Skip to content

chore: bump semantic-release from 25.0.5 to 25.0.9 - #1054

Merged
aaron-steinfeld merged 1 commit into
mainfrom
dependabot/npm_and_yarn/semantic-release-25.0.7
Aug 10, 2026
Merged

chore: bump semantic-release from 25.0.5 to 25.0.9#1054
aaron-steinfeld merged 1 commit into
mainfrom
dependabot/npm_and_yarn/semantic-release-25.0.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps semantic-release from 25.0.5 to 25.0.9.

Release notes

Sourced from semantic-release's releases.

v25.0.9

25.0.9 (2026-08-05)

Bug Fixes

  • do not expose the authenticated repository URL in EGITNOPERMISSION errors (#4283) (8d905a5)

v25.0.8

25.0.8 (2026-07-18)

Bug Fixes

  • handle potential null values in commit message and gitTags trimming (0a60004)
  • hide-sensitive: mask key/auth/webhook env vars (973d763)
  • mask sensitive environment variables and improve commit handling (#4252) (1bfdc52)
  • prevent template evaluation syntax in branch expansion and tag formatting (f121540)

v25.0.7

25.0.7 (2026-07-13)

Bug Fixes

  • argument Injection via repositoryUrl in package.json (#4245) (c46dbda)

v25.0.6

25.0.6 (2026-07-10)

Bug Fixes

  • ensure encoded secrets get masked (8e28dd3)
Commits
  • 8d905a5 fix: do not expose the authenticated repository URL in EGITNOPERMISSION error...
  • e176eb7 ci(action): update github/codeql-action action to v4.37.6 (#4282)
  • d27db1b chore(deps): update dependency js-yaml to v4.3.1 (#4279)
  • 55beeac ci(action): update github/codeql-action action to v4.37.5 (#4277)
  • 7bf348d chore(deps): update dependency nock to v14.0.17 (#4275)
  • 2ec3ba2 chore(deps): update dependency mockserver-client to v7.5.0 (#4274)
  • d3b7724 chore(deps): update npm to v12.0.2 (#4273)
  • 514dc5f chore(deps): update dependency npm-run-all2 to v9.0.3 (#4271)
  • f25b716 ci(action): update github/codeql-action action to v4.37.4 (#4270)
  • 1114416 chore: remove 'next version' badge from README (#4265)
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
semantic-release [>= 20.a, < 21]
semantic-release [>= 21.a, < 22]
semantic-release [>= 22.a, < 23]
semantic-release [>= 23.a, < 24]
semantic-release [>= 24.a, < 25]

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 13, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 13, 2026 17:03
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 13, 2026
@codecov

codecov Bot commented Jul 13, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (74bd132) to head (3dc76c3).

Additional details and impacted files
@@            Coverage Diff            @@
##              main     #1054   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           53        53           
  Lines         1452      1452           
  Branches       193       202    +9     
=========================================
  Hits          1452      1452           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot dependabot Bot changed the title chore: bump semantic-release from 25.0.5 to 25.0.7 chore: bump semantic-release from 25.0.5 to 25.0.9 Aug 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/semantic-release-25.0.7 branch 3 times, most recently from d439778 to 7195338 Compare August 10, 2026 13:41
Bumps [semantic-release](https://github.com/semantic-release/semantic-release) from 25.0.5 to 25.0.9.
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v25.0.5...v25.0.9)

---
updated-dependencies:
- dependency-name: semantic-release
  dependency-version: 25.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/semantic-release-25.0.7 branch from 7195338 to 3dc76c3 Compare August 10, 2026 14:45
@aaron-steinfeld
aaron-steinfeld merged commit 909bade into main Aug 10, 2026
4 checks passed
@aaron-steinfeld
aaron-steinfeld deleted the dependabot/npm_and_yarn/semantic-release-25.0.7 branch August 10, 2026 16:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant