Skip to content

chore(deps): update cycjimmy/semantic-release-action action to v8 - #284

Merged
chgl merged 1 commit into
masterfrom
renovate/cycjimmy-semantic-release-action-8.x
Oct 28, 2026
Merged

chore(deps): update cycjimmy/semantic-release-action action to v8#284
chgl merged 1 commit into
masterfrom
renovate/cycjimmy-semantic-release-action-8.x

Conversation

@renovate

@renovate renovate Bot commented Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
cycjimmy/semantic-release-action action major v6.0.0 → v8.1.4

Release Notes

cycjimmy/semantic-release-action

v8.1.4

Compare Source

Bug Fixes
  • hint on ENOPKG instead of warning about a missing package.json (0773dda), closes #​333

v8.1.3

Compare Source

Bug Fixes
  • locate npm-cli.js from PATH on Windows runners (b810ddb), closes #​332

v8.1.2

Compare Source

Bug Fixes

v8.1.1

Compare Source

Bug Fixes
  • split extends configurations on whitespace (6938171)

v8.1.0

Compare Source

Features
  • output last_release_* from Git tags when no release is published (ef475bf)

v8.0.2

Compare Source

Bug Fixes
  • resolve extra plugins with working_directory and relative extends (340bd34), closes #​254

v8.0.1

Compare Source

Bug Fixes
  • bypass package manager shims for internal npm calls (45d3d9c), closes #​258

v8.0.0

Compare Source

Features
  • require semantic-release v20 or above (1d650fa)
BREAKING CHANGES
  • semantic-release v16~v19 are no longer supported. The minimum
    supported version is now v20. If semantic_version is pinned below 20, the action
    fails with an error; update it to v20 or above, or remove it to use the latest
    version.

v7.1.2

Compare Source

Bug Fixes
  • install: improve npm install logging for error visibility (3f9efbb)

v7.1.1

Compare Source

Bug Fixes
  • ci: improve error handling for push permission failures (895d556), closes #​312

v7.1.0

Compare Source

Features
  • core: add option to skip npm plugin for non-Node.js projects (d1038bc), closes #​313

v7.0.0

Compare Source

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

github-actions Bot commented Oct 19, 2026

Copy link
Copy Markdown
Contributor

Trivy image scan report

ghcr.io/chgl/github-reusable-workflow-without-test-image:pr-284 (debian 13.7)

2 known vulnerabilities found (CRITICAL: 0, HIGH: 0, MEDIUM: 0, LOW: 0, UNKNOWN: 2)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
liblzma5 DSA-6549-1 UNKNOWN 5.8.1-1+deb13u1 5.8.1-1+deb13u2
liblzma5 TEMP-1147318-639065 UNKNOWN 5.8.1-1+deb13u1 5.8.1-1+deb13u2

Python

6 known vulnerabilities found (CRITICAL: 0, HIGH: 4, MEDIUM: 2, LOW: 0, UNKNOWN: 0)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
msgpack GHSA-6v7p-g79w-8964 HIGH 1.1.2 1.2.1
setuptools CVE-2025-47273 HIGH 70.3.0 78.1.1
setuptools CVE-2026-59890 MEDIUM 70.3.0 83.0.0
urllib3 CVE-2026-97687 HIGH 2.7.0 2.8.0
urllib3 CVE-2026-97689 HIGH 2.7.0 2.8.0
urllib3 CVE-2026-97688 MEDIUM 2.7.0 2.8.0

@github-actions

github-actions Bot commented Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

✅MegaLinter analysis: Success

Descriptor Linter Files Fixed Errors Max errors Warnings Elapsed time
✅ ACTION actionlint 4 0 0 0.06s
✅ ACTION zizmor 4 0 0 3.43s
✅ COPYPASTE jscpd yes no no 0.4s
✅ DOCKERFILE hadolint 1 0 0 0.06s
✅ JSON jsonlint 3 0 0 0.07s
✅ JSON prettier 3 0 0 0.23s
✅ JSON v8r 3 0 0 1.66s
✅ MARKDOWN markdownlint 1 0 0 0.22s
✅ MARKDOWN markdown-table-formatter 1 0 0 0.13s
✅ PYTHON bandit 1 0 0 2.89s
✅ PYTHON black 1 0 0 2.81s
✅ PYTHON flake8 1 0 0 1.2s
✅ PYTHON isort 1 0 0 0.24s
✅ PYTHON mypy 1 0 0 2.19s
✅ PYTHON pylint 1 0 0 2.13s
✅ PYTHON pyright 1 0 0 1.19s
✅ PYTHON ruff 1 0 0 0.02s
✅ REPOSITORY betterleaks yes no no 0.86s
✅ REPOSITORY checkov yes no no 21.78s
✅ REPOSITORY dustilock yes no no 0.04s
✅ REPOSITORY git_diff yes no no 0.01s
✅ REPOSITORY grype yes no no 68.59s
✅ REPOSITORY kingfisher yes no no 3.65s
✅ REPOSITORY osv-scanner yes no no 0.14s
✅ REPOSITORY secretlint yes no no 0.51s
✅ REPOSITORY syft yes no no 1.37s
✅ REPOSITORY trivy yes no no 10.55s
✅ REPOSITORY trivy-sbom yes no no 0.18s
✅ REPOSITORY trufflehog yes no no 2.27s
✅ YAML prettier 7 0 0 0.48s
✅ YAML v8r 7 0 0 5.02s
✅ YAML yamllint 7 0 0 0.42s

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: REPOSITORY_KICS. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@10.1.0 --custom-flavor-setup --custom-flavor-linters PYTHON_PYLINT,PYTHON_BLACK,PYTHON_FLAKE8,PYTHON_ISORT,PYTHON_BANDIT,PYTHON_MYPY,PYTHON_PYRIGHT,PYTHON_RUFF,ACTION_ACTIONLINT,ACTION_ZIZMOR,COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_DUSTILOCK,REPOSITORY_GIT_DIFF,REPOSITORY_BETTERLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,REPOSITORY_KINGFISHER,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

MegaLinter is provided by OX Security
Show us your support by starring ⭐ the repository

@renovate
renovate Bot force-pushed the renovate/cycjimmy-semantic-release-action-8.x branch from 2745724 to 2156baa Compare October 20, 2026 11:51
@github-actions

github-actions Bot commented Oct 20, 2026

Copy link
Copy Markdown
Contributor

Trivy image scan report

ghcr.io/chgl/github-reusable-workflow-with-fixed-image-tags:v1.2.3-beta.123 (debian 13.7)

No Vulnerabilities found

Python

6 known vulnerabilities found (CRITICAL: 0, HIGH: 4, MEDIUM: 2, LOW: 0, UNKNOWN: 0)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
msgpack GHSA-6v7p-g79w-8964 HIGH 1.1.2 1.2.1
setuptools CVE-2025-47273 HIGH 70.3.0 78.1.1
setuptools CVE-2026-59890 MEDIUM 70.3.0 83.0.0
urllib3 CVE-2026-97687 HIGH 2.7.0 2.8.0
urllib3 CVE-2026-97689 HIGH 2.7.0 2.8.0
urllib3 CVE-2026-97688 MEDIUM 2.7.0 2.8.0

@renovate
renovate Bot force-pushed the renovate/cycjimmy-semantic-release-action-8.x branch from 2156baa to 191fe47 Compare October 28, 2026 12:11
@chgl
chgl merged commit 4b54b11 into master Oct 28, 2026
38 of 41 checks passed
@renovate
renovate Bot deleted the renovate/cycjimmy-semantic-release-action-8.x branch October 28, 2026 12:53
@github-actions

github-actions Bot commented Nov 2, 2026

Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 1.11.67 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@chgl chgl chgl approved these changes

Assignees

No one assigned

Labels

released

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@chgl