Skip to content

chore(deps): bump getsentry/craft from 2.26.2 to 2.26.3#6127

Merged
antonis merged 1 commit into
mainfrom
dependabot/github_actions/getsentry/craft-2.26.3
May 11, 2026
Merged

chore(deps): bump getsentry/craft from 2.26.2 to 2.26.3#6127
antonis merged 1 commit into
mainfrom
dependabot/github_actions/getsentry/craft-2.26.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 11, 2026

Bumps getsentry/craft from 2.26.2 to 2.26.3.

Release notes

Sourced from getsentry/craft's releases.

2.26.3

Bug Fixes 🐛

Changelog

Sourced from getsentry/craft's changelog.

Changelog

2.26.3

Bug Fixes 🐛

2.26.2

Security 🔒

Bug Fixes 🐛

  • (prepare) Remove --allow-remote-config gate by @​BYK in #809

Internal Changes 🔧

2.26.1

Security 🔒

  • (release-env) Allowlist GITHUB_* and RUNNER_* by prefix by @​BYK in #807

Bug Fixes 🐛

  • (npm) Tolerate workspace:* deps in version bump and bun.lock patching by @​BYK in #805

Internal Changes 🔧

  • Fix Node 20 + app-id deprecation warnings, refresh Node matrix by @​BYK in #803

2.26.0

Security 🔒

  • (ci) Pin third-party GitHub Actions to commit SHAs by @​BYK in #801
  • (commit-repo) Replace execSync tar with node-tar by @​BYK in #799
  • (gpg) Pipe private key via stdin instead of writing to /tmp by @​BYK in #798
  • (publish) Move publish-state file out of repo cwd by @​BYK in #797
  • (spawn) Strip dynamic-linker env vars from subprocess env by @​BYK in #800

New Features ✨

  • Recognize security: commit prefix for changelog and versioning by @​BYK in #802

... (truncated)

Commits
  • bae212c release: 2.26.3
  • cc72e8f fix: Prevent shell injection vulnerabilities in GitHub Actions workflows (#811)
  • f0daed8 feat(changelog-preview): add require-conventional-title opt-in enforcement (#...
  • 37f9118 meta: Bump new development version
  • b98376e Merge branch 'release/2.26.2'
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [getsentry/craft](https://github.com/getsentry/craft) from 2.26.2 to 2.26.3.
- [Release notes](https://github.com/getsentry/craft/releases)
- [Changelog](https://github.com/getsentry/craft/blob/master/CHANGELOG.md)
- [Commits](getsentry/craft@3dc647f...bae212c)

---
updated-dependencies:
- dependency-name: getsentry/craft
  dependency-version: 2.26.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels May 11, 2026
@dependabot dependabot Bot requested a review from alwx as a code owner May 11, 2026 09:54
@dependabot dependabot Bot added the github_actions Pull requests that update GitHub Actions code label May 11, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 11, 2026

Semver Impact of This PR

None (no version bump detected)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).


  • chore(deps): bump getsentry/craft from 2.26.2 to 2.26.3 by dependabot[bot] in #6127
  • feat(core): Extract text from children of touched components for breadcrumb labels by antonis in #6106
  • chore(deps): bump @babel/plugin-transform-modules-systemjs from 7.25.0 to 7.29.4 by dependabot in #6124
  • chore(deps): bump fast-uri from 3.0.1 to 3.1.2 by dependabot in #6121
  • chore(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 by dependabot in #6120
  • chore(deps): bump socks to ^2.8.8 to fix ip-address vulnerability by antonis in #6117
  • chore(deps): bump uuid to ^13.0.1 to fix buffer bounds check vulnerability by antonis in #6118
  • test(replay): Add passthrough tests for device-state replay breadcrumbs by antonis in #6115
  • chore(deps): update JavaScript SDK to v10.52.0 by github-actions in #6108
  • chore(deps): bump basic-ftp from 5.3.0 to 5.3.1 by dependabot in #6111

🤖 This preview updates automatically when you update the PR.

1 similar comment
@github-actions
Copy link
Copy Markdown
Contributor

Semver Impact of This PR

None (no version bump detected)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).


  • chore(deps): bump getsentry/craft from 2.26.2 to 2.26.3 by dependabot[bot] in #6127
  • feat(core): Extract text from children of touched components for breadcrumb labels by antonis in #6106
  • chore(deps): bump @babel/plugin-transform-modules-systemjs from 7.25.0 to 7.29.4 by dependabot in #6124
  • chore(deps): bump fast-uri from 3.0.1 to 3.1.2 by dependabot in #6121
  • chore(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 by dependabot in #6120
  • chore(deps): bump socks to ^2.8.8 to fix ip-address vulnerability by antonis in #6117
  • chore(deps): bump uuid to ^13.0.1 to fix buffer bounds check vulnerability by antonis in #6118
  • test(replay): Add passthrough tests for device-state replay breadcrumbs by antonis in #6115
  • chore(deps): update JavaScript SDK to v10.52.0 by github-actions in #6108
  • chore(deps): bump basic-ftp from 5.3.0 to 5.3.1 by dependabot in #6111

🤖 This preview updates automatically when you update the PR.

@antonis antonis merged commit 1bc8b25 into main May 11, 2026
68 of 95 checks passed
@antonis antonis deleted the dependabot/github_actions/getsentry/craft-2.26.3 branch May 11, 2026 11:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant