Skip to content

Commit ad8005f

Browse files
build(deps): bump getsentry/craft from 2.26.8 to 2.26.9 (getsentry#6543)
Bumps [getsentry/craft](https://github.com/getsentry/craft) from 2.26.8 to 2.26.9. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/getsentry/craft/releases">getsentry/craft's releases</a>.</em></p> <blockquote> <h2>2.26.9</h2> <h3>Bug Fixes 🐛</h3> <ul> <li>Replace extract-zip with node-stream-zip to fix Node 24.16.0 hang by <a href="https://github.com/BYK"><code>@​BYK</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/831">#831</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/getsentry/craft/blob/master/CHANGELOG.md">getsentry/craft's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>2.26.9</h2> <h3>Bug Fixes 🐛</h3> <ul> <li>Replace extract-zip with node-stream-zip to fix Node 24.16.0 hang by <a href="https://github.com/BYK"><code>@​BYK</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/831">#831</a></li> </ul> <h2>2.26.8</h2> <h3>New Features ✨</h3> <ul> <li>(pypi) Support TWINE_VERBOSE env var to pass --verbose to twine upload by <a href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/829">#829</a></li> </ul> <h3>Bug Fixes 🐛</h3> <ul> <li>Avoid test timeout in extractZipArchive by batching writes by <a href="https://github.com/BYK"><code>@​BYK</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/830">#830</a></li> </ul> <h2>2.26.7</h2> <h3>Bug Fixes 🐛</h3> <ul> <li>(nuget) Use unique suffix for global.json backup by <a href="https://github.com/jamescrosswell"><code>@​jamescrosswell</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/823">#823</a></li> <li>(security) Upgrade vitest to ^4.1.0 and tmp to ^0.2.6 by <a href="https://github.com/BYK"><code>@​BYK</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/828">#828</a></li> </ul> <h2>2.26.6</h2> <h3>Bug Fixes 🐛</h3> <ul> <li>(nuget) Move global.json aside during <code>dotnet setversion</code> by <a href="https://github.com/jamescrosswell"><code>@​jamescrosswell</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/820">#820</a></li> <li>(security) Override <code>@​tootallnate/once</code> to ^2.0.1 (CVE-2026-3449) by <a href="https://github.com/BYK"><code>@​BYK</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/822">#822</a></li> <li>Improve partial publishing recovery for CocoaPods and GitHub targets by <a href="https://github.com/BYK"><code>@​BYK</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/821">#821</a></li> </ul> <h2>2.26.5</h2> <h3>Bug Fixes 🐛</h3> <ul> <li>(security) Bump devalue override to ^5.8.1 (CVE-2026-42570) by <a href="https://github.com/BYK"><code>@​BYK</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/818">#818</a></li> </ul> <h2>2.26.4</h2> <h3>Bug Fixes 🐛</h3> <ul> <li>(security) Prevent script injection in changelog-preview workflow by <a href="https://github.com/fix-it-felix-sentry"><code>@​fix-it-felix-sentry</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/813">#813</a></li> <li>Resolve open dependabot security alerts by <a href="https://github.com/BYK"><code>@​BYK</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/816">#816</a></li> </ul> <h3>Internal Changes 🔧</h3> <ul> <li>(deps-dev) Bump simple-git from 3.33.0 to 3.36.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/814">#814</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/getsentry/craft/commit/6143e76379c342e247687c4ab5c83d8b900cc273"><code>6143e76</code></a> release: 2.26.9</li> <li><a href="https://github.com/getsentry/craft/commit/883f05bc777e6ffed088a32141220094680c8b2c"><code>883f05b</code></a> fix: replace extract-zip with node-stream-zip to fix Node 24.16.0 hang (<a href="https://redirect.github.com/getsentry/craft/issues/831">#831</a>)</li> <li><a href="https://github.com/getsentry/craft/commit/15dc77ee02c4ada6eaa54c5317c0094c18cc3f33"><code>15dc77e</code></a> meta: Bump new development version</li> <li><a href="https://github.com/getsentry/craft/commit/e5e1422381ac2806c23ccc0c848f169e84ee7b85"><code>e5e1422</code></a> Merge branch 'release/2.26.8'</li> <li>See full diff in <a href="https://github.com/getsentry/craft/compare/4468eb9e399655a61c770534dacc03139d98aa18...6143e76379c342e247687c4ab5c83d8b900cc273">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=getsentry/craft&package-manager=github_actions&previous-version=2.26.8&new-version=2.26.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent d430fbe commit ad8005f

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

.github/workflows/release.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ jobs:
3131
token: ${{ steps.token.outputs.token }}
3232
fetch-depth: 0
3333
- name: Prepare release
34-
uses: getsentry/craft@4468eb9e399655a61c770534dacc03139d98aa18 # v2.26.8
34+
uses: getsentry/craft@6143e76379c342e247687c4ab5c83d8b900cc273 # v2.26.9
3535
env:
3636
GITHUB_TOKEN: ${{ steps.token.outputs.token }}
3737
with:

0 commit comments

Comments
 (0)