Skip to content

build(deps): bump actions/first-interaction from 1 to 3#1238

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/github_actions/actions/first-interaction-3
Open

build(deps): bump actions/first-interaction from 1 to 3#1238
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/github_actions/actions/first-interaction-3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2026

Bumps actions/first-interaction from 1 to 3.

Release notes

Sourced from actions/first-interaction's releases.

v3.0.0

What's Changed

New Contributors

Full Changelog: actions/first-interaction@v2...v3.0.0

v2.0.0

What's Changed

New Contributors

Full Changelog: actions/first-interaction@v1.3.0...v2.0.0

v1.3.0

Upgrade our base image from node v14 -> v20

Add dependency on @octokit/rest and @actions/http-client.

👉 See the PR for details: actions/first-interaction#287

... (truncated)

Commits
  • 1c46889 Merge pull request #363 from actions/dependabot/npm_and_yarn/npm-development-...
  • 76a99dd Disable checks for dist
  • 2ead13c Bump the npm-development group across 1 directory with 10 updates
  • 2e8e200 Merge pull request #361 from actions/dependabot/npm_and_yarn/rollup/rollup-li...
  • df55979 Merge pull request #357 from actions/dependabot/npm_and_yarn/octokit/types-15...
  • c056c18 Bump @​rollup/rollup-linux-x64-gnu from 4.50.2 to 4.52.3
  • dac371d Bump @​octokit/types from 14.1.0 to 15.0.0
  • 33689d3 Merge pull request #354 from actions/ncalteen/event
  • 8e69b57 Merge branch 'main' into ncalteen/event
  • 69c5373 Merge pull request #351 from actions/dependabot/npm_and_yarn/github/local-act...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/first-interaction](https://github.com/actions/first-interaction) from 1 to 3.
- [Release notes](https://github.com/actions/first-interaction/releases)
- [Commits](actions/first-interaction@v1...v3)

---
updated-dependencies:
- dependency-name: actions/first-interaction
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 1, 2026
@greptile-apps
Copy link
Copy Markdown

greptile-apps bot commented Apr 1, 2026

Greptile Summary

This PR bumps the actions/first-interaction GitHub Action from v1 to v3 in .github/workflows/greetings.yml. The action is used to post a welcome message to users who open their first issue or pull request on the repository.

  • The only change is the version tag in the uses field (v1v3).
  • The action's inputs (repo-token, issue-message, pr-message) are unchanged and remain fully compatible across all three major versions.
  • v2 converted the action from a Docker/Container action to a TypeScript action, and v3 added Node 24 support along with internal dependency updates — neither version introduced breaking changes to the action's public interface.
  • The existing fork guard (if: github.repository_owner == 'ActivityWatch') and GITHUB_TOKEN usage are unaffected.

Confidence Score: 5/5

This PR is safe to merge — it is a routine dependency bump with no interface changes and no impact on repository logic.

The change is a single-line version bump of a well-maintained, low-risk GitHub Action. The action's public API (inputs/outputs) is unchanged across v1→v3, and there are no breaking changes affecting this workflow's usage pattern. No logic, secrets handling, or permissions model is altered.

No files require special attention.

Important Files Changed

Filename Overview
.github/workflows/greetings.yml Bumps actions/first-interaction from v1 to v3; workflow inputs (repo-token, issue-message, pr-message) remain fully compatible with the new version.

Sequence Diagram

sequenceDiagram
    participant GH as GitHub Event
    participant WF as greetings.yml Workflow
    participant FI as actions/first-interaction@v3
    participant API as GitHub API

    GH->>WF: issues / pull_request event
    WF->>WF: Check repo owner == 'ActivityWatch'
    WF->>FI: Run action with GITHUB_TOKEN
    FI->>API: List user's past issues/PRs
    alt First-time contributor
        FI->>API: Post welcome comment (issue-message / pr-message)
    else Returning contributor
        FI-->>WF: No action taken
    end
Loading

Reviews (1): Last reviewed commit: "build(deps): bump actions/first-interact..." | Re-trigger Greptile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants