chore(deps): bump changesets/action from 1.9.0 to 2.1.1 - #452
chore(deps): bump changesets/action from 1.9.0 to 2.1.1#452dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [changesets/action](https://github.com/changesets/action) from 1.9.0 to 2.1.1. - [Release notes](https://github.com/changesets/action/releases) - [Changelog](https://github.com/changesets/action/blob/main/CHANGELOG.md) - [Commits](changesets/action@a45c4d5...8488615) --- updated-dependencies: - dependency-name: changesets/action dependency-version: 2.1.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
|
| - name: Create Release Pull Request or Publish to npm | ||
| id: changesets | ||
| uses: changesets/action@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d # v1.9.0 | ||
| uses: changesets/action@8488615a623b1b9c987934bb89eae8af6a946ac1 # v2.1.1 |
There was a problem hiding this comment.
🔴 Release action ignores renamed version and publish inputs
changesets/action v2 renamed the version and publish inputs to version-script and publish-script. The upgraded step still passes the old names (version/publish), so both are ignored and the custom yarn ci:version and yarn ci:publish scripts never run.
Prompt for agents
changesets/action was bumped from v1.9.0 to v2.1.1. In v2.0.0 the root action inputs were renamed: `version` -> `version-script` and `publish` -> `publish-script`. The workflow step at .github/workflows/changeset.yaml still uses the old input names `version:` and `publish:` under `with:`. Rename them to `version-script:` and `publish-script:` respectively so the custom ci:version and ci:publish scripts are used.
Was this helpful? React with 👍 or 👎 to provide feedback.
| - name: Create Release Pull Request or Publish to npm | ||
| id: changesets | ||
| uses: changesets/action@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d # v1.9.0 | ||
| uses: changesets/action@8488615a623b1b9c987934bb89eae8af6a946ac1 # v2.1.1 |
There was a problem hiding this comment.
🔴 Release token passed only through unsupported env var
changesets/action v2 dropped reading the token from the GITHUB_TOKEN environment variable and requires the github-token input instead. The step still supplies the token only via env.GITHUB_TOKEN, leaving the action without credentials to create the release PR or publish.
Prompt for agents
changesets/action v2.0.0 removed support for passing a custom GitHub token through the GITHUB_TOKEN environment variable; the token must now be passed through the `github-token` input. The workflow step in .github/workflows/changeset.yaml only sets `env.GITHUB_TOKEN`. Add `github-token: ${{ secrets.GITHUB_TOKEN }}` under the `with:` block so the action can authenticate.
Was this helpful? React with 👍 or 👎 to provide feedback.
Bumps changesets/action from 1.9.0 to 2.1.1.
Release notes
Sourced from changesets/action's releases.
... (truncated)
Changelog
Sourced from changesets/action's changelog.
... (truncated)
Commits
8488615v2.1.1d7669c8Version Packages (#722)da1ea29Fix typo in renamed inputs (#721)7545547Version Packages (#719)3043070Prevent test warning annotations (#720)3b7c71cAdd back cwd input (#718)6f58ba3Update pr-status message links to new faq (#716)e52ce9eVersion Packages (#715)78fdc6bExit pre mode (#714)187a104Update deps for stable (#709)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)