Skip to content

chore(deps): bump the actions group across 1 directory with 3 updates#548

Merged
kilbot merged 7 commits into
mainfrom
dependabot/github_actions/actions-621440cc45
Jul 18, 2026
Merged

chore(deps): bump the actions group across 1 directory with 3 updates#548
kilbot merged 7 commits into
mainfrom
dependabot/github_actions/actions-621440cc45

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 16, 2026

Copy link
Copy Markdown
Contributor

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: pnpm/action-setup
  dependency-version: 6.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 16, 2026

kilbot commented Jul 16, 2026

Copy link
Copy Markdown
Contributor
Thread Author/tool File/line Issue Decision Reason Commit
Deploy Preview GitHub Actions ci.yml Dependabot runs receive an empty VERCEL_TOKEN, so Vercel CLI fails on --token=. Fixed Skip the preview job for Dependabot, guard the Vercel steps when the token is empty, and only comment after a successful deploy. b1e1749

Fix PR: #550

Unresolved inline review threads after push: 0.

Skipped threads: none.

@wcpos-bot

wcpos-bot Bot commented Jul 16, 2026

Copy link
Copy Markdown
Contributor
Thread Author/tool File Issue Decision Commit
Deploy Preview GitHub Actions ci.yml Dependabot runs cannot read VERCEL_TOKEN, causing Vercel to fail on an empty --token value. Fixed in follow-up PR #550: skip the Deploy Preview job for Dependabot actors. 97f7ff3, refined in 961a791

Unresolved inline review threads: 0.

Skipped threads: none.

@wcpos-bot

wcpos-bot Bot commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

Fix PR: #551

Thread File Issue Decision Commit
Deploy Preview ci.yml Dependabot runs receive an empty VERCEL_TOKEN, so the Vercel CLI is invoked with --token=. Fixed in #551: skip the job for Dependabot, skip token-dependent steps when the token is empty, and comment only after a successful deploy. 2316800

Unresolved inline review threads: 0.

Skipped threads: none.

@wcpos-bot

wcpos-bot Bot commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

Fix PR: #552

Thread File Issue Decision Commit
Deploy Preview ci.yml Dependabot runs receive an empty VERCEL_TOKEN, causing Vercel CLI to fail on --token=. Fixed: skip Vercel-dependent steps when the token is unavailable. be7700f

Unresolved inline review threads: 0.

Skipped threads: none.

@wcpos-bot

wcpos-bot Bot commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

CI fix:

Check File Issue Decision Commit
Deploy Preview ci.yml Dependabot runs cannot access VERCEL_TOKEN, so the Vercel CLI received an empty --token value. Fixed — skip the Deploy Preview job when github.actor is dependabot[bot]; no secret handling or deploy steps changed. 4df1686

Review threads:

Thread File Issue Decision Commit

Unresolved inline review threads after push: 0.

Skipped threads: none.

@wcpos-bot wcpos-bot Bot mentioned this pull request Jul 16, 2026
3 tasks
@wcpos-bot

wcpos-bot Bot commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

Fix PR: #553

Thread File Issue Decision Commit
Deploy Preview ci.yml Dependabot runs receive an empty VERCEL_TOKEN, causing Vercel to fail on --token=. Fixed in #553 by skipping the preview deployment job for dependabot[bot]. e1232e1

Unresolved inline review threads: 0.

Skipped threads: none.

@wcpos-bot

wcpos-bot Bot commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

Fix PR: #554

Thread Author/tool File/line Issue summary Decision Reason Commit
Deploy Preview GitHub Actions ci.yml Dependabot runs receive an empty VERCEL_TOKEN, so Vercel fails on --token=. Fixed Skip the Deploy Preview job for dependabot[bot] while preserving the existing PR and deployment-variable guards. 2057274

Unresolved inline review threads after push: 0.

Skipped threads: none.

@github-actions

Copy link
Copy Markdown

🚀 Preview: https://wcpos-5s4cshxlq-wcpos.vercel.app

wcpos-bot Bot and others added 5 commits July 17, 2026 03:20
GitHub withholds repository secrets from Dependabot-triggered runs and
from fork pull requests, so `--token=${{ secrets.VERCEL_TOKEN }}`
expanded to an empty value and `vercel pull` aborted with "You defined
"--token", but it's missing a value". VERCEL_ORG_ID and VERCEL_PROJECT_ID
were empty for the same reason.

The existing VERCEL_DEPLOYS gate only covers a token that is absent
repo-wide; it cannot see a token that is present but withheld from this
particular run. Such runs have no way to deploy, so skip the job instead
of failing it.

The secrets context is not available to `if:`, so gate on the conditions
that make the secrets empty rather than on the token value itself.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
…rets

ci: skip Deploy Preview when the run cannot read secrets
@kilbot
kilbot merged commit 9e44415 into main Jul 18, 2026
8 of 9 checks passed
@kilbot
kilbot deleted the dependabot/github_actions/actions-621440cc45 branch July 18, 2026 13:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant