licenses/npm/*.dep.yml entries to match new resolved versions.

Reviewed changes

Copilot reviewed 18 out of 24 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
package.json	Updates declared dependency ranges for Actions toolkit packages and fast-xml-parser.
package-lock.json	Updates resolved package versions/metadata after install/audit fix.
.licenses/npm/undici-6.24.1.dep.yml	Adds license record for the newly resolved undici@6.24.1.
.licenses/npm/undici-5.29.0.dep.yml	Adds/refreshes license record for the resolved undici@5.29.0.
.licenses/npm/strnum.dep.yml	Updates recorded strnum version to match lockfile resolution.
.licenses/npm/path-expression-matcher.dep.yml	Adds license record for new path-expression-matcher transitive dependency.
.licenses/npm/fast-xml-parser.dep.yml	Updates recorded fast-xml-parser version to match the bump.
.licenses/npm/fast-xml-builder.dep.yml	Adds license record for new fast-xml-builder transitive dependency.
.licenses/npm/brace-expansion.dep.yml	Updates recorded brace-expansion version to match lockfile resolution.
.licenses/npm/@octokit/types-12.3.0.dep.yml	Removes outdated license record for superseded @octokit/types version.
.licenses/npm/@octokit/plugin-rest-endpoint-methods.dep.yml	Updates recorded plugin version to match lockfile resolution.
.licenses/npm/@octokit/openapi-types-19.0.2.dep.yml	Removes outdated license record for superseded @octokit/openapi-types version.
.licenses/npm/@actions/io.dep.yml	Adds/updates license record for @actions/io@2.0.0.
.licenses/npm/@actions/io-1.1.3.dep.yml	Removes outdated license record for @actions/io@1.1.3.
.licenses/npm/@actions/http-client-3.0.2.dep.yml	Updates recorded @actions/http-client version to match the bump.
.licenses/npm/@actions/glob.dep.yml	Updates recorded @actions/glob version to match the bump.
.licenses/npm/@actions/github.dep.yml	Updates recorded @actions/github version to match lockfile resolution.
.licenses/npm/@actions/exec.dep.yml	Adds/updates license record for @actions/exec@2.0.0.
.licenses/npm/@actions/exec-1.1.1.dep.yml	Removes outdated license record for @actions/exec@1.1.1.
.licenses/npm/@actions/core.dep.yml	Updates recorded @actions/core version to match the bump.
.licenses/npm/@actions/core-1.11.1.dep.yml	Removes outdated license record for @actions/core@1.11.1.
.licenses/npm/@actions/cache.dep.yml	Updates recorded @actions/cache version to match the bump.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.