Skip to content

ci: update dependency changeset action - #563

Merged
IzumiSy merged 1 commit into
mainfrom
ci/update-dependency-changeset-action
Sep 30, 2026
Merged

IzumiSy merged 1 commit into
mainfrom
ci/update-dependency-changeset-action

Conversation

@IzumiSy

@IzumiSy IzumiSy commented Sep 29, 2026

Copy link
Copy Markdown
Contributor

Motivation

Security hardening disabled persisted checkout credentials. The old dependency changeset action relied on those credentials, so dependency-update PRs could not commit generated changesets (for example, #557 and #556).

Design Decision

Chosen approach

Update the pinned dependency changeset action to the revision that uses suzuki-shunsuke/commit-action for committing. This preserves persist-credentials: false without widening workflow permissions.

Summary

  • Rename the workflow with a generic dependency-oriented name.
  • Pin the dependency changeset action to the credential-safe revision.

@IzumiSy
IzumiSy marked this pull request as ready for review September 29, 2026 06:44
@IzumiSy
IzumiSy requested a review from a team as a code owner September 29, 2026 06:44
@github-actions

Copy link
Copy Markdown
Contributor

Code Metrics Report

main (820ddb3) #563 (ffb186d) +/-
Coverage 87.5% 87.5% 0.0%
Test Execution Time 2m19s 1m41s -38s
Details
  |                     | main (820ddb3) | #563 (ffb186d) | +/-  |
  |---------------------|----------------|----------------|------|
  | Coverage            |          87.5% |          87.5% | 0.0% |
  |   Files             |            206 |            206 |    0 |
  |   Lines             |           6078 |           6078 |    0 |
  |   Covered           |           5319 |           5319 |    0 |
+ | Test Execution Time |          2m19s |          1m41s | -38s |

Reported by octocov

@IzumiSy
IzumiSy merged commit cbbaae4 into main Sep 30, 2026
6 checks passed
@IzumiSy
IzumiSy deleted the ci/update-dependency-changeset-action branch September 30, 2026 04:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants