Skip to content

chore(deps): bump softprops/action-gh-release from 2.6.2 to 3.0.2 - #181

Merged
Neftedollar merged 1 commit into
mainfrom
dependabot/github_actions/softprops/action-gh-release-3.0.2
Aug 15, 2026
Merged

chore(deps): bump softprops/action-gh-release from 2.6.2 to 3.0.2#181
Neftedollar merged 1 commit into
mainfrom
dependabot/github_actions/softprops/action-gh-release-3.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 15, 2026

Copy link
Copy Markdown
Contributor

Bumps softprops/action-gh-release from 2.6.2 to 3.0.2.

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.2

3.0.2 is a patch release focused on release reliability and compatibility. It reuses existing draft releases when publishing prereleases, supports replacing release assets on Gitea, hardens streamed asset uploads, and provides clearer release-creation diagnostics. It also includes TypeScript, coverage, and tooling maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the historical failure reported in #790, although current hosted Node 24 runners did not reproduce it naturally. The diagnostics work is related to #786 and does not claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

v3.0.1

3.0.1

  • maintenance release with updated dependencies

v3.0.0

3.0.0 is a major release that moves the action runtime from Node 20 to Node 24. Use v3 on GitHub-hosted runners and self-hosted fleets that already support the Node 24 Actions runtime. If you still need the last Node 20-compatible line, stay on v2.6.2.

What's Changed

Other Changes 🔄

  • Move the action runtime and bundle target to Node 24
  • Update @types/node to the Node 24 line and allow future Dependabot updates
  • Keep the floating major tag on v3; v2 remains pinned to the latest 2.x release
Changelog

Sourced from softprops/action-gh-release's changelog.

3.0.2

3.0.2 is a patch release focused on release reliability and compatibility. It reuses existing draft releases when publishing prereleases, supports replacing release assets on Gitea, hardens streamed asset uploads, and provides clearer release-creation diagnostics. It also includes TypeScript, coverage, and tooling maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the historical failure reported in #790, although current hosted Node 24 runners did not reproduce it naturally. The diagnostics work is related to #786 and does not claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

3.0.1

  • maintenance release with updated dependencies

3.0.0

3.0.0 is a major release that moves the action runtime from Node 20 to Node 24. Use v3 on GitHub-hosted runners and self-hosted fleets that already support the Node 24 Actions runtime. v2.6.2 was the final Node 20-compatible release and is no longer maintained or supported.

What's Changed

Other Changes 🔄

  • Move the action runtime and bundle target to Node 24
  • Update @types/node to the Node 24 line and allow future Dependabot updates
  • Keep the floating major tag on v3; freeze v2 at the final v2.6.2 release

... (truncated)

Commits
  • 3d0d988 release 3.0.2 (#818)
  • 7e13ed4 fix: clarify release creation 404 errors (#817)
  • e6c70a5 fix: replace existing release assets on Gitea (#816)
  • f345337 fix: publish existing draft releases as prereleases (#801)
  • d8a89a2 fix: upload small checksum assets reliably (#815)
  • 45ece40 chore(deps): remove unused TypeScript tooling (#814)
  • f6b913c feat: improve release error reporting and test coverage (#813)
  • 15f193d chore(deps): upgrade TypeScript to 7 (#812)
  • cc8268d chore(deps): bump actions/checkout in the github-actions group (#810)
  • fd0ed1e chore(deps): bump the npm group with 3 updates (#811)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.6.2 to 3.0.2.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@3bb1273...3d0d988)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 15, 2026
@Neftedollar
Neftedollar merged commit a7e42d3 into main Aug 15, 2026
2 checks passed
@Neftedollar
Neftedollar deleted the dependabot/github_actions/softprops/action-gh-release-3.0.2 branch August 15, 2026 21:27
Neftedollar added a commit that referenced this pull request Aug 15, 2026
Dependabot's first run hit its default open-pull-requests-limit of 5 per
ecosystem exactly (nuget: #176-#180, actions: #172-#175/#181), so anything
past the cap was never proposed. dotnet list package --outdated found four
real updates behind it; the limit is raised to 15 so a cap never again reads
as 'nothing outdated'.

Bumped:
- Nerdbank.MessagePack 1.2.30 -> 1.2.36
- Microsoft.NET.Test.Sdk 17.12.0 -> 18.9.0
- xunit.runner.visualstudio 3.0.2 -> 4.0.0
- fsharp-analyzers runtime tool 0.36.0 -> 0.37.2 (dotnet-tools.json and the
  ProjectHealth constant move together; they are two copies of one pin)

Deliberately NOT bumped: Microsoft.VisualStudio.Threading.Only stays at
17.14.15. StreamJsonRpc 2.25.29 is the latest release and its lock entry
requires exactly 17.14.15; the pin exists because fresh host processes
otherwise fail set_project with FileNotFoundException for
Microsoft.VisualStudio.Threading 17.14.0.0 (#121).

Also fixes drift the grouped analyzer bump left behind: fcs_analyzer_setup_preview
emitted paste-ready snippets recommending G-Research 0.22.*/Ionide 0.15.* while
the project files had already moved to 0.23.0/0.16.0. No test bound the two, so
nothing caught it.

Verified on SDK 10.0.400: locked restore clean, build 0 warnings/0 errors,
full suite 549/549, and a live stdio probe (set_project against this repo)
returns workspaceLoadStatus=ready with the LSP started — the #121 bind holds.

Co-authored-by: Roman Melnikov <roman@neftedollar.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant