Bump the github-actions group with 5 updates by dependabot[bot] · Pull Request #134 · changesets/ghcommit

dependabot · 2026-10-01T00:45:48Z

Bumps the github-actions group with 5 updates:

Package	From	To
zizmorcore/zizmor-action	`0.6.2`	`0.6.4`
changesets/action/select-mode	`2.1.1`	`2.1.2`
changesets/action/version	`2.1.1`	`2.1.2`
changesets/action/pack	`2.1.1`	`2.1.2`
changesets/action/publish	`2.1.1`	`2.1.2`

Updates zizmorcore/zizmor-action from 0.6.2 to 0.6.4

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.6.4

Sponsorship is appreciated!

zizmor 1.30.1 is now the default version.

Release notes: zizmorcore/zizmor-action#1301

v0.6.3

zizmor 1.30.0 is now the default version.

Release notes: zizmorcore/zizmor-action#1300

Commits

cc914d7 Sync zizmor versions (#166)
bae72b7 chore(deps): bump the github-actions group with 2 updates (#165)
27604f9 chore(deps): bump the github-actions group with 2 updates (#164)
c41d665 README: bump pins (#163)
70fb788 Sync zizmor versions (#162)
7999d8c chore(deps): bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 in ...
2ae1ce9 chore(deps): bump github/codeql-action/upload-sarif (#160)
951a5ee Skip prerelease versions in sync-zizmor-versions workflow (#158)
79f0191 chore(deps): bump github/codeql-action/upload-sarif (#156)
26a3ae6 sync-zizmor-versions: retry up to 5 times (#155)
Additional commits viewable in compare view

Updates changesets/action/select-mode from 2.1.1 to 2.1.2

Release notes

Sourced from changesets/action/select-mode's releases.

v2.1.2

Patch Changes

#735 8833883 Thanks @bluwy! - Handle error when pushing git tags with the git CLI

#724 36f529f Thanks @bluwy! - Improve log messages

#724 36f529f Thanks @bluwy! - Fix root action double error logs

#729 ca85897 Thanks @bluwy! - Always switch and reset branch when generating version commits, similar to if push-with-git-cli is enabled

Changelog

Sourced from changesets/action/select-mode's changelog.

@changesets/action

2.1.2

Patch Changes

#735 8833883 Thanks @bluwy! - Handle error when pushing git tags with the git CLI

#724 36f529f Thanks @bluwy! - Improve log messages

#724 36f529f Thanks @bluwy! - Fix root action double error logs

#729 ca85897 Thanks @bluwy! - Always switch and reset branch when generating version commits, similar to if push-with-git-cli is enabled

2.1.1

Patch Changes

#721 da1ea29 Thanks @KEBABSELLER6! - Fixed typo in renamed inputs from v1 to v2

2.1.0

Minor Changes

#718 3b7c71c Thanks @bluwy! - Add a cwd input to the root action, /select-mode, /version, /pack, and /publish sub-actions to set the current working directory to execute Changesets in. This input existed in v1 but was incorrectly removed.

Patch Changes

#716 6f58ba3 Thanks @bluwy! - Update pr-status message to link to the new faq page

2.0.0

Major Changes

#692 cb3f011 Thanks @Andarist! - Release commits and tags are now pushed using the GitHub API by default.

Replace the commit-mode input with the boolean push-with-git-cli input. Set push-with-git-cli: true to continue using the Git CLI.

Regardless of the push mode, custom GitHub tokens must be passed explicitly through the github-token input. The GITHUB_TOKEN environment variable and credentials configured by actions/checkout or embedded in remote URLs are not substitutes for this input. When the Git CLI is enabled, github-token takes precedence over those repository credentials.

#680 ca57073 Thanks @bluwy! - Add a new push-git-tags option that complements create-github-releases to control specifically if git tags should be created but not GitHub releases.

If create-github-releases was previously set to false, which also indirectly disabled git tag creation, git tags will now be created instead by default. If this is not desired, set push-git-tags to false explicitly.

#657 4f718b5 Thanks @Andarist! - Removed compatibility support for old Changesets v1.

#681 7359107 Thanks @bluwy! - Rename the root action inputs and outputs to better match the sub-actions' conventions.

