Skip to content

chore(deps): bump mikepenz/release-changelog-builder-action from 4.2.2 to 6.3.0 - #20

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/mikepenz/release-changelog-builder-action-6.3.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/mikepenz/release-changelog-builder-action-6.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026 •

Copy link
Copy Markdown

Bumps mikepenz/release-changelog-builder-action from 4.2.2 to 6.3.0.

Release notes

Sourced from mikepenz/release-changelog-builder-action's releases.

v6.3.0

🚀 Features

  • ci: add OpenSSF Scorecard analysis and fix CI badge

💬 Other

  • ci: fix Scorecard Dangerous-Workflow finding (script injection)
  • dev -> main
  • ci: run Scorecard on develop, the default branch

📦 Dependencies

  • chore(deps): lock file maintenance
  • fix(deps): update dependency semver to v7.8.4
  • chore(deps): update mcr.microsoft.com/devcontainers/typescript-node:24-bullseye docker digest to 4823a29
  • chore(deps): update node devdependency non-major updates
  • fix(deps): update dependency https-proxy-agent to v9.1.0
  • chore(deps): update node devdependency non-major updates
  • chore(deps): lock file maintenance
  • chore(deps): update actions/checkout action to v7
  • chore(deps): lock file maintenance
  • fix(deps): update dependency semver to v7.8.5
  • chore(deps): update dependency js-yaml to v5
  • chore(deps): lock file maintenance
  • chore(deps): update node devdependency non-major updates
  • chore(deps): update mcr.microsoft.com/devcontainers/typescript-node:24-bullseye docker digest to 2449e39
  • chore(deps): update dependency vite to v8.1.0
  • chore(deps): update node devdependency non-major updates
  • chore(deps): lock file maintenance

... (truncated)

Commits
  • cb021f9 Merge pull request #1666 from mikepenz/develop
  • 48658d7 chore(deps): update mikepenz/action-gh-release action to v3.1.0 (#1665)
  • 6c6fe84 Merge pull request #1661 from mikepenz/renovate/node-devdependency-non-major-...
  • 27dc4b4 chore: rebuild dist for renovate
  • f911262 chore(deps): update node devdependency non-major updates
  • 217d3c7 Merge pull request #1660 from mikepenz/renovate/js-yaml-5.x
  • a5deb72 chore: rebuild dist for renovate
  • 72b7476 chore: sync js-yaml version between devDependencies and overrides
  • 325c6d9 chore(deps): update dependency js-yaml to v5.3.0
  • 390cad3 chore(deps): lock file maintenance (#1664)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 3, 2026
Bumps [mikepenz/release-changelog-builder-action](https://github.com/mikepenz/release-changelog-builder-action) from 4.2.2 to 6.3.0.
- [Release notes](https://github.com/mikepenz/release-changelog-builder-action/releases)
- [Commits](mikepenz/release-changelog-builder-action@32e3c96...cb021f9)

---
updated-dependencies:
- dependency-name: mikepenz/release-changelog-builder-action
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/mikepenz/release-changelog-builder-action-6.3.0 branch from 6d6c880 to 3974da6 Compare September 18, 2026 12:04
TimG1804 added a commit that referenced this pull request Sep 18, 2026
…#27)

Supersedes the three separate Dependabot PRs (#13, #15, #20). Doing them
in one commit avoids each rebasing onto the others, since all three touch
the same workflow file.

- actions/checkout 4.4.0 -> 7.0.1
- actions/setup-node 4.4.0 -> 7.0.0
- mikepenz/release-changelog-builder-action 4.2.2 -> 6.3.0

The majors are runtime bumps (node24) plus, for checkout v7, a guard
against checking out fork PRs on pull_request_target and workflow_run —
triggers this repo does not use. setup-node v6 narrowed automatic caching
to npm, which ci.yml already requests explicitly.

The changelog builder's v5 breaking changes are in regex transformers,
which this configuration does not set. commitMode is deprecated there in
favour of mode: COMMIT but still supported, so the config is left alone.

Each SHA was verified against the upstream tag rather than taken from the
Dependabot diff.

Refs #13, #15, #20

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 18, 2026

Copy link
Copy Markdown
Author

Looks like mikepenz/release-changelog-builder-action is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 18, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/mikepenz/release-changelog-builder-action-6.3.0 branch September 18, 2026 12:16
TimG1804 added a commit that referenced this pull request Sep 18, 2026
…#27)

Supersedes the three separate Dependabot PRs (#13, #15, #20). Doing them
in one commit avoids each rebasing onto the others, since all three touch
the same workflow file.

- actions/checkout 4.4.0 -> 7.0.1
- actions/setup-node 4.4.0 -> 7.0.0
- mikepenz/release-changelog-builder-action 4.2.2 -> 6.3.0

The majors are runtime bumps (node24) plus, for checkout v7, a guard
against checking out fork PRs on pull_request_target and workflow_run —
triggers this repo does not use. setup-node v6 narrowed automatic caching
to npm, which ci.yml already requests explicitly.

The changelog builder's v5 breaking changes are in regex transformers,
which this configuration does not set. commitMode is deprecated there in
favour of mode: COMMIT but still supported, so the config is left alone.

Each SHA was verified against the upstream tag rather than taken from the
Dependabot diff.

Refs #13, #15, #20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants