Skip to content

Bump vale-cli/vale-action from 2 to 3 - #3040

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/vale-cli/vale-action-3
Open

Bump vale-cli/vale-action from 2 to 3#3040
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/vale-cli/vale-action-3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor

Bumps vale-cli/vale-action from 2 to 3.

Release notes

Sourced from vale-cli/vale-action's releases.

v3.0.0

Breaking

Nothing was renamed or removed, but several behaviors changed. Each has a way back.

  • reviewdog 0.17.0 → 0.21.0. Workflows triggered on push using a github-pr-* reporter previously reported nothing (this is not PullRequest build, exit 0). They now lint, and can fail. Pin reviewdog_version: 0.17.0 to keep the old behavior.
  • The level input is honored. It was read from action.yml and never used. Checks that concluded neutral can now conclude failure. Leave level unset for the previous behavior.
  • fail_on_error: true fails on errors only. It previously failed on a finding of any severity for every reporter except the check ones, so a lone suggestion ended the run. Use fail_level: any to restore that.
  • GitHub's 10-annotation limit no longer fails the job when fail_on_error: false. You get a warning naming how many alerts went unshown.
  • Pinning @reviewdog tracks the branch, which is now v3. Pin @v3, or @v2 to stay put.

Added

  • Suggested fixes. Alerts that Vale knows how to resolve are posted as suggested changes you can commit from the pull request — the same replacements the language server offers. Requires reporter: github-pr-review.
  • macOS, Windows, and ARM runners. The action previously only ran on Linux x86-64.
  • New inputs: config, filter, glob, min_alert_level, fail_level, sync, reviewdog_version. workdir is now declared and documented.
  • Caching. Binaries go in the runner's tool cache, and sync: false lets you restore a cached StylesPath instead of re-downloading every package each run.
  • Downloads are verified against each release's published checksums.

Fixed

  • Crash on large output — write EPIPE when reviewdog exited before reading it all (#122)
  • An empty files list failing with lstat : no such file or directory (#141)
  • Pull requests whose diff exceeds 20,000 lines (#153)
  • The annotation limit failing runs regardless of fail_on_error (#89, #150)
  • A warning failing the workflow under fail_on_error: true (#84)
  • Nothing reported on push events (#103)
  • The level input being ignored (#106)
  • Wildcards in files — use the glob input; the warning now says so (#123)
  • Scheduled runs on runners that write a thin event payload (#69)
  • vale_flags splitting on whitespace, which broke --filter='.Level == "error"'
  • Vale's own error is reported when it exits with a runtime error, instead of an exit code

Internal

The action now ships as a single bundled dist/index.js; node_modules is no longer committed, taking the repository from 1,035 tracked files to 23. CI fails if the bundle is out of date with the source.

Full Changelog: vale-cli/vale-action@2.1.2...v3.0.0

v2.1.2

What's Changed

Full Changelog: vale-cli/vale-action@v2...2.1.2

v2.1.1

[!NOTE] As of this release, you need to install format-specific dependencies on your own. See the updated README for an example.

What's Changed

... (truncated)

Commits
  • 518a913 Point the README at v3
  • dca64de Backtick reviewdog in the README
  • 4063152 Add a fail_level input
  • 1ef5a5f Move the major tag ourselves, whatever the release is called
  • 00a15b5 Treat an empty file list as nothing to lint
  • 40967b1 Point wildcard paths at the glob input
  • d4af982 Survive reviewdog closing its input early
  • febea0f Fail on errors, not on any finding
  • b1d1c1f Give reviewdog a repository when the event payload omits one
  • 6b637c5 Note what a fork's read-only token can't do
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [vale-cli/vale-action](https://github.com/vale-cli/vale-action) from 2 to 3.
- [Release notes](https://github.com/vale-cli/vale-action/releases)
- [Commits](vale-cli/vale-action@v2...v3)

---
updated-dependencies:
- dependency-name: vale-cli/vale-action
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Development

Successfully merging this pull request may close these issues.

0 participants