Inputs:

... (truncated)

Commits

ae32849 v2.1.2
0138f45 Version Packages (#726)
8833883 Handle error when pushing git tags with the git CLI (#735)
e08fde7 Improve log messages (#730)
371fd77 Bump human-id in the production-dependencies group across 1 directory (#732)
85efcaf Bump actions/checkout in the github-actions group across 1 directory (#734)
5bb9d5c Bump the development-dependencies group across 1 directory with 7 updates (#733)
ca85897 Always prepare branch for version (#729)
36f529f Fix root action double error logs (#724)
See full diff in compare view

Updates changesets/action/version from 2.1.1 to 2.1.2

Release notes

Sourced from changesets/action/version's releases.

v2.1.2

Patch Changes

#735 8833883 Thanks @bluwy! - Handle error when pushing git tags with the git CLI

#724 36f529f Thanks @bluwy! - Improve log messages

#724 36f529f Thanks @bluwy! - Fix root action double error logs

#729 ca85897 Thanks @bluwy! - Always switch and reset branch when generating version commits, similar to if push-with-git-cli is enabled

Changelog

Sourced from changesets/action/version's changelog.

@changesets/action

2.1.2

Patch Changes

#735 8833883 Thanks @bluwy! - Handle error when pushing git tags with the git CLI

#724 36f529f Thanks @bluwy! - Improve log messages

#724 36f529f Thanks @bluwy! - Fix root action double error logs

#729 ca85897 Thanks @bluwy! - Always switch and reset branch when generating version commits, similar to if push-with-git-cli is enabled

2.1.1

Patch Changes

#721 da1ea29 Thanks @KEBABSELLER6! - Fixed typo in renamed inputs from v1 to v2

2.1.0

Minor Changes

#718 3b7c71c Thanks @bluwy! - Add a cwd input to the root action, /select-mode, /version, /pack, and /publish sub-actions to set the current working directory to execute Changesets in. This input existed in v1 but was incorrectly removed.

Patch Changes

#716 6f58ba3 Thanks @bluwy! - Update pr-status message to link to the new faq page

2.0.0

Major Changes

#692 cb3f011 Thanks @Andarist! - Release commits and tags are now pushed using the GitHub API by default.

Replace the commit-mode input with the boolean push-with-git-cli input. Set push-with-git-cli: true to continue using the Git CLI.

Regardless of the push mode, custom GitHub tokens must be passed explicitly through the github-token input. The GITHUB_TOKEN environment variable and credentials configured by actions/checkout or embedded in remote URLs are not substitutes for this input. When the Git CLI is enabled, github-token takes precedence over those repository credentials.

#680 ca57073 Thanks @bluwy! - Add a new push-git-tags option that complements create-github-releases to control specifically if git tags should be created but not GitHub releases.

If create-github-releases was previously set to false, which also indirectly disabled git tag creation, git tags will now be created instead by default. If this is not desired, set push-git-tags to false explicitly.

#657 4f718b5 Thanks @Andarist! - Removed compatibility support for old Changesets v1.

#681 7359107 Thanks @bluwy! - Rename the root action inputs and outputs to better match the sub-actions' conventions.

Inputs:

... (truncated)

Commits

ae32849 v2.1.2
0138f45 Version Packages (#726)
8833883 Handle error when pushing git tags with the git CLI (#735)
e08fde7 Improve log messages (#730)
371fd77 Bump human-id in the production-dependencies group across 1 directory (#732)
85efcaf Bump actions/checkout in the github-actions group across 1 directory (#734)
5bb9d5c Bump the development-dependencies group across 1 directory with 7 updates (#733)
ca85897 Always prepare branch for version (#729)
36f529f Fix root action double error logs (#724)
See full diff in compare view

Updates changesets/action/pack from 2.1.1 to 2.1.2

Release notes

Sourced from changesets/action/pack's releases.

v2.1.2

Patch Changes

#735 8833883 Thanks @bluwy! - Handle error when pushing git tags with the git CLI

#724 36f529f Thanks @bluwy! - Improve log messages

#724 36f529f Thanks @bluwy! - Fix root action double error logs

#729 ca85897 Thanks @bluwy! - Always switch and reset branch when generating version commits, similar to if push-with-git-cli is enabled

Changelog

Sourced from changesets/action/pack's changelog.

@changesets/action

2.1.2

Patch Changes

#735 8833883 Thanks @bluwy! - Handle error when pushing git tags with the git CLI

#724 36f529f Thanks @bluwy! - Improve log messages

#724 36f529f Thanks @bluwy! - Fix root action double error logs

#729 ca85897 Thanks @bluwy! - Always switch and reset branch when generating version commits, similar to if push-with-git-cli is enabled

2.1.1

Patch Changes

#721 da1ea29 Thanks @KEBABSELLER6! - Fixed typo in renamed inputs from v1 to v2

2.1.0

Minor Changes

#718 3b7c71c Thanks @bluwy! - Add a cwd input to the root action, /select-mode, /version, /pack, and /publish sub-actions to set the current working directory to execute Changesets in. This input existed in v1 but was incorrectly removed.

Patch Changes

#716 6f58ba3 Thanks @bluwy! - Update pr-status message to link to the new faq page

2.0.0

Major Changes

#692 cb3f011 Thanks @Andarist! - Release commits and tags are now pushed using the GitHub API by default.

Replace the commit-mode input with the boolean push-with-git-cli input. Set push-with-git-cli: true to continue using the Git CLI.

Regardless of the push mode, custom GitHub tokens must be passed explicitly through the github-token input. The GITHUB_TOKEN environment variable and credentials configured by actions/checkout or embedded in remote URLs are not substitutes for this input. When the Git CLI is enabled, github-token takes precedence over those repository credentials.

#680 ca57073 Thanks @bluwy! - Add a new push-git-tags option that complements create-github-releases to control specifically if git tags should be created but not GitHub releases.

If create-github-releases was previously set to false, which also indirectly disabled git tag creation, git tags will now be created instead by default. If this is not desired, set push-git-tags to false explicitly.

#657 4f718b5 Thanks @Andarist! - Removed compatibility support for old Changesets v1.

#681 7359107 Thanks @bluwy! - Rename the root action inputs and outputs to better match the sub-actions' conventions.

Inputs:

... (truncated)

Commits

ae32849 v2.1.2
0138f45 Version Packages (#726)
8833883 Handle error when pushing git tags with the git CLI (#735)
e08fde7 Improve log messages (#730)
371fd77 Bump human-id in the production-dependencies group across 1 directory (#732)
85efcaf Bump actions/checkout in the github-actions group across 1 directory (#734)
5bb9d5c Bump the development-dependencies group across 1 directory with 7 updates (#733)
ca85897 Always prepare branch for version (#729)
36f529f Fix root action double error logs (#724)
See full diff in compare view

Updates changesets/action/publish from 2.1.1 to 2.1.2

Release notes

Sourced from changesets/action/publish's releases.

v2.1.2

Patch Changes

#735 8833883 Thanks @bluwy! - Handle error when pushing git tags with the git CLI

#724 36f529f Thanks @bluwy! - Improve log messages

#724 36f529f Thanks @bluwy! - Fix root action double error logs

#729 ca85897 Thanks @bluwy! - Always switch and reset branch when generating version commits, similar to if push-with-git-cli is enabled

Changelog

Sourced from changesets/action/publish's changelog.

@changesets/action

2.1.2

Patch Changes

#735 8833883 Thanks @bluwy! - Handle error when pushing git tags with the git CLI

#724 36f529f Thanks @bluwy! - Improve log messages

#724 36f529f Thanks @bluwy! - Fix root action double error logs

#729 ca85897 Thanks @bluwy! - Always switch and reset branch when generating version commits, similar to if push-with-git-cli is enabled

2.1.1

Patch Changes

#721 da1ea29 Thanks @KEBABSELLER6! - Fixed typo in renamed inputs from v1 to v2

2.1.0

Minor Changes

#718 3b7c71c Thanks @bluwy! - Add a cwd input to the root action, /select-mode, /version, /pack, and /publish sub-actions to set the current working directory to execute Changesets in. This input existed in v1 but was incorrectly removed.

Patch Changes

#716 6f58ba3 Thanks @bluwy! - Update pr-status message to link to the new faq page

2.0.0

Major Changes

#692 cb3f011 Thanks @Andarist! - Release commits and tags are now pushed using the GitHub API by default.

Replace the commit-mode input with the boolean push-with-git-cli input. Set push-with-git-cli: true to continue using the Git CLI.

Regardless of the push mode, custom GitHub tokens must be passed explicitly through the github-token input. The GITHUB_TOKEN environment variable and credentials configured by actions/checkout or embedded in remote URLs are not substitutes for this input. When the Git CLI is enabled, github-token takes precedence over those repository credentials.

#680 ca57073 Thanks @bluwy! - Add a new push-git-tags option that complements create-github-releases to control specifically if git tags should be created but not GitHub releases.

If create-github-releases was previously set to false, which also indirectly disabled git tag creation, git tags will now be created instead by default. If this is not desired, set push-git-tags to false explicitly.

#657 4f718b5 Thanks @Andarist! - Removed compatibility support for old Changesets v1.

#681 7359107 Thanks @bluwy! - Rename the root action inputs and outputs to better match the sub-actions' conventions.

Inputs:

... (truncated)

Commits

ae32849 v2.1.2
0138f45 Version Packages (#726)
8833883 Handle error when pushing git tags with the git CLI (#735)
e08fde7 Improve log messages (#730)
371fd77 Bump human-id in the production-dependencies group across 1 directory (#732)
85efcaf Bump actions/checkout in the github-actions group across 1 directory (#734)
5bb9d5c Bump the development-dependencies group across 1 directory with 7 updates (#733)
ca85897 Always prepare branch for version (#729)
36f529f Fix root action double error logs (#724)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 5 updates: | Package | From | To | | --- | --- | --- | | [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.6.2` | `0.6.4` | | [changesets/action/select-mode](https://github.com/changesets/action) | `2.1.1` | `2.1.2` | | [changesets/action/version](https://github.com/changesets/action) | `2.1.1` | `2.1.2` | | [changesets/action/pack](https://github.com/changesets/action) | `2.1.1` | `2.1.2` | | [changesets/action/publish](https://github.com/changesets/action) | `2.1.1` | `2.1.2` | Updates `zizmorcore/zizmor-action` from 0.6.2 to 0.6.4 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](zizmorcore/zizmor-action@3dc1ecc...cc914d7) Updates `changesets/action/select-mode` from 2.1.1 to 2.1.2 - [Release notes](https://github.com/changesets/action/releases) - [Changelog](https://github.com/changesets/action/blob/main/CHANGELOG.md) - [Commits](changesets/action@8488615...ae32849) Updates `changesets/action/version` from 2.1.1 to 2.1.2 - [Release notes](https://github.com/changesets/action/releases) - [Changelog](https://github.com/changesets/action/blob/main/CHANGELOG.md) - [Commits](changesets/action@8488615...ae32849) Updates `changesets/action/pack` from 2.1.1 to 2.1.2 - [Release notes](https://github.com/changesets/action/releases) - [Changelog](https://github.com/changesets/action/blob/main/CHANGELOG.md) - [Commits](changesets/action@8488615...ae32849) Updates `changesets/action/publish` from 2.1.1 to 2.1.2 - [Release notes](https://github.com/changesets/action/releases) - [Changelog](https://github.com/changesets/action/blob/main/CHANGELOG.md) - [Commits](changesets/action@8488615...ae32849) --- updated-dependencies: - dependency-name: zizmorcore/zizmor-action dependency-version: 0.6.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: changesets/action/select-mode dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: changesets/action/version dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: changesets/action/pack dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: changesets/action/publish dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 1, 2026

dependabot Bot requested review from Andarist and bluwy as code owners October 1, 2026 00:45

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 1, 2026

bluwy approved these changes Oct 1, 2026

View reviewed changes

bluwy added this pull request to the merge queue Oct 1, 2026

Merged via the queue into main with commit b421422 Oct 1, 2026
9 checks passed

bluwy deleted the dependabot/github_actions/github-actions-4b30fb3b87 branch October 1, 2026 04:09

Navigation Menu

Uh oh!

Bump the github-actions group with 5 updates - #134

Bump the github-actions group with 5 updates#134
bluwy merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-4b30fb3b87

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026

v0.6.4

v0.6.3

v2.1.2

Patch Changes

@​changesets/action

2.1.2

Patch Changes

2.1.1

Patch Changes

2.1.0

Minor Changes

Patch Changes

2.0.0

Major Changes

v2.1.2

Patch Changes

@​changesets/action

2.1.2

Patch Changes

2.1.1

Patch Changes

2.1.0

Minor Changes

Patch Changes

2.0.0

Major Changes

v2.1.2

Patch Changes

@​changesets/action

2.1.2

Patch Changes

2.1.1

Patch Changes

2.1.0

Minor Changes

Patch Changes

2.0.0

Major Changes

v2.1.2

Patch Changes

@​changesets/action

2.1.2

Patch Changes

2.1.1

Patch Changes

2.1.0

Minor Changes

Patch Changes

2.0.0

Major Changes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`@changesets/action`

`@changesets/action`

`@changesets/action`

`@changesets/action`