Skip to content

chore(deps): bump haya14busa/action-update-semver from 1.2.1 to 1.5.1#42

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/haya14busa/action-update-semver-1.5.1
Open

chore(deps): bump haya14busa/action-update-semver from 1.2.1 to 1.5.1#42
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/haya14busa/action-update-semver-1.5.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 12, 2026

Copy link
Copy Markdown

Bumps haya14busa/action-update-semver from 1.2.1 to 1.5.1.

Release notes

Sourced from haya14busa/action-update-semver's releases.

Release v1.5.1

What's Changed

Full Changelog: haya14busa/action-update-semver@v1.5.0...v1.5.1

Release v1.5.0

What's Changed

Full Changelog: haya14busa/action-update-semver@v1.4.0...v1.5.0

Release v1.4.0

What's Changed

New Contributors

Full Changelog: haya14busa/action-update-semver@v1.3.0...v1.4.0

Release v1.3.0

v1.3.0: PR #23 - Convert this docker based action to composite action

Commits
  • 7d2c558 Merge pull request #28 from haya14busa/fix-gh-server-env
  • 67740cf fix trusted-tag-verifier input
  • 7cde777 Add error handling to script with set -e flag
  • be3f978 fix remote url
  • 3f49a54 Merge pull request #27 from haya14busa/bump-ver
  • ee80e8d bump minor version
  • f367549 Merge pull request #26 from haya14busa/add-output-tags
  • 35d64dd Merge pull request #22 from cardoe/patch-2
  • fcd70a2 Merge branch 'master' into patch-2
  • ddcd133 feat: Add major and minor tag outputs
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

View in Codesmith
Need help on this PR? Tag @codesmith with what you need.

  • Let Codesmith autofix CI failures and bot reviews

Greptile Summary

Routine Dependabot bump of haya14busa/action-update-semver from v1.2.1 to v1.5.1 in the workflow that keeps major/minor semver tags aligned after a new release tag is pushed.

  • The version jump spans v1.3.0 (Docker → composite action), v1.4.0 (GHE support, trusted-tag-releaser, tag outputs), and v1.5.x (GH server env fix), all non-breaking changes within the v1 major line.
  • No workflow logic, triggers, permissions, or other steps were modified.

Confidence Score: 5/5

Safe to merge — only one line changes and the new version is a compatible minor/patch upgrade within the same v1 major line.

The change is a single version-tag substitution on a well-maintained action, all intermediate releases are backwards-compatible, and the workflow permissions and logic remain untouched.

No files require special attention.

Important Files Changed

Filename Overview
.github/workflows/update-major-minor-tags.yml Bumps haya14busa/action-update-semver from v1.2.1 to v1.5.1; single-line change with no other modifications to workflow logic.

Sequence Diagram

sequenceDiagram
    participant Dev as Developer
    participant GH as GitHub Actions
    participant Checkout as actions/checkout@v4
    participant SemVer as haya14busa/action-update-semver@v1.5.1

    Dev->>GH: push tag (e.g. v2.3.1)
    GH->>Checkout: fetch full history (fetch-depth: 0)
    Checkout-->>GH: repo checked out
    GH->>SemVer: run action
    SemVer-->>GH: update v2 and v2.3 tags to point to v2.3.1 commit
Loading

Reviews (1): Last reviewed commit: "chore(deps): bump haya14busa/action-upda..." | Re-trigger Greptile

Bumps [haya14busa/action-update-semver](https://github.com/haya14busa/action-update-semver) from 1.2.1 to 1.5.1.
- [Release notes](https://github.com/haya14busa/action-update-semver/releases)
- [Commits](haya14busa/action-update-semver@v1.2.1...v1.5.1)

---
updated-dependencies:
- dependency-name: haya14busa/action-update-semver
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the scope/ci-cd affects github actions, deployment, or build processes label May 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies scope/ci-cd affects github actions, deployment, or build processes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants