From b8a20357a6546a755efbb880b9567f1452ae61d0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 29 Sep 2026 20:58:21 +0000 Subject: [PATCH 1/2] Bump the github-actions group with 3 updates Bumps the github-actions group with 3 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/download-artifact](https://github.com/actions/download-artifact) and [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action). Updates `actions/upload-artifact` from 4.6.2 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/ea165f8d65b6e75b540449e92b4886f43607fa02...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a) Updates `actions/download-artifact` from 4.3.0 to 8.0.1 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/d3f86a106a0bac45b974a628896c90dbdf5c8093...3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c) Updates `slackapi/slack-github-action` from 1.25.0 to 4.0.0 - [Release notes](https://github.com/slackapi/slack-github-action/releases) - [Changelog](https://github.com/slackapi/slack-github-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/slackapi/slack-github-action/compare/6c661ce58804a1a20f6dc5fbee7f0381b469e001...dcb1066f776dd043e64d0e8ba94ca15cc7e1875d) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: slackapi/slack-github-action dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/cd.yml | 6 +++--- .github/workflows/ci.yml | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index aa2c1a3..2cf60a0 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -106,7 +106,7 @@ # Add a unique identifier to prevent cache conflicts ACTIONS_CACHE_KEY_SUFFIX: "-${{ matrix.ruby-platform }}-${{ github.run_id }}" - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: cross-gem-${{ matrix.ruby-platform }} path: pkg/*-${{ matrix.ruby-platform }}.gem @@ -145,7 +145,7 @@ bundler-cache: true cargo-cache: false - - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: pattern: cross-gem-* merge-multiple: true @@ -252,7 +252,7 @@ SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK steps: - - uses: slackapi/slack-github-action@6c661ce58804a1a20f6dc5fbee7f0381b469e001 # v1.25.0 + - uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0 with: payload: | { diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f7d559c..8513f8f 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -83,7 +83,7 @@ jobs: SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK steps: - - uses: slackapi/slack-github-action@6c661ce58804a1a20f6dc5fbee7f0381b469e001 # v1.25.0 + - uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0 with: payload: | { From 5836cafb22592b3d8b9a5e775a07b86da59f1676 Mon Sep 17 00:00:00 2001 From: Douglas Eichelberger Date: Tue, 29 Sep 2026 14:32:15 -0700 Subject: [PATCH 2/2] Pass the Slack webhook as inputs for slack-github-action v4 slack-github-action v2 and later ignore the SLACK_WEBHOOK_URL and SLACK_WEBHOOK_TYPE env vars that v1 read. The webhook and its type are now the webhook and webhook-type inputs. Without this, the v4 bump here would make the failure notification and release announcement fail the next time it runs, which PR CI never exercises. The JSON payload stays as is: v4 falls back to JSON.parse when YAML parsing fails. --- .github/workflows/cd.yml | 5 ++--- .github/workflows/ci.yml | 5 ++--- 2 files changed, 4 insertions(+), 6 deletions(-) diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index 2cf60a0..5086479 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -248,12 +248,11 @@ needs: [check-release, release] # A dry run builds without publishing, so there's nothing to announce. if: ${{ needs.release.result == 'success' && !inputs.dry_run }} - env: - SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} - SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK steps: - uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0 with: + webhook: ${{ secrets.SLACK_WEBHOOK_URL }} + webhook-type: incoming-webhook payload: | { "text": "🎉 Released ${{ github.repository }} v${{ needs.check-release.outputs.version }}" diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 8513f8f..e22d514 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -79,12 +79,11 @@ jobs: runs-on: ubuntu-latest needs: [rspec, static_type_check] if: ${{ failure() && github.ref == 'refs/heads/main' }} - env: - SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} - SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK steps: - uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0 with: + webhook: ${{ secrets.SLACK_WEBHOOK_URL }} + webhook-type: incoming-webhook payload: | { "text": "${{ github.repository }}/${{ github.ref }}: FAILED\n${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"