chore(deps): bump tempoxyz/changelogs from 57e22cb5bd8367edc8cc1450b9eb0aea75d6e019 to 29ac40b71b3966761305991d99f21c5195d7466b

[dependabot]

Bumps tempoxyz/changelogs from 57e22cb5bd8367edc8cc1450b9eb0aea75d6e019 to 29ac40b71b3966761305991d99f21c5195d7466b.

Changelog

Sourced from tempoxyz/changelogs's changelog.

Changelog

0.8.1 (2026-06-02)

Patch Changes

• Gate PyPI authentication setup to the explicit Python ecosystem so non-Python release workflows that use OIDC for their own registry do not attempt PyPI trusted publishing. (by @​EmmaJamieson-Hoare, #119)

0.8.0 (2026-05-02)

Minor Changes

• Add support for PyPI Trusted Publishing
• (OIDC). When pypi-token is empty and the workflow has id-token: write,
• the action mints a short-lived PyPI API token by exchanging the GitHub
• OIDC ID token at PyPI's _/oidc/mint-token endpoint, removing the need
• for a long-lived static API token. Existing static-token usage is
• unchanged. (by @​BrendanRyan, #116)

0.7.0 (2026-05-02)

Minor Changes

• Added support for a .changelog/instructions.md file to override the default AI prompt, with priority order: --instructions flag > .changelog/instructions.md > built-in default. Updated README with documentation for this feature. (by @​DerekCofausper, #67)

Patch Changes

• Two release-mode fixes:
• Go ecosystem. is_published now treats v0.0.0 as already published, so a Go module with no prior vX.Y.Z tag and no staged changelog entries does not get bootstrap-tagged on every push to the release branch. The previous behavior unconditionally created and pushed a v0.0.0 tag the first time the release workflow ran on an integrated repo.
• GitHub Action. The "Create GitHub releases" step's previous-tag lookup uses git tag --list … | grep -Fxv -- "$tag" | head -1. grep -Fxv exits 1 when every input line matches the excluded pattern (i.e. when the only tag is $tag itself), and under set -e -o pipefail that aborted the whole step before any release was created. Both occurrences are now guarded with { grep -Fxv … || true; }, so the lookup degrades to "no previous tag" instead of failing the step. (by @​BrendanRyan, #111)
• Added Go module ecosystem support. Discovers single-module Go projects via go.mod, persists the bumped version inline as a // changelogs:version X.Y.Z comment between the version and publish CI runs, edits require blocks for dependency updates, queries proxy.golang.org for published-version checks, and emits vX.Y.Z git tags. Auto-detection (go.mod at the repository root) and the go / golang ecosystem aliases are wired through. (by @​BrendanRyan, #109)

0.6.5 (2026-04-25)

Patch Changes

• Update rustls-webpki 0.103.11 → 0.103.13 to fix RUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104. (by @​grandizzy, #107)

0.6.4 (2026-04-14)

Patch Changes

• Fixed changelog directory lookup to support hyphenated package names by stripping the first prefix segment as a fallback (e.g., tempo-alloy -> alloy). Also improved release notes extraction to match both backtick-wrapped tag headings and plain version headings. (by @​DerekCofausper, #87)

0.6.3 (2026-03-18)

Patch Changes

• Added support for unified versioning in root changelog format by implicitly treating all workspace packages as a fixed group, merging duplicate version headings and deduplicating changelog entries. Added Rust workspace version inheritance support for reading and writing versions via version.workspace = true. (by @​Kartik, #79)

... (truncated)

Commits

• 29ac40b Add SwiftPM ecosystem support (#125)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

⚠️ Changelog not found.

A changelog entry is required before merging.

Add changelog