Skip to content

chore(deps): Update GitHub Actions to v3.0.1#220

Merged
williaby merged 1 commit into
mainfrom
renovate/github-actions
Jun 23, 2026
Merged

chore(deps): Update GitHub Actions to v3.0.1#220
williaby merged 1 commit into
mainfrom
renovate/github-actions

Conversation

@williaby

@williaby williaby commented Jun 23, 2026

Copy link
Copy Markdown
Collaborator

Summary

Why

Scheduled patch update, bug fixes and security patches with no API changes.

Changes

This PR contains the following updates:

Package Type Update Change OpenSSF
softprops/action-gh-release action patch v3.0.0v3.0.1 OpenSSF Scorecard

Impact

  • ✅ Patch update: bug fixes and security patches only
  • ✅ No breaking changes

Acceptance Criteria

  • All CI checks pass

Testing

  • CI gates pass (tests, lint, type checking, security scan)

Notes


Release Notes

softprops/action-gh-release (softprops/action-gh-release)

v3.0.1

Compare Source

3.0.1
  • maintenance release with updated dependencies

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • "after 10pm every weekday,before 5am every weekday,every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

Summary by CodeRabbit

  • Chores
    • Updated GitHub release automation tooling dependencies to latest patch version.

Copilot AI review requested due to automatic review settings June 23, 2026 02:05
@williaby
williaby enabled auto-merge June 23, 2026 02:05
@coderabbitai

coderabbitai Bot commented Jun 23, 2026

Copy link
Copy Markdown

Review Change Stack

Caution

Review failed

Pull request was closed or merged during review

📝 Walkthrough

Walkthrough

Two workflow YAML files update the pinned softprops/action-gh-release GitHub Action version from v3.0.0 to v3.0.1. No other workflow logic, step conditions, or input parameters are modified.

Changes

Python Release Workflow Action Bump

Layer / File(s) Summary
Update softprops/action-gh-release to v3.0.1
.github/workflows/python-release.yml, workflow-templates/python-release.yml
The uses: reference for softprops/action-gh-release is updated from v3.0.0 to v3.0.1 in the manual GitHub release step of both the reusable workflow and its template. All surrounding configuration remains unchanged.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

  • ByronWilliamsCPA/.github#89: Also bumps a pinned GitHub Actions step version (actions/dependency-review-action) in a workflow YAML with no surrounding logic changes.
  • ByronWilliamsCPA/.github#210: Also bumps a pinned GitHub Actions step version (SonarSource/sonarqube-scan-action) in a workflow YAML with no surrounding logic changes.

Poem

A tiny hop from zero to one,
The release action gets a new run.
🐇 No logic changed, no config broke,
Just a fresher SHA we invoked.
Small bumps keep the workflow spry! 🎉

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly and concisely describes the main change: updating GitHub Actions to v3.0.1, which accurately reflects the dependency update across both workflow files.
Description check ✅ Passed The description provides essential information including summary, rationale, changes with a detailed table, impact assessment, and release notes. While some optional template sections are unfilled, all critical information for understanding the patch update is present.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch renovate/github-actions

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@sonarqubecloud

Copy link
Copy Markdown

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the reusable Python release workflows in this repository by bumping the pinned softprops/action-gh-release GitHub Action from v3.0.0 to v3.0.1 (SHA pinned), aligning with routine patch-level dependency maintenance for workflow security and stability.

Changes:

  • Bump softprops/action-gh-release from v3.0.0 to v3.0.1 in the workflow template.
  • Bump softprops/action-gh-release from v3.0.0 to v3.0.1 in the concrete workflow.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
workflow-templates/python-release.yml Updates the SHA-pinned softprops/action-gh-release step to v3.0.1 in the reusable template.
.github/workflows/python-release.yml Updates the SHA-pinned softprops/action-gh-release step to v3.0.1 in the repo workflow.

Merged via the queue into main with commit ef10bbe Jun 23, 2026
35 of 37 checks passed
@williaby
williaby deleted the renovate/github-actions branch June 23, 2026 02:07
@coderabbitai coderabbitai Bot mentioned this pull request Jul 16, 2026
3 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants