chore(deps): bump getsentry/github-workflows from 3.3.0 to 3.4.0 (#3333)

dependabot[bot] · web-flow · commit ee8a2dd4720a · 2026-07-07T10:33:20.000+02:00
Bumps [getsentry/github-workflows](https://github.com/getsentry/github-workflows) from 3.3.0 to 3.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/getsentry/github-workflows/releases">getsentry/github-workflows's releases</a>.</em></p> <blockquote> <h2>3.4.0</h2> <h3>Features</h3> <ul> <li>Validate PR - Action is advisory: it posts a single friendly comment on community PRs that don't reference an issue with maintainer discussion. PRs are not closed and no labels are applied. Recommended trigger is <code>types: [opened]</code>.</li> <li>Validate PR - Skip validation for PRs with fewer than 100 lines changed, excluding common lock files (<code>Cargo.lock</code>, <code>yarn.lock</code>, <code>package-lock.json</code>, <code>Pipfile.lock</code>, etc.). Tiny PRs no longer go through the issue-discussion loop.</li> <li>Add validate-pr composite action for validating non-maintainer PRs against contribution guidelines (<a href="https://redirect.github.com/getsentry/github-workflows/pull/153">#153</a>)</li> </ul> <h3>Fixes</h3> <ul> <li>Complete script injection hardening across all actions: move remaining step outputs to env vars, validate Danger version against semver (<a href="https://redirect.github.com/getsentry/github-workflows/pull/152">#152</a>)</li> <li>Updater - Trigger CI for new PRs without changelog updates (<a href="https://redirect.github.com/getsentry/github-workflows/pull/166">#166</a>)</li> <li>Updater - Select the first branch when multiple branches point at <code>HEAD</code> (<a href="https://redirect.github.com/getsentry/github-workflows/pull/165">#165</a>)</li> </ul> <h3>Dependencies</h3> <ul> <li>Bump Danger JS from v13.0.4 to v13.0.5 (<a href="https://redirect.github.com/getsentry/github-workflows/pull/160">#160</a>) <ul> <li><a href="https://github.com/danger/danger-js/blob/main/CHANGELOG.md#1305">changelog</a></li> <li><a href="https://github.com/danger/danger-js/compare/13.0.4...13.0.5">diff</a></li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/getsentry/github-workflows/blob/main/CHANGELOG.md">getsentry/github-workflows's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>Unreleased</h2> <h3>Fixes</h3> <ul> <li>Danger - Harden <code>extra-install-packages</code> handling: pass the package list into the container via env var instead of host-shell string interpolation (defense in depth) (<a href="https://redirect.github.com/getsentry/github-workflows/pull/169">#169</a>)</li> </ul> <h2>3.4.0</h2> <h3>Features</h3> <ul> <li>Validate PR - Action is advisory: it posts a single friendly comment on community PRs that don't reference an issue with maintainer discussion. PRs are not closed and no labels are applied. Recommended trigger is <code>types: [opened]</code>.</li> <li>Validate PR - Skip validation for PRs with fewer than 100 lines changed, excluding common lock files (<code>Cargo.lock</code>, <code>yarn.lock</code>, <code>package-lock.json</code>, <code>Pipfile.lock</code>, etc.). Tiny PRs no longer go through the issue-discussion loop.</li> <li>Add validate-pr composite action for validating non-maintainer PRs against contribution guidelines (<a href="https://redirect.github.com/getsentry/github-workflows/pull/153">#153</a>)</li> </ul> <h3>Fixes</h3> <ul> <li>Complete script injection hardening across all actions: move remaining step outputs to env vars, validate Danger version against semver (<a href="https://redirect.github.com/getsentry/github-workflows/pull/152">#152</a>)</li> <li>Updater - Trigger CI for new PRs without changelog updates (<a href="https://redirect.github.com/getsentry/github-workflows/pull/166">#166</a>)</li> <li>Updater - Select the first branch when multiple branches point at <code>HEAD</code> (<a href="https://redirect.github.com/getsentry/github-workflows/pull/165">#165</a>)</li> </ul> <h3>Dependencies</h3> <ul> <li>Bump Danger JS from v13.0.4 to v13.0.5 (<a href="https://redirect.github.com/getsentry/github-workflows/pull/160">#160</a>) <ul> <li><a href="https://github.com/danger/danger-js/blob/main/CHANGELOG.md#1305">changelog</a></li> <li><a href="https://github.com/danger/danger-js/compare/13.0.4...13.0.5">diff</a></li> </ul> </li> </ul> <h2>3.3.0</h2> <h3>Features</h3> <ul> <li>Updater - Support CMake <code>GIT_TAG</code> with variable references like <code>${FOO_REF}</code>, resolving and updating the corresponding <code>set()</code> definition (<a href="https://redirect.github.com/getsentry/github-workflows/pull/149">#149</a>)</li> </ul> <h2>3.2.1</h2> <h3>Fixes</h3> <ul> <li>Sentry-CLI integration test action - Accept chunked ProGuard uploads for compatibility with Sentry CLI 3.x (<a href="https://redirect.github.com/getsentry/github-workflows/pull/140">#140</a>)</li> </ul> <h2>3.2.0</h2> <h3>Features</h3> <ul> <li>Danger - Add support for repository-specific dangerfiles (<a href="https://redirect.github.com/getsentry/github-workflows/pull/129">#129</a>) <ul> <li>Add <code>extra-dangerfile</code> input parameter to run custom Danger checks alongside shared workflow checks</li> <li>Add <code>extra-install-packages</code> input to install additional apt packages required by custom dangerfiles</li> <li>Custom dangerfiles receive full Danger API access (<code>fail</code>, <code>warn</code>, <code>message</code>, <code>markdown</code>, <code>danger</code>)</li> <li>Enables repositories to extend Danger checks without overwriting shared workflow comments</li> </ul> </li> <li>Sentry-CLI integration test action - Add <code>InvokeSentryResult::Events()</code> method to extract events from envelopes (<a href="https://redirect.github.com/getsentry/github-workflows/pull/137">#137</a>)</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/getsentry/github-workflows/commit/607fed74f812e69201531a5185b6c3c57caa4e89"><code>607fed7</code></a> release: 3.4.0</li> <li><a href="https://github.com/getsentry/github-workflows/commit/82866c1a3c6e52bc3122efc4c0f804d9954947a7"><code>82866c1</code></a> chore: update getsentry/craft to 2.26.3 (<a href="https://redirect.github.com/getsentry/github-workflows/issues/168">#168</a>)</li> <li><a href="https://github.com/getsentry/github-workflows/commit/24be69680c3a46c03edfbeb05268ec312f77e1e7"><code>24be696</code></a> fix: complete script injection hardening across all actions (<a href="https://redirect.github.com/getsentry/github-workflows/issues/152">#152</a>)</li> <li><a href="https://github.com/getsentry/github-workflows/commit/a940f77968911ab853d344aad6bd3453935ebb6c"><code>a940f77</code></a> fix(updater): Trigger CI for new PRs without changelog updates (<a href="https://redirect.github.com/getsentry/github-workflows/issues/166">#166</a>)</li> <li><a href="https://github.com/getsentry/github-workflows/commit/98c1e36a10138a6a2d579714dda6b65d6a85acba"><code>98c1e36</code></a> test(updater): Accept either main or master as sentry-cli main branch (<a href="https://redirect.github.com/getsentry/github-workflows/issues/167">#167</a>)</li> <li><a href="https://github.com/getsentry/github-workflows/commit/d81d7469a37abff4600d45c612f6c1b16241e9ef"><code>d81d746</code></a> chore: update danger/danger.properties to 13.0.5 (<a href="https://redirect.github.com/getsentry/github-workflows/issues/160">#160</a>)</li> <li><a href="https://github.com/getsentry/github-workflows/commit/80476a95b1c643ab5900b451932043d9ff26cdbf"><code>80476a9</code></a> fix(updater): Select first matching main branch (<a href="https://redirect.github.com/getsentry/github-workflows/issues/165">#165</a>)</li> <li><a href="https://github.com/getsentry/github-workflows/commit/43bf14b190c12080cfbedf2d2c82337bc559a0e1"><code>43bf14b</code></a> feat(validate-pr): Make advisory; drop close + labels (<a href="https://redirect.github.com/getsentry/github-workflows/issues/163">#163</a>)</li> <li><a href="https://github.com/getsentry/github-workflows/commit/71588ddf95134f804e82c5970a8098588e2eaecd"><code>71588dd</code></a> feat(validate-pr): Skip checks for users with write access (<a href="https://redirect.github.com/getsentry/github-workflows/issues/162">#162</a>)</li> <li><a href="https://github.com/getsentry/github-workflows/commit/02fd7a28bcd99b2e2ab71a7fa6e4d92d824c2c19"><code>02fd7a2</code></a> feat(validate-pr): Skip all checks when a maintainer reopens a PR (<a href="https://redirect.github.com/getsentry/github-workflows/issues/161">#161</a>)</li> <li>Additional commits viewable in <a href="https://github.com/getsentry/github-workflows/compare/26f565c05d0dd49f703d238706b775883037d76b...607fed74f812e69201531a5185b6c3c57caa4e89">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=getsentry/github-workflows&package-manager=github_actions&previous-version=3.3.0&new-version=3.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -47,7 +47,7 @@ jobs:
     if: ${{ github.event_name == 'pull_request' }}
     steps:
       - name: Run Danger
-        uses: getsentry/github-workflows/danger@26f565c05d0dd49f703d238706b775883037d76b # 3.3.0
+        uses: getsentry/github-workflows/danger@607fed74f812e69201531a5185b6c3c57caa4e89 # 3.4.0
 
   required:
     name: Check required jobs
