Skip to content

chore(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1#325

Merged
Zious11 merged 1 commit into
developfrom
dependabot/github_actions/softprops/action-gh-release-3.0.1
Jun 29, 2026
Merged

chore(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1#325
Zious11 merged 1 commit into
developfrom
dependabot/github_actions/softprops/action-gh-release-3.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps softprops/action-gh-release from 3.0.0 to 3.0.1.

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.1

3.0.1

  • maintenance release with updated dependencies
Changelog

Sourced from softprops/action-gh-release's changelog.

3.0.1

  • maintenance release with updated dependencies

3.0.0

3.0.0 is a major release that moves the action runtime from Node 20 to Node 24. Use v3 on GitHub-hosted runners and self-hosted fleets that already support the Node 24 Actions runtime. If you still need the last Node 20-compatible line, stay on v2.6.2.

What's Changed

Other Changes 🔄

  • Move the action runtime and bundle target to Node 24
  • Update @types/node to the Node 24 line and allow future Dependabot updates
  • Keep the floating major tag on v3; v2 remains pinned to the latest 2.x release

2.6.2

What's Changed

Other Changes 🔄

2.6.1

2.6.1 is a patch release focused on restoring linked discussion thread creation when discussion_category_name is set. It fixes [#764](https://github.com/softprops/action-gh-release/issues/764), where the draft-first publish flow stopped carrying the discussion category through the final publish step.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

2.6.0

2.6.0 is a minor release centered on previous_tag support for generate_release_notes, which lets workflows pin GitHub's comparison base explicitly instead of relying on the default range. It also includes the recent concurrent asset upload recovery fix, a working_directory docs sync, a checked-bundle freshness guard for maintainers, and clearer immutable-prerelease guidance where GitHub platform behavior imposes constraints on how prerelease asset uploads can be published.

... (truncated)

Commits
  • 718ea10 release 3.0.1
  • f1a938b chore(deps): bump esbuild from 0.28.0 to 0.28.1 (#802)
  • 0066ead chore(deps): bump vite from 8.0.14 to 8.0.16 (#806)
  • dc643ca chore(deps): bump the npm group with 3 updates (#805)
  • 85ee99b chore(deps): bump actions/checkout in the github-actions group (#804)
  • 9ed3cf9 chore(deps): bump the npm group with 2 updates (#800)
  • 3efcac8 chore(deps): bump the npm group with 3 updates (#798)
  • 05d6b91 chore(deps): bump brace-expansion from 5.0.5 to 5.0.6 (#797)
  • 403a524 chore(deps): bump @​types/node from 24.12.2 to 24.12.3 in the npm group (#796)
  • 437e073 chore(deps): bump the npm group with 4 updates (#792)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 26, 2026
Zious11 added a commit that referenced this pull request Jun 27, 2026
@Zious11
factory(F7): holdout eval PASS + v0.12.0 finding (D-268)
fdc8c60 
22/22 real ENIP/CIP pcaps (MIT scy-phy/bro-cip-enip SWaT/ControlLogix +
CC-BY ITI) run through wirerust @f17d270: 22/22 exit-0, 0 parse_errors,
0 panics, 0 false positives. HS-110..122 all satisfied/corroborated/verified.
enip_metasploit.pcapng investigation confirmed v0.11.0 detector correct.

v0.12.0 backlog finding recorded: ENIP-UNCONNECTED-SEND-UNWRAP-001
(Unconnected_Send 0x52 / Multiple Service Packet 0x0A unwrap for
Metasploit-style Stop/Reset attacks). DF-VALIDATION-001-gated.

EXACT RESUME POINT: v0.11.0 CONVERGED + F7 HUMAN-APPROVED + HOLDOUT EVAL
PASS. HELD AT RELEASE (D-260). Remaining before go-ahead: optional
F6-MUTANTS-FULL-RUN confirm; cycle-close prose/input-hash backfill (can be
post-release); Dependabot #311/#325 triage.
Zious11 added a commit that referenced this pull request Jun 29, 2026
@Zious11
docs(changelog): correct PR numbers in v0.11.0 entry
cdcd9e7 
Fix four PR reference errors verified against GitHub:
- STORY-131 dispatcher integration: #316 → #318
- STORY-135 CIP command detections: #325 → #324
- Green-doc-tense CI gate: bare b9b2e93 → PR #321 (with commit retained)
- PR range in headline bullet: #316–#334 → #317–#334 (#316 is the epic issue, not a PR)
Zious11 added a commit that referenced this pull request Jun 29, 2026
@Zious11
chore(state): durable resume checkpoint post-v0.11.0 release
9b1b3f1 
Pipeline IDLE post-v0.11.0 release. STATE.md rewritten as lean, self-
contained resume document. Decisions D-267..D-301 archived to cycle file.

Changes:
- STATE.md: compacted from 280 → 252 lines (WARNING range; below 500-line cap)
  - Frontmatter corrected: document_type/mode/phase fields now standard-compliant
  - develop_head corrected: ecbcd26 → ab0b388 (PRs #339+#340 had landed)
  - factory_artifacts_head: resolved from placeholder to d67eb27
  - Full SHAs recorded for main, develop, factory-artifacts
  - Tag facts: annotated tag object c50d89e → commit 3072e82 verified
  - Stale "Do NOT re-X" block removed (30+ historical lines archived)
  - Verbose inline decisions D-270..D-299 removed from STATE.md body
  - D-300/D-301 kept as terse summary rows in decisions table
  - EXACT RESUME POINT block updated with verified facts
  - Open human question (main CHANGELOG fast-track y/n) explicitly surfaced
  - Backlog table: STORY-143, SEC-001, TLS-CLIENTHELLO-FRAG-001 (CRIT candidate
    recommended first), edge-hunt register, design notes, Wave-64 NITs, process watch
  - Session Resume Checkpoint updated with current state

- cycles/feature-enip-v0.11.0/decisions-archive.md: extended D-228..D-266 →
  D-228..D-301 (appended D-267..D-301 with full narrative text)

Verified live facts (git/gh, not trusted from memory):
- origin/main = 3072e82
- origin/develop = ab0b388
- v0.11.0 tag → commit 3072e82 (annotated; GitHub release: not draft, not prerelease, Latest)
- Cargo.toml version on both branches: 0.11.0
- Open PRs: only #311 and #325 (Dependabot, awaiting human triage)
- Worktrees: main + .factory (active) + 2 stale scratch (enip-edgecase-verify, enip-f6-hardening)
@Zious11

Zious11 commented Jun 29, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
chore(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1
e4c45bd 
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@b430933...718ea10)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/softprops/action-gh-release-3.0.1 branch from 66502f6 to e4c45bd Compare June 29, 2026 14:08
@Zious11 Zious11 merged commit a715437 into develop Jun 29, 2026
22 checks passed
@Zious11 Zious11 deleted the dependabot/github_actions/softprops/action-gh-release-3.0.1 branch June 29, 2026 14:10
Zious11 added a commit that referenced this pull request Jun 29, 2026
@Zious11
factory(state): Dependabot triage complete — develop HEAD a2d8c13 (D-…
c25f7e4 
…302)

Dependabot PRs #325 (softprops/action-gh-release 3.0.1, merge a715437) and
#311 (actions/checkout v7.0.0 major, merge a2d8c13) squash-merged to develop
after 7-day soak verification. CI 22/22 green, SHA-pinning preserved, no
breaking impact. develop advanced from ab0b388 → a2d8c13. main unchanged
at 3072e82. Pipeline remains IDLE post-v0.11.0.

STATE.md changes:
- frontmatter: develop_head, timestamp updated
- Project Metadata: Develop HEAD updated to a2d8c13
- EXACT RESUME POINT: Dependabot triage noted; develop HEAD updated
- RESUME PROCEDURE: develop HEAD verification updated
- Current Phase Steps: added Dependabot triage DONE row
- Decisions Log: D-302 added
- Backlog: DEPENDABOT-311 and DEPENDABOT-325 marked MERGED 2026-06-29
- Session Resume Checkpoint: updated to reflect triage + removed #311/#325 from next steps
- Notes: develop reference updated to a2d8c13

Defensive sweep (old develop HEAD ab0b388):
  4 occurrences remain — all historical/audit-trail references in D-301
  prose (CHANGELOG corrections event) and the open human question. These
  are immutable past-event citations, not current-state claims. Correct.
  No propagation gap.

Lines: 254 (limit 500; soft target 260).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Zious11