From f851b6a8ea74310a340b8aeefe3563a4c6309b0e Mon Sep 17 00:00:00 2001 From: Alexander Pantiukhov Date: Tue, 3 Nov 2026 10:42:06 +0100 Subject: [PATCH] chore(deps): Bump getsentry/craft from 2.35.0 to 3.5.0 Update the Craft action pin in the release workflow to the 3.5.0 commit. Remove the craft_version input. Craft 2.x could not get its CLI version from a SHA ref, so the workflow had to repeat the version. In Craft 3.x the action resolves the CLI version from the pinned commit and makes sure that the tag and the published binary match it. This keeps the CLI and the action in sync. Dependabot PR #6980 updated only the pin, so it left the CLI at 2.35.0. --- .github/workflows/release.yml | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index d7f0a731e4..3779807efd 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -43,12 +43,10 @@ jobs: cache-dependency-path: yarn.lock - name: Prepare release - uses: getsentry/craft@7a7857552e2cdc08b502de96e6076849c01fba32 # v2.35.0 + uses: getsentry/craft@3f1f02d50b08b8c509a28d2cc2abf594e9a28011 # v3.5.0 env: GITHUB_TOKEN: ${{ steps.token.outputs.token }} with: version: ${{ inputs.version }} force: ${{ inputs.force }} merge_target: ${{ inputs.merge_target }} - # Craft cannot get its version from a SHA ref. Keep this value the same as the SHA tag. - craft_version: 2.35.0