Bump getsentry/action-release from 3.4.0 to 3.5.0#1975
Bump getsentry/action-release from 3.4.0 to 3.5.0#1975dependabot[bot] wants to merge 1 commit intodevfrom
Conversation
Bumps [getsentry/action-release](https://github.com/getsentry/action-release) from 3.4.0 to 3.5.0. - [Release notes](https://github.com/getsentry/action-release/releases) - [Changelog](https://github.com/getsentry/action-release/blob/master/CHANGELOG.md) - [Commits](getsentry/action-release@v3.4.0...v3.5.0) --- updated-dependencies: - dependency-name: getsentry/action-release dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Needs ReviewI recommend reviewing this upgrade before merging because CI failures are blocking the build. The failures are caused by NuGet package version conflicts in the .NET project that are unrelated to the GitHub Actions upgrade itself. Two projects have VersionOverride directives that conflict with centralized package management: SoundSwitch.Audio.Manager uses System.Drawing.Common 9.0.9 instead of 10.0.1, and SoundSwitch.Tests uses JetBrains.Annotations 2025.2.2 instead of 2025.2.4. These package conflicts must be resolved before the CI pipeline can pass and the PR can be merged. Fix SuggestionsWe identified 2 fixable issues in this upgrade.
AI Assistant PromptCopy prompt for AI assistantWhat we checked
Dependency UsageThis GitHub Action is used exclusively in the CI/CD pipeline to integrate Sentry release tracking for the SoundSwitch application. The action appears twice in the dotnet.yml workflow: once for nightly development builds and once for stable master/beta releases, enabling error monitoring and release management by notifying Sentry when new versions are deployed to either the Nightly or Stable environments.
View 4 more usages
ChangesThe getsentry/action-release dependency updates include upgrades to js-yaml and @actions/core packages, plus an upgrade to the underlying Sentry CLI tool. These are maintenance updates with no breaking changes, security fixes, or functional modifications detected.
View 1 more changeReferences (6)[1]: GitHub Action getsentry/action-release upgraded to v3.5.0 for nightly Sentry release tracking SoundSwitch/.github/workflows/dotnet.yml Line 188 in 0038f2d [2]: GitHub Action getsentry/action-release upgraded to v3.5.0 for stable/beta release tracking SoundSwitch/.github/workflows/dotnet.yml Line 227 in 0038f2d [3]: VersionOverride="9.0.9" conflicts with centralized System.Drawing.Common 10.0.1, causing NU1605 package downgrade error in dotnet restore [4]: Central package management specifies System.Drawing.Common version 10.0.1 SoundSwitch/Directory.Packages.props Line 38 in 0038f2d [5]: VersionOverride="2025.2.2" conflicts with centralized JetBrains.Annotations 2025.2.4, causing NU1605 package downgrade error in dotnet restore [6]: Central package management specifies JetBrains.Annotations version 2025.2.4 SoundSwitch/Directory.Packages.props Line 10 in 0038f2d fossabot analyzed this PR using dependency research. View this analysis on the web |
Bumps getsentry/action-release from 3.4.0 to 3.5.0.
Release notes
Sourced from getsentry/action-release's releases.
Changelog
Sourced from getsentry/action-release's changelog.
Commits
dab6548release: 3.5.049a6d4dchore: Set docker tag for master [skip ci]442361cfeat(deps): Bump js-yaml to ^4.1.1 (#297)1174411chore: Set docker tag for master [skip ci]5b7eafefeat(deps): Bump@actions/coreto ^2.0.1 (#296)dc43911chore(cli): Upgrade Sentry CLI (#293)a181c12chore: Set docker tag for master [skip ci]805b08fMerge branch 'release/3.4.0'Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)