Repository navigation
chore(deps): bump thollander/actions-comment-pull-request from 2.5.0 to 3.0.1 - #2651
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
Up to standards ✅🟢 Issues
|
![codacy-production[bot]](https://avatars.githubusercontent.com/in/56611?s=60&v=4){kind=small}
There was a problem hiding this comment.
Pull Request Overview
This PR updates the thollander/actions-comment-pull-request action from v2.5.0 to v3.0.1. Although Codacy reports the changes are up to standards, the version bump introduces a critical breaking change that has not been addressed.
Version 3.x of this action migrated all input parameters to kebab-case. The current implementation maintains the 'comment_tag' parameter, which is no longer supported and will lead to workflow failures or unexpected behavior. This PR should not be merged until the input parameters are aligned with the v3.0.0 specifications.
About this PR
- The update to v3.0.1 involves breaking changes. Specifically, input parameters must be renamed. Failure to migrate these parameters will likely cause the GitHub Action to ignore previous comments or fail to execute correctly.
Test suggestions
- Verify the action version is updated to v3.0.1 in the workflow file.
- Verify that 'comment_tag' is renamed to 'comment-tag' to comply with breaking changes.
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Verify that 'comment_tag' is renamed to 'comment-tag' to comply with breaking changes.
TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback
| - name: Comment PR if there are deleted files | ||
| if: steps.changed-files.outputs.any_deleted == 'true' | ||
| uses: thollander/actions-comment-pull-request@fabd468d3a1a0b97feee5f6b9e499eab0dd903f6 # v2 | ||
| uses: thollander/actions-comment-pull-request@24bffb9b452ba05a4f3f77933840a6a841d1b32b # v3.0.1 |
There was a problem hiding this comment.
🔴 HIGH RISK
This version bump introduces breaking changes. The input parameter 'comment_tag' must be renamed to 'comment-tag' to remain compatible with version 3.0.1. If left as is, the action may not correctly identify or update existing comments.
049f343 to
d327cb7
Compare
|
@dependabot rebase |
1 similar comment
|
@dependabot rebase |
Bumps [thollander/actions-comment-pull-request](https://github.com/thollander/actions-comment-pull-request) from 2.5.0 to 3.0.1. - [Release notes](https://github.com/thollander/actions-comment-pull-request/releases) - [Commits](thollander/actions-comment-pull-request@fabd468...24bffb9) --- updated-dependencies: - dependency-name: thollander/actions-comment-pull-request dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
d327cb7 to
48e620d
Compare
There was a problem hiding this comment.
Pull Request Overview
✅ No blocking issues noticed
No new blocking findings were identified beyond issues already reported on this PR.
Test suggestions
- Run the deleted-files workflow with deleted Markdown files and verify that the reminder comment is created or updated using the configured tag.
- Validate that all action inputs use the v3 input names.
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Run the deleted-files workflow with deleted Markdown files and verify that the reminder comment is created or updated using the configured tag.
2. Validate that all action inputs use the v3 input names.
TIP How was this review? Give us feedback
|
Applied in #2801 together with the other open Dependabot updates. This PR's build couldn't pass because the Dependabot copy of |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
Bumps thollander/actions-comment-pull-request from 2.5.0 to 3.0.1.
Release notes
Sourced from thollander/actions-comment-pull-request's releases.
Commits
24bffb9Merge pull request #410 from thollander/chore/release-3.0.15fd7012chore: release 3.0.1a38b001Merge pull request #409 from thollander/fix/wrong-var-renaminga11fbfefix: some wrong variables renamingcb13519Merge pull request #300 from thollander/dependabot/npm_and_yarn/actions/githu...38af97bchore(deps): bump@actions/githubfrom 5.1.1 to 6.0.0301a80eMerge pull request #393 from thollander/dependabot/npm_and_yarn/prettier-3.3.364dcac7chore(deps-dev): bump prettier from 3.2.5 to 3.3.30a327d5Merge pull request #394 from thollander/dependabot/npm_and_yarn/actions/core-...ece12baMerge pull request #392 from thollander/dependabot/npm_and_yarn/vercel/ncc-0....