Skip to content

chore(deps): bump softprops/action-gh-release from 2 to 3#7860

Merged
lalalune merged 5 commits into
developfrom
dependabot/github_actions/softprops/action-gh-release-3
May 21, 2026
Merged

chore(deps): bump softprops/action-gh-release from 2 to 3#7860
lalalune merged 5 commits into
developfrom
dependabot/github_actions/softprops/action-gh-release-3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 20, 2026

Bumps softprops/action-gh-release from 2 to 3.

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.0

3.0.0 is a major release that moves the action runtime from Node 20 to Node 24. Use v3 on GitHub-hosted runners and self-hosted fleets that already support the Node 24 Actions runtime. If you still need the last Node 20-compatible line, stay on v2.6.2.

What's Changed

Other Changes 🔄

  • Move the action runtime and bundle target to Node 24
  • Update @types/node to the Node 24 line and allow future Dependabot updates
  • Keep the floating major tag on v3; v2 remains pinned to the latest 2.x release

v2.6.2

What's Changed

Other Changes 🔄

Full Changelog: softprops/action-gh-release@v2...v2.6.2

v2.6.1

2.6.1 is a patch release focused on restoring linked discussion thread creation when discussion_category_name is set. It fixes [#764](https://github.com/softprops/action-gh-release/issues/764), where the draft-first publish flow stopped carrying the discussion category through the final publish step.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

v2.6.0

2.6.0 is a minor release centered on previous_tag support for generate_release_notes, which lets workflows pin GitHub's comparison base explicitly instead of relying on the default range. It also includes the recent concurrent asset upload recovery fix, a working_directory docs sync, a checked-bundle freshness guard for maintainers, and clearer immutable-prerelease guidance where GitHub platform behavior imposes constraints on how prerelease asset uploads can be published.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

... (truncated)

Changelog

Sourced from softprops/action-gh-release's changelog.

0.1.13

  • fix issue with multiple runs concatenating release bodies #145

0.1.12

  • fix bug leading to empty strings substituted for inputs users don't provide breaking api calls #144

0.1.11

  • better error message on release create failed #143

0.1.10

  • fixed error message formatting for file uploads

0.1.9

  • add support for linking release to GitHub discussion #136

0.1.8

  • address recent warnings in assert upload api as well as introduce asset upload overrides, allowing for multiple runs for the same release with the same named asserts #134
  • fix backwards compatibility with GITHUB_TOKEN resolution. GITHUB_TOKEN is now resolved first from an env variable and then from an input #133
  • trim white space in provided tag_name #130

0.1.7

  • allow creating draft releases without a tag #95
  • Set default token for simpler setup #83
  • fix regression with action yml #126

0.1.6

This is a release catch up have a hiatus. Future releases will happen more frequently

  • Add 'fail_on_unmatched_files' input, useful for catching cases where your files input does not actually match what you expect #55
  • Add repository input, useful for creating a release in an external repository #61
  • Add release id to outputs, useful for referring to release in workflow steps following the step that uses this action #60
  • Add upload_url as action output, useful for managing uploads separately #75
  • Support custom target_commitish value, useful to customize the default #76
  • fix body_path input first then fall back on body input. This was the originally documented precedence but was implemented in the opposite order! #85
  • Retain original release info if the keys are not set, useful for filling in blanks for a release you've already started separately #109
  • Limit number of times github api request to create a release is retried, useful for avoiding eating up your rate limit and action minutes due to either an invalid token or other circumstance causing the api call to fail #111

0.1.5

  • Added support for specifying tag name #39

0.1.4

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Greptile Summary

This PR bumps softprops/action-gh-release from v2 to v3 across three GitHub Actions release workflows. The only functional change in v3 is a move from the Node 20 to the Node 24 Actions runtime; the action's inputs, outputs, and behavior are otherwise unchanged.

  • build-debian-package.yml, build-linux-iso.yml, build-vm-image.yml: Each updates a single uses: softprops/action-gh-release@v2 line to @v3 in the "Upload to GitHub Release" step. No workflow logic is altered.
  • GitHub-hosted runners already support Node 24, so the upgrade is compatible with the standard CI environment used here.

Confidence Score: 5/5

Safe to merge — only the action version tag changes; GitHub-hosted runners support Node 24 and the action's interface is unchanged.

The change is a one-line version bump in each of three workflow files. v3 of the action introduces no input/output changes; it only upgrades its internal Node runtime from 20 to 24, which GitHub-hosted runners already support. No workflow logic, secrets handling, or artifact paths are affected.

No files require special attention.

Important Files Changed

Filename Overview
.github/workflows/build-debian-package.yml Bumps softprops/action-gh-release from v2 to v3 in the Upload to GitHub Release step; no other changes.
.github/workflows/build-linux-iso.yml Bumps softprops/action-gh-release from v2 to v3 in the Upload to GitHub Release step; no other changes.
.github/workflows/build-vm-image.yml Bumps softprops/action-gh-release from v2 to v3 in the Upload to GitHub Release step; no other changes.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[GitHub Release / workflow_dispatch / workflow_call] --> B{Event check}
    B -- release event --> C[Build artifact]
    B -- publish input = true --> C
    C --> D[Upload to GitHub Release]
    D --> E["softprops/action-gh-release@v3\n(Node 24 runtime)"]
    E --> F[Release asset attached]
Loading

Reviews (5): Last reviewed commit: "Merge branch 'develop' into dependabot/g..." | Re-trigger Greptile

Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2 to 3.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@v2...v3)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies github_actions Pull requests that update GitHub Actions code labels May 20, 2026
@github-actions github-actions Bot added the ci label May 20, 2026
@claude
Copy link
Copy Markdown
Contributor

claude Bot commented May 21, 2026

Claude encountered an error —— View job


I'll analyze this and get back to you.

@claude
Copy link
Copy Markdown
Contributor

claude Bot commented May 21, 2026

Claude Code is working…

I'll analyze this and get back to you.

View job run

@claude
Copy link
Copy Markdown
Contributor

claude Bot commented May 21, 2026

Claude encountered an error —— View job


I'll analyze this and get back to you.

@lalalune lalalune merged commit 5960e34 into develop May 21, 2026
23 of 26 checks passed
@lalalune lalalune deleted the dependabot/github_actions/softprops/action-gh-release-3 branch May 21, 2026 02:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci dependencies github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants