Conversation
Bumps the notifications group with 1 update in the / directory: [rtCamp/action-slack-notify](https://github.com/rtcamp/action-slack-notify). Updates `rtCamp/action-slack-notify` from 2.3.3 to 2.4.0 - [Release notes](https://github.com/rtcamp/action-slack-notify/releases) - [Commits](rtCamp/action-slack-notify@e31e87e...33ca3be) --- updated-dependencies: - dependency-name: rtCamp/action-slack-notify dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: notifications ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps the docker group with 1 update in the / directory: [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action). Updates `docker/setup-qemu-action` from 4.0.0 to 4.1.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](docker/setup-qemu-action@ce36039...0611638) --- updated-dependencies: - dependency-name: docker/setup-qemu-action dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docker ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps the utilities group with 1 update: [mikefarah/yq](https://github.com/mikefarah/yq). Updates `mikefarah/yq` from 4.53.2 to 4.53.3 - [Release notes](https://github.com/mikefarah/yq/releases) - [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt) - [Commits](mikefarah/yq@751d8ad...1b9b4ac) --- updated-dependencies: - dependency-name: mikefarah/yq dependency-version: 4.53.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: utilities ... Signed-off-by: dependabot[bot] <support@github.com>
…mantic-release plugin Move backmerge out of the @saithodev/semantic-release-backmerge plugin and into a dedicated backmerge-sync step that runs after a successful release. This removes the continue-on-error + release-tag-snapshot + release-tag-check + backmerge-pr fallback machinery that only existed to work around the plugin masking the release outcome. Backmerge is now configurable via inputs and only runs when the release ref matches backmerge_source (so beta releases on develop are unaffected).
- Add dry_run input wired to both semantic-release (no tags/releases) and the backmerge-sync step (preview only), so callers can validate safely. - Validate backmerge_mode and source/target branches before the release runs, failing fast instead of producing 'release published + job failed'. - Document all three backmerge modes.
Align go-release.yml and build.yml with the TypeScript side (typescript-build.yml already defaults to true). GHCR push is now on by default; callers must provide MANAGE_TOKEN (org secret) or set enable_ghcr: false to opt out.
…e-lint-args-app-prefix feat(release): orchestrate backmerge via backmerge-sync; expose go-pr-validation inputs & enforce coverage
…evelop/docker-984b8abbd7 [skip ci]
… 2 updates Bumps the security-scanners group with 2 updates in the / directory: [securego/gosec](https://github.com/securego/gosec) and [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog). Updates `securego/gosec` from 2.26.1 to 2.27.1 - [Release notes](https://github.com/securego/gosec/releases) - [Commits](securego/gosec@4a3bd8a...9e6a984) Updates `trufflesecurity/trufflehog` from 3.95.3 to 3.95.5 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](trufflesecurity/trufflehog@37b7700...d411fff) --- updated-dependencies: - dependency-name: securego/gosec dependency-version: 2.27.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security-scanners - dependency-name: trufflesecurity/trufflehog dependency-version: 3.95.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security-scanners ... Signed-off-by: dependabot[bot] <support@github.com> [skip ci]
…evelop/notifications-62941f1938 chore(deps): bump rtCamp/action-slack-notify from 2.3.3 to 2.4.0 in the notifications group across 1 directory
…evelop/utilities-6cde74802b chore(deps): bump mikefarah/yq from 4.53.2 to 4.53.3 in the utilities group
|
Caution Review failedPull request was closed or merged during review WalkthroughMultiple reusable workflows flip defaults for ChangesWorkflow input defaults, backmerge refactor, new lint inputs, and action SHA bumps
Estimated code review effort🎯 3 (Moderate) | ⏱️ ~25 minutes Possibly related issues
Possibly related PRs
Suggested labels
🚥 Pre-merge checks | ✅ 3 | ❌ 2❌ Failed checks (1 warning, 1 inconclusive)
✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
🔍 PR Validation Summary✅ PR Mergeable — no blocking failures
|
🛡️ CodeQL Analysis ResultsLanguages analyzed: ✅ No security issues found. 🔍 View full scan logs | 🛡️ Security tab |
🔍 Lint Analysis
|
GitHub Actions Shared Workflows
Description
Type of Change
feat: New workflow or new input/output/step in an existing workflowfix: Bug fix in a workflow (incorrect behavior, broken step, wrong condition)perf: Performance improvement (e.g. caching, parallelism, reduced steps)refactor: Internal restructuring with no behavior changedocs: Documentation only (README, docs/, inline comments)ci: Changes to self-CI (workflows under.github/workflows/that run on this repo)chore: Dependency bumps, config updates, maintenancetest: Adding or updating testsBREAKING CHANGE: Callers must update their configuration after this PRBreaking Changes
None.
Testing
@this-branchor the beta tagCaller repo / workflow run:
Related Issues
Closes #
Summary by CodeRabbit
New Features
Changes
Documentation