chore(deps): bump cycjimmy/semantic-release-action from 3 to 6#371
chore(deps): bump cycjimmy/semantic-release-action from 3 to 6#371dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps [cycjimmy/semantic-release-action](https://github.com/cycjimmy/semantic-release-action) from 3 to 6. - [Release notes](https://github.com/cycjimmy/semantic-release-action/releases) - [Changelog](https://github.com/cycjimmy/semantic-release-action/blob/main/docs/CHANGELOG.md) - [Commits](cycjimmy/semantic-release-action@v3...v6) --- updated-dependencies: - dependency-name: cycjimmy/semantic-release-action dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
| - name: Semantic Release | ||
| id: semantic | ||
| uses: cycjimmy/semantic-release-action@v3 | ||
| uses: cycjimmy/semantic-release-action@v6 |
There was a problem hiding this comment.
Action v6 incompatible with pinned semantic-release v19
High Severity
The action was bumped from v3 to v6, but semantic_version: 19 and the old plugin versions (@semantic-release/changelog@6, @semantic-release/git@10, @semantic-release/github@8) were not updated. Action v6 is designed for semantic-release v25 and runs on Node 24 internally. Pinning semantic_version: 19 creates an incompatibility — the action's internal result-handling code (windUpJob.task.js) was rewritten for v25's API. The semantic_version and extra_plugins need to be updated to versions compatible with v6, or the action version needs to stay at v3.
|
@dependabot rebase |
|
Sorry, only users with push access can use that command. |
|
To keep it open, please leave a comment or push an update. You can also label it as 'pinned' to prevent auto-closure. |
|
This PR has been closed due to having the "30+ days open" label and no updates in the past 7 days. Please reopen if you would like to continue working on this. You can also add the "pinned" label to prevent this PR from being closed in the future. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
dependabot
bot
deleted the
dependabot/github_actions/cycjimmy/semantic-release-action-6
branch
1 participant
Bumps cycjimmy/semantic-release-action from 3 to 6.
Release notes
Sourced from cycjimmy/semantic-release-action's releases.
... (truncated)
Changelog
Sourced from cycjimmy/semantic-release-action's changelog.
... (truncated)
Commits
b12c8f6chore(release): 6.0.0 [skip ci]f80bc73Merge pull request #273 from cycjimmy/feat-update-semantic-release-to-version-250891297docs(readme): update semantic-release-action to v69246c0bfeat(deps): update semantic-release to version 25e878abfMerge pull request #272 from cycjimmy/dependabot/npm_and_yarn/js-yaml-4.1.1acd6d5dbuild(deps): bump js-yaml from 4.1.0 to 4.1.1100d1fbMerge pull request #270 from cycjimmy/dependabot/npm_and_yarn/actions/io-2.0.0ea00aeebuild(deps): bump@actions/iofrom 1.1.3 to 2.0.0e03fa18Merge pull request #266 from cycjimmy/dependabot/github_actions/actions/setup...36bdefbbuild(deps): bump actions/setup-node from 5 to 6You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Note
Medium Risk
CI-only change, but it upgrades the release automation action across major versions, which could affect publishing behavior and break the release pipeline if inputs/outputs differ.
Overview
Updates the
release-on-merge.ymlGitHub Actions workflow to usecycjimmy/semantic-release-action@v6instead of@v3for the Semantic Release step.Written by Cursor Bugbot for commit 25de02f. This will update automatically on new commits. Configure here.