chore(deps): bump the dependencies group across 1 directory with 3 updates by dependabot[bot] · Pull Request #271 · webpack/tapable

dependabot · 2026-09-18T15:55:16Z

Bumps the dependencies group with 3 updates in the / directory: CodSpeedHQ/action, changesets/action and codecov/codecov-action.

Updates CodSpeedHQ/action from 4.19.1 to 5.4.0

Release notes

Sourced from CodSpeedHQ/action's releases.

v5.4.0

Bumps the CodSpeed runner to v5.4.0, including v5.3.0 and v5.3.1.

The Memory instrument now tracks physical (resident) memory and captures allocation call stacks to build memory flamegraphs. Both are enabled by default and can be turned off with the new disable-memory-track-physical and disable-memory-capture-stack inputs. Serialization is also faster on large memory benchmarks.

The action now exposes the id of the CodSpeed run as a run-id output, and CodSpeed now works on non-Ubuntu/Debian distributions such as Arch Linux.

🚀 Features

Track physical memory and capture allocation call stacks for memory flamegraphs, both enabled by default by @not-matthias in #529, #522 and #553

Expose the run id as a GitHub Actions step output by @moha-bekh in #551

Add an --experimental-disable-pythonmalloc-override flag (CODSPEED_EXPERIMENTAL_DISABLE_PYTHONMALLOC_OVERRIDE) to stop overriding the Python allocator, which can break free-threaded Python in simulation mode, by @not-matthias in #539

Apply kernel memory tunables before memory-mode runs, and fail early when the kernel has no BTF by @not-matthias in #507 and #524

Pause producers under ring buffer pressure in memory mode, and log process stops per reason by @not-matthias in #543

Log which authentication method the run uses by @fargito in #521

🐛 Bug Fixes

Support distributions CodSpeed publishes no valgrind package for (Arch, rolling releases) by @moha-bekh in #525

Error out when the profile archive exceeds the upload size limit by @lvaroqui in #557

Detect free-threaded Python from venv and uv before setting PYTHONMALLOC by @not-matthias in #539

Honor deprecated experimental flags, including their falsey values, instead of ignoring them by @not-matthias in #532 and #553

Fix memory tracking edge cases: reused pids, stack-ring overflow, BPF links held by forked processes, and allocator symbols aliased at an attached offset by @not-matthias in #522 and #543

Attach memory tracking hooks without perf_event_open by @GuillaumeLagrange in #536

Restore profiling sysctls in walltime mode by @not-matthias in #507

⚡ Performance

Speed up memory serialization and reduce the tracker's memory usage on large memory benchmarks by @not-matthias in #522, #537, #548, #558 and #560

⚙️ Internals

Pin memtrack to 1.6.0, through 1.5.0 and 1.5.1, by @adriencaccia in #530, #541 and #561

Keep mmap/munmap/brk as deprecated memtrack artifact variants by @GuillaumeLagrange in #538

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

What's Changed

chore: bump runner version to 5.3.0 by @github-actions[bot] in CodSpeedHQ/action#239

feat: add memory-track-physical experimental input by @not-matthias in CodSpeedHQ/action#238

chore: bump runner version to 5.3.1 by @github-actions[bot] in CodSpeedHQ/action#240

feat: add a run-id output by @moha-bekh in CodSpeedHQ/action#243

chore: bump runner version to 5.4.0 by @github-actions[bot] in CodSpeedHQ/action#244

feat: add disable-memory-capture-stack and disable-memory-track-physical inputs by @not-matthias in CodSpeedHQ/action#242

New Contributors

@moha-bekh made their first contribution in CodSpeedHQ/action#243

... (truncated)

Commits

c4fd08a Release v5.4.0 🚀
759ae97 feat: add disable-memory-capture-stack and disable-memory-track-physical inputs
fe42bc0 chore: bump runner version to 5.4.0 (#244)
c205870 feat: add a run-id output (#243)
48820ec chore: bump runner version to 5.3.1 (#240)
0fc899a feat: add experimental-memory-track-physical input
2d26491 chore: bump runner version to 5.3.0 (#239)
373d686 Release v5.2.1 🚀
5659c65 chore: bump runner version to 5.2.1 (#236)
22d40ad feat: add simulation-track-subprocess input (#235)
Additional commits viewable in compare view

Updates changesets/action from 1.9.0 to 2.1.2

Release notes

Sourced from changesets/action's releases.

v2.1.2

Patch Changes

#735 8833883 Thanks @bluwy! - Handle error when pushing git tags with the git CLI

#724 36f529f Thanks @bluwy! - Improve log messages

#724 36f529f Thanks @bluwy! - Fix root action double error logs

#729 ca85897 Thanks @bluwy! - Always switch and reset branch when generating version commits, similar to if push-with-git-cli is enabled

v2.1.1

Patch Changes

#721 da1ea29 Thanks @KEBABSELLER6! - Fixed typo in renamed inputs from v1 to v2

v2.1.0

Minor Changes

#718 3b7c71c Thanks @bluwy! - Add a cwd input to the root action, /select-mode, /version, /pack, and /publish sub-actions to set the current working directory to execute Changesets in. This input existed in v1 but was incorrectly removed.

Patch Changes

#716 6f58ba3 Thanks @bluwy! - Update pr-status message to link to the new faq page

v2.0.0

Major Changes

#692 cb3f011 Thanks @Andarist! - Release commits and tags are now pushed using the GitHub API by default.

Replace the commit-mode input with the boolean push-with-git-cli input. Set push-with-git-cli: true to continue using the Git CLI.

Regardless of the push mode, custom GitHub tokens must be passed explicitly through the github-token input. The GITHUB_TOKEN environment variable and credentials configured by actions/checkout or embedded in remote URLs are not substitutes for this input. When the Git CLI is enabled, github-token takes precedence over those repository credentials.

#680 ca57073 Thanks @bluwy! - Add a new push-git-tags option that complements create-github-releases to control specifically if git tags should be created but not GitHub releases.

If create-github-releases was previously set to false, which also indirectly disabled git tag creation, git tags will now be created instead by default. If this is not desired, set push-git-tags to false explicitly.

#657 4f718b5 Thanks @Andarist! - Removed compatibility support for old Changesets v1.

#681 7359107 Thanks @bluwy! - Rename the root action inputs and outputs to better match the sub-actions' conventions.

Inputs:

version -> version-script

publish -> publish-script

commit -> commit-message

title -> pr-title

branch -> pr-base-branch

... (truncated)

Changelog

Sourced from changesets/action's changelog.

@changesets/action

2.1.2

Patch Changes

#735 8833883 Thanks @bluwy! - Handle error when pushing git tags with the git CLI

#724 36f529f Thanks @bluwy! - Improve log messages

#724 36f529f Thanks @bluwy! - Fix root action double error logs

#729 ca85897 Thanks @bluwy! - Always switch and reset branch when generating version commits, similar to if push-with-git-cli is enabled

2.1.1

Patch Changes

#721 da1ea29 Thanks @KEBABSELLER6! - Fixed typo in renamed inputs from v1 to v2

2.1.0

Minor Changes

#718 3b7c71c Thanks @bluwy! - Add a cwd input to the root action, /select-mode, /version, /pack, and /publish sub-actions to set the current working directory to execute Changesets in. This input existed in v1 but was incorrectly removed.

Patch Changes

#716 6f58ba3 Thanks @bluwy! - Update pr-status message to link to the new faq page

2.0.0

Major Changes

#692 cb3f011 Thanks @Andarist! - Release commits and tags are now pushed using the GitHub API by default.

Replace the commit-mode input with the boolean push-with-git-cli input. Set push-with-git-cli: true to continue using the Git CLI.

Regardless of the push mode, custom GitHub tokens must be passed explicitly through the github-token input. The GITHUB_TOKEN environment variable and credentials configured by actions/checkout or embedded in remote URLs are not substitutes for this input. When the Git CLI is enabled, github-token takes precedence over those repository credentials.

#680 ca57073 Thanks @bluwy! - Add a new push-git-tags option that complements create-github-releases to control specifically if git tags should be created but not GitHub releases.

If create-github-releases was previously set to false, which also indirectly disabled git tag creation, git tags will now be created instead by default. If this is not desired, set push-git-tags to false explicitly.

#657 4f718b5 Thanks @Andarist! - Removed compatibility support for old Changesets v1.

#681 7359107 Thanks @bluwy! - Rename the root action inputs and outputs to better match the sub-actions' conventions.

Inputs:

... (truncated)

Commits

ae32849 v2.1.2
0138f45 Version Packages (#726)
8833883 Handle error when pushing git tags with the git CLI (#735)
e08fde7 Improve log messages (#730)
371fd77 Bump human-id in the production-dependencies group across 1 directory (#732)
85efcaf Bump actions/checkout in the github-actions group across 1 directory (#734)
5bb9d5c Bump the development-dependencies group across 1 directory with 7 updates (#733)
ca85897 Always prepare branch for version (#729)
36f529f Fix root action double error logs (#724)
d7669c8 Version Packages (#722)
Additional commits viewable in compare view

Updates codecov/codecov-action from 7.0.0 to 7.1.1

Release notes

Sourced from codecov/codecov-action's releases.

v7.1.1

What's Changed

chore(release): 7.1.1 by @thomasrockhu-codecov in codecov/codecov-action#1973

Full Changelog: codecov/codecov-action@v7.1.0...v7.1.1

v7.1.0

What's Changed

chore(release): 7.1.0 by @thomasrockhu-codecov in codecov/codecov-action#1971

Full Changelog: codecov/codecov-action@v7.0.0...v7.1.0

Commits

303a32d chore(release): 7.1.1 (#1973)
0b35c9e chore(release): 7.1.0 (#1971)
See full diff in compare view

changeset-bot · 2026-09-18T15:55:24Z

⚠️ No Changeset found

Latest commit: ba4f6b5

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

codspeed · 2026-09-18T16:04:04Z

Hooray! CodSpeed harness just leveled up!

The base and head of this comparison were measured with different runner settings, so their benchmark values are not directly comparable.

What changed between base and head:

CodSpeed runner v5 changed how benchmarks are measured (base 4.19.1 → head 5.4.0). View release notes
Cycle estimation (off → on) changes how benchmark performance is calculated. Learn more about cycle estimation

Re-run the base with the same settings to get a valid performance comparison.

_{Comparing dependabot/github_actions/dependencies-73046190cd (dd0ff2a) with main (67b6a51)}

…dates Bumps the dependencies group with 3 updates in the / directory: [CodSpeedHQ/action](https://github.com/codspeedhq/action), [changesets/action](https://github.com/changesets/action) and [codecov/codecov-action](https://github.com/codecov/codecov-action). Updates `CodSpeedHQ/action` from 4.19.1 to 5.4.0 - [Release notes](https://github.com/codspeedhq/action/releases) - [Changelog](https://github.com/CodSpeedHQ/action/blob/main/CHANGELOG.md) - [Commits](CodSpeedHQ/action@f22792b...c4fd08a) Updates `changesets/action` from 1.9.0 to 2.1.2 - [Release notes](https://github.com/changesets/action/releases) - [Changelog](https://github.com/changesets/action/blob/main/CHANGELOG.md) - [Commits](changesets/action@a45c4d5...ae32849) Updates `codecov/codecov-action` from 7.0.0 to 7.1.1 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@fb8b358...303a32d) --- updated-dependencies: - dependency-name: changesets/action dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: codecov/codecov-action dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: CodSpeedHQ/action dependency-version: 5.2.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies label Sep 18, 2026

dependabot Bot force-pushed the dependabot/github_actions/dependencies-73046190cd branch from 31ba59a to 603a57d Compare September 18, 2026 16:52

dependabot Bot force-pushed the dependabot/github_actions/dependencies-73046190cd branch from 603a57d to ba4f6b5 Compare October 2, 2026 15:54

dependabot Bot force-pushed the dependabot/github_actions/dependencies-73046190cd branch from ba4f6b5 to dd0ff2a Compare October 9, 2026 16:17

Navigation Menu

Repository navigation

chore(deps): bump the dependencies group across 1 directory with 3 updates - #271

chore(deps): bump the dependencies group across 1 directory with 3 updates#271
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/dependencies-73046190cd

dependabot Bot commented on behalf of github Sep 18, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Sep 18, 2026 •

edited

Loading

Uh oh!

codspeed Bot commented Sep 18, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.4.0

🚀 Features

🐛 Bug Fixes

⚡ Performance

⚙️ Internals

What's Changed

New Contributors

v2.1.2

Patch Changes

v2.1.1

Patch Changes

v2.1.0

Minor Changes

Patch Changes

v2.0.0

Major Changes

@​changesets/action

2.1.2

Patch Changes

2.1.1

Patch Changes

2.1.0

Minor Changes

Patch Changes

2.0.0

Major Changes

v7.1.1

What's Changed

v7.1.0

What's Changed

Uh oh!

changeset-bot Bot commented Sep 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

codspeed Bot commented Sep 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Hooray! CodSpeed harness just leveled up!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 18, 2026 •

edited

Loading

`@changesets/action`

changeset-bot Bot commented Sep 18, 2026 •

edited

Loading

codspeed Bot commented Sep 18, 2026 •

edited

Loading