Skip to content

build(deps-dev): bump semantic-release from 25.0.5 to 25.0.8 - #8

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/semantic-release-25.0.7
Closed

build(deps-dev): bump semantic-release from 25.0.5 to 25.0.8#8
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/semantic-release-25.0.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Contributor

Bumps semantic-release from 25.0.5 to 25.0.8.

Release notes

Sourced from semantic-release's releases.

v25.0.8

25.0.8 (2026-07-18)

Bug Fixes

  • handle potential null values in commit message and gitTags trimming (0a60004)
  • hide-sensitive: mask key/auth/webhook env vars (973d763)
  • mask sensitive environment variables and improve commit handling (#4252) (1bfdc52)
  • prevent template evaluation syntax in branch expansion and tag formatting (f121540)

v25.0.7

25.0.7 (2026-07-13)

Bug Fixes

  • argument Injection via repositoryUrl in package.json (#4245) (c46dbda)

v25.0.6

25.0.6 (2026-07-10)

Bug Fixes

  • ensure encoded secrets get masked (8e28dd3)
Commits
  • 1bfdc52 fix: mask sensitive environment variables and improve commit handling (#4252)
  • 0a60004 fix: handle potential null values in commit message and gitTags trimming
  • f121540 fix: prevent template evaluation syntax in branch expansion and tag formatting
  • 973d763 fix(hide-sensitive): mask key/auth/webhook env vars
  • 474e5a3 ci(action): update github/codeql-action action to v4.37.1 (#4254)
  • fc9382c docs: fix issue template links (#4251)
  • e34c52d ci(action): update actions/setup-node action to v7 (#4250)
  • 8020ec6 ci(action): update actions/setup-node action to v6.5.0 (#4249)
  • 956baf4 chore(deps): update npm to v12.0.1 (#4247)
  • c46dbda fix: argument Injection via repositoryUrl in package.json (#4245)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 17, 2026
Bumps [semantic-release](https://github.com/semantic-release/semantic-release) from 25.0.5 to 25.0.8.
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v25.0.5...v25.0.8)

---
updated-dependencies:
- dependency-name: semantic-release
  dependency-version: 25.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps-dev): bump semantic-release from 25.0.5 to 25.0.7 build(deps-dev): bump semantic-release from 25.0.5 to 25.0.8 Jul 22, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/semantic-release-25.0.7 branch from 40b2a02 to 67dd7c3 Compare July 22, 2026 19:07
@kody-ai

kody-ai Bot commented Jul 22, 2026

Copy link
Copy Markdown

BYOK Configuration Required! 🔑

Your plan requires a Bring Your Own Key (BYOK) configuration to perform code reviews.

Please configure your API keys in Settings > BYOK Configuration.

@dependabot @github

dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #13.

@dependabot dependabot Bot closed this Jul 24, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/semantic-release-25.0.7 branch July 24, 2026 23:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants