Skip to content

Bump peter-evans/create-or-update-comment from 4 to 5 in the actions group#69

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions-85cd2e0cc6
Closed

Bump peter-evans/create-or-update-comment from 4 to 5 in the actions group#69
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions-85cd2e0cc6

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 3, 2025 •
edited
Loading

Bumps the actions group with 1 update: peter-evans/create-or-update-comment.

Updates peter-evans/create-or-update-comment from 4 to 5

Release notes

Sourced from peter-evans/create-or-update-comment's releases.

Create or Update Comment v5.0.0

⚙️ Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner for Node 24 support.

What's Changed

... (truncated)

Commits
  • e8674b0 feat: v5 (#439)
  • fffe59e build(deps-dev): bump @​types/node from 18.19.127 to 18.19.129 (#438)
  • 076d572 build(deps-dev): bump @​types/node from 18.19.126 to 18.19.127 (#437)
  • 86a2645 build(deps-dev): bump @​vercel/ncc from 0.38.3 to 0.38.4 (#436)
  • be17e0c build(deps-dev): bump @​types/node from 18.19.124 to 18.19.126 (#435)
  • ef75eae build(deps-dev): bump @​types/node from 18.19.123 to 18.19.124 (#433)
  • 82a7ad0 build(deps): bump actions/setup-node from 4 to 5 (#432)
  • f7c845d build(deps-dev): bump @​types/node from 18.19.122 to 18.19.123 (#430)
  • 5da8e07 build(deps-dev): bump eslint-plugin-prettier from 5.5.3 to 5.5.4 (#428)
  • 2de7f66 build(deps-dev): bump @​types/node from 18.19.121 to 18.19.122 (#427)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump peter-evans/create-or-update-comment in the actions group
c74a115 
Bumps the actions group with 1 update: [peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment).


Updates `peter-evans/create-or-update-comment` from 4 to 5
- [Release notes](https://github.com/peter-evans/create-or-update-comment/releases)
- [Commits](peter-evans/create-or-update-comment@v4...v5)

---
updated-dependencies:
- dependency-name: peter-evans/create-or-update-comment
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added automated dependencies Pull requests that update a dependency file maintenance security labels Oct 3, 2025
@github-actions
Copy link

github-actions bot commented Oct 3, 2025

Thanks for contributing to Optimizations ACE MC! 🎉

Before we review:

  • Have you tested your changes with WordPress 6.5+?
  • Are your changes compatible with PHP 7.4+?
  • Have you followed WordPress coding standards?
  • Did you update the CHANGELOG.md if needed?

Security Reminder:
This plugin can handle sensitive site configuration information, so please ensure:

  • All user inputs are properly sanitized
  • All outputs are properly escaped
  • No security vulnerabilities are introduced

We'll review your PR soon! 🚀

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 14, 2025

Looks like peter-evans/create-or-update-comment is updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Oct 14, 2025
@dependabot dependabot bot deleted the dependabot/github_actions/actions-85cd2e0cc6 branch October 14, 2025 09:29
@github-actions
Copy link

github-actions bot commented Oct 14, 2025

🤖 Gemini Issue Analysis

The new comment from Dependabot significantly alters the status of the original issue.

Here's a breakdown of the analysis:

  1. How does this comment relate to the original issue?
    The comment directly states that the update proposed in the original PR is "no longer needed." This implies that the original PR, which aimed to bump peter-evans/create-or-update-comment from v4 to v5, has become redundant or superseded.

  2. What new information or clarification is provided?
    The critical new information is that peter-evans/create-or-update-comment "is updatable in another way." This suggests:

    • Alternative Update Path: Dependabot has detected another mechanism or existing PR that is or will be handling this specific dependency update. This could be due to:
      • Another Dependabot PR covering this dependency (perhaps as part of a different group, or a more specific update).
      • A manual update to the action already having been merged into the codebase.
      • A change in the Dependabot configuration (dependabot.yml) that now processes this dependency differently.
    • Redundancy of this PR: The current PR is not the definitive or necessary way to achieve the update.

  3. Are there code implications from this comment?

    • For the WordPress Plugin Codebase: There are no direct code implications for the Optimizations ACE MC plugin's PHP code. The dependency in question (peter-evans/create-or-update-comment) is a GitHub Action, used within the repository's .github/workflows/ files, not directly within the WordPress plugin's logic.
    • For GitHub Actions Workflows: The underlying need to update the GitHub Action to version 5 still likely exists. The original PR notes that v5 requires "Actions Runner v2.327.1 or later if you are using a self-hosted runner for Node 24 support." This requirement remains, but this specific PR is no longer the vehicle for the update. The implication is that the workflow files that use this action will eventually be updated to v5, but through a different means.

  4. What follow-up actions are suggested?

    • Close this PR: The most immediate and explicit action is to close this Dependabot PR, as Dependabot itself deems it "no longer needed."
    • Investigate the "another way": It's highly recommended to investigate how peter-evans/create-or-update-comment is now being updated. This would involve:
      • Checking other open Dependabot PRs to see if a different one includes this update.
      • Reviewing recent commits to the main or develop branch, especially in the .github/workflows/ directory, to see if the action was manually updated.
      • Examining the .github/dependabot.yml file for any changes in grouping or configuration that might explain why this specific PR is now redundant.
    • Verify runner compatibility (if applicable): If the project uses self-hosted GitHub Actions runners, ensure they are updated to v2.327.1 or later to support Node 24, as required by peter-evans/create-or-update-comment v5, once the update to v5 is applied via the "another way." If GitHub-hosted runners are used, this is typically managed by GitHub.

In summary, Dependabot is signaling that while the update to v5 is still relevant, this particular PR is no longer the mechanism to achieve it and should be dismissed. The developer should then identify the true source of the update.

Analysis performed by Gemini AI on Tue Oct 14 09:30:12 UTC 2025

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

automated automation dependencies Pull requests that update a dependency file maintenance security

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants