Repository navigation
chore(deps): update github workflows - #8060
Conversation
![sentry-warden[bot]](https://avatars.githubusercontent.com/in/2755838?s=60&v=4){kind=small}
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
Coverage Results 📊✅ 139222 passed | ⏭️ 7861 skipped | Total: 147083 | Pass Rate: 94.66% | Execution Time: 432m 31s 📊 Comparison with Base Branch
➖ Removed Tests (1)View removed tests
All tests are passing successfully. ✅ Patch coverage is 100.00% (no changed executable lines found; target 80%). Coverage diff@@ Coverage Diff @@
## master #8060 +/-##
==========================================
Coverage 90.21% 90.21% —%
==========================================
Files 203 203 —
Tracked lines 27335 27335 —
Branches 10246 10246 —
==========================================
Hits 24660 24660 —
Misses 2675 2675 —
Partials 1559 1559 —Generated by Coverage Action |
db98fbd to
aa9ca76
Compare
4abd3fe to
ef2a5ce
Compare
ba58167 to
1f74e39
Compare
bd2e033 to
91dd107
Compare
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
There are 3 total unresolved issues (including 2 from previous reviews).
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 91dd107. Configure here.
| jobs: | ||
| changelog-preview: | ||
| uses: getsentry/craft/.github/workflows/changelog-preview.yml@7a7857552e2cdc08b502de96e6076849c01fba32 # v2 | ||
| uses: getsentry/craft/.github/workflows/changelog-preview.yml@d725f285bc864ea8aeb300f189a8680cde6aa22a # v3 |
There was a problem hiding this comment.
Craft preview secret interface mismatch
Medium Severity
The changelog-preview caller still passes a named GITHUB_TOKEN secret into Craft’s reusable workflow after the v2 to v3 pin. Current Craft v3 workflow_call no longer declares that secret and expects secrets: inherit or no secrets map, so GitHub can reject the workflow as invalid on every pull request.
Reviewed by Cursor Bugbot for commit 91dd107. Configure here.
edcfc12 to
049307c
Compare
2ac2bf0 to
739d11b
Compare
739d11b to
64d83c7
Compare
64d83c7 to
eea930f
Compare
Revert the java-version bump to 25 from this Renovate PR. The generated workflow must match test_group.jinja, which still pins 21. Co-Authored-By: Ivana Kellyer <131587164+sentrivana@users.noreply.github.com>
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
This PR contains the following updates:
v10.3.0→v10.3.3v10.3.0→v10.3.33.9.0→3.12.03.9.0→3.12.021→25Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
astral-sh/setup-uv
v10.3.3: 🌈 Use Astral mirror for version manifests with GitHub fallbackCompare Source
Changes
This release contains something that should have been included a very long time ago. Sorry for sleeping on that.
This action now retrieves the release manifest that contains the available versions, their download links and checksums from the Astral mirror, rather than trying GitHub first. This should present much more stable.
(Known checksums are still checked, so the security impact does not change)
Also a big thank you to @soujasK for a set of bugfixes 👏
🐛 Bug fixes
🧰 Maintenance
📚 Documentation
v10.3.2: 🌈 update known checksums for 0.13.5Compare Source
Changes
🧰 Maintenance
📚 Documentation
v10.3.1: 🌈 preserve cache error class names in save-cache bundleCompare Source
Changes
This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn
##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.🐛 Bug fixes
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates
getsentry/craft
v3.12.0Compare Source
NuGet publishing now supports GitHub OIDC trusted publishing while retaining token-based fallback, giving developers a configurable alternative for package authentication.
New Features ✨
NuGet publishing can use GitHub OIDC trusted publishing, with configurable identity and unchanged token-based fallback.
v3.11.2Compare Source
Changelog credits retain co-author attribution after squash merges, while batched GraphQL lookups reduce requests and tolerate partial results.
Bug Fixes 🐛
Changelog crediting now preserves co-author attribution after squash merges, while batching GraphQL lookups reduces requests and accepts partial results.
v3.11.1Compare Source
Floating GitHub tags now resolve to valid stable releases across preparation, versioning, and changelog operations.
Bug Fixes 🐛
GitHub version lookups select valid stable releases for floating tags across prepare, versioning, and changelog operations.
v3.11.0Compare Source
Larger changelogs gain bounded AI summarization, while publishing surfaces merge failures, handles narrow version conflicts, and waits for npm availability.
New Features ✨
Configurable AI summary budgets and clearer timeout diagnostics accommodate larger changelogs without changing request limits.
Changelog
AI summary timing is now configurable through aiSummary.timeout. The default total budget remains 120 seconds; integer values from 30 to 1800 are accepted. Set aiSummary.timeout to 0 to remove the total budget, while the 30-second per-request limit and 64-request cap still apply. Warnings now distinguish request-timeout from total-budget deadline failures.
Bug Fixes 🐛
Publishing exposes merge failures, safely retries completed targets, resolves limited version conflicts, and waits for npm availability.
Publish
Publishing now fails when merging the release branch back fails, instead of reporting success after targets ship. The retained publish state allows retries to skip completed targets. Version-bump-only conflicts can be resolved automatically when every conflicted file matches the supported version-token pattern; other conflicts continue to the existing conflict handling.
Other
v3.10.0Compare Source
Deployments now wait for builds and expose failures, while release tooling supports Craft 3 and prevents accidental pre-1.0 major version jumps.
New Features ✨
GitHub Pages deployments now wait for builds and report failures with deployment details.
Bug Fixes 🐛
The reusable release workflow now uses the Craft v3 action, enabling Craft 3 configuration and current release-blocker handling. For versions below 1.0.0, craft prepare auto and craft prepare pre convert commit-selected major bumps to minor versions. Use craft prepare major or an explicit exact version to release 1.0.0. JSON changelog output and PR previews still show the raw major bump type.
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.