Skip to content

chore(deps): bump cycjimmy/semantic-release-action from 3 to 6#370

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/cycjimmy/semantic-release-action-6
Open

chore(deps): bump cycjimmy/semantic-release-action from 3 to 6#370
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/cycjimmy/semantic-release-action-6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Feb 18, 2026

Bumps cycjimmy/semantic-release-action from 3 to 6.

Release notes

Sourced from cycjimmy/semantic-release-action's releases.

v6.0.0

6.0.0 (2025-11-17)

Features

  • deps: update semantic-release to version 25 (9246c0b)

BREAKING CHANGES

  • deps: Update semantic-release to version 25

v5.0.2

5.0.2 (2025-10-10)

Bug Fixes

  • further fix of result handling in windUpJob.task.js (451bf1f), closes #264

v5.0.1

5.0.1 (2025-10-09)

Bug Fixes

  • improves result handling in windUpJob.task.js (4267eee)

v5.0.0

5.0.0 (2025-08-30)

Features

  • update node version on runner to 24 (7869323)

BREAKING CHANGES

  • this action now runs using node 24

... (truncated)

Changelog

Sourced from cycjimmy/semantic-release-action's changelog.

5.0.0 (2025-08-30)

Features

  • update node version on runner to 24 (7869323)

BREAKING CHANGES

  • this action now runs using node 24

4.2.2 (2025-07-04)

Bug Fixes

  • cleanupNpmrc.task.js: Use @​actions/io to remove .npmrc (b7db0cb)

4.2.1 (2025-06-07)

Bug Fixes

  • update marked terminal to v7.3.0 (b52fa1b)

4.2.0 (2025-03-14)

Features

  • add ability to unset GITHUB_ACTION env var (266ea7e)

4.1.1 (2024-09-25)

Bug Fixes

  • default use semantic-release@24 (c22487b)

4.1.0 (2024-03-19)

Bug Fixes

  • fix syntax error for importing (4297675)

Features

... (truncated)

Commits
  • b12c8f6 chore(release): 6.0.0 [skip ci]
  • f80bc73 Merge pull request #273 from cycjimmy/feat-update-semantic-release-to-version-25
  • 0891297 docs(readme): update semantic-release-action to v6
  • 9246c0b feat(deps): update semantic-release to version 25
  • e878abf Merge pull request #272 from cycjimmy/dependabot/npm_and_yarn/js-yaml-4.1.1
  • acd6d5d build(deps): bump js-yaml from 4.1.0 to 4.1.1
  • 100d1fb Merge pull request #270 from cycjimmy/dependabot/npm_and_yarn/actions/io-2.0.0
  • ea00aee build(deps): bump @​actions/io from 1.1.3 to 2.0.0
  • e03fa18 Merge pull request #266 from cycjimmy/dependabot/github_actions/actions/setup...
  • 36bdefb build(deps): bump actions/setup-node from 5 to 6
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Medium Risk
Changes the release automation dependency to a new major version, which could affect publish behavior/output handling if the action’s semantics changed.

Overview
Updates the release-on-merge GitHub Actions workflow to use cycjimmy/semantic-release-action@v6 instead of @v3 for the Semantic Release step, keeping the release pipeline on the newer major version of the action.

Written by Cursor Bugbot for commit 7ecd68c. This will update automatically on new commits. Configure here.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [cycjimmy/semantic-release-action](https://github.com/cycjimmy/semantic-release-action) from 3 to 6.
- [Release notes](https://github.com/cycjimmy/semantic-release-action/releases)
- [Changelog](https://github.com/cycjimmy/semantic-release-action/blob/main/docs/CHANGELOG.md)
- [Commits](cycjimmy/semantic-release-action@v3...v6)

---
updated-dependencies:
- dependency-name: cycjimmy/semantic-release-action
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Feb 18, 2026
Copy link
Copy Markdown

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

- name: Semantic Release
id: semantic
uses: cycjimmy/semantic-release-action@v3
uses: cycjimmy/semantic-release-action@v6
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pinned semantic-release v19 and plugins incompatible with action v6

High Severity

Bumping cycjimmy/semantic-release-action to v6 while keeping semantic_version: 19 and old plugin versions (@semantic-release/changelog@6, @semantic-release/git@10, @semantic-release/github@8) creates a compatibility mismatch. Action v5+ runs internally on Node 24, but semantic-release@19 and these plugin versions predate Node 24 and were never tested against it. This will likely cause the release workflow to fail on merge to main.

Fix in Cursor Fix in Web

@github-actions
Copy link
Copy Markdown

@dependabot rebase

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 24, 2026

Sorry, only users with push access can use that command.

@scribdbot scribdbot added the 30+ days open PR has been open for 30+ days label Mar 24, 2026
@scribdbot
Copy link
Copy Markdown
Collaborator

⚠️ PR Age Notice: This pull request was opened over 30 days ago and has been labeled for visibility. If there's no activity for 7 days after this label is applied, it will be automatically closed.

To keep it open, please leave a comment or push an update. You can also label it as 'pinned' to prevent auto-closure.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

30+ days open PR has been open for 30+ days dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code

Development

Successfully merging this pull request may close these issues.

1 participant