Skip to content

chore(ci): bump changesets/action from 1.9.0 to 2.1.1 in the github-actions-major group across 1 directory - #307

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-major-2c80fc32b7
Open

chore(ci): bump changesets/action from 1.9.0 to 2.1.1 in the github-actions-major group across 1 directory#307
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-major-2c80fc32b7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions-major group with 1 update in the / directory: changesets/action.

Updates changesets/action from 1.9.0 to 2.1.1

Release notes

Sourced from changesets/action's releases.

v2.1.1

Patch Changes

v2.1.0

Minor Changes

  • #718 3b7c71c Thanks @​bluwy! - Add a cwd input to the root action, /select-mode, /version, /pack, and /publish sub-actions to set the current working directory to execute Changesets in. This input existed in v1 but was incorrectly removed.

Patch Changes

v2.0.0

Major Changes

  • #692 cb3f011 Thanks @​Andarist! - Release commits and tags are now pushed using the GitHub API by default.

    Replace the commit-mode input with the boolean push-with-git-cli input. Set push-with-git-cli: true to continue using the Git CLI.

    Regardless of the push mode, custom GitHub tokens must be passed explicitly through the github-token input. The GITHUB_TOKEN environment variable and credentials configured by actions/checkout or embedded in remote URLs are not substitutes for this input. When the Git CLI is enabled, github-token takes precedence over those repository credentials.

  • #680 ca57073 Thanks @​bluwy! - Add a new push-git-tags option that complements create-github-releases to control specifically if git tags should be created but not GitHub releases.

    If create-github-releases was previously set to false, which also indirectly disabled git tag creation, git tags will now be created instead by default. If this is not desired, set push-git-tags to false explicitly.

  • #657 4f718b5 Thanks @​Andarist! - Removed compatibility support for old Changesets v1.

  • #681 7359107 Thanks @​bluwy! - Rename the root action inputs and outputs to better match the sub-actions' conventions.

    Inputs:

    • version -> version-script
    • publish -> publish-script
    • commit -> commit-message
    • title -> pr-title
    • branch -> pr-base-branch

    Outputs:

    • pull-request-number -> pr-number
  • #674 164652b Thanks @​bluwy! - Remove support for passing custom GitHub token through the GITHUB_TOKEN environment variable. It should be passed to the github-token input instead.

  • #659 5649ff4 Thanks @​bluwy! - Remove cwd option for changesets/action. Use the step working-directory option instead to change the directory.

  • #673 823cf74 Thanks @​bluwy! - Update to Changesets v3 packages

  • #695 469993c Thanks @​bluwy! - Removed .npmrc handling when the NPM_TOKEN environment variable is set.

... (truncated)

Changelog

Sourced from changesets/action's changelog.

@​changesets/action

2.1.2

Patch Changes

2.1.1

Patch Changes

2.1.0

Minor Changes

  • #718 3b7c71c Thanks @​bluwy! - Add a cwd input to the root action, /select-mode, /version, /pack, and /publish sub-actions to set the current working directory to execute Changesets in. This input existed in v1 but was incorrectly removed.

Patch Changes

2.0.0

Major Changes

  • #692 cb3f011 Thanks @​Andarist! - Release commits and tags are now pushed using the GitHub API by default.

    Replace the commit-mode input with the boolean push-with-git-cli input. Set push-with-git-cli: true to continue using the Git CLI.

    Regardless of the push mode, custom GitHub tokens must be passed explicitly through the github-token input. The GITHUB_TOKEN environment variable and credentials configured by actions/checkout or embedded in remote URLs are not substitutes for this input. When the Git CLI is enabled, github-token takes precedence over those repository credentials.

  • #680 ca57073 Thanks @​bluwy! - Add a new push-git-tags option that complements create-github-releases to control specifically if git tags should be created but not GitHub releases.

    If create-github-releases was previously set to false, which also indirectly disabled git tag creation, git tags will now be created instead by default. If this is not desired, set push-git-tags to false explicitly.

  • #657 4f718b5 Thanks @​Andarist! - Removed compatibility support for old Changesets v1.

  • #681 7359107 Thanks @​bluwy! - Rename the root action inputs and outputs to better match the sub-actions' conventions.

    Inputs:

... (truncated)

Commits


Note

High Risk
A major changesets/action upgrade on the release job can break versioning/PR creation if v2 input and token requirements are not aligned with the unchanged workflow config.

Overview
Updates the Create Or Update Release PR step in .github/workflows/release.yml to pin changesets/action at commit 8488615a (replacing a45c4d59). No other workflow inputs, env vars, or job wiring change in this diff.

Because that pin moves the action from the prior v1 line to v2.x, reviewers should confirm the step still works with the existing version / publish / title / commit / createGithubReleases inputs and GITHUB_TOKEN env—v2 renames several inputs and expects github-token on the action itself.

Reviewed by Cursor Bugbot for commit b3b1413. Bugbot is set up for automated code reviews on this repo. Configure here.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 24, 2026

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using default effort and found 3 potential issues.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit dece160. Configure here.

Comment thread .github/workflows/release.yml Outdated
- name: Create Or Update Release PR
id: release
uses: changesets/action@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d # v1
uses: changesets/action@198f833dd7d863100ea6e28967bc9a9fdefadb0a # v1

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Stale v1 action inputs

High Severity

The workflow still passes v1 input names (version, publish, title, commit, createGithubReleases) to changesets/action v2, which only accepts kebab-case names like version-script, publish-script, pr-title, commit-message, and create-github-releases. Those inputs are ignored, so the custom publish script never runs and release settings fall back to defaults. Preserving the prior no-tags behavior also needs an explicit push-git-tags: false.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit dece160. Configure here.

Comment thread .github/workflows/release.yml Outdated
- name: Create Or Update Release PR
id: release
uses: changesets/action@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d # v1
uses: changesets/action@198f833dd7d863100ea6e28967bc9a9fdefadb0a # v1

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Broken changesets output reference

High Severity

The job still reads steps.release.outputs.hasChangesets, but v2 renamed that output to has-changesets. The empty value flows into has_changesets, so the canary job condition never becomes true and canary publishes stop running.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit dece160. Configure here.

Comment thread .github/workflows/release.yml Outdated
@dependabot dependabot Bot changed the title chore(ci): bump changesets/action from 1.9.0 to 2.1.0 in the github-actions-major group chore(ci): bump changesets/action from 1.9.0 to 2.1.1 in the github-actions-major group across 1 directory Aug 31, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-major-2c80fc32b7 branch from dece160 to 03759a8 Compare August 31, 2026 13:15
Bumps the github-actions-major group with 1 update in the / directory: [changesets/action](https://github.com/changesets/action).


Updates `changesets/action` from 1.9.0 to 2.1.1
- [Release notes](https://github.com/changesets/action/releases)
- [Changelog](https://github.com/changesets/action/blob/main/CHANGELOG.md)
- [Commits](changesets/action@a45c4d5...8488615)

---
updated-dependencies:
- dependency-name: changesets/action
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-major-2c80fc32b7 branch from 03759a8 to b3b1413 Compare September 7, 2026 13:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants