Skip to content

Bump shakacode/react_on_rails/.github/workflows/demo-fleet-smoke.yml from 613c6c2a251a782328b26d68e7f23daa9b677497 to cd04013a0108a98d74ac4f7d5322420fe6a226ec - #806

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/shakacode/react_on_rails/dot-github/workflows/demo-fleet-smoke.yml-cd04013a0108a98d74ac4f7d5322420fe6a226ec
Open

Bump shakacode/react_on_rails/.github/workflows/demo-fleet-smoke.yml from 613c6c2a251a782328b26d68e7f23daa9b677497 to cd04013a0108a98d74ac4f7d5322420fe6a226ec#806
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/shakacode/react_on_rails/dot-github/workflows/demo-fleet-smoke.yml-cd04013a0108a98d74ac4f7d5322420fe6a226ec

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 6, 2026

Copy link
Copy Markdown

Bumps shakacode/react_on_rails/.github/workflows/demo-fleet-smoke.yml from 613c6c2a251a782328b26d68e7f23daa9b677497 to cd04013a0108a98d74ac4f7d5322420fe6a226ec.

Changelog

Sourced from shakacode/react_on_rails/.github/workflows/demo-fleet-smoke.yml's changelog.

Change Log

All notable changes to this project's source code will be documented in this file. Items under Unreleased is upcoming features that will be out in the next version.

This is the unified changelog for both React on Rails (open source) and React on Rails Pro. Pro-specific changes are tagged inline with [Pro]. For pre-monorepo Pro history (versions 4.0.0-rc.15 and earlier), see the archived Pro CHANGELOG.

Migration instructions for the major updates can be found here. Some smaller migration information can be found here.

Want to Save Time Updating?

If you need help upgrading react_on_rails, webpacker to shakapacker, or JS packages, contact justin@shakacode.com. We can upgrade your project and improve your development and customer experiences, allowing you to focus on building new features or fixing bugs instead.

For an overview of working with us, see our Client Engagement Model article and how we bill for time.

If you think ShakaCode can help your project, click here to book a call with Justin Gordon, the creator of React on Rails and Shakapacker.

Contributors

Please follow the recommendations outlined at keepachangelog.com. Please use the existing headings and styling as a guide. After a release, run /update-changelog in Claude Code to analyze commits, write entries, and create a PR. Alternatively, run bundle exec rake update_changelog to add version headers only (you must write entries manually).

Versions

[Unreleased]

Fixed

  • Generated server webpack configs no longer include an unused merge import or stale comments: commonWebpackConfig already clones the shared client configuration, so the generated server configuration stays lint-clean without changing its runtime behavior. Fixes Issue 4791. PR 4840 by ihabadham.

  • Release retries now durably reuse maintainer-verified ShakaPerf evidence: rake release can bind an existing successful run to the canonical release tracker with RELEASE_SHAKAPERF_RUN, then re-fetch and re-verify the exact SHA or machine-proven runtime-equivalent evidence on later invocations instead of dispatching duplicate performance runs. Tracker trust is bound to the exact Release gate: react_on_rails X.Y.Z stable-base title, explicit selectors take precedence over automatic accepted-RC reuse, and persisted accelerated retries cannot silently consume a selector. Automatic reuse falls back to normal discovery only for authoritative natural invalidation such as stale or missing evidence, a failed/cancelled live run, or proven runtime divergence; indeterminate API or Git failures, detector errors, and record mutations remain blocking. Raw REST-selected runs now preserve their creation timestamp through strict-final verification. Before either a live release or dry run can reach registry checks, confirmation, mutation, tagging, or publication, the task also verifies the frozen pnpm install state, the repository-pinned pnpm version, and lifecycle-enabled builds of all four npm release packages before creating a release checkout, pulling, authenticating, or reading any remote release state. The successful check is bound to the exact commit; when a live git pull --rebase advances HEAD, the task rebuilds and rebinds readiness before resolving the release version or continuing. npm publication now retries only explicit OTP challenges and context-qualified transient

... (truncated)

Commits
  • cd04013 Docs: move agent coordination to the HTTP backend (#4764)
  • 9d2f878 Detect unnoticed changes across generated webpack/Rspack configs (#4839)
  • 9780839 Fix durable ShakaPerf release evidence reuse (#4833)
  • aafe072 Docs: add missing content — release notes, upgrade guide, config, API referen...
  • 87c8ae1 Fix incorrect docs: helper names, defaults, requirements, runtime refs (#4836)
  • a0d8dc0 Scroll-priority streaming: candidate architecture evaluation (#4835) (#4841)
  • cf39d07 Fix generated server config lint cleanup (#4840)
  • 8d08075 Document serialized release backport policy (#4592)
  • 4dfadb2 Package version-matched agent skills and docs (#4809)
  • 2bc4dab Fix ci-required base ref for PR merge-ref checkouts (#4819)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [shakacode/react_on_rails/.github/workflows/demo-fleet-smoke.yml](https://github.com/shakacode/react_on_rails) from 613c6c2a251a782328b26d68e7f23daa9b677497 to cd04013a0108a98d74ac4f7d5322420fe6a226ec.
- [Release notes](https://github.com/shakacode/react_on_rails/releases)
- [Changelog](https://github.com/shakacode/react_on_rails/blob/main/CHANGELOG.md)
- [Commits](shakacode/react_on_rails@613c6c2...cd04013)

---
updated-dependencies:
- dependency-name: shakacode/react_on_rails/.github/workflows/demo-fleet-smoke.yml
  dependency-version: cd04013a0108a98d74ac4f7d5322420fe6a226ec
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@github-actions

github-actions Bot commented Aug 6, 2026

Copy link
Copy Markdown

🚀 Quick Review App Commands

Welcome! Here are the commands you can use in this PR:
They require the repository to have cpflow review apps configured, including the CPLN_TOKEN_STAGING secret.

+review-app-deploy

Deploy your PR branch for testing.

+review-app-delete

Remove the review app when done.

+review-app-help

Show detailed instructions, environment setup, and configuration options.

Comment +review-app-help for full setup details.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants