Skip to content

Bump vale-cli/vale-action from 2 to 3 - #3040

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/vale-cli/vale-action-3
Closed

Bump vale-cli/vale-action from 2 to 3#3040
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/vale-cli/vale-action-3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor

Bumps vale-cli/vale-action from 2 to 3.

Release notes

Sourced from vale-cli/vale-action's releases.

v3.0.0

Breaking

Nothing was renamed or removed, but several behaviors changed. Each has a way back.

  • reviewdog 0.17.0 → 0.21.0. Workflows triggered on push using a github-pr-* reporter previously reported nothing (this is not PullRequest build, exit 0). They now lint, and can fail. Pin reviewdog_version: 0.17.0 to keep the old behavior.
  • The level input is honored. It was read from action.yml and never used. Checks that concluded neutral can now conclude failure. Leave level unset for the previous behavior.
  • fail_on_error: true fails on errors only. It previously failed on a finding of any severity for every reporter except the check ones, so a lone suggestion ended the run. Use fail_level: any to restore that.
  • GitHub's 10-annotation limit no longer fails the job when fail_on_error: false. You get a warning naming how many alerts went unshown.
  • Pinning @reviewdog tracks the branch, which is now v3. Pin @v3, or @v2 to stay put.

Added

  • Suggested fixes. Alerts that Vale knows how to resolve are posted as suggested changes you can commit from the pull request — the same replacements the language server offers. Requires reporter: github-pr-review.
  • macOS, Windows, and ARM runners. The action previously only ran on Linux x86-64.
  • New inputs: config, filter, glob, min_alert_level, fail_level, sync, reviewdog_version. workdir is now declared and documented.
  • Caching. Binaries go in the runner's tool cache, and sync: false lets you restore a cached StylesPath instead of re-downloading every package each run.
  • Downloads are verified against each release's published checksums.

Fixed

  • Crash on large output — write EPIPE when reviewdog exited before reading it all (#122)
  • An empty files list failing with lstat : no such file or directory (#141)
  • Pull requests whose diff exceeds 20,000 lines (#153)
  • The annotation limit failing runs regardless of fail_on_error (#89, #150)
  • A warning failing the workflow under fail_on_error: true (#84)
  • Nothing reported on push events (#103)
  • The level input being ignored (#106)
  • Wildcards in files — use the glob input; the warning now says so (#123)
  • Scheduled runs on runners that write a thin event payload (#69)
  • vale_flags splitting on whitespace, which broke --filter='.Level == "error"'
  • Vale's own error is reported when it exits with a runtime error, instead of an exit code

Internal

The action now ships as a single bundled dist/index.js; node_modules is no longer committed, taking the repository from 1,035 tracked files to 23. CI fails if the bundle is out of date with the source.

Full Changelog: vale-cli/vale-action@2.1.2...v3.0.0

v2.1.2

What's Changed

Full Changelog: vale-cli/vale-action@v2...2.1.2

v2.1.1

[!NOTE] As of this release, you need to install format-specific dependencies on your own. See the updated README for an example.

What's Changed

... (truncated)

Commits
  • 518a913 Point the README at v3
  • dca64de Backtick reviewdog in the README
  • 4063152 Add a fail_level input
  • 1ef5a5f Move the major tag ourselves, whatever the release is called
  • 00a15b5 Treat an empty file list as nothing to lint
  • 40967b1 Point wildcard paths at the glob input
  • d4af982 Survive reviewdog closing its input early
  • febea0f Fail on errors, not on any finding
  • b1d1c1f Give reviewdog a repository when the event payload omits one
  • 6b637c5 Note what a fork's read-only token can't do
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [vale-cli/vale-action](https://github.com/vale-cli/vale-action) from 2 to 3.
- [Release notes](https://github.com/vale-cli/vale-action/releases)
- [Commits](vale-cli/vale-action@v2...v3)

---
updated-dependencies:
- dependency-name: vale-cli/vale-action
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 7, 2026
@odow

odow commented Aug 9, 2026

Copy link
Copy Markdown
Member

Closing in favor of #3043. Bots can't make changes to GitHub actions and then upload the docs, so it's easier for me to test this in a new PR that I authored.

@odow odow closed this Aug 9, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 9, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/github_actions/vale-cli/vale-action-3 branch August 9, 2026 20:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Development

Successfully merging this pull request may close these issues.

1 participant