chore(ci): bump changesets/action from 1.9.0 to 2.1.1 in the github-actions-major group across 1 directory - #307
Conversation
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 3 potential issues.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit dece160. Configure here.
| - name: Create Or Update Release PR | ||
| id: release | ||
| uses: changesets/action@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d # v1 | ||
| uses: changesets/action@198f833dd7d863100ea6e28967bc9a9fdefadb0a # v1 |
There was a problem hiding this comment.
Stale v1 action inputs
High Severity
The workflow still passes v1 input names (version, publish, title, commit, createGithubReleases) to changesets/action v2, which only accepts kebab-case names like version-script, publish-script, pr-title, commit-message, and create-github-releases. Those inputs are ignored, so the custom publish script never runs and release settings fall back to defaults. Preserving the prior no-tags behavior also needs an explicit push-git-tags: false.
Reviewed by Cursor Bugbot for commit dece160. Configure here.
| - name: Create Or Update Release PR | ||
| id: release | ||
| uses: changesets/action@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d # v1 | ||
| uses: changesets/action@198f833dd7d863100ea6e28967bc9a9fdefadb0a # v1 |
There was a problem hiding this comment.
Broken changesets output reference
High Severity
The job still reads steps.release.outputs.hasChangesets, but v2 renamed that output to has-changesets. The empty value flows into has_changesets, so the canary job condition never becomes true and canary publishes stop running.
Reviewed by Cursor Bugbot for commit dece160. Configure here.
dece160 to
03759a8
Compare
Bumps the github-actions-major group with 1 update in the / directory: [changesets/action](https://github.com/changesets/action). Updates `changesets/action` from 1.9.0 to 2.1.1 - [Release notes](https://github.com/changesets/action/releases) - [Changelog](https://github.com/changesets/action/blob/main/CHANGELOG.md) - [Commits](changesets/action@a45c4d5...8488615) --- updated-dependencies: - dependency-name: changesets/action dependency-version: 2.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-major ... Signed-off-by: dependabot[bot] <support@github.com>
03759a8 to
b3b1413
Compare


Bumps the github-actions-major group with 1 update in the / directory: changesets/action.
Updates
changesets/actionfrom 1.9.0 to 2.1.1Release notes
Sourced from changesets/action's releases.
... (truncated)
Changelog
Sourced from changesets/action's changelog.
... (truncated)
Commits
8488615v2.1.1d7669c8Version Packages (#722)da1ea29Fix typo in renamed inputs (#721)7545547Version Packages (#719)3043070Prevent test warning annotations (#720)3b7c71cAdd back cwd input (#718)6f58ba3Update pr-status message links to new faq (#716)e52ce9eVersion Packages (#715)78fdc6bExit pre mode (#714)187a104Update deps for stable (#709)Note
High Risk
A major
changesets/actionupgrade on the release job can break versioning/PR creation if v2 input and token requirements are not aligned with the unchanged workflow config.Overview
Updates the Create Or Update Release PR step in
.github/workflows/release.ymlto pinchangesets/actionat commit8488615a(replacinga45c4d59). No other workflow inputs, env vars, or job wiring change in this diff.Because that pin moves the action from the prior v1 line to v2.x, reviewers should confirm the step still works with the existing
version/publish/title/commit/createGithubReleasesinputs andGITHUB_TOKENenv—v2 renames several inputs and expectsgithub-tokenon the action itself.Reviewed by Cursor Bugbot for commit b3b1413. Bugbot is set up for automated code reviews on this repo. Configure here.