From dd22e0272aa88fcf7b836f7fc819d52137f6118a Mon Sep 17 00:00:00 2001 From: "P.Conrad" Date: Sun, 20 Sep 2026 05:11:36 +0000 Subject: [PATCH 1/4] fix: correct output variable names and update changesets action parameters in release workflow --- .github/workflows/release.yml | 26 +++++++++++++------------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f36caf8d..d3ebb61f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -36,16 +36,16 @@ jobs: pull-requests: write outputs: - should_publish: ${{ steps.changesets.outputs.hasChangesets == 'false' }} + should_publish: ${{ steps.changesets.outputs.has-changesets == 'false' }} steps: - name: Checkout code uses: actions/checkout@v7 with: # changesets/action commits version bumps via the GitHub API - # (commitMode: github-api) so we deliberately disable - # persisted credentials — there is no `git push` from this - # job. + # (the action's default, since push-with-git-cli is false unless + # set) so we deliberately disable persisted credentials — there + # is no `git push` from this job. persist-credentials: false - name: Setup Bun @@ -66,14 +66,14 @@ jobs: id: changesets uses: changesets/action@v2 with: - version: bunx changeset version - title: 'chore: version packages' - commit: 'chore: version packages' - # Required when persist-credentials: false — without this the - # action falls back to git-cli, which has no remote auth and - # fails the push. github-api also produces a verified commit - # authored by github-actions[bot]. - commitMode: github-api + version-script: bunx changeset version + pr-title: 'chore: version packages' + commit-message: 'chore: version packages' + # push-with-git-cli defaults to false, i.e. commits/tags go via + # the GitHub API. Required when persist-credentials: false — + # otherwise the action would fall back to git-cli, which has no + # remote auth and fails the push. The GitHub API path also + # produces a verified commit authored by github-actions[bot]. env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} @@ -155,7 +155,7 @@ jobs: id: publish uses: changesets/action@v2 with: - publish: bunx changeset publish + publish-script: bunx changeset publish env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} From 1d86d651efbcd3feb629a6fa00161eafc98732a7 Mon Sep 17 00:00:00 2001 From: "P.Conrad" Date: Sun, 20 Sep 2026 05:15:53 +0000 Subject: [PATCH 2/4] chore: add changeset for release workflow fix --- .changeset/fix-release-workflow-inputs.md | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 .changeset/fix-release-workflow-inputs.md diff --git a/.changeset/fix-release-workflow-inputs.md b/.changeset/fix-release-workflow-inputs.md new file mode 100644 index 00000000..b0e1f301 --- /dev/null +++ b/.changeset/fix-release-workflow-inputs.md @@ -0,0 +1,9 @@ +--- +--- + +Fix the `Release` workflow, which failed on every push to `main` because +`changesets/action@v2` renamed several inputs (`version` -> `version-script`, +`title` -> `pr-title`, `commit` -> `commit-message`, `publish` -> +`publish-script`) and no longer accepts `commitMode`. Also fixes +`outputs.should_publish`, which read the stale `hasChangesets` key instead of +the current `has-changesets`. CI-only change; no package behavior affected. From 2220fb23c6fbc88f4619694161f703cd0b73b741 Mon Sep 17 00:00:00 2001 From: "P.Conrad" Date: Sun, 20 Sep 2026 05:27:58 +0000 Subject: [PATCH 3/4] fix: update inputs for Release workflow to align with changesets/action@v2 --- .changeset/fix-release-workflow-inputs.md | 27 +++++++++++++++++++++++ 1 file changed, 27 insertions(+) diff --git a/.changeset/fix-release-workflow-inputs.md b/.changeset/fix-release-workflow-inputs.md index b0e1f301..cd1c29bd 100644 --- a/.changeset/fix-release-workflow-inputs.md +++ b/.changeset/fix-release-workflow-inputs.md @@ -1,4 +1,31 @@ --- +"@tko/bind": major +"@tko/binding.component": major +"@tko/binding.core": major +"@tko/binding.foreach": major +"@tko/binding.if": major +"@tko/binding.template": major +"@tko/build.knockout": major +"@tko/build.reference": major +"@tko/builder": major +"@tko/computed": major +"@tko/filter.punches": major +"@tko/lifecycle": major +"@tko/observable": major +"@tko/provider": major +"@tko/provider.attr": major +"@tko/provider.bindingstring": major +"@tko/provider.component": major +"@tko/provider.databind": major +"@tko/provider.multi": major +"@tko/provider.mustache": major +"@tko/provider.native": major +"@tko/provider.virtual": major +"@tko/utils": major +"@tko/utils.component": major +"@tko/utils.functionrewrite": major +"@tko/utils.jsx": major +"@tko/utils.parser": major --- Fix the `Release` workflow, which failed on every push to `main` because From 4e448207d20eeeb7353adaaf3493521a047387f5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 21 Sep 2026 12:15:45 +0000 Subject: [PATCH 4/4] chore(deps): bump github/codeql-action from 4.37.4 to 4.38.1 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.4 to 4.38.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4.37.4...v4.38.1) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.38.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql-analysis.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index b7e9a850..c7205ec8 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -43,7 +43,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v4.37.4 + uses: github/codeql-action/init@v4.38.1 with: languages: ${{ matrix.language }} config-file: ./.github/codeql/codeql-config.yml @@ -51,7 +51,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@v4.37.4 + uses: github/codeql-action/autobuild@v4.38.1 # ℹ️ Command-line programs to run using the OS shell. # 📚 https://git.io/JvXDl @@ -61,4 +61,4 @@ jobs: # uses a compiled language - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.37.4 + uses: github/codeql-action/analyze@v4.38.1