Skip to content

build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.2 - #1353

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/softprops/action-gh-release-3.0.1
Closed

build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.2#1353
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/softprops/action-gh-release-3.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 6, 2026

Copy link
Copy Markdown
Contributor

Bumps softprops/action-gh-release from 3.0.0 to 3.0.2.

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.2

3.0.2 is a patch release focused on release reliability and compatibility. It reuses existing draft releases when publishing prereleases, supports replacing release assets on Gitea, hardens streamed asset uploads, and provides clearer release-creation diagnostics. It also includes TypeScript, coverage, and tooling maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the historical failure reported in #790, although current hosted Node 24 runners did not reproduce it naturally. The diagnostics work is related to #786 and does not claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

v3.0.1

3.0.1

  • maintenance release with updated dependencies
Changelog

Sourced from softprops/action-gh-release's changelog.

3.0.2

3.0.2 is a patch release focused on release reliability and compatibility. It reuses existing draft releases when publishing prereleases, supports replacing release assets on Gitea, hardens streamed asset uploads, and provides clearer release-creation diagnostics. It also includes TypeScript, coverage, and tooling maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the historical failure reported in #790, although current hosted Node 24 runners did not reproduce it naturally. The diagnostics work is related to #786 and does not claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

3.0.1

  • maintenance release with updated dependencies

3.0.0

3.0.0 is a major release that moves the action runtime from Node 20 to Node 24. Use v3 on GitHub-hosted runners and self-hosted fleets that already support the Node 24 Actions runtime. v2.6.2 was the final Node 20-compatible release and is no longer maintained or supported.

What's Changed

Other Changes 🔄

  • Move the action runtime and bundle target to Node 24
  • Update @types/node to the Node 24 line and allow future Dependabot updates
  • Keep the floating major tag on v3; freeze v2 at the final v2.6.2 release

... (truncated)

Commits
  • 3d0d988 release 3.0.2 (#818)
  • 7e13ed4 fix: clarify release creation 404 errors (#817)
  • e6c70a5 fix: replace existing release assets on Gitea (#816)
  • f345337 fix: publish existing draft releases as prereleases (#801)
  • d8a89a2 fix: upload small checksum assets reliably (#815)
  • 45ece40 chore(deps): remove unused TypeScript tooling (#814)
  • f6b913c feat: improve release error reporting and test coverage (#813)
  • 15f193d chore(deps): upgrade TypeScript to 7 (#812)
  • cc8268d chore(deps): bump actions/checkout in the github-actions group (#810)
  • fd0ed1e chore(deps): bump the npm group with 3 updates (#811)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 6, 2026
@greptile-apps

greptile-apps Bot commented Jul 6, 2026

Copy link
Copy Markdown
Contributor

Greptile Summary

This PR bumps the pinned commit SHA for softprops/action-gh-release from b4309332 (v3.0.0) to 718ea10b (v3.0.1) in the release workflow. The upstream release is a maintenance update with refreshed transitive dependencies and no API or behavioral changes.

  • Updates .github/workflows/release.yml: the SHA pin for softprops/action-gh-release is moved to the v3.0.1 release commit while the # v3 comment tag is preserved, keeping auditing straightforward.

Confidence Score: 5/5

Safe to merge — the change is a single SHA bump to a maintenance patch release of a GitHub Actions action with no behavioral changes.

Only one line changes: the pinned commit SHA for softprops/action-gh-release advances to v3.0.1, which the upstream project describes as a maintenance release with updated transitive dependencies. The # v3 comment is preserved for auditing. No workflow logic, inputs, or outputs are modified.

No files require special attention.

Important Files Changed

Filename Overview
.github/workflows/release.yml Single-line update pinning softprops/action-gh-release to the v3.0.1 commit SHA — a maintenance dependency bump with no behavioral changes.

Sequence Diagram

%%{init: {'theme': 'neutral'}}%%
sequenceDiagram
    participant GH as GitHub Actions Runner
    participant RW as release.yml Workflow
    participant AR as softprops/action-gh-release@718ea10b (v3.0.1)
    participant GHAPI as GitHub Releases API

    GH->>RW: Trigger on tag push
    RW->>RW: "Build & assemble dist artifacts"
    RW->>AR: "Call Release step (draft=true, files=dist/*)"
    AR->>GHAPI: Create/update draft GitHub Release
    GHAPI-->>AR: Release URL
    AR-->>RW: Step output
Loading
%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
sequenceDiagram
    participant GH as GitHub Actions Runner
    participant RW as release.yml Workflow
    participant AR as softprops/action-gh-release@718ea10b (v3.0.1)
    participant GHAPI as GitHub Releases API

    GH->>RW: Trigger on tag push
    RW->>RW: "Build & assemble dist artifacts"
    RW->>AR: "Call Release step (draft=true, files=dist/*)"
    AR->>GHAPI: Create/update draft GitHub Release
    GHAPI-->>AR: Release URL
    AR-->>RW: Step output
Loading

Reviews (1): Last reviewed commit: "build(deps): bump softprops/action-gh-re..." | Re-trigger Greptile

Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 3.0.0 to 3.0.2.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@b430933...3d0d988)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1 build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.2 Jul 31, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/softprops/action-gh-release-3.0.1 branch from eb959f8 to 9b31a0e Compare July 31, 2026 17:29
@dependabot @github

dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #1387.

@dependabot dependabot Bot closed this Aug 1, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/softprops/action-gh-release-3.0.1 branch August 1, 2026 13:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants