Repository navigation
Bump the actions group across 2 directories with 10 updates - #1063
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the actions group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [0xPolygon/pipelines/.github/workflows/apps-changeset-check.yml](https://github.com/0xpolygon/pipelines) | `3c69da7f7438cb371c56851dab2cf00c5d7dbce6` | `dc98553bdb87db5a712980a279dadc389b2213b5` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.237` | `1.0.266` | | [pnpm/action-setup](https://github.com/pnpm/action-setup) | `6.0.9` | `6.1.0` | | [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` | | [foundry-rs/foundry-toolchain](https://github.com/foundry-rs/foundry-toolchain) | `1.9.1` | `1.9.2` | | [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `3.2.0` | `3.3.0` | | [changesets/action](https://github.com/changesets/action) | `1.9.0` | `2.1.2` | | [0xsequence/actions/git-commit](https://github.com/0xsequence/actions) | `0.0.4` | `0.10.0` | | [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.7.1` | `0.8.1` | | [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` | | [pnpm/action-setup](https://github.com/pnpm/action-setup) | `6.0.9` | `6.1.0` | Bumps the actions group with 3 updates in the /.github/actions/install-dependencies directory: [pnpm/action-setup](https://github.com/pnpm/action-setup), [actions/setup-node](https://github.com/actions/setup-node) and [actions/cache](https://github.com/actions/cache). Updates `0xPolygon/pipelines/.github/workflows/apps-changeset-check.yml` from 3c69da7f7438cb371c56851dab2cf00c5d7dbce6 to dc98553bdb87db5a712980a279dadc389b2213b5 - [Release notes](https://github.com/0xpolygon/pipelines/releases) - [Commits](0xPolygon/pipelines@3c69da7...dc98553) Updates `anthropics/claude-code-action` from 1.0.237 to 1.0.266 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](anthropics/claude-code-action@fd1c128...d535f51) Updates `pnpm/action-setup` from 6.0.9 to 6.1.0 - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](pnpm/action-setup@0ebf471...ea17c68) Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) Updates `foundry-rs/foundry-toolchain` from 1.9.1 to 1.9.2 - [Release notes](https://github.com/foundry-rs/foundry-toolchain/releases) - [Changelog](https://github.com/foundry-rs/foundry-toolchain/blob/master/RELEASE.md) - [Commits](foundry-rs/foundry-toolchain@v1.9.1...dba66c2) Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md) - [Commits](actions/create-github-app-token@bcd2ba4...64ab729) Updates `changesets/action` from 1.9.0 to 2.1.2 - [Release notes](https://github.com/changesets/action/releases) - [Changelog](https://github.com/changesets/action/blob/main/CHANGELOG.md) - [Commits](changesets/action@a45c4d5...ae32849) Updates `0xsequence/actions/git-commit` from 0.0.4 to 0.10.0 - [Release notes](https://github.com/0xsequence/actions/releases) - [Commits](0xsequence/actions@d6560e8...930ae70) Updates `zizmorcore/zizmor-action` from 0.7.1 to 0.8.1 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](zizmorcore/zizmor-action@85b2b9f...45d7276) Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) Updates `pnpm/action-setup` from 6.0.9 to 6.1.0 - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](pnpm/action-setup@0ebf471...ea17c68) Updates `pnpm/action-setup` from 6.0.9 to 6.1.0 - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](pnpm/action-setup@0ebf471...ea17c68) Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) Updates `pnpm/action-setup` from 6.0.9 to 6.1.0 - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](pnpm/action-setup@0ebf471...ea17c68) Updates `actions/cache` from 5.1.0 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@caa2961...55cc834) --- updated-dependencies: - dependency-name: 0xPolygon/pipelines/.github/workflows/apps-changeset-check.yml dependency-version: dc98553bdb87db5a712980a279dadc389b2213b5 dependency-type: direct:production dependency-group: actions - dependency-name: anthropics/claude-code-action dependency-version: 1.0.266 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: pnpm/action-setup dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: foundry-rs/foundry-toolchain dependency-version: 1.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/create-github-app-token dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: changesets/action dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: 0xsequence/actions/git-commit dependency-version: 0.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: zizmorcore/zizmor-action dependency-version: 0.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: pnpm/action-setup dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: pnpm/action-setup dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: pnpm/action-setup dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/cache dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
the
github_actions
Codex Review Summary: ✅ CompletedThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 82a6bcd46a
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| permission-pull-requests: write | ||
| - name: Create release PR or stage versioned packages | ||
| uses: changesets/action@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d # v1.9.0 | ||
| uses: changesets/action@ae32849d5ba541f9ae29e40e22a623bc13562f51 # v2.1.2 |
There was a problem hiding this comment.
In the inspected release workflow, this v2.1.2 pin cannot run because package.json still declares @changesets/cli as ^2.29.8; the pinned action validates the CLI before any release logic and explicitly rejects v2. Consequently every master-push release job fails at this step, so either retain changesets/action v1 or migrate the repository to Changesets CLI v3 as part of this bump.
Useful? React with 👍 / 👎.
| permission-pull-requests: write | ||
| - name: Create release PR or stage versioned packages | ||
| uses: changesets/action@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d # v1.9.0 | ||
| uses: changesets/action@ae32849d5ba541f9ae29e40e22a623bc13562f51 # v2.1.2 |
There was a problem hiding this comment.
After the CLI incompatibility is resolved, the same release step still fails because it retains v1 inputs (title, commit, publish, createGithubReleases, and commitMode); v2.1.2 throws when it sees these renamed or removed inputs. Migrate them to the v2 names (pr-title, commit-message, publish-script, and create-github-releases), remove the now-default github-api commit mode, and pass the app token through github-token rather than GITHUB_TOKEN so this workflow can create release PRs and stage packages.
Useful? React with 👍 / 👎.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the actions group with 9 updates in the / directory:
3c69da7f7438cb371c56851dab2cf00c5d7dbce6dc98553bdb87db5a712980a279dadc389b2213b51.0.2371.0.2666.0.96.1.07.0.07.1.01.9.11.9.23.2.03.3.01.9.02.1.20.0.40.10.00.7.10.8.17.0.07.1.06.0.96.1.0Bumps the actions group with 3 updates in the /.github/actions/install-dependencies directory: pnpm/action-setup, actions/setup-node and actions/cache.
Updates
0xPolygon/pipelines/.github/workflows/apps-changeset-check.ymlfrom 3c69da7f7438cb371c56851dab2cf00c5d7dbce6 to dc98553bdb87db5a712980a279dadc389b2213b5Commits
dc98553Merge pull request #90 from 0xPolygon/feat/PT-674-review-allowed-bots43f66b0feat(ci): let callers add bots to the claude review allowed_bots38122dachore(ci): upgrade to claude-code-action@v1.0.267 (#88)Updates
anthropics/claude-code-actionfrom 1.0.237 to 1.0.266Release notes
Sourced from anthropics/claude-code-action's releases.
... (truncated)
Commits
d535f51chore: bump Claude Code to 2.1.316 and Agent SDK to 0.3.3166d5ae52chore: bump Claude Code to 2.1.314 and Agent SDK to 0.3.314d70510bchore: bump Claude Code to 2.1.312 and Agent SDK to 0.3.31298a9e39docs: use claude-plugins-official in plugin examples (#1932)8041f1dchore: bump Claude Code to 2.1.311 and Agent SDK to 0.3.311925afb5chore: bump Bun to 1.4.4 (#1916)16f9f71chore: bump Claude Code to 2.1.310 and Agent SDK to 0.3.3108d70a0dPin the PR version a run checks out (#1915)ae68417chore: bump Claude Code to 2.1.309 and Agent SDK to 0.3.3096b6870echore: bump Claude Code to 2.1.308 and Agent SDK to 0.3.308Updates
pnpm/action-setupfrom 6.0.9 to 6.1.0Release notes
Sourced from pnpm/action-setup's releases.
Commits
ea17c68feat: support pnpm v12 (#288)0977fd9docs: Update README to include devEngines.packageManager (#273)48261acfix: update pnpm to v11.19.0 (#283)75677f7ci: use pnpm 11 forpr-check(#284)769ae71refactor: introduce restore keys for cache (#280)6fed91fdocs(README): point users to the successor pnpm/setup action (#282)Updates
actions/setup-nodefrom 7.0.0 to 7.1.0Release notes
Sourced from actions/setup-node's releases.
Commits
949feb2Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)7207c4fchore: update dependencies and add license files (#1642)54337e0Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)fb54fa8Bump jest-each from 30.4.1 to 30.5.2 (#1636)7f84f1dBump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)0c54c7bBump@typescript-eslint/parserfrom 8.62.0 to 8.70.0 (#1615)a829419Bump@types/semverfrom 7.7.1 to 7.8.0 (#1616)680d1e4Support absolute paths in node-version-file (#1633)db0fb3aBump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)94196eeBump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)Updates
foundry-rs/foundry-toolchainfrom 1.9.1 to 1.9.2Release notes
Sourced from foundry-rs/foundry-toolchain's releases.
Commits
dba66c2fix: upgrade Node.js to patch CVE-2026-111497 (#193)2226fa3chore(deps): bump prettier from 3.9.9 to 3.9.10 in the npm-weekly group (#192)be69c4dchore(deps): bump the ci-weekly group with 4 updates (#191)3545907chore(deps): bump@types/nodefrom 26.6.4 to 26.6.5 in the npm-weekly group (...2e54994fix(ci): buffer the action update cooldown (#189)9100cd3chore(deps): bump@types/nodefrom 26.6.3 to 26.6.4 in the npm-weekly group (...25c634dchore(deps): bump the ci-weekly group with 2 updates (#186)7840435chore(deps): bump the npm-weekly group with 2 updates (#187)efe890fchore: bump gh-actions to d5402286 (#185)e8d3bebchore(deps): bump the npm-weekly group with 2 updates (#184)Updates
actions/create-github-app-tokenfrom 3.2.0 to 3.3.0Release notes
Sourced from actions/create-github-app-token's releases.
Changelog
Sourced from actions/create-github-app-token's changelog.
Commits
64ab729chore(main): release 3.3.0 (#402)f3a828eci: create signed dist commits in release workflow (#404)655017fdocs: clarify when owner grants access to all repositories (#378)12461a3fix(deps): bump nested undici from 6.24.0 to 6.29.0 (#403)a47236ffeat: update permission inputs (#399)a69c19dfix(deps): bump the production-dependencies group across 1 directory with 3 u...d5cb7aebuild(deps): bump actions/checkout from 6 to 7 (#384)575da86build(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in...e85f677test: omit stack traces from snapshots (#401)9419396build(deps-dev): bump c8 from 11.0.0 to 12.0.0 (#400)Updates
changesets/actionfrom 1.9.0 to 2.1.2Release notes
Sourced from changesets/action's releases.
... (truncated)
Changelog
Sourced from changesets/action's changelog.
... (truncated)
Commits
ae32849v2.1.20138f45Version Packages (#726)8833883Handle error when pushing git tags with the git CLI (#735)e08fde7Improve log messages (#730)371fd77Bump human-id in the production-dependencies group across 1 directory (#732)85efcafBump actions/checkout in the github-actions group across 1 directory (#734)5bb9d5cBump the development-dependencies group across 1 directory with 7 updates (#733)ca85897Always prepare branch for version (#729)36f529fFix root action double error logs (#724)d7669c8Version Packages (#722)Updates
0xsequence/actions/git-commitfrom 0.0.4 to 0.10.0Release notes
Sourced from 0xsequence/actions/git-commit's releases.
Commits
930ae70fix(git-commit, git-copy): build API payloads with jq to escape JSON properly...daee7a0fix: correct variable interpolation in GitHub API URLs (#198)1e65d59feat: Allow signing git commits; fix: Delete exact path instead of parent whe...4c2e8b0chore: update company name references (#195)7f34a29feat: gpg signature (#196)1b7fe10Add safe.directory configuration for cloned repositoryeccda6egit-copy: Print the destination git repository URL786807eUpdate README, add examples (#194)36abc59Fix git clone when pr_base is provided (#193)5b4e0daRevert #187 in git-copyUpdates
zizmorcore/zizmor-actionfrom 0.7.1 to 0.8.1Release notes
Sourced from zizmorcore/zizmor-action's releases.
Commits
45d7276Sync zizmor versions (#191)ff38741chore(deps): bump the github-actions group across 1 directory with 2 updates ...4a9eca4README: another troubleshooting section (#186)83a0416Bump pins (#185)53290baSync zizmor versions (#184)76da2eeSupport prereleases (<...Description has been truncated