Skip to content

build(deps): bump lukka/get-cmake from 4.2.1 to 4.2.3#586

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/lukka/get-cmake-4.2.3
Open

build(deps): bump lukka/get-cmake from 4.2.1 to 4.2.3#586
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/lukka/get-cmake-4.2.3

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 2, 2026

Bumps lukka/get-cmake from 4.2.1 to 4.2.3.

Release notes

Sourced from lukka/get-cmake's releases.

CMake v4.2.3

The get-cmake action downloads and caches CMake and Ninja on your workflows. Versions can be specified using semantic versioning ranges using cmakeVersion and ninjaVersion inputs.

Changes:

  • latest is now using CMake version v4.2.3, use this one-liner e.g.: uses: lukka/get-cmake@latest

Enjoy!

CMake v4.2.2

The get-cmake action downloads and caches CMake and Ninja on your workflows. Versions can be specified using semantic versioning ranges using cmakeVersion and ninjaVersion inputs.

Changes:

  • latest is now using CMake version v4.2.2, use this one-liner e.g.: uses: lukka/get-cmake@latest

Enjoy!

Changelog

Sourced from lukka/get-cmake's changelog.

Release Process for get-cmake

This document describes the release process for the get-cmake action after a new CMake or Ninja version has been merged to the main branch.

Overview

The get-cmake action uses two key reference points for users:

  1. latest branch - Points to the most recent stable release
  2. Version tags (e.g., vX.Y.Z) - Allow users to pin to specific versions

When a new CMake version is detected and merged to main via automated PR, a release is performed automatically (or can be done manually) to make it available to users.

Release Steps

Option 1: Automatic Release (Recommended)

The auto-release.yml workflow automatically handles releases when automated CMake version PRs are merged:

  1. When a PR with title matching [Automated] Adding cmake-vX.Y.Z is merged to main
  2. The workflow automatically:
    • Reads the version from .latest_cmake_version
    • Updates the latest branch to match main
    • Creates and pushes the version tag (if it doesn't exist)

No manual action needed - the release happens automatically!

Option 2: Manual Release (Override/Fallback)

If you need to manually trigger a release or override the automatic process:

  1. Go to the Actions tab in GitHub
  2. Select "Sync latest branch and create release tag" workflow
  3. Click "Run workflow"
  4. Enter the tag name (e.g., v4.2.3)
  5. Click "Run workflow" button

The workflow will:

  • Validate the tag name format
  • Update the latest branch to match main
  • Create and push the specified version tag

Option 3: Manual Command-Line Process (Advanced)

If you prefer to do this manually via command line:

# 1. Ensure you're on the main branch and up to date
git checkout main
git pull origin main
</tr></table>

... (truncated)

Commits
  • f176ccd Add automated release workflows for latest branch sync and version tagging (#...
  • e754285 New CMake version(s): cmake-v4.2.3 (#232)
  • 822400b Bump jws from 3.2.2 to 3.2.3 (#222)
  • 1bfad7b Bump lodash from 4.17.21 to 4.17.23 (#231)
  • dc05ee1 New CMake version(s): cmake-v4.2.2 (#229)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [lukka/get-cmake](https://github.com/lukka/get-cmake) from 4.2.1 to 4.2.3.
- [Release notes](https://github.com/lukka/get-cmake/releases)
- [Changelog](https://github.com/lukka/get-cmake/blob/main/RELEASE_PROCESS.md)
- [Commits](lukka/get-cmake@v4.2.1...v4.2.3)

---
updated-dependencies:
- dependency-name: lukka/get-cmake
  dependency-version: 4.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants