Skip to content

Bump shakacode/react_on_rails/.github/workflows/demo-fleet-smoke.yml from 613c6c2a251a782328b26d68e7f23daa9b677497 to 45c7a81fa3ee72f4375a96dc145937f502df5234 - #813

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/shakacode/react_on_rails/dot-github/workflows/demo-fleet-smoke.yml-45c7a81fa3ee72f4375a96dc145937f502df5234
Open

Bump shakacode/react_on_rails/.github/workflows/demo-fleet-smoke.yml from 613c6c2a251a782328b26d68e7f23daa9b677497 to 45c7a81fa3ee72f4375a96dc145937f502df5234#813
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/shakacode/react_on_rails/dot-github/workflows/demo-fleet-smoke.yml-45c7a81fa3ee72f4375a96dc145937f502df5234

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 27, 2026

Copy link
Copy Markdown

Bumps shakacode/react_on_rails/.github/workflows/demo-fleet-smoke.yml from 613c6c2a251a782328b26d68e7f23daa9b677497 to 45c7a81fa3ee72f4375a96dc145937f502df5234.

Changelog

Sourced from shakacode/react_on_rails/.github/workflows/demo-fleet-smoke.yml's changelog.

Change Log

All notable changes to this project's source code will be documented in this file. Items under Unreleased is upcoming features that will be out in the next version.

This is the unified changelog for both React on Rails (open source) and React on Rails Pro. Pro-specific changes are tagged inline with [Pro]. For pre-monorepo Pro history (versions 4.0.0-rc.15 and earlier), see the archived Pro CHANGELOG.

Migration instructions for the major updates can be found here. Some smaller migration information can be found here.

Want to Save Time Updating?

If you need help upgrading react_on_rails, webpacker to shakapacker, or JS packages, contact justin@shakacode.com. We can upgrade your project and improve your development and customer experiences, allowing you to focus on building new features or fixing bugs instead.

For an overview of working with us, see our Client Engagement Model article and how we bill for time.

If you think ShakaCode can help your project, click here to book a call with Justin Gordon, the creator of React on Rails and Shakapacker.

Contributors

Please follow the recommendations outlined at keepachangelog.com. Please use the existing headings and styling as a guide. After a release, run /update-changelog in Claude Code to analyze commits, write entries, and create a PR. Alternatively, run bundle exec rake update_changelog to add version headers only (you must write entries manually).

Versions

[Unreleased]

Fixed

  • bin/dev kill now stops only the current app directory's processes, and verifies they are gone: the kill path matched command lines machine-wide (pgrep -f rails, pgrep -f overmind, pgrep -f ruby.*puma, and friends) and scanned ports with an unfiltered lsof -ti :PORT, so running it in one worktree could terminate a Rails server, a Webpack dev server, or an unrelated client connection belonging to a different checkout — then printed "All processes terminated" without checking that anything had actually stopped. bin/dev now claims a worktree-scoped, flock-backed session file (tmp/react_on_rails/dev-session.json) recording the app root it belongs to, the process group it leads, and the Overmind endpoint it would use. bin/dev kill shuts that session down through its own Overmind control socket or its own process group, escalating from TERM to KILL only for survivors, and reports success only after positively observing that the owner, its process group, and its listeners are gone. Fallback port discovery is restricted to LISTEN sockets whose process working directory is inside the current app root; anything it cannot attribute is reported as a diagnostic and never signalled, and missing, malformed, unreadable, or foreign session state fails closed rather than falling back to a broad kill. The default-mode port list now covers the Shakapacker dev-server port (SHAKAPACKER_DEV_SERVER_PORT, then dev_server.port in config/shakapacker.yml, then 3035) instead of a hard-coded 3001, and a session records the ports it actually selected so a kill verifies those rather than re-deriving a guess. Processes that deliberately leave the group with setsid/daemonization remain out of scope, which is why Overmind (whose tmux server daemonizes) is controlled through its socket. Breaking API changes for anyone calling ReactOnRails::Dev::ServerManager directly: .development_processes and .kill_running_processes are removed, .kill_processes now returns a status symbol (and bin/dev kill exits non-zero when

... (truncated)

Commits
  • 45c7a81 Scope bin/dev kill to the current app directory and verify shutdown (#4937)
  • 525f74b Forward-port release dry-run gate repair (#4936)
  • b88c590 Docs: move contributor plans out of the published docs tree (#4934)
  • cfd47f4 Release: forward-port fenced one-command release flow (#4932)
  • 025af35 Warn when auto-loaded component CSS is not flushed (#4927)
  • 7c11709 Fix Dependabot parsing for the Pro dummy Gemfile (#4900)
  • 7150f7b CI: use verified diff bases in hosted workflows (#4925)
  • 5fa6525 Log missing RSC loadable stats from the Node Renderer (#4918)
  • 143de77 CI: extract required diff-base selection into script (#4921)
  • b7aab23 Fenced publication plan for 17.1.0.rc.0 (#4923)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [shakacode/react_on_rails/.github/workflows/demo-fleet-smoke.yml](https://github.com/shakacode/react_on_rails) from 613c6c2a251a782328b26d68e7f23daa9b677497 to 45c7a81fa3ee72f4375a96dc145937f502df5234.
- [Release notes](https://github.com/shakacode/react_on_rails/releases)
- [Changelog](https://github.com/shakacode/react_on_rails/blob/main/CHANGELOG.md)
- [Commits](shakacode/react_on_rails@613c6c2...45c7a81)

---
updated-dependencies:
- dependency-name: shakacode/react_on_rails/.github/workflows/demo-fleet-smoke.yml
  dependency-version: 45c7a81fa3ee72f4375a96dc145937f502df5234
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions

Copy link
Copy Markdown

🚀 Quick Review App Commands

Welcome! Here are the commands you can use in this PR:
They require the repository to have cpflow review apps configured, including the CPLN_TOKEN_STAGING secret.

+review-app-deploy

Deploy your PR branch for testing.

+review-app-delete

Remove the review app when done.

+review-app-help

Show detailed instructions, environment setup, and configuration options.

Comment +review-app-help for full setup details.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants