Skip to content

chore(deps): bump changesets/action from 1.8.0 to 1.9.0 - #575

Open
dependabot[bot] wants to merge 2 commits into
stagingfrom
dependabot/github_actions/staging/changesets/action-1.9.0
Open

chore(deps): bump changesets/action from 1.8.0 to 1.9.0#575
dependabot[bot] wants to merge 2 commits into
stagingfrom
dependabot/github_actions/staging/changesets/action-1.9.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 29, 2026 •
edited by cubic-dev-ai Bot
Loading

Copy link
Copy Markdown
Contributor

Bumps changesets/action from 1.8.0 to 1.9.0.

Release notes

Sourced from changesets/action's releases.

v1.9.0

Minor Changes

  • #636 b072bcc Thanks @​bluwy! - Add a new @changesets/action/pr-comment sub-action to comment on PRs

  • #625 8795eee Thanks @​bluwy! - Add a new @changesets/action/pr-status sub-action to generate the changeset status comment for PRs as an alternative to the Changesets Bot.

Patch Changes

  • #535 34f64f6 Thanks @​Andarist! - Fixed an issue with GitHub releases not being created for successfully published packages when some packages failed to be published to the registry.

  • #632 1d54b9e Thanks @​bluwy! - Simplify internal implementation to get changelog entries for a package version

  • #629 e0c90aa Thanks @​bluwy! - Fix custom version and publish command argument parsing

  • #645 f9585d9 Thanks @​Andarist! - Improved force-push handling when using commitMode: "github-api" so updating an existing branch no longer temporarily resets the target branch to the base commit, avoiding cases where GitHub closes open pull requests during the update. This should remove a possibility of a GitHub state race that caused the force-pushed PRs not being reopened.

Changelog

Sourced from changesets/action's changelog.

@​changesets/action

2.0.0-next.3

Major Changes

  • #680 ca57073 Thanks @​bluwy! - Add a new push-git-tags option that complements create-github-releases to control specifically if git tags should be created but not GitHub releases.

    If create-github-releases was previously set to false, which also indirectly disabled git tag creation, git tags will now be created instead by default. If this is not desired, set push-git-tags to false explicitly.

  • #681 7359107 Thanks @​bluwy! - Rename the root action inputs and outputs to better match the sub-actions' conventions.

    Inputs:

    • version -> version-script
    • publish -> publish-script
    • commit -> commit-message
    • title -> pr-title
    • branch -> pr-base-branch

    Outputs:

    • pull-request-number -> pr-number

  • #674 164652b Thanks @​bluwy! - Remove support for passing custom GitHub token through the GITHUB_TOKEN environment variable. It should be passed to the github-token input instead.

  • #673 823cf74 Thanks @​bluwy! - Update to Changesets v3 packages

  • #668 0eae789 Thanks @​bluwy! - Rename the input and output names to kebab-case instead of camelCase to match the official GitHub actions pattern

Minor Changes

  • #678 f71ae04 Thanks @​Andarist! - Published packages detection done through stdout parsing was replaced with one based on the shared output file using CHANGESETS_OUTPUT environment variable. When using custom scripts this environment variable should always be passed down to the Changesets CLI invocations.

2.0.0-next.2

Patch Changes

  • #670 5a8b9b7 Thanks @​Andarist! - Authenticate git CLI pushes with the configured GitHub token using Git extra headers instead of writing to a global .netrc file.

  • #670 5a8b9b7 Thanks @​Andarist! - Derive the Git server URL from the GitHub Actions context when configuring git CLI authentication to support GitHub Enterprise Server setups.

2.0.0-next.1

Patch Changes

  • #663 ccb3811 Thanks @​Andarist! - Fix the computed publish plan path passed internally to changeset pack by the /pack subaction.

  • #662 5c88881 Thanks @​Andarist! - Fixed usage of --from-publish-plan flag used by the /pack subaction

  • #666 dc29b73 Thanks @​Andarist! - Fix the /version subaction to not crash on missing pr-base-branch input. This input is meant to be optional.

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Update changesets/action in .github/workflows/release.yml to v1.9.0 to improve release reliability. Includes fixes for partial publish GitHub releases and safer force-push handling, plus optional PR comment/status sub-actions; no workflow changes required.

Written for commit c948c04. Summary will update on new commits.

Review in cubic

@dependabot
chore(deps): bump changesets/action from 1.8.0 to 1.9.0
90b690b 
Bumps [changesets/action](https://github.com/changesets/action) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/changesets/action/releases)
- [Changelog](https://github.com/changesets/action/blob/main/CHANGELOG.md)
- [Commits](changesets/action@63a615b...a45c4d5)

---
updated-dependencies:
- dependency-name: changesets/action
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 29, 2026
@dependabot
dependabot Bot requested a review from izadoesdev as a code owner July 29, 2026 04:12
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 29, 2026
@vercel

vercel Bot commented Jul 29, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
dashboard Ready Ready Preview Jul 30, 2026 8:43pm
databuddy-status Ready Ready Preview Jul 30, 2026 8:43pm
documentation Ready Ready Preview Jul 30, 2026 8:43pm

@dosubot

dosubot Bot commented Jul 29, 2026

Copy link
Copy Markdown

📄 Knowledge review

Dosu skipped reviewing this PR because your organization has used its 200 included credits for the month. Your usage will reset on 2026-08-01. To have Dosu review this PR before then, ask your organization admin to upgrade to a pro account.

Leave Feedback Ask Dosu about Databuddy Add Dosu to your team

@unkey-deploy

unkey-deploy Bot commented Jul 29, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Unkey Deploy

Name Status Preview Inspect Updated (UTC)
api (preview) Ready Visit Preview Inspect Jul 30, 2026 8:44pm

@tripwire-sh

tripwire-sh Bot commented Jul 29, 2026

Copy link
Copy Markdown

blocked — @dependabot[bot], this can't merge yet.

it touches a protected workflow file

View on Tripwire

how do i fix this?

fix those and push again — this comment updates itself. no need to reopen the pull request or ping anyone.

if you think this is wrong, say so in a comment here and a maintainer will decide.

what is tripwire?

a firewall for open-source repos. the maintainers here set rules that every change has to clear before it can merge — account age, rate limits, hidden links, that kind of thing. org members are exempt.

nothing is hidden: the run page shows every rule this change hit, the evidence, and the verdict.

tripwire-sh[bot]
tripwire-sh Bot suggested changes Jul 29, 2026
View reviewed changes

@tripwire-sh tripwire-sh Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

blocked — it touches a protected workflow file.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@izadoesdev izadoesdev Awaiting requested review from izadoesdev izadoesdev is a code owner
1 more reviewer
@tripwire-sh tripwire-sh[bot] tripwire-sh[bot] requested changes
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@izadoesdev