Skip to content

chore(deps): bump the github-actions-major group with 2 updates - #35

Merged
dnlopes merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-major-2c97377633
Oct 24, 2026
Merged

dnlopes merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-major-2c97377633

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions-major group with 2 updates: actions/checkout and cycjimmy/semantic-release-action.

Updates actions/checkout from 4.4.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates cycjimmy/semantic-release-action from 6 to 8

Release notes

Sourced from cycjimmy/semantic-release-action's releases.

v8.0.0

8.0.0 (2026-10-12)

Features

  • require semantic-release v20 or above (1d650fa)

BREAKING CHANGES

  • semantic-release v16~v19 are no longer supported. The minimum supported version is now v20. If semantic_version is pinned below 20, the action fails with an error; update it to v20 or above, or remove it to use the latest version.

v7.1.2

7.1.2 (2026-10-10)

Bug Fixes

  • install: improve npm install logging for error visibility (3f9efbb)

v7.1.1

7.1.1 (2026-10-10)

Bug Fixes

  • ci: improve error handling for push permission failures (895d556), closes #312

v7.1.0

7.1.0 (2026-10-09)

Features

  • core: add option to skip npm plugin for non-Node.js projects (d1038bc), closes #313
Changelog

Sourced from cycjimmy/semantic-release-action's changelog.

8.1.2 (2026-10-16)

Bug Fixes

8.1.1 (2026-10-16)

Bug Fixes

  • split extends configurations on whitespace (6938171)

8.1.0 (2026-10-14)

Features

  • output last_release_* from Git tags when no release is published (ef475bf)

8.0.2 (2026-10-14)

Bug Fixes

  • resolve extra plugins with working_directory and relative extends (340bd34), closes #254

8.0.1 (2026-10-13)

Bug Fixes

  • bypass package manager shims for internal npm calls (45d3d9c), closes #258

8.0.0 (2026-10-12)

Features

  • require semantic-release v20 or above (1d650fa)

BREAKING CHANGES

  • semantic-release v16~v19 are no longer supported. The minimum supported version is now v20. If semantic_version is pinned below 20, the action fails with an error; update it to v20 or above, or remove it to use the latest version.

... (truncated)

Commits
  • d9bf53a chore(release): 8.1.3 [skip ci]
  • b810ddb fix: locate npm-cli.js from PATH on Windows runners
  • 9e4326c chore(ci): drop stale 'master' branch to restore latest npm dist-tag
  • 03595b5 chore(release): 8.1.2 [skip ci]
  • 2479d22 fix(deps): update @​semantic-release/github to 12.0.10
  • f4e0ba2 Merge pull request #331 from dajiaohuang/docs/config-defaults-20261015
  • 010067f chore(ci): add unit test workflow running node --test
  • 163a6cb chore(release): 8.1.1 [skip ci]
  • 8ee3045 Merge pull request #330 from dajiaohuang/fix/extends-whitespace-20261015
  • 079af5e docs: correct semantic-release configuration defaults
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions-major group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [cycjimmy/semantic-release-action](https://github.com/cycjimmy/semantic-release-action).


Updates `actions/checkout` from 4.4.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4.4.0...3d3c42e)

Updates `cycjimmy/semantic-release-action` from 6 to 8
- [Release notes](https://github.com/cycjimmy/semantic-release-action/releases)
- [Changelog](https://github.com/cycjimmy/semantic-release-action/blob/main/docs/CHANGELOG.md)
- [Commits](cycjimmy/semantic-release-action@v6...v8)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-major
- dependency-name: cycjimmy/semantic-release-action
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from dnlopes as a code owner October 24, 2026 15:30
@dependabot dependabot Bot added dependencies Updates dependencies major Introduces breaking changes labels Oct 24, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Trivy Security Scan Results

Note

No vulnerabilities found


Scan performed by Trivy v0.69.3

@github-actions github-actions Bot added patch Backwards-compatible bug fixes size-S Small size changes chore Changes that do not modify src or test files and removed major Introduces breaking changes labels Oct 24, 2026
@dnlopes

dnlopes commented Oct 24, 2026

Copy link
Copy Markdown
Contributor

LGTM

@dnlopes dnlopes left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved by @dnlopes with an LGTM comment.

@dnlopes
dnlopes merged commit 753cb24 into main Oct 24, 2026
8 checks passed
@dnlopes
dnlopes deleted the dependabot/github_actions/github-actions-major-2c97377633 branch October 24, 2026 16:01
@github-actions

Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 5.5.7 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

@github-actions github-actions Bot added the released Issue already released label Oct 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

chore Changes that do not modify src or test files dependencies Updates dependencies patch Backwards-compatible bug fixes released Issue already released size-S Small size changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant