Skip to content

chore(ci): bump changesets/action from 1.8.0 to 1.9.0#140

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/changesets/action-1.9.0
Closed

chore(ci): bump changesets/action from 1.8.0 to 1.9.0#140
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/changesets/action-1.9.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps changesets/action from 1.8.0 to 1.9.0.

Release notes

Sourced from changesets/action's releases.

v1.9.0

Minor Changes

  • #636 b072bcc Thanks @​bluwy! - Add a new @changesets/action/pr-comment sub-action to comment on PRs

  • #625 8795eee Thanks @​bluwy! - Add a new @changesets/action/pr-status sub-action to generate the changeset status comment for PRs as an alternative to the Changesets Bot.

Patch Changes

  • #535 34f64f6 Thanks @​Andarist! - Fixed an issue with GitHub releases not being created for successfully published packages when some packages failed to be published to the registry.

  • #632 1d54b9e Thanks @​bluwy! - Simplify internal implementation to get changelog entries for a package version

  • #629 e0c90aa Thanks @​bluwy! - Fix custom version and publish command argument parsing

  • #645 f9585d9 Thanks @​Andarist! - Improved force-push handling when using commitMode: "github-api" so updating an existing branch no longer temporarily resets the target branch to the base commit, avoiding cases where GitHub closes open pull requests during the update. This should remove a possibility of a GitHub state race that caused the force-pushed PRs not being reopened.

Changelog

Sourced from changesets/action's changelog.

@​changesets/action

1.9.0

Minor Changes

  • #636 b072bcc Thanks @​bluwy! - Add a new @changesets/action/pr-comment sub-action to comment on PRs

  • #625 8795eee Thanks @​bluwy! - Add a new @changesets/action/pr-status sub-action to generate the changeset status comment for PRs as an alternative to the Changesets Bot.

Patch Changes

  • #535 34f64f6 Thanks @​Andarist! - Fixed an issue with GitHub releases not being created for successfully published packages when some packages failed to be published to the registry.

  • #632 1d54b9e Thanks @​bluwy! - Simplify internal implementation to get changelog entries for a package version

  • #629 e0c90aa Thanks @​bluwy! - Fix custom version and publish command argument parsing

  • #645 f9585d9 Thanks @​Andarist! - Improved force-push handling when using commitMode: "github-api" so updating an existing branch no longer temporarily resets the target branch to the base commit, avoiding cases where GitHub closes open pull requests during the update. This should remove a possibility of a GitHub state race that caused the force-pushed PRs not being reopened.

1.8.0

Minor Changes

  • #258 f5dbf72 Thanks @​tom-sherman! - Support draft version PR modes with a new prDraft input. Use create to create new version PRs as drafts, or always to also convert existing version PRs back to draft when updating them.

Patch Changes

  • #502 6002dbd Thanks @​oshytiko! - Fixed initial .changeset state being picked up, when cwd parameter is provided

  • #536 81b3f61 Thanks @​radnan! - Fixed .changeset state being picked for the version command when cwd parameter is provided

1.7.0

Minor Changes

  • #564 935fe87 Thanks @​Andarist! - Automatically use the GitHub-provided token to allow most users to avoid explicit GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} configuration.

Patch Changes

  • #545 54220dd Thanks @​ryanbas21! - The .npmrc generation now intelligently handles both traditional NPM token authentication and trusted publishing scenarios by only appending the auth token when NPM_TOKEN is defined. This prevents 'undefined' from being written to the registry configuration when using OIDC tokens from GitHub Actions trusted publishing.

  • #563 6af4a7e Thanks @​Andarist! - Don't error on already committed symlinks and executables that stay untouched

1.6.0

Minor Changes

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [changesets/action](https://github.com/changesets/action) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/changesets/action/releases)
- [Changelog](https://github.com/changesets/action/blob/main/CHANGELOG.md)
- [Commits](changesets/action@63a615b...a45c4d5)

---
updated-dependencies:
- dependency-name: changesets/action
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: ci. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 8, 2026
@dependabot dependabot Bot requested a review from agjs as a code owner June 8, 2026 07:14
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 8, 2026
agjs added a commit that referenced this pull request Jun 9, 2026
* chore(deps): bump GitHub Actions pins (checkout, codecov, changesets)

- actions/checkout 6.0.2 -> 6.0.3 (23 workflows)
- codecov/codecov-action 6.0.1 -> 7.0.0 (api-ci, ui-validate)
- changesets/action 1.8.0 -> 1.9.0 (release workflows)

Consolidates dependabot PRs #128, #129, #140.

* chore(deps): bump apps/api dependencies

- @anthropic-ai/sdk 0.98.0 -> 0.100.1, openai 6.39.0 -> 6.39.1 (#148)
- @sentry/bun 10.53.1 -> 10.55.0 (#144)
- bullmq 5.77.3 -> 5.77.6 (#134, ioredis held back below)
- nodemailer 8.0.8 -> 8.0.10 (#138)
- stripe 22.1.1 -> 22.2.0 (#136)
- eslint 10.4.0 -> 10.4.1, eslint-plugin-prettier 5.5.5 -> 5.5.6 (#141)
- @boring-stack-pkg/eslint-plugin-jwt-cookies 0.1.1 -> 0.1.2 (#150)
- @boring-stack-pkg/eslint-plugin-module-boundaries 0.1.1 -> 0.1.2 (#149)

ioredis intentionally kept at 5.10.1 (not bumped to 5.11.0 from #134's
group): bullmq@5.77.6 pins ioredis to an exact 5.10.1, so a top-level
5.11.0 cannot dedupe and the two copies' connector types are structurally
incompatible (TS2769). Defer ioredis until bullmq updates its pin.

* chore(deps): bump apps/ui dependencies

- @sentry/react 10.53.1 -> 10.55.0 (#142)
- react-hook-form 7.75.0 -> 7.77.0 (#145)
- react-router-dom 7.15.1 -> 7.16.0 (#130)
- lucide-react 1.16.0 -> 1.17.0 (#133)
- lint-staged 17.0.5 -> 17.0.7 (#147)
- tsx 4.22.3 -> 4.22.4 (#146)
- @eslint/json 1.2.0 -> 2.0.0, eslint 10.4.0 -> 10.4.1, eslint-import-resolver-typescript 4.4.4 -> 4.4.5 (#139)
- @boring-stack-pkg/eslint-plugin-module-boundaries 0.1.1 -> 0.1.2 (#143)

Consolidates dependabot PRs #130, #133, #139, #142, #143, #145, #146, #147.

* chore(deps): bump apps/docs dependencies + pin @astrojs/markdown-remark

- astro 6.3.7 -> 6.4.2 (#132)
- @astrojs/react 5.0.5 -> 5.0.6 (#135)
- @astrojs/sitemap 3.7.2 -> 3.7.3 (#131)
- wrangler 4.94.0 -> 4.95.0 (#137)

Adds an @astrojs/markdown-remark@7.2.0 override: astro 6.4.2 pins that
exact version (only it exposes the `unified` subpath export the prerender
runtime imports), but Starlight pulls 7.1.x transitively; without the pin
the hoisted 7.1.x copy shadows astro's nested 7.2.0 and `astro build`
fails. Rationale documented in the //overrides block.

Consolidates dependabot PRs #131, #132, #135, #137.
@agjs

agjs commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

Superseded by #151, which consolidated all open Dependabot bumps and landed in main. Closing.

@dependabot close

@agjs agjs closed this Jun 9, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 9, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@agjs agjs deleted the dependabot/github_actions/changesets/action-1.9.0 branch June 9, 2026 12:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant