Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 22, 2026

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps getsentry/github-workflows from 3.1.0 to 3.2.0.

Release notes

Sourced from getsentry/github-workflows's releases.

3.2.0

Features

  • Danger - Add support for repository-specific dangerfiles (#129)
    • Add extra-dangerfile input parameter to run custom Danger checks alongside shared workflow checks
    • Add extra-install-packages input to install additional apt packages required by custom dangerfiles
    • Custom dangerfiles receive full Danger API access (fail, warn, message, markdown, danger)
    • Enables repositories to extend Danger checks without overwriting shared workflow comments
  • Sentry-CLI integration test action - Add InvokeSentryResult::Events() method to extract events from envelopes (#137)

Fixes

  • Sentry-CLI integration test action - Replace literal "\n" with newlines (#138)
Changelog

Sourced from getsentry/github-workflows's changelog.

Changelog

Unreleased

Fixes

  • Sentry-CLI integration test action - Accept chunked ProGuard uploads for compatibility with Sentry CLI 3.x (#140)

3.2.0

Features

  • Danger - Add support for repository-specific dangerfiles (#129)
    • Add extra-dangerfile input parameter to run custom Danger checks alongside shared workflow checks
    • Add extra-install-packages input to install additional apt packages required by custom dangerfiles
    • Custom dangerfiles receive full Danger API access (fail, warn, message, markdown, danger)
    • Enables repositories to extend Danger checks without overwriting shared workflow comments
  • Sentry-CLI integration test action - Add InvokeSentryResult::Events() method to extract events from envelopes (#137)

Fixes

  • Sentry-CLI integration test action - Replace literal "\n" with newlines (#138)

3.1.0

Features

  • Updater - Add post-update-script input parameter to run custom scripts after dependency updates (#130, #133)
    • Scripts receive original and new version as arguments
    • Support both bash (.sh) and PowerShell (.ps1) scripts
    • Enables workflows like updating lock files, running code generators, or modifying configuration files
  • Updater - Add SSH key support and comprehensive authentication validation (#134)
    • Add ssh-key input parameter for deploy key authentication
    • Support using both ssh-key (for git) and api-token (for GitHub API) together
    • Add detailed token validation with actionable error messages
    • Detect common token issues: expiration, whitespace, SSH keys in wrong input, missing scopes
    • Validate SSH key format when provided

Fixes

  • Updater - Fix boolean input handling for changelog-entry parameter and add input validation (#127)
  • Updater - Fix cryptic authentication errors with better validation and error messages (#134, closes #128)

Dependencies

3.0.0

... (truncated)

Commits
  • 95603f4 release: 3.2.0
  • decddd3 fix: replace literal "\n" with newlines (#138)
  • 14dc1d8 fix: drop JSON conversion for event bodies (#139)
  • f2f33e2 feat: add InvokeSentryResult::Events() to extract events from envelopes (#137)
  • 17cc15e chore: add changelog entry for recent PR #129
  • d6ae7f7 Feat: Allow repo specific dangerfile. (#129)
  • 0ae70c0 docs(updater): Update authentication documentation for ssh-key and api-token ...
  • df41e0d Merge branch 'release/3.1.0'
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [getsentry/github-workflows](https://github.com/getsentry/github-workflows) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/getsentry/github-workflows/releases)
- [Changelog](https://github.com/getsentry/github-workflows/blob/main/CHANGELOG.md)
- [Commits](getsentry/github-workflows@13be9be...95603f4)

---
updated-dependencies:
- dependency-name: getsentry/github-workflows
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jan 22, 2026
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jan 22, 2026
@philprime philprime enabled auto-merge (squash) January 23, 2026 08:24
@philprime philprime merged commit fb84f6f into master Jan 23, 2026
11 checks passed
@philprime philprime deleted the dependabot/github_actions/getsentry/github-workflows-3.2.0 branch January 23, 2026 08:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants