fix(deps): update semantic-release monorepo (major) by renovate[bot] · Pull Request #37 · node-modules/github-actions

renovate · 2026-08-16T07:27:11Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@semantic-release/changelog	`^6.0.2` → `^7.0.0`
@semantic-release/changelog	`^6.0.3` → `^7.0.0`
@semantic-release/exec	`^6.0.3` → `^7.0.0`
@semantic-release/git	`^10.0.1` → `^11.0.0`
@semantic-release/github	`^11.0.3` → `^12.0.0`
semantic-release	`^19.0.5` → `^25.0.0`

Release Notes

semantic-release/changelog (@semantic-release/changelog)

`v7.0.0`

比较 Source

Features

ES Module (#414) (e154214)

BREAKING CHANGES

@semantic-release/changelog is now a native ES
Module. It has named exports for each plugin hook (verifyConditions,
prepare)
the minimum required version of semantic-release to use
@semantic-release/changelog is now
v20.1.0

Other Notable Changes

Replaced xo with prettier with default configuration; following
newly established convention
Replaced nyc with c8 for code coverage
Replaced lodash with lodash-es for proper esm support

Related Issue

semantic-release/exec (@semantic-release/exec)

`v7.1.0`

比较 Source

Features

error: print more useful error for non-process failure (#449) (a285bc5)

`v7.0.3`

比较 Source

Bug Fixes

deps: update dependency execa to v9 (643e2eb)

`v7.0.2`

比较 Source

Bug Fixes

deps: update dependency @semantic-release/error to v4 (#353) (471f963)

`v7.0.1`

比较 Source

Bug Fixes

deps: update dependency parse-json to v8 (#394) (080440f)

`v7.0.0`

比较 Source

Features

ES Module (#411) (b4462db)

BREAKING CHANGES

the minimum required version of semantic-release to use @semantic-release/exec is now v24.1.0; the warn logger method/function is now available to use in plugin
@semantic-release/exec is now a native ES Module. It has named exports for each plugin hook (verifyConditions, analyze提交, verifyRelease, generateNotes, prepare, publish, addChannel, success, fail)

semantic-release/git (@semantic-release/git)

`v11.0.1`

比较 Source

Bug Fixes

deps: update dependency execa to v10 (#564) (b39d5c6)

`v11.0.0`

比较 Source

Features

ES Module (#544) (4d704a2), closes #491 #490

BREAKING CHANGES

@semantic-release/git is now a native ES Module. It
has named exports for each plugin hook (verifyConditions, prepare)
the minimum required version of semantic-release to use
@semantic-release/git is now v20.1.0

Other Notable Changes

@semantic-release/error ^3 → ^4 (ESM-only)
aggregate-error ^3 → ^5 (ESM-only, uses native AggregateError)
execa ^5 → ^9 (ESM-only, named export)
p-reduce ^2 → ^3 (ESM-only)
Removed CJS-only devDeps: clear-module, file-url, fs-extra,
get-stream, nyc
Added c8 for coverage; bumped ava, sinon, tempy,
semantic-release, prettier
Engine: ^22.22.2 || >= 24.15;
Scripts: nyc → c8, added pretest, removed test:ci

Related Issue

semantic-release/github (@semantic-release/github)

`v12.0.9`

比较 Source

Bug Fixes

asset-upload: stop setting content-length header manually (241f966), closes #1224
local-undici: always use the locally installed undici instead of the node built-in version (40973e3), closes #1224
publish: handle content-length header properly for asset uploads (#1260) (28e3741), closes #1224 #1224

`v12.0.8`

比较 Source

Bug Fixes

deps: update dependency http-proxy-agent to v9 (#1203) (edd1652)

`v12.0.7`

比较 Source

Bug Fixes

deps: update dependency https-proxy-agent to v9 (#1204) (1f17362)

`v12.0.6`

比较 Source

Bug Fixes

latest: add make_latest property to the GH release PATCH request during publish (#1169) (f516337)

`v12.0.5`

比较 Source

Bug Fixes

latest: add make_latest property to the GH release POST request during publish (#1157) (38051ba)

`v12.0.4`

比较 Source

Bug Fixes

remove failTitle arg in findSR问题 call (#1164) (f7bdd88)

`v12.0.3`

比较 Source

Bug Fixes

extend GraphQL alias prefix to prevent hash collisions (#1134) (ea6386d)

`v12.0.2`

比较 Source

Bug Fixes

add undici ProxyAgent support for GitHub Enterprise Server behind proxies (#1104) (15def77)

Features

node-versions: drop support for node versions v20, v21, and v23 (6e2ac27)
node-versions: raise the minimum node version requirement for the v24 range (4d6924d)
remove github search api consumption (#1037) (d260bfd), closes #1022

BREAKING CHANGES

node-versions: the minimum node version for the v24 range is now v24.10.0
@semantic-release/github no longer consumes the GitHub 搜索 API in the plugin
node-versions: a minimum of node v22.14 is now required

semantic-release/semantic-release (semantic-release)

`v25.0.9`

比较 Source

Bug Fixes

do not expose the authenticated repository URL in EGITNOPERMISSION errors (#4283) (8d905a5)

`v25.0.8`

比较 Source

Bug Fixes

handle potential null values in commit message and git标签 trimming (0a60004)
hide-sensitive: mask key/auth/webhook env vars (973d763)
mask sensitive environment variables and improve commit handling (#4252) (1bfdc52)
prevent template evaluation syntax in branch expansion and tag formatting (f121540)

`v25.0.7`

比较 Source

Bug Fixes

argument Injection via repositoryUrl in package.json (#4245) (c46dbda)

`v25.0.6`

比较 Source

Bug Fixes

ensure encoded secrets get masked (8e28dd3)

`v25.0.5`

比较 Source

Bug Fixes

revert: next (#4200) (db8ffaa)

`v25.0.4`

比较 Source

Bug Fixes

code-quality: add missing comma in context object for consistency (493d6cd)

`v25.0.3`

比较 Source

Bug Fixes

deps: remove deprecated semver-diff (#3980) (f404124)

`v25.0.2`

比较 Source

Bug Fixes

deps: update dependency read-package-up to v12 (#3935) (1494cb9)

`v25.0.1`

比较 Source

Bug Fixes

deps: update to the latest version of the npm plugin to add trusted publishing support (fad173e), closes semantic-release/npm#958

`v25.0.0`

比较 Source

Bug Fixes

deps: update dependency hosted-git-info to v9 (9fa04f8)
deps: update dependency yargs to v18 (#3745) (cde9a72)
deps: update to the stable version of the github plugin (f12cf81)
deps: update to the stable version of the release-notes-generator plugin (d9def72)
deps: updated to the stable version of the commit-analyzer plugin (291533b)
deps: upgrade to the new major version of the npm plugin, which upgrades npm to v11 for publishing (1be8290)

Features

node-versions: drop support for node versions v20, v21, and v23 (56d16f4)
node-versions: raise the minimum node version for the v24 range (116a188)

BREAKING CHANGES

node-versions: the minimum node version for the v24 range is now v24.10.0
node-versions: a minimum of node v22.14 is now required

`v24.2.9`

比较 Source

Bug Fixes

deps: update dependency semver-diff to v5 (#3867) (a834948)

`v24.2.8`

比较 Source

Bug Fixes

deps: update dependency hook-std to v4 (#3859) (67abe56)

`v24.2.7`

比较 Source

Performance Improvements

get-tags.js: bulk get for tags notes (#3732) (85187e2)

`v24.2.6`

比较 Source

Bug Fixes

deps: update @semantic-release/npm to ^12.0.2 (#3791) (93177d0)

`v24.2.5`

比较 Source

Bug Fixes

deps: raise the minimum of the defined range for marked-terminal (#3742) (fb1ccd4)

`v24.2.4`

比较 Source

Bug Fixes

deps: update dependency marked to v15 (#3499) (e45040e)

`v24.2.3`

比较 Source

Bug Fixes

types: fixed typescript definition (0e08b5c), closes #3601

`v24.2.2`

比较 Source

Bug Fixes

get-git-auth-url.js: Added debug for success (#3595) (2616d93)

`v24.2.1`

比较 Source

Bug Fixes

deps: update dependency import-from-esm to v2 (#3556) (f15019c)

`v24.2.0`

比较 Source

Features

clarify branch existence requirement in error messages (#3462) (05a2ea9)

`v24.1.3`

比较 Source

Bug Fixes

branch-naming: prevent non-range versions from being identified as maintenance branches (07f2672)

`v24.1.2`

比较 Source

Bug Fixes

deps: update @semantic-release/github to v11.0.0 (#3460) (43df51b)

`v24.1.1`

比较 Source

Bug Fixes

deps: update dependency hosted-git-info to v8 (#3436) (ab10ac1)

`v24.1.0`

比较 Source

Features

add warn type to global context.logger (#3423) (bcc663c)

`v24.0.0`

比较 Source

Bug Fixes

deps: upgraded to the beta of the commit-analyzer plugin (dfc3d91)
deps: upgraded to the beta of the release-notes-generator plugin (4a4cd92)

BREAKING CHANGES

deps: the commit-analyzer plugin now expects to be used with the latest major versions of
conventional-changelog packages. if you are installing any of these packages in addition to
semantic-release, be sure to update them as well
deps: the release-notes-generator plugin now expects to be used with the latest major
versions of conventional-changelog packages. if you are installing any of these packages in addition
to semantic-release, be sure to update them as well

`v23.1.1`

比较 Source

Bug Fixes

deps: update dependency execa to v9 (#3296) (73bcd0b)

`v23.1.0`

比较 Source

Features

add main branch to default release branch config (#1737) (95d8736)

`v23.0.8`

比较 Source

Bug Fixes

deps: rename read-pkg-up -> read-package-up (4980cba)
deps: rename read-pkg-up -> read-package-up (#3249) (95a8b9e)

`v23.0.7`

比较 Source

Bug Fixes

deps: update dependency find-versions to v6 (6a2b6bb)

`v23.0.6`

比较 Source

Bug Fixes

deps: update dependency @semantic-release/release-notes-generator to v13 (#3237) (b7e08fc)

`v23.0.5`

比较 Source

Bug Fixes

deps: update dependency @semantic-release/commit-analyzer to v12 (#3226) (29458a0)

`v23.0.4`

比较 Source

Bug Fixes

deps: update dependency @semantic-release/npm to v12 (#3224) (7a50c8a)

`v23.0.3`

比较 Source

Bug Fixes

deps: update dependency @semantic-release/github to v10 (#3222) (96d5aeb)

`v23.0.2`

比较 Source

Bug Fixes

deps: update dependency marked to v12 (#3176) (38105f5)

`v23.0.1`

比较 Source

Bug Fixes

deps: update dependency marked-terminal to v7 (9faded8)

`v23.0.0`

比较 Source

Bug Fixes

deps: update dependency cosmiconfig to v9 (#3105) (07dde04)
deps: update dependency marked to v11 (#3079) (6d2a6f1)
deps: upgraded to the latest version of env-ci (0d0ed9d)
use one note reference per tag to prevent conflicts (#2085) (020ea7d)

Features

node-versions: dropped support for node v18 and raised the minimum for v20 (2904832), closes /github.com/semantic-release/gitlab/pull/647#discussion_r1423131205

BREAKING CHANGES

deps: woodpecker ci users need to upgrade to v1.0.0 or higher to remain supported. see
https://github.com/semantic-release/env-ci/releases/tag/v11.0.0 for more information
node-versions: support for node v18 has been dropped and the minimum for v20 is now v20.8.1

related to https://redirect.github.com/semantic-release/semantic-release/discussions/3088

deps: if using release.config.js as the name of your config file, it needs to be moved to a .config/ directory or renamed to .releaserc.js to keep it in the root of the repository. see https://github.com/cosmiconfig/cosmiconfig/releases/tag/v9.0.0 for more detail

`v22.0.12`

比较 Source

Bug Fixes

Revert "fix(deps): update dependency cosmiconfig to v9" (#3104) (f6f1bf1)

`v22.0.11`

比较 Source

Bug Fixes

deps: update dependency cosmiconfig to v9 (b38cd2e)

`v22.0.10`

比较 Source

Bug Fixes

revert updating cosmiconfig to v9 (88efead)

`v22.0.9`

比较 Source

Bug Fixes

deps: update dependency cosmiconfig to v9 (#3072) (8b0dbd2)

`v22.0.8`

比较 Source

Bug Fixes

support windows absolute extends (#3062) (0d06f62)

`v22.0.7`

比较 Source

Bug Fixes

deps: update dependency read-pkg-up to v11 (#3047) (f09e55f)

Features

support extending ESM configuration files (#3036)(6900865)

`v22.0.6`

比较 Source

Bug Fixes

deps: update dependency figures to v6 (#3033) (305674d)

`v22.0.5`

比较 Source

Bug Fixes

deps: update dependency env-ci to v10 (#2983) (e759493)

`v22.0.4`

比较 Source

Bug Fixes

deps: update dependency marked to v9 (#2947) (84f2ee9)

`v22.0.3`

比较 Source

Bug Fixes

exports: removed the exports definition for the time being (561e2d6), closes #2968. see #2978 for more information.

`v22.0.2`

比较 Source

Bug Fixes

deps: update dependency marked-terminal to v6 (8a7befe)

`v22.0.1`

比较 Source

Bug Fixes

deps: upgraded release-notes-generator and commit-analyzer plugins to stable versions (041e4f7), closes #2934

`v22.0.0`

比较 Source

Bug Fixes

deps: updated to the latest beta of the commit analyzer plugin (03a687b)
deps: updated to the latest betas of the commit-analyzer and release-notes-generator plugins (de8e4e0)
deps: upgraded to the latest version of the npm plugin with npm v10 (a23b718)

Features

conventional-changelog-presets: supported new preset format (07a79ea)
defined exports for the package (72ab317)
node-versions: raised the minimum node v20 requirement to v20.6 (e623cc6)
node-versions: raised the minimum required node version to v18.17 and dropped v19 support (b9f294d)
node-versions: raised the minimum supported node version w/in the v20 range to v20.6.1 (b93bef4)

BREAKING CHANGES

node-versions: the minimum supported version for the v20 range of node has been raised slightly to
v20.6.1 to avoid a known node bug
node-versions: the minimum supported node version in the v20 major range is now v20.6
node-versions: node v18.17 is now the minimum supported node version and support for v19 has been dropped
exports prevents access to internal files, but they arent intended for public use anyway
conventional-changelog-presets: the new preset format is a breaking change when compared to the previous preset format. updating to support the new format means that the old preset format is no longer supported. update your preset to the latest version to maintain compatibility. this is also important if you are using a preset outside of the list of official conventional-changelog presets since your preset will need to be updated to export async functions to match the expected preset signature.

`v21.1.2`

比较 Source

Bug Fixes

deps: update dependency aggregate-error to v5 (#2956) (1017e1a)

`v21.1.1`

比较 Source

Bug Fixes

types: included the definitions file in the published package (#2920) (4c95c97)

`v21.1.0`

比较 Source

Features

Added TypeScript definitions (#2916) (c21a1ac)

`v21.0.9`

比较 Source

Bug Fixes

deps: update dependency hosted-git-info to v7 (#2908) (eba86ac)

`v21.0.8`

比较 Source

Bug Fixes

deps: update dependency execa to v8 (#2914) (7bc21fc)

`v21.0.7`

比较 Source

Bug Fixes

deps: update dependency read-pkg-up to v10 (#2862) (70996e0)

`v21.0.6`

比较 Source

Bug Fixes

get correct version if prerelease branch shares version with ... (#2416) (e4229f9)

`v21.0.5`

比较 Source

Bug Fixes

deps: update dependency marked to v5 (452e1fa)

`v21.0.4`

比较 Source

Bug Fixes

deps: update dependency @semantic-release/error to v4 (d259350)

`v21.0.3`

比较 Source

Bug Fixes

bump @semantic-release/commit-analyzer to v10.0.0-beta.1 (4a6b31f)
bump @semantic-release/github to 9.0.0-beta.2 (#2818) (6f19d77)
deps: updated the beta plugins to stable versions (3941018)

`v21.0.2`

比较 Source

Bug Fixes

deps: update dependency @semantic-release/release-notes-generator to v11 (#2778) (ac40804)

`v21.0.1`

比较 Source

Bug Fixes

deps: update dependency env-ci to v9 (#2757) (4bddb37)

`v21.0.0`

比较 Source

BREAKING CHANGES

deps: the npm plugin has updated the npm dependency to v9
legacy authentication using NPM_USERNAME and NPM_PASSWORD is no longer supported. Use NPM_TOKEN instead.

Bug Fixes

deps: bump @semantic-release/npm to ^10.0.0 (d647433)

`v20.1.3`

比较 Source

Bug Fixes

deps: update dependency execa to v7.1.1 (c38b53a)

`v20.1.2`

比较 Source

Bug Fixes

deps: update dependency cosmiconfig to v8.1.2 (fbede54)

`v20.1.1`

比较 Source

Bug Fixes

deps: update dependency execa to v7 (#2709) (31d9bfe)

`v20.1.0`

比较 Source

Features

plugins: add support for loading ESM plugins (#2688) (d170f73)

`v20.0.4`

比较 Source

Bug Fixes

windows: fixed issues preventing execution from windows (#2672) (5df624c)

`v20.0.3`

比较 Source

Reverts

Revert "chore(deps): update dependency ava to v5.1.1" (#2682) (914b0a2), closes #2682

`v20.0.2`

比较 Source

Bug Fixes

deps: update dependency semver-diff to v4 (#1915) (cb45d27)

`v20.0.1`

比较 Source

Bug Fixes

deps: update dependency cosmiconfig to v8 ([f914c1e](https:

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-08-16T07:27:25Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain 安全	Vulnerability	Quality	Maintenance	License
	npm/@semantic-release/changelog@7.0.0
	npm/@semantic-release/git@11.0.1

View full report

fix(deps): update semantic-release monorepo

66e03d9

Navigation Menu

Uh oh!

fix(deps): update semantic-release monorepo (major) - #37

fix(deps): update semantic-release monorepo (major)#37
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/major-semantic-release-monorepo

renovate Bot commented Aug 16, 2026

Uh oh!

socket-security Bot commented Aug 16, 2026

Uh oh!

Reviewers

Assignees

标签

项目

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Aug 16, 2026

Release Notes

Features

BREAKING CHANGES

Other Notable Changes

Related Issue

Features

Bug Fixes

Bug Fixes

Bug Fixes

Features

BREAKING CHANGES

Bug Fixes

Features

BREAKING CHANGES

Other Notable Changes

Related Issue

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

BREAKING CHANGES

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

BREAKING CHANGES

Bug Fixes

Bug Fixes

Performance Improvements

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

BREAKING CHANGES

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

BREAKING CHANGES

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes