build(deps): bump actions/create-github-app-token from 3.0.0 to 3.2.0 in /.github/workflows#5411
Conversation
dependabot
Bot
added
Dependencies
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 3.0.0 to 3.2.0. - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md) - [Commits](actions/create-github-app-token@f8d387b...bcd2ba4) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/github_actions/dot-github/workflows/actions/create-github-app-token-3.2.0
branch
from
f0cc972 to
388ec59
Compare
pietern
left a comment
pietern
left a comment
There was a problem hiding this comment.
Reviewed the changelog diff for actions/create-github-app-token 3.0.0 → 3.2.0.
Verdict: SAFE. Spans v3.1.0/v3.1.1/v3.2.0: adds optional inputs (client-id, enterprise-app support, full repo names in repositories), improves error messages and validates private-key, and bumps internal deps. app-id is deprecated but still works — no breaking changes, no new required inputs. The breaking Node 24 jump already happened in v3.0.0, the currently-pinned version.
Used in 5 places across push.yml, start-integration-tests.yml, and tagging.yml with app-id/private-key (+ owner/repositories) — all still supported.
Non-blocking follow-up: app-id is now deprecated in favor of client-id; worth migrating eventually before a future major removes it, but out of scope for this bump.
pietern
deleted the
dependabot/github_actions/dot-github/workflows/actions/create-github-app-token-3.2.0
branch
1 participant
Bumps actions/create-github-app-token from 3.0.0 to 3.2.0.
Release notes
Sourced from actions/create-github-app-token's releases.
Changelog
Sourced from actions/create-github-app-token's changelog.
Commits
bcd2ba4chore(main): release 3.2.0 (#370)f24bbd8fix: validate private-key input (#376)363531bdocs: capitalize Git as a proper noun in README (#374)fd28011docs: update procedure to configure Git (#287)85eb8ddfeat: support full repository names inrepositoriesinput (#372)c9aabb8build(deps-dev): bump yaml from 2.8.3 to 2.8.4 in the development-dependencie...e02e816build(deps-dev): bump undici from 7.24.6 to 8.2.0 (#366)8d835bfbuild(deps-dev): bump esbuild from 0.27.4 to 0.28.0 in the development-depend...952a2a7feat: add support for enterprise-level GitHub Apps (#263)43e5c34fix(deps): bump@actions/corefrom 3.0.0 to 3.0.1 in the production-dependenc...