From f8132b42ac9ee1fde464866b5f3b08939528f267 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 5 Sep 2026 05:43:59 +0000 Subject: [PATCH 1/2] build(deps): bump softprops/action-gh-release from 3.0.2 to 3.0.3 Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 3.0.2 to 3.0.3. - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/3d0d9888cb7fd7b750713d6e236d1fcb99157228...efb35369e0ad2afab669f228072c1b0d510eae64) --- updated-dependencies: - dependency-name: softprops/action-gh-release dependency-version: 3.0.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 97fcee460..1ed4b0c81 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -259,7 +259,7 @@ jobs: git tag -f "$VERSION" "$GITHUB_SHA" git push origin "$VERSION" --force - - uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v2 + - uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v2 with: tag_name: ${{ inputs.version }} draft: true From 3b173288feafebac3f0845f53e481f69adcd70b1 Mon Sep 17 00:00:00 2001 From: Martin Vogel Date: Sat, 5 Sep 2026 16:03:23 +0200 Subject: [PATCH 2/2] ci(release): label the action-gh-release pin as v3.0.3 The SHA dependabot pinned (efb35369) is upstream's v3.0.3 tag, a major bump from the v2 line: 3.0.0 moves the action runtime from Node 20 to Node 24 and changes nothing else. The pin comment still read v2, which would misdirect the next reader of this file; label it with the version the SHA actually is. Signed-off-by: Martin Vogel --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 1ed4b0c81..03abb518e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -259,7 +259,7 @@ jobs: git tag -f "$VERSION" "$GITHUB_SHA" git push origin "$VERSION" --force - - uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v2 + - uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3 with: tag_name: ${{ inputs.version }} draft: true