chore(deps): bump stefanzweifel/git-auto-commit-action from 4.16.0 to 7.1.0#373
Conversation
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from 4.16.0 to 7.1.0. - [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases) - [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md) - [Commits](stefanzweifel/git-auto-commit-action@v4.16.0...v7.1.0) --- updated-dependencies: - dependency-name: stefanzweifel/git-auto-commit-action dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
| - run: pnpm lint | ||
| - name: commit linting changes | ||
| uses: stefanzweifel/git-auto-commit-action@v4.16.0 | ||
| uses: stefanzweifel/git-auto-commit-action@v7.1.0 |
There was a problem hiding this comment.
Major version bump breaks workflow on pull_request events
High Severity
Bumping git-auto-commit-action from v4 to v7 introduces a breaking change: v7.0.0 restored detached state detection that throws an error early when the repository is in a detached HEAD state. Since this workflow triggers on pull_request events, actions/checkout@v3 checks out the merge ref (refs/pull/X/merge) resulting in a detached HEAD. This will cause the action to fail immediately, breaking CI for all pull requests. The actions/checkout step likely needs ref: ${{ github.head_ref }} to check out the actual branch instead of the merge commit.
Additional Locations (1)
|
@dependabot rebase |
|
Sorry, only users with push access can use that command. |
|
To keep it open, please leave a comment or push an update. You can also label it as 'pinned' to prevent auto-closure. |
|
This PR has been closed due to having the "30+ days open" label and no updates in the past 7 days. Please reopen if you would like to continue working on this. You can also add the "pinned" label to prevent this PR from being closed in the future. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
dependabot
bot
deleted the
dependabot/github_actions/stefanzweifel/git-auto-commit-action-7.1.0
branch
1 participant
Bumps stefanzweifel/git-auto-commit-action from 4.16.0 to 7.1.0.
Release notes
Sourced from stefanzweifel/git-auto-commit-action's releases.
... (truncated)
Changelog
Sourced from stefanzweifel/git-auto-commit-action's changelog.
... (truncated)
Commits
04702edBump actions/checkout from 5 to 6 (#399)1e49d50Add skip_push input option (#401)65c5677docs: fix typo in README.md (#400)547c140Bump bats from 1.12.0 to 1.13.0 (#398)8fa7f5aUpdate CHANGELOG28e16e8Release preparations for v7 (#394)698fd76Merge pull request #391 from EliasBoulharts/custom-tag-messagec40819aUpdate READMEd7ee275Change internal variable namese8684ebFix TestsYou can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Note
Low Risk
CI-only dependency bump; main risk is workflow behavior differences in the newer action version affecting auto-commit behavior.
Overview
Updates the pull-request CI workflow (
.github/workflows/test-on-pull-request.yml) to usestefanzweifel/git-auto-commit-action@v7.1.0(fromv4.16.0) for the step that auto-commitspnpm lintchanges.Written by Cursor Bugbot for commit a7e8fec. This will update automatically on new commits. Configure here.