René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"meta: Dependabot fails attempting update of gr2m/create-or-update-pull-request-action action","articleBody":"## Situation\n\nDependabot logs https://github.com/nodejs/node/actions/runs/24660702701/job/72105638122 show a failure attempting to update the GitHub Action [gr2m/create-or-update-pull-request-action](https://github.com/gr2m/create-or-update-pull-request-action)\n\n```text\n+---------------------------------------------------------------------------+\n|                       Dependencies failed to update                       |\n+-------------------------------------------+---------------+---------------+\n| Dependency                                | Error Type    | Error Details |\n+-------------------------------------------+---------------+---------------+\n| gr2m/create-or-update-pull-request-action | unknown_error | null          |\n+-------------------------------------------+---------------+---------------+\n```\n\n## Assessment\n\nA similar issue was described and resolved in https://github.com/nodejs/corepack/pull/815\n\nMultiple GitHub Actions workflows, for example:\n\nhttps://github.com/nodejs/node/blob/b6b6e960cf36f91f19b0ba3fd4527020e57f858a/.github/workflows/timezone-update.yml#L54\n\nuse commit https://github.com/gr2m/create-or-update-pull-request-action/commit/77596e3166f328b24613f7082ab30bf2d93079d5 from Nov 24, 2022\n\nThe parent of the above commit is https://github.com/gr2m/create-or-update-pull-request-action/commit/df20b2c073090271599a08c55ae26e0c3522b329 which is tagged with [v1.9.2](https://github.com/gr2m/create-or-update-pull-request-action/tree/v1.9.2)\n\nDependabot would appear to be unable to find out which major.minor.patch the commit https://github.com/gr2m/create-or-update-pull-request-action/commit/77596e3166f328b24613f7082ab30bf2d93079d5 belongs to, since the commit is not equivalent to any tag and presumably is unable to use update logic that depends on this.\n\n## Suggestion\n\nManually update all instances of:\n\n```yml\nuses: gr2m/create-or-update-pull-request-action@77596e3166f328b24613f7082ab30bf2d93079d5\n```\n\nto a valid SHA https://github.com/gr2m/create-or-update-pull-request-action/commit/b65137ca591da0b9f43bad7b24df13050ea45d1b (`b65137ca591da0b9f43bad7b24df13050ea45d1b`) corresponding to the action's latest version tag [gr2m/create-or-update-pull-request-action@v1.10.1](https://github.com/gr2m/create-or-update-pull-request-action/releases/tag/v1.10.1), released Nov 14, 2024\n\nThis should enable Dependabot to take over future updates.\n\n## Other\n\nNote that the latest version [gr2m/create-or-update-pull-request-action@v1.10.1](https://github.com/gr2m/create-or-update-pull-request-action/releases/tag/v1.10.1) is based on `node20` which causes deprecation warnings in GitHub Actions.\n\nI already submitted https://github.com/gr2m/create-or-update-pull-request-action/issues/728 to request an update to `node24`. It appears that the action repo is however not being actively maintained at this time.\n\ncc: @nodejs/actions \n","author":{"url":"https://github.com/MikeMcC399","@type":"Person","name":"MikeMcC399"},"datePublished":"2026-04-27T15:24:59.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":3},"url":"https://github.com/62990/node/issues/62990"}