Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 12, 2026

Bumps lycheeverse/lychee-action from 1 to 2.

Release notes

Sourced from lycheeverse/lychee-action's releases.

Version 2.0.0

Breaking Changes

Note: This release improves the action's robustness by changing default behaviors. Changes are only required if you want to opt out of the new failure conditions. Most users won't need to modify their existing configurations.

Fail pipeline on error by default

We've changed the default behavior: pipelines will now fail on broken links automatically. This addresses user feedback that not failing on broken links was unexpected (see [issue #71](lycheeverse/lychee-action#71)).

What you need to do:

  • Update to version 2 of this action to apply this change.
  • Users of the lychee-action@master branch don't need to make any changes, as fail: true has been the default there for a while.
  • If you prefer the old behavior, explicitly set fail to false when updating:
- name: Link Checker
  id: lychee
  uses: lycheeverse/lychee-action@v2
  with:
    fail: false  # Don't fail action on broken links

Fail pipeline if no links were found

Similar to the above change, we now fail the pipeline if no links are found during a run. This helps warn users about potential configuration issues.

What you need to do:

  • If you expect links to be found in your pipeline run, you don't need to do anything.
  • If you expect no links in your pipeline run, you can opt out like this:
- name: Link Checker
  id: lychee
  uses: lycheeverse/lychee-action@v2
  with:
    failIfEmpty: false  # Don't fail action if no links were found

Exit code handling

In this version, we changed the environment variable for the lychee exit code from GITHUB_ENV to GITHUB_OUTPUT. Please update your scripts. For more details, see lycheeverse/lychee-action#245.

For a more detailed description of the technical aspects behind these changes, please see the full changelog below.

What's Changed

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) from 1 to 2.
- [Release notes](https://github.com/lycheeverse/lychee-action/releases)
- [Commits](lycheeverse/lychee-action@v1...v2)

---
updated-dependencies:
- dependency-name: lycheeverse/lychee-action
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 12, 2026

Labels

The following labels could not be found: github-actions. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot added the dependencies Dependency updates from Dependabot label Jan 12, 2026
@dependabot dependabot bot requested a review from coopeverything as a code owner January 12, 2026 06:51
@dependabot dependabot bot added the dependencies Dependency updates from Dependabot label Jan 12, 2026
@github-actions
Copy link
Contributor


Warnings
⚠️

⚠️ Compatibility score: Unknown

This version is too new or has insufficient data (<5 public repos tested). Check ecosystem readiness before merging:

  • Review release notes and changelog
  • Check if framework (Next.js) officially supports this version
  • Test locally with your specific setup
⚠️ ⚠️ Unable to check CodeQL security alerts: Resource not accessible by integration - https://docs.github.com/rest/code-scanning/code-scanning#list-code-scanning-alerts-for-a-repository

This is likely a temporary API issue. Please manually verify no P1 alerts exist in your modified files:
https://github.com/coopeverything/TogetherOS/security/code-scanning

Generated by 🚫 dangerJS against a88f443

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates from Dependabot

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant