The default values for author and committer have changed. See "What's new" below for details. If you are overriding the default values you will not be affected by this change.
On completion, the action now removes the temporary git remote configuration it adds when using push-to-fork. This should not affect you unless you were using the temporary configuration for some other purpose after the action completes.
What's new
Updated runtime to Node.js 20
The action now requires a minimum version of v2.308.0 for the Actions runner. Update self-hosted runners to v2.308.0 or later to ensure compatibility.
The default value for author has been changed to ${{ github.actor }} <${{ github.actor_id }}+${{ github.actor }}@users.noreply.github.com>. The change adds the ${{ github.actor_id }}+ prefix to the email address to align with GitHub's standard format for the author email address.
The default value for committer has been changed to github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>. This is to align with the default GitHub Actions bot user account.
Adds input git-token, the Personal Access Token (PAT) that the action will use for git operations. This input defaults to the value of token. Use this input if you would like the action to use a different token for git operations than the one used for the GitHub API.
push-to-fork now supports pushing to sibling repositories in the same network.
Previously, when using push-to-fork, the action did not remove temporary git remote configuration it adds during execution. This has been fixed and the configuration is now removed when the action completes.
If the pull request body is truncated due to exceeding the maximum length, the action will now suffix the body with the message "...[Pull request body truncated]" to indicate that the body has been truncated.
The action now uses --unshallow only when necessary, rather than as a default argument of git fetch. This should improve performance, particularly for large git repositories with extensive commit history.
The action can now be executed on one GitHub server and create pull requests on a different GitHub server. Server products include GitHub hosted (github.com), GitHub Enterprise Server (GHES), and GitHub Enterprise Cloud (GHEC). For example, the action can be executed on GitHub hosted and create pull requests on a GHES or GHEC instance.
The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.
ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.
The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.
ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.
Fixed a bug in Node16 where if an HTTP download finished too quickly (<1ms, e.g. when it's mocked) we attempt to delete a temp file that has not been created yet actions/toolkit#1278
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the all group with 5 updates:
5
6
3
4
3
4
1.20
1.22
1.18
1.20
Updates
peter-evans/create-pull-request
from 5 to 6Release notes
Sourced from peter-evans/create-pull-request's releases.
Commits
b1ddad2
feat: v6 (#2717)bb80902
build(deps-dev): bump@types/node
from 18.19.8 to 18.19.10 (#2712)e0037d4
build(deps): bump peter-evans/create-or-update-comment from 3 to 4 (#2702)94b1f99
build(deps): bump peter-evans/find-comment from 2 to 3 (#2703)69c27ea
build(deps-dev): bump ts-jest from 29.1.1 to 29.1.2 (#2685)7ea722a
build(deps-dev): bump prettier from 3.2.2 to 3.2.4 (#2684)5ee839a
build(deps-dev): bump@types/node
from 18.19.7 to 18.19.8 (#2683)60fc256
build(deps-dev): bump eslint-plugin-prettier from 5.1.2 to 5.1.3 (#2660)0c67723
build(deps-dev): bump@types/node
from 18.19.5 to 18.19.7 (#2661)4e288e8
build(deps-dev): bump prettier from 3.1.1 to 3.2.2 (#2659)Updates
actions/upload-artifact
from 3 to 4Release notes
Sourced from actions/upload-artifact's releases.
Commits
26f96df
Merge pull request #505 from actions/robherley/merge-artifacts530ed2c
use correct artifact name in test53ef698
add additional integration test for merge all behavior90b0f8e
add workflow to test merging199a58f
more docs3f353f9
ncc997fffa
add merge artifact sub-action52899c8
Merge pull request #504 from actions/robherley/reorganizeda58a3f
ncc1f64adb
fix importUpdates
actions/download-artifact
from 3 to 4Release notes
Sourced from actions/download-artifact's releases.
Commits
6b208ae
Merge pull request #274 from actions/vmjoseph/timeout-patch6c5b580
only adding updated license5f5015d
readding index1fddaaf
Revert "updating licenses"8aa9e21
Revert "updating dist"657edd9
updating licenses555a2fc
updating dist4fc4d70
updating lock072ac9d
updating version no038dc03
updating version noUpdates
reviewdog/action-eslint
from 1.20 to 1.22Release notes
Sourced from reviewdog/action-eslint's releases.
Commits
5deb8e2
Merge pull request #190 from reviewdog/depup/reviewdoge396476
chore(deps): update reviewdog to 0.17.0279acb0
Merge pull request #189 from reviewdog/depup/reviewdog82709c0
chore(deps): update reviewdog to 0.16.03da78bb
Merge pull request #185 from reviewdog/renovate/actions-setup-node-4.x073eef6
chore(deps): update actions/setup-node action to v4b9ec757
Merge pull request #184 from reviewdog/renovate/js-devtools-npm-publish-3.x7152055
chore(deps): update js-devtools/npm-publish action to v3Updates
reviewdog/action-stylelint
from 1.18 to 1.20Release notes
Sourced from reviewdog/action-stylelint's releases.
Commits
4a97984
Merge pull request #113 from reviewdog/stylelint-ruleMetadata-safe-nav095aa28
Added safe navigation to ruleMetadata due to it sometimes being undefined2b4d11b
Merge pull request #111 from reviewdog/reviewdog-17-rdjsondc8734f
Upgraded to ReviewDog 0.17.0, implemented RDJSONdfce857
Merge pull request #110 from bert-mccutchen/patch-24ad24e7
Fixed outdated comment.3f78d9e
Fixed installing multiple input packages.ad415bb
Stylelint 16 Supporting Fixes0d6e4c3
Merge pull request #109 from reviewdog/renovate/peter-evans-create-pull-reque...aaac7ee
chore(deps): update peter-evans/create-pull-request action to v6Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show