chore(deps): bump cycjimmy/semantic-release-action from 4 to 6#170
chore(deps): bump cycjimmy/semantic-release-action from 4 to 6#170dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps [cycjimmy/semantic-release-action](https://github.com/cycjimmy/semantic-release-action) from 4 to 6. - [Release notes](https://github.com/cycjimmy/semantic-release-action/releases) - [Changelog](https://github.com/cycjimmy/semantic-release-action/blob/main/docs/CHANGELOG.md) - [Commits](cycjimmy/semantic-release-action@v4...v6) --- updated-dependencies: - dependency-name: cycjimmy/semantic-release-action dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
| - name: Semantic Release | ||
| id: semantic | ||
| uses: cycjimmy/semantic-release-action@v4 | ||
| uses: cycjimmy/semantic-release-action@v6 |
There was a problem hiding this comment.
Pinned semantic_version: 17 incompatible with action v6
High Severity
The action is bumped to v6, which internally expects semantic-release v25 and runs on Node 24, but semantic_version: 17 still pins a very old semantic-release version. Action v6's result-handling code (windUpJob.task.js, updated in v5.0.1/v5.0.2 and again in v6) likely expects v25's output structure. Running semantic-release v17 (CommonJS-based, different result format) under action v6 could cause the release step to fail or produce incorrect outputs. The extra_plugins (@semantic-release/changelog@5, @semantic-release/git@9, semantic-release-rubygem@1) are also pinned to versions designed for v17 and may not be compatible with v25 if the pin is simply removed.
Additional Locations (1)
|
To keep it open, please leave a comment or push an update. You can also label it as 'pinned' to prevent auto-closure. |
1 participant
Bumps cycjimmy/semantic-release-action from 4 to 6.
Release notes
Sourced from cycjimmy/semantic-release-action's releases.
... (truncated)
Changelog
Sourced from cycjimmy/semantic-release-action's changelog.
... (truncated)
Commits
b12c8f6chore(release): 6.0.0 [skip ci]f80bc73Merge pull request #273 from cycjimmy/feat-update-semantic-release-to-version-250891297docs(readme): update semantic-release-action to v69246c0bfeat(deps): update semantic-release to version 25e878abfMerge pull request #272 from cycjimmy/dependabot/npm_and_yarn/js-yaml-4.1.1acd6d5dbuild(deps): bump js-yaml from 4.1.0 to 4.1.1100d1fbMerge pull request #270 from cycjimmy/dependabot/npm_and_yarn/actions/io-2.0.0ea00aeebuild(deps): bump@actions/iofrom 1.1.3 to 2.0.0e03fa18Merge pull request #266 from cycjimmy/dependabot/github_actions/actions/setup...36bdefbbuild(deps): bump actions/setup-node from 5 to 6Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Note
Medium Risk
CI-only change, but it upgrades a release/publishing action across major versions (and underlying semantic-release), which could affect tagging/changelog/publish behavior.
Overview
Updates the GitHub Actions release workflow to use
cycjimmy/semantic-release-action@v6instead of@v4for theSemantic Releasestep.Written by Cursor Bugbot for commit c0606c3. This will update automatically on new commits. Configure here.