Skip to content

build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1#1353

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/softprops/action-gh-release-3.0.1
Open

build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1#1353
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/softprops/action-gh-release-3.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 6, 2026

Copy link
Copy Markdown
Contributor

Bumps softprops/action-gh-release from 3.0.0 to 3.0.1.

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.1

3.0.1

  • maintenance release with updated dependencies
Changelog

Sourced from softprops/action-gh-release's changelog.

3.0.1

  • maintenance release with updated dependencies

3.0.0

3.0.0 is a major release that moves the action runtime from Node 20 to Node 24. Use v3 on GitHub-hosted runners and self-hosted fleets that already support the Node 24 Actions runtime. If you still need the last Node 20-compatible line, stay on v2.6.2.

What's Changed

Other Changes 🔄

  • Move the action runtime and bundle target to Node 24
  • Update @types/node to the Node 24 line and allow future Dependabot updates
  • Keep the floating major tag on v3; v2 remains pinned to the latest 2.x release

2.6.2

What's Changed

Other Changes 🔄

2.6.1

2.6.1 is a patch release focused on restoring linked discussion thread creation when discussion_category_name is set. It fixes [#764](https://github.com/softprops/action-gh-release/issues/764), where the draft-first publish flow stopped carrying the discussion category through the final publish step.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

2.6.0

2.6.0 is a minor release centered on previous_tag support for generate_release_notes, which lets workflows pin GitHub's comparison base explicitly instead of relying on the default range. It also includes the recent concurrent asset upload recovery fix, a working_directory docs sync, a checked-bundle freshness guard for maintainers, and clearer immutable-prerelease guidance where GitHub platform behavior imposes constraints on how prerelease asset uploads can be published.

... (truncated)

Commits
  • 718ea10 release 3.0.1
  • f1a938b chore(deps): bump esbuild from 0.28.0 to 0.28.1 (#802)
  • 0066ead chore(deps): bump vite from 8.0.14 to 8.0.16 (#806)
  • dc643ca chore(deps): bump the npm group with 3 updates (#805)
  • 85ee99b chore(deps): bump actions/checkout in the github-actions group (#804)
  • 9ed3cf9 chore(deps): bump the npm group with 2 updates (#800)
  • 3efcac8 chore(deps): bump the npm group with 3 updates (#798)
  • 05d6b91 chore(deps): bump brace-expansion from 5.0.5 to 5.0.6 (#797)
  • 403a524 chore(deps): bump @​types/node from 24.12.2 to 24.12.3 in the npm group (#796)
  • 437e073 chore(deps): bump the npm group with 4 updates (#792)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@b430933...718ea10)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 6, 2026
@greptile-apps

greptile-apps Bot commented Jul 6, 2026

Copy link
Copy Markdown
Contributor

Greptile Summary

This PR bumps the pinned commit SHA for softprops/action-gh-release from b4309332 (v3.0.0) to 718ea10b (v3.0.1) in the release workflow. The upstream release is a maintenance update with refreshed transitive dependencies and no API or behavioral changes.

  • Updates .github/workflows/release.yml: the SHA pin for softprops/action-gh-release is moved to the v3.0.1 release commit while the # v3 comment tag is preserved, keeping auditing straightforward.

Confidence Score: 5/5

Safe to merge — the change is a single SHA bump to a maintenance patch release of a GitHub Actions action with no behavioral changes.

Only one line changes: the pinned commit SHA for softprops/action-gh-release advances to v3.0.1, which the upstream project describes as a maintenance release with updated transitive dependencies. The # v3 comment is preserved for auditing. No workflow logic, inputs, or outputs are modified.

No files require special attention.

Important Files Changed

Filename Overview
.github/workflows/release.yml Single-line update pinning softprops/action-gh-release to the v3.0.1 commit SHA — a maintenance dependency bump with no behavioral changes.

Sequence Diagram

%%{init: {'theme': 'neutral'}}%%
sequenceDiagram
    participant GH as GitHub Actions Runner
    participant RW as release.yml Workflow
    participant AR as softprops/action-gh-release@718ea10b (v3.0.1)
    participant GHAPI as GitHub Releases API

    GH->>RW: Trigger on tag push
    RW->>RW: "Build & assemble dist artifacts"
    RW->>AR: "Call Release step (draft=true, files=dist/*)"
    AR->>GHAPI: Create/update draft GitHub Release
    GHAPI-->>AR: Release URL
    AR-->>RW: Step output
Loading
%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
sequenceDiagram
    participant GH as GitHub Actions Runner
    participant RW as release.yml Workflow
    participant AR as softprops/action-gh-release@718ea10b (v3.0.1)
    participant GHAPI as GitHub Releases API

    GH->>RW: Trigger on tag push
    RW->>RW: "Build & assemble dist artifacts"
    RW->>AR: "Call Release step (draft=true, files=dist/*)"
    AR->>GHAPI: Create/update draft GitHub Release
    GHAPI-->>AR: Release URL
    AR-->>RW: Step output
Loading

Reviews (1): Last reviewed commit: "build(deps): bump softprops/action-gh-re..." | Re-trigger Greptile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants