Repository navigation
Commit 284abc3
authored
build(deps): bump hyperpolymath/smtp-notify-action from 0.5.0 to 0.5.1 in the github-actions group (#149)
Bumps the github-actions group with 1 update:
[hyperpolymath/smtp-notify-action](https://github.com/hyperpolymath/smtp-notify-action).
Updates `hyperpolymath/smtp-notify-action` from 0.5.0 to 0.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/hyperpolymath/smtp-notify-action/releases">hyperpolymath/smtp-notify-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.5.1</h2>
<h3>Protocol-neutral <code>server_address</code> metadata</h3>
<p><code>server_address</code> is the host input for both SMTP and NNTP,
and remained the only input in <code>action.yml</code> still described
as SMTP-only (<code>'SMTP server host name'</code>). It now reads:</p>
<pre lang="yaml"><code>description: 'Server host name (SMTP or NNTP, per
protocol: `protocol`)'
</code></pre>
<p>The <code>secure</code> and <code>diagnose</code> folded scalar
descriptions were also rewrapped to line width (<code>Reports</code> →
<code>reports</code> after the colon in <code>diagnose</code>), and the
download URL in <code>action.yml</code> now points to
<code>v0.5.1</code>.</p>
<p>Because workflow editors, consumers, and GitHub Marketplace read
<code>action.yml</code> from the release tag — and tags are immutable
here — this ships as <code>v0.5.1</code> rather than moving
<code>v0.5.0</code>. <code>v0.5.0</code> remains supported in
<code>SECURITY.md</code> since the binary and input surface are
unchanged.</p>
<p>For the full NNTP posting (<code>protocol: nntp</code>,
<code>newsgroups</code>) and Marketplace readiness notes introduced in
the 0.5 series, see <strong><a
href="https://github.com/hyperpolymath/smtp-notify-action/releases/tag/v0.5.0">v0.5.0</a></strong>
and <code>CHANGELOG.adoc</code>.</p>
<h3>Provenance</h3>
<p>Zero Zig or Idris2 source files changed between <code>v0.5.0</code>
and <code>v0.5.1</code>. CI rebuilt both static musl binaries from this
tag and verified they hash byte-identically to the unchanged SHA-256
pins inside <code>action.yml</code> before publishing.
<code>SHA256SUMS</code> is attached:</p>
<pre><code>2683da8f619dd5f310c9f6884da39e825c807c2c86a6319c19aba39b27f9c5c9
smtp-notify-x86_64-linux-musl
a58138308fb9832e1ceb551a12f1b04e591dc38ba5fd336c9acfb3f263161f29
smtp-notify-aarch64-linux-musl
</code></pre>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/hyperpolymath/smtp-notify-action/blob/main/CHANGELOG.adoc">hyperpolymath/smtp-notify-action's
changelog</a>.</em></p>
<blockquote>
<p>== v0.5.1 — 2026-10-24</p>
<p>A metadata correction, and the release to publish the Marketplace
listing from.
The binary is <em>byte-identical</em> to v0.5.0's — the two SHA-256 pins
are unchanged
and re-verified by the release workflow — so v0.5.0 remains supported
and
correct for anyone already pinned to it. A new tag rather than an edit
of the
existing one because a tag is immutable here: consumers pin SHAs, and
GitHub
reads <code>action.yml</code> <em>from the tag</em>, which is the same
property that made v0.5.0
necessary in the first place.</p>
<p>NOTE: The v0.5.0 heading below carries a note that the tag had to be
pushed
immediately after its merge. That was done, and the release published
the same
day; the note is left in place because it describes a property of the
release
process, not a pending task.</p>
<p>=== Fixed</p>
<ul>
<li><em><code>server_address</code> is no longer described as
SMTP-only.</em> The field is the host
for both protocols, and the description said <code>'SMTP server host
name'</code> — the
last input description that still read as if the news transport did not
exist. It now reads <code>'Server host name (SMTP or NNTP, per protocol:
</code>protocol<code>)'</code>. Cosmetic, but workflow editors and
consumers read <code>action.yml</code>
from the release ref, which is why it ships as a new tag rather than a
<code>main</code>-only edit.</li>
</ul>
<p>=== Changed</p>
<ul>
<li>The asset URL names <code>v0.5.1</code>. The pins do not move: the
binary did not change.</li>
<li>The <code>secure</code> and <code>diagnose</code> input descriptions
were rewrapped to the file's
line width (and <code>Reports</code> lowercased after the colon in
<code>diagnose</code>).</li>
<li><code>README.adoc</code>'s three pinned examples and
<code>.github/SECURITY.md</code>'s
supported-versions table follow the current release.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/hyperpolymath/smtp-notify-action/commit/e384daf6167a7a7567642d6a62060106244d2413"><code>e384daf</code></a>
fix(action): protocol-neutral server_address wording (needs tag v0.5.1)
(<a
href="https://redirect.github.com/hyperpolymath/smtp-notify-action/issues/28">#28</a>)</li>
<li>See full diff in <a
href="https://github.com/hyperpolymath/smtp-notify-action/compare/v0.5.0...v0.5.1">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>1 parent bbf0706 commit 284abc3
2 files changed
Lines changed: 5 additions & 5 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
18 | 18 | | |
19 | 19 | | |
20 | 20 | | |
21 | | - | |
| 21 | + | |
22 | 22 | | |
23 | 23 | | |
24 | 24 | | |
| |||
49 | 49 | | |
50 | 50 | | |
51 | 51 | | |
52 | | - | |
53 | | - | |
54 | | - | |
| 52 | + | |
| 53 | + | |
| 54 | + | |
55 | 55 | | |
56 | 56 | | |
57 | 57 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
41 | 41 | | |
42 | 42 | | |
43 | 43 | | |
44 | | - | |
| 44 | + | |
45 | 45 | | |
46 | 46 | | |
47 | 47 | | |
| |||
0 commit comments