Repository navigation
ci: bump the github-actions group across 1 directory with 5 updates - #1110
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Not approved. These are major GitHub Action upgrades, and changesets/action v2 is incompatible with this repo’s current release-workflow inputs and @changesets/cli v2, so it is not an automatic dependency approval. Human review is needed and no reviewers were assigned.
Sent by Cursor Approval Agent: Depdency updates (control, switchboard, CLI, javascript, telegraph)
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 019fe2f. Configure here.
| # to npm if version bump commits have already been merged into the branch. | ||
| - name: Create release PR or publish | ||
| uses: changesets/action@63a615b9cd06ba9a3e6d13796c7fbcb080a60a0b # v1.8.0 | ||
| uses: changesets/action@ae32849d5ba541f9ae29e40e22a623bc13562f51 # v2.1.2 |
There was a problem hiding this comment.
Incomplete changesets action v2 migration
High Severity
Bumping changesets/action to v2 without a migration breaks the release job. v2 ignores the old version, publish, commit, and title inputs, errors when GITHUB_TOKEN is set as an env var instead of the github-token input, and requires Changesets CLI v3 while this repo still depends on CLI v2.
Reviewed by Cursor Bugbot for commit 019fe2f. Configure here.
Bumps the github-actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.3.1` | `7.0.1` | | [actions/setup-node](https://github.com/actions/setup-node) | `4.4.0` | `7.1.0` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5.5.4` | `7.1.1` | | [expo/expo-github-action](https://github.com/expo/expo-github-action) | `8.2.1` | `9.0.1` | | [changesets/action](https://github.com/changesets/action) | `1.8.0` | `2.1.2` | Updates `actions/checkout` from 4.3.1 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@34e1148...3d3c42e) Updates `actions/setup-node` from 4.4.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@49933ea...949feb2) Updates `codecov/codecov-action` from 5.5.4 to 7.1.1 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@75cd116...303a32d) Updates `expo/expo-github-action` from 8.2.1 to 9.0.1 - [Release notes](https://github.com/expo/expo-github-action/releases) - [Changelog](https://github.com/expo/expo-github-action/blob/main/CHANGELOG.md) - [Commits](expo/expo-github-action@c7b66a9...9da89d3) Updates `changesets/action` from 1.8.0 to 2.1.2 - [Release notes](https://github.com/changesets/action/releases) - [Changelog](https://github.com/changesets/action/blob/main/CHANGELOG.md) - [Commits](changesets/action@63a615b...ae32849) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: changesets/action dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: codecov/codecov-action dependency-version: 7.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: expo/expo-github-action dependency-version: 9.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
019fe2f to
300c9e4
Compare
Bumps the github-actions group with 5 updates in the / directory:
4.3.17.0.14.4.07.1.05.5.47.1.18.2.19.0.11.8.02.1.2Updates
actions/checkoutfrom 4.3.1 to 7.0.1Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
3d3c42eprep v7.0.1 release (#2531)2880268escape values passed to --unset (#2530)12cd223trim only ascii whitespace for branch (#2521)62661c4skip running unsafe pr check if input is default (#2518)e8d4307Bump the minor-actions-dependencies group with 2 updates (#2499)631c942eslint 9 (#2474)4f1f4aeBump actions/upload-artifact from 4 to 7 (#2476)ba09753Bump actions/checkout from 6 to 7 (#2488)b9e0990Bump docker/login-action from 3.3.0 to 4.2.0 (#2479)e8cb398Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478)Updates
actions/setup-nodefrom 4.4.0 to 7.1.0Release notes
Sourced from actions/setup-node's releases.
... (truncated)
Commits
949feb2Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)7207c4fchore: update dependencies and add license files (#1642)54337e0Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)fb54fa8Bump jest-each from 30.4.1 to 30.5.2 (#1636)7f84f1dBump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)0c54c7bBump@typescript-eslint/parserfrom 8.62.0 to 8.70.0 (#1615)a829419Bump@types/semverfrom 7.7.1 to 7.8.0 (#1616)680d1e4Support absolute paths in node-version-file (#1633)db0fb3aBump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)94196eeBump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)Updates
codecov/codecov-actionfrom 5.5.4 to 7.1.1Release notes
Sourced from codecov/codecov-action's releases.
... (truncated)
Commits
303a32dchore(release): 7.1.1 (#1973)0b35c9echore(release): 7.1.0 (#1971)fb8b358chore(release): 7.0.0 (#1957)ca0a928ci: remove Enforce License Compliance workflow (#1950)e79a696chore(release): 6.0.1 (#1949)51e6422fix: prevent template injection in run: steps (VULN-1652) (#1947)57e3a13Th/6.0.0 (#1928)f67d33dRevert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0""...Updates
expo/expo-github-actionfrom 8.2.1 to 9.0.1Release notes
Sourced from expo/expo-github-action's releases.
Changelog
Sourced from expo/expo-github-action's changelog.
... (truncated)
Commits
9da89d3chore: create new release 9.0.1 (#364)a018023chore: release through a PR because main is protected (#363)c33d336chore: release with the built-in GitHub token (#362)6cb8005fix: support eas-cli 22 build json fields (#360)eab7a23chore: create new release 9.0.094ad6f3chore!: update tooling and actions to Node 24 (#354)b184ff8[fingerprint] fix db saving (#337)980b700update packages (#334)d933805chore: update readme to better clarify production continuous deployment cavea...24136f8fix: one more merge confict fix (#327)Updates
changesets/actionfrom 1.8.0 to 2.1.2Release notes
Sourced from changesets/action's releases.
... (truncated)
Changelog
Sourced from changesets/action's changelog.
... (truncated)
Commits
ae32849v2.1.20138f45Version Packages (#726)8833883Handle error when pushing git tags with the git CLI (#735)e08fde7Improve log messages (#730)371fd77Bump human-id in the production-dependencies group across 1 directory (#732)85efcafBump actions/checkout in the github-actions group across 1 directory (#734)5bb9d5cBump the development-dependencies group across 1 directory with 7 updates (#733)ca85897Always prepare branch for version (#729)36f529fFix root action double error logs (#724)d7669c8Version Packages (#722)