build(deps): bump actions/github-script from 7 to 8
What the developer wrote
Authored by dependabot[bot]
build(deps): bump actions/github-script from 7 to 8
Bumps [actions/github-script](https://github.com/actions/github-script) from 7 to 8.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v7...v8)
---
updated-dependencies:
- dependency-name: actions/github-script
dependency-version: '8'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This is a routine automated update by Dependabot that bumps the version of a GitHub Actions helper script used in a workflow that labels pull requests for semantic-versioning checks. There is no code change to the Rust Bitcoin library itself, and nothing in the commit suggests a security problem or fix.
No security action needed; treat as routine dependency maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates two usages of actions/github-script from v7 to v8 in .github/workflows/semver-checks-pr-label.yml. The workflow downloads an artifact, checks for a semver-break marker, and comments/labels PRs accordingly. The diff is a pure version bump with no script logic changes. No security relevance is stated or evident.
Changed components
.github/workflows/semver-checks-pr-label.ymlInspect captured patch +2 / −2
diff --git a/.github/workflows/semver-checks-pr-label.yml b/.github/workflows/semver-checks-pr-label.yml
index c7f9b1c6..51aa185c 100644
--- a/.github/workflows/semver-checks-pr-label.yml
+++ b/.github/workflows/semver-checks-pr-label.yml
@@ -16,7 +16,7 @@ jobs:
if: ${{ github.event.workflow_run.conclusion == 'success' }}
steps:
- name: "Download artifact"
- uses: actions/github-script@v7
+ uses: actions/github-script@v8
with:
script: |
// get all artifacts from the workflow run
@@ -52,7 +52,7 @@ jobs:
if: ${{ hashFiles('semver-break.zip') != '' }}
run: unzip -n semver-break.zip
- name: "Comment and add label on PR - Semver break"
- uses: actions/github-script@v7
+ uses: actions/github-script@v8
if: ${{ hashFiles('semver-break') != '' }}
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.