Skip to content

chore(deps): bump getsentry/craft from 2.35.0 to 3.4.1 - #6980

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/getsentry/craft-3.4.1
Open

chore(deps): bump getsentry/craft from 2.35.0 to 3.4.1#6980
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/getsentry/craft-3.4.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps getsentry/craft from 2.35.0 to 3.4.1.

Release notes

Sourced from getsentry/craft's releases.

3.4.1

Bug Fixes 🐛

3.4.0

Preview release workflows now handle workspace paths precisely, report version policies, and emit structured JSON for developers.

New Features ✨

Preview release PRs across workspaces with scoped path handling, version-policy reporting, and structured JSON output.

3.3.0

Workspace settings expose more package detail, while scoped packing and version bumps prevent unrelated package changes in monorepos.

New Features ✨

Workspace settings now expand package details, while NuGet packing stays scoped to the selected workspace.

Bug Fixes 🐛

Version bumps now target selected release workspaces, preventing unrelated package changes in monorepos.

3.2.0

Contributor attribution now recognizes co-authors and bot assistance while preserving merge-credit rules, and documentation clarifies Craft usage, targets, and GitHub Actions settings.

New Features ✨

Changelog credit now includes co-authors and bot-assisted contributions, while preserving author-only credit for merge commits without co-author trailers.

Documentation 📚

Documentation now separates Craft installation, workflows, configuration, and CLI guidance while clarifying target options and previously missing GitHub Actions settings.

3.1.0

Workspace-aware release labeling, clearer AI summaries, safer dependency handling, and stricter configuration validation improve changelog clarity and upgrade safety.

New Features ✨

... (truncated)

Changelog

Sourced from getsentry/craft's changelog.

Changelog

3.6.0

When matching tags are unavailable, Prepare now derives release-unit versions from project files, enabling versioned releases without those tags.

New Features ✨

Prepare derives release-unit versions from project files when matching tags are unavailable.

3.5.0

New Features ✨

3.4.1

Bug Fixes 🐛

3.4.0

Preview release workflows now handle workspace paths precisely, report version policies, and emit structured JSON for developers.

New Features ✨

Preview release PRs across workspaces with scoped path handling, version-policy reporting, and structured JSON output.

3.3.0

Workspace settings expose more package detail, while scoped packing and version bumps prevent unrelated package changes in monorepos.

New Features ✨

Workspace settings now expand package details, while NuGet packing stays scoped to the selected workspace.

Bug Fixes 🐛

Version bumps now target selected release workspaces, preventing unrelated package changes in monorepos.

... (truncated)

Commits
  • 90e8e20 release: 3.4.1
  • 4a3ca28 fix(prepare): Emit the release branch targets for the publish request (#943)
  • b0a248d meta: Bump new development version
  • 85d5701 Merge commit '4a8dba2a45b09f4e3fcfc86a79c94d0dd93295bb'
  • 4a8dba2 release: 3.4.0
  • ef9e8e0 feat(changelog): Preview PRs in every release workspace they land in (#942)
  • 1806f23 meta: Bump new development version
  • de14162 Merge commit '4b763f5419255bb520e3e5a49f5b91426dcd374d'
  • 4b763f5 release: 3.3.0
  • 64ef41a feat(nuget): Scope workspace expansion to the selected release workspace (#940)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
chore(deps): bump getsentry/craft from 2.35.0 to 3.4.1
5c0556c 
Bumps [getsentry/craft](https://github.com/getsentry/craft) from 2.35.0 to 3.4.1.
- [Release notes](https://github.com/getsentry/craft/releases)
- [Changelog](https://github.com/getsentry/craft/blob/master/CHANGELOG.md)
- [Commits](getsentry/craft@7a78575...90e8e20)

---
updated-dependencies:
- dependency-name: getsentry/craft
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 2, 2026
@dependabot
dependabot Bot requested review from a team and lucas-zimerman as code owners November 2, 2026 07:45
@dependabot
dependabot Bot requested review from antonis and buenaflor and removed request for a team November 2, 2026 07:45
@github-actions

github-actions Bot commented Nov 2, 2026

Copy link
Copy Markdown
Contributor

Semver Impact of This PR

⚪ None (no version bump detected)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).

  • chore(deps): bump getsentry/craft from 2.35.0 to 3.4.1 by dependabot in #6980
  • fix(ios): Honor Sentry.Mask in error screenshots by antonis and claude in #6974
  • fix(android): Restore enableLogs option mapping by antonis and claude in #6967
  • chore(deps): update Wizard to v9.1.0 by github-actions in #6972
  • chore(deps): update Sentry Android Gradle Plugin to v6.25.0 by github-actions in #6971

🤖 This preview updates automatically when you update the PR.

2 similar comments
@github-actions

github-actions Bot commented Nov 2, 2026

Copy link
Copy Markdown
Contributor

Semver Impact of This PR

⚪ None (no version bump detected)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).

  • chore(deps): bump getsentry/craft from 2.35.0 to 3.4.1 by dependabot in #6980
  • fix(ios): Honor Sentry.Mask in error screenshots by antonis and claude in #6974
  • fix(android): Restore enableLogs option mapping by antonis and claude in #6967
  • chore(deps): update Wizard to v9.1.0 by github-actions in #6972
  • chore(deps): update Sentry Android Gradle Plugin to v6.25.0 by github-actions in #6971

🤖 This preview updates automatically when you update the PR.

@github-actions

github-actions Bot commented Nov 2, 2026

Copy link
Copy Markdown
Contributor

Semver Impact of This PR

⚪ None (no version bump detected)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).

  • chore(deps): bump getsentry/craft from 2.35.0 to 3.4.1 by dependabot in #6980
  • fix(ios): Honor Sentry.Mask in error screenshots by antonis and claude in #6974
  • fix(android): Restore enableLogs option mapping by antonis and claude in #6967
  • chore(deps): update Wizard to v9.1.0 by github-actions in #6972
  • chore(deps): update Sentry Android Gradle Plugin to v6.25.0 by github-actions in #6971

🤖 This preview updates automatically when you update the PR.

sentry-warden[bot]
sentry-warden Bot reviewed Nov 2, 2026
View reviewed changes
Comment thread .github/workflows/release.yml

- name: Prepare release
uses: getsentry/craft@7a7857552e2cdc08b502de96e6076849c01fba32 # v2.35.0
uses: getsentry/craft@90e8e203ad86c8ab8ee134e8d387def13e620e81 # v3.4.1

@sentry-warden sentry-warden Bot Nov 2, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

craft_version does not match the pinned Craft action

The workflow pins getsentry/craft to v3.4.1, but still sets craft_version to 2.35.0. The comment says Craft cannot infer its version from the SHA ref and requires this input to match the tag, so the release job can use the stale Craft CLI. Update craft_version to 3.4.1.

Evidence
  • .github/workflows/release.yml pins the action to a SHA annotated v3.4.1 at line 46.
  • The same step sets craft_version: 2.35.0 at line 54.
  • The comment directly above that input says Craft cannot get its version from a SHA ref and the value must match the SHA tag.

Identified by Warden · code-review · A6B-8FU

cursor[bot]
cursor Bot reviewed Nov 2, 2026
View reviewed changes

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 5c0556c. Configure here.

Comment thread .github/workflows/release.yml

- name: Prepare release
uses: getsentry/craft@7a7857552e2cdc08b502de96e6076849c01fba32 # v2.35.0
uses: getsentry/craft@90e8e203ad86c8ab8ee134e8d387def13e620e81 # v3.4.1

@cursor cursor Bot Nov 2, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Craft version pin not updated

High Severity

The action SHA now points at v3.4.1, but craft_version remains 2.35.0. The release job installs the CLI from that input, so prepare-release still runs Craft 2.35.0 or may fail installing that old build through the v3 action. The nearby comment says this value has to match the SHA tag. Flagged because the review guidelines call out compatibility checks on chore(deps) updates.

Additional Locations (1)
Fix in Cursor Fix in Web

Triggered by project rule: PR Review Guidelines for Cursor Bot

Reviewed by Cursor Bugbot for commit 5c0556c. Configure here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cursor cursor[bot] cursor[bot] left review comments
@sentry-warden sentry-warden[bot] sentry-warden[bot] left review comments
@lucas-zimerman lucas-zimerman Awaiting requested review from lucas-zimerman lucas-zimerman is a code owner
@antonis antonis Awaiting requested review from antonis antonis is a code owner automatically assigned from getsentry/team-mobile-cross-platform-sdks
@buenaflor buenaflor Awaiting requested review from buenaflor buenaflor is a code owner automatically assigned from getsentry/team-mobile-cross-platform-sdks

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants