build(deps): bump getsentry/craft from 2.26.5 to 2.26.6 (#6396)

dependabot[bot] · web-flow · commit 6a2621124ccc · 2026-05-27T06:46:29.000Z
Bumps [getsentry/craft](https://github.com/getsentry/craft) from 2.26.5 to 2.26.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/getsentry/craft/releases">getsentry/craft's releases</a>.</em></p> <blockquote> <h2>2.26.6</h2> <h3>Bug Fixes 🐛</h3> <ul> <li>(nuget) Move global.json aside during <code>dotnet setversion</code> by <a href="https://github.com/jamescrosswell"><code>@​jamescrosswell</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/820">#820</a></li> <li>(security) Override <code>@​tootallnate/once</code> to ^2.0.1 (CVE-2026-3449) by <a href="https://github.com/BYK"><code>@​BYK</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/822">#822</a></li> <li>Improve partial publishing recovery for CocoaPods and GitHub targets by <a href="https://github.com/BYK"><code>@​BYK</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/821">#821</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/getsentry/craft/blob/master/CHANGELOG.md">getsentry/craft's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>2.26.6</h2> <h3>Bug Fixes 🐛</h3> <ul> <li>(nuget) Move global.json aside during <code>dotnet setversion</code> by <a href="https://github.com/jamescrosswell"><code>@​jamescrosswell</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/820">#820</a></li> <li>(security) Override <code>@​tootallnate/once</code> to ^2.0.1 (CVE-2026-3449) by <a href="https://github.com/BYK"><code>@​BYK</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/822">#822</a></li> <li>Improve partial publishing recovery for CocoaPods and GitHub targets by <a href="https://github.com/BYK"><code>@​BYK</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/821">#821</a></li> </ul> <h2>2.26.5</h2> <h3>Bug Fixes 🐛</h3> <ul> <li>(security) Bump devalue override to ^5.8.1 (CVE-2026-42570) by <a href="https://github.com/BYK"><code>@​BYK</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/818">#818</a></li> </ul> <h2>2.26.4</h2> <h3>Bug Fixes 🐛</h3> <ul> <li>(security) Prevent script injection in changelog-preview workflow by <a href="https://github.com/fix-it-felix-sentry"><code>@​fix-it-felix-sentry</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/813">#813</a></li> <li>Resolve open dependabot security alerts by <a href="https://github.com/BYK"><code>@​BYK</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/816">#816</a></li> </ul> <h3>Internal Changes 🔧</h3> <ul> <li>(deps-dev) Bump simple-git from 3.33.0 to 3.36.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/814">#814</a></li> </ul> <h2>2.26.3</h2> <h3>Bug Fixes 🐛</h3> <ul> <li>Prevent shell injection vulnerabilities in GitHub Actions workflows by <a href="https://github.com/fix-it-felix-sentry"><code>@​fix-it-felix-sentry</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/811">#811</a></li> </ul> <h2>2.26.2</h2> <h3>Security 🔒</h3> <ul> <li>(deps) Bump uuid to ^14.0.0 (fix GHSA-w5hq-g745-h8pq) by <a href="https://github.com/BYK"><code>@​BYK</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/810">#810</a></li> </ul> <h3>Bug Fixes 🐛</h3> <ul> <li>(prepare) Remove --allow-remote-config gate by <a href="https://github.com/BYK"><code>@​BYK</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/809">#809</a></li> </ul> <h3>Internal Changes 🔧</h3> <ul> <li>(deps) Bump astro from 5.18.1 to 6.1.6 in /docs by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/806">#806</a></li> <li>(deps-dev) Bump fast-xml-parser from 5.5.7 to 5.7.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/getsentry/craft/pull/808">#808</a></li> </ul> <h2>2.26.1</h2>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/getsentry/craft/commit/3e6a0f477702864bb5854384b390a0db3325428e"><code>3e6a0f4</code></a> release: 2.26.6</li> <li><a href="https://github.com/getsentry/craft/commit/2662e81254403b708b6e5c33867023970065637d"><code>2662e81</code></a> fix(security): override <code>@​tootallnate/once</code> to ^2.0.1 (CVE-2026-3449) (<a href="https://redirect.github.com/getsentry/craft/issues/822">#822</a>)</li> <li><a href="https://github.com/getsentry/craft/commit/e9a52384ec83ca5c3ff3bc8ab23de7ca03735867"><code>e9a5238</code></a> fix: improve partial publishing recovery for CocoaPods and GitHub targets (<a href="https://redirect.github.com/getsentry/craft/issues/821">#821</a>)</li> <li><a href="https://github.com/getsentry/craft/commit/da0e0c127b44eb0d068459e6fbd63478dd4fd848"><code>da0e0c1</code></a> fix(nuget): move global.json aside during <code>dotnet setversion</code> (<a href="https://redirect.github.com/getsentry/craft/issues/820">#820</a>)</li> <li><a href="https://github.com/getsentry/craft/commit/d1fa7db99ab95886732b0cd7fb83ccc14444ab6b"><code>d1fa7db</code></a> meta: Bump new development version</li> <li><a href="https://github.com/getsentry/craft/commit/ca52417b198130266c8131f3dbf5bc126b7e2eea"><code>ca52417</code></a> Merge branch 'release/2.26.5'</li> <li>See full diff in <a href="https://github.com/getsentry/craft/compare/bc2e6a9952e62250e5469d5a853a7a438692ccc1...3e6a0f477702864bb5854384b390a0db3325428e">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -31,7 +31,7 @@ jobs:
         token: ${{ steps.token.outputs.token }}
         fetch-depth: 0
     - name: Prepare release
-      uses: getsentry/craft@bc2e6a9952e62250e5469d5a853a7a438692ccc1 # v2.26.5
+      uses: getsentry/craft@3e6a0f477702864bb5854384b390a0db3325428e # v2.26.6
       env:
         GITHUB_TOKEN: ${{ steps.token.outputs.token }}
       with:
