Skip to content

chore(deps-dev): bump semantic-release from 25.0.5 to 25.0.8 in the semantic-release group across 1 directory#992

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/semantic-release-6dcf7165a3
Open

chore(deps-dev): bump semantic-release from 25.0.5 to 25.0.8 in the semantic-release group across 1 directory#992
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/semantic-release-6dcf7165a3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the semantic-release group with 1 update in the / directory: semantic-release.

Updates semantic-release from 25.0.5 to 25.0.8

Release notes

Sourced from semantic-release's releases.

v25.0.8

25.0.8 (2026-07-18)

Bug Fixes

  • handle potential null values in commit message and gitTags trimming (0a60004)
  • hide-sensitive: mask key/auth/webhook env vars (973d763)
  • mask sensitive environment variables and improve commit handling (#4252) (1bfdc52)
  • prevent template evaluation syntax in branch expansion and tag formatting (f121540)

v25.0.7

25.0.7 (2026-07-13)

Bug Fixes

  • argument Injection via repositoryUrl in package.json (#4245) (c46dbda)

v25.0.6

25.0.6 (2026-07-10)

Bug Fixes

  • ensure encoded secrets get masked (8e28dd3)
Commits
  • 1bfdc52 fix: mask sensitive environment variables and improve commit handling (#4252)
  • 0a60004 fix: handle potential null values in commit message and gitTags trimming
  • f121540 fix: prevent template evaluation syntax in branch expansion and tag formatting
  • 973d763 fix(hide-sensitive): mask key/auth/webhook env vars
  • 474e5a3 ci(action): update github/codeql-action action to v4.37.1 (#4254)
  • fc9382c docs: fix issue template links (#4251)
  • e34c52d ci(action): update actions/setup-node action to v7 (#4250)
  • 8020ec6 ci(action): update actions/setup-node action to v6.5.0 (#4249)
  • 956baf4 chore(deps): update npm to v12.0.1 (#4247)
  • c46dbda fix: argument Injection via repositoryUrl in package.json (#4245)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added auto Opened by an automated process dependencies Pull request that updates a dependency file javascript Pull requests that update JavaScript code labels Jul 13, 2026
@dependabot
dependabot Bot requested a review from devpow112 as a code owner July 13, 2026 08:02
@dependabot dependabot Bot added auto Opened by an automated process dependencies Pull request that updates a dependency file javascript Pull requests that update JavaScript code labels Jul 13, 2026
Bumps the semantic-release group with 1 update in the / directory: [semantic-release](https://github.com/semantic-release/semantic-release).


Updates `semantic-release` from 25.0.5 to 25.0.8
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v25.0.5...v25.0.8)

---
updated-dependencies:
- dependency-name: semantic-release
  dependency-version: 25.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: semantic-release
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps-dev): bump semantic-release from 25.0.5 to 25.0.7 in the semantic-release group chore(deps-dev): bump semantic-release from 25.0.5 to 25.0.8 in the semantic-release group across 1 directory Jul 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/semantic-release-6dcf7165a3 branch from 3249e25 to 0781c39 Compare July 24, 2026 08:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto Opened by an automated process dependencies Pull request that updates a dependency file javascript Pull requests that update JavaScript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants