FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Bump actions/create-github-app-token from 2.2.1 to 3.0.0 in /.github/workflows by dependabot[bot] · Pull Request #3583 · github/codeql-action · GitHub

Bump actions/create-github-app-token from 2.2.1 to 3.0.0 in /.github/workflows - #3583

Merged
henrymercer merged 1 commit into
mainfrom
dependabot/github_actions/dot-github/workflows/actions/create-github-app-token-3.0.0
Mar 19, 2026
Merged

Bump actions/create-github-app-token from 2.2.1 to 3.0.0 in /.github/workflows#3583
henrymercer merged 1 commit into
mainfrom
dependabot/github_actions/dot-github/workflows/actions/create-github-app-token-3.0.0

Conversation

dependabot Bot commented on behalf of github Mar 18, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/create-github-app-token from 2.2.1 to 3.0.0.

Release notes

Sourced from actions/create-github-app-token's releases.

v3.0.0

3.0.0 (2026-03-14)

Bug Fixes

BREAKING CHANGES

  • Custom proxy handling has been removed. If you use HTTP_PROXY or HTTPS_PROXY, you must now also set NODE_USE_ENV_PROXY=1 on the action step.
  • Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner.

v3.0.0-beta.6

3.0.0-beta.6 (2026-03-13)

Bug Fixes

  • deps: bump @​actions/core from 1.11.1 to 3.0.0 (#337) (b044133)
  • deps: bump minimatch from 9.0.5 to 9.0.9 (#335) (5cbc656)
  • deps: bump the production-dependencies group with 4 updates (#336) (6bda5bc)
  • deps: bump undici from 7.16.0 to 7.18.2 (#323) (b4f638f)

v3.0.0-beta.5

3.0.0-beta.5 (2026-03-13)

  • fix!: require NODE_USE_ENV_PROXY for proxy support (#342) (d53a1cd)

BREAKING CHANGES

  • Custom proxy handling has been removed. If you use HTTP_PROXY or HTTPS_PROXY, you must now also set NODE_USE_ENV_PROXY=1 on the action step.

v3.0.0-beta.4

3.0.0-beta.4 (2026-03-13)

Bug Fixes

  • deps: bump @​octokit/auth-app from 7.2.1 to 8.0.1 (#257) (bef1eaf)
  • deps: bump @​octokit/request from 9.2.3 to 10.0.2 (#256) (5d7307b)
  • deps: bump glob from 10.4.5 to 10.5.0 (#305) (5480f43)
  • deps: bump p-retry from 6.2.1 to 7.1.0 (#294) (dce3be8)

... (truncated)

Commits
  • f8d387b build(release): 3.0.0 [skip ci]
  • d2129bd style: remove extra blank line in release workflow
  • 77b94ef build: refresh generated artifacts
  • 3ab4c66 chore: move undici to devDependencies
  • 739cf66 docs: update README action versions
  • db40289 build(deps): bump actions versions in test.yml
  • 496a7ac test: migrate from AVA to Node.js native test runner (#346)
  • 3870dc3 Rename end-to-end proxy job in test workflow
  • 4451bcb fix!: require NODE_USE_ENV_PROXY for proxy support (#342)
  • dce0ab0 fix: remove custom proxy handling (#143)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 2.2.1 to 3.0.0.
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](actions/create-github-app-token@v2.2.1...v3.0.0)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
dependabot Bot added the Rebuild Re-transpile JS & re-generate workflows label Mar 18, 2026
github-actions Bot added size/XS Should be very easy to review and removed Rebuild Re-transpile JS & re-generate workflows labels Mar 18, 2026
henrymercer marked this pull request as draft March 19, 2026 10:15
henrymercer marked this pull request as ready for review March 19, 2026 10:15
henrymercer requested a review from a team as a code owner March 19, 2026 10:15
Copilot AI review requested due to automatic review settings March 19, 2026 10:15
henrymercer enabled auto-merge March 19, 2026 10:16

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Pull request overview

Updates the repository’s release automation workflows to use actions/create-github-app-token@v3.0.0 (from v2.2.1) for generating GitHub App installation tokens.

Changes:

  • Bump actions/create-github-app-token from v2.2.1 to v3.0.0 in release/backport automation.
  • Update token-generation steps in the update-release-branch, rollback-release, and post-release mergeback workflows.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File Description
.github/workflows/update-release-branch.yml Updates the backport job’s token generation step to use actions/create-github-app-token@v3.0.0.
.github/workflows/rollback-release.yml Updates the workflow-dispatch token generation step to use actions/create-github-app-token@v3.0.0.
.github/workflows/post-release-mergeback.yml Updates the token generation step used for tagging/releases to use actions/create-github-app-token@v3.0.0.

henrymercer added this pull request to the merge queue Mar 19, 2026
Merged via the queue into main with commit 3d8036c Mar 19, 2026
298 checks passed
henrymercer deleted the dependabot/github_actions/dot-github/workflows/actions/create-github-app-token-3.0.0 branch March 19, 2026 10:52
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/XS Should be very easy to review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants


Back | FazBrowse Home | New Git URL