Skip to content

build(deps): bump dependency-submission action from v5 to v6 - #363

Merged
bernardladenthin merged 1 commit into
mainfrom
claude/dep-submission-action-v6
Sep 9, 2026
Merged

bernardladenthin merged 1 commit into
mainfrom
claude/dep-submission-action-v6

Conversation

@bernardladenthin

Copy link
Copy Markdown
Owner

Closes cross-repo drift rather than chasing a new release.

Dependabot opened this bump in streambuffer only (bernardladenthin/streambuffer#156, merged 2026-09-09). The four sibling repos are meant to run the same toolchain and their dependabot.yml files are identical (maven + github-actions, both weekly) — but the weekly runs are staggered, so for a few days one repo is ahead and three are behind. This brings BAF up rather than waiting for its own run.

v6.0.0 moves the action runtime from Node 20 to Node 24. It was not adopted on faith: streambuffer's Report job — the job that actually runs the action, with no continue-on-error on that step — went green on it first.

Workflow-file change only: one line, no source, no dependency, no test touched.

Companion PRs in the same sweep bring java-llama.cpp and srcmorph up to v6, and workspace/crossrepostatus.md is updated to match.

🤖 Generated with Claude Code

https://claude.ai/code/session_01AnNYn8W1xuVxVJtyL34GyH


Generated by Claude Code

Closes cross-repo drift rather than chasing a new release. Dependabot opened
this bump in streambuffer only (#156, merged 2026-09-09); the other three
sibling repos stayed on v5 until their own weekly Dependabot run, so the four
pipelines that are meant to run the same toolchain briefly did not.

v6.0.0 moves the action runtime from Node 20 to Node 24 and is already proven
in this workspace: streambuffer's Report job -- the job that actually runs the
action, with no continue-on-error on the step -- went green on it.

Workflow-file change only; no source, no dependency, no test touched.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AnNYn8W1xuVxVJtyL34GyH
@claude

claude Bot commented Sep 9, 2026

Copy link
Copy Markdown

Review Summary

Approved — This PR safely closes cross-repo drift by aligning the dependency-submission action version.

Findings

Scope: Workflow-only change

  • Single file: .github/workflows/publish.yml
  • Single line: Action version bump from v5 → v6
  • No source code, dependencies, or tests affected

Safety Assessment:

  • Low risk: GitHub Actions updates are isolated to CI/CD pipeline behavior
  • Pre-validated: streambuffer's Report job (which runs this action with no continue-on-error) already passed on v6.0.0
  • Runtime migration is expected: Node 20 → Node 24 is a standard toolchain update
  • Alignment strategy is sound: Keeping the four sibling repos on the same action versions prevents tool drift

Code Quality:

  • No defects detected
  • Follows the established cross-repo maintenance pattern

Recommendation

✅ Ready to merge. This is a straightforward, low-risk workflow maintenance update.

@sonarqubecloud

sonarqubecloud Bot commented Sep 9, 2026

Copy link
Copy Markdown

@bernardladenthin
bernardladenthin merged commit 9076ec7 into main Sep 9, 2026
16 of 21 checks passed
@bernardladenthin
bernardladenthin deleted the claude/dep-submission-action-v6 branch September 9, 2026 12:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants