[dependabot]

Bumps smeinecke/apt-repo-action from 2.1.4 to 2.2.1.

Release notes

Sourced from smeinecke/apt-repo-action's releases.

v2.2.1

Hardening patch on top of v2.2.0

• version_by_filename: regex now only searches the version segment of <name>_<version>_<arch>.deb — a ~codename inside a package name can no longer shadow the real version; codename at end of the version segment now matches too.
• file input: ** glob patterns now recurse properly (recursive=True).
• Validation: github_repository must match owner/repo; page_branch rejects whitespace; repo_folder rejects .. components.
• Malformed .deb files now produce a readable Error reading debcontrol file instead of a raw traceback.
• Push retry: if a concurrent run pushed to the pages branch first, the action fetches, rebases once, and retries instead of failing outright. Conflicting rebases still abort cleanly with a clear error.
• reprepro stderr logged as text (no more b'...' blobs).

No migration needed — drop-in over v2.2.0.

v2.2.0

What's Changed

Bug fixes

• Duplicate detection: metadata is now generated per .deb file and includes the package name — previously only the first file was checked, so a different package with the same version/arch/codename (or any new file after an existing one) was silently skipped.
• skip_duplicates semantics: the history-based skip now only applies when skip_duplicates: true. Without it, re-adding an unchanged package version is idempotent, and re-adding the same version with different content fails loudly instead of being silently dropped.
• conf/distributions is merged, not rewritten: custom fields (Origin, Components, …) and stanzas for codenames not in repo_supported_version are preserved. SignWith is refreshed on all stanzas so a stale key fingerprint can no longer break reprepro export.
• Secret redaction: github_token, private_key, and key_passphrase are redacted from all log output, including tracebacks and the debug config dump.
• version_by_filename: versions are regex-escaped and matched longest-first, so bookworm-backports is no longer shadowed by bookworm.
• Branch detection works for branch names containing / (e.g. pages/apt).
• Hardening: owner/repo format validation, empty optional inputs fall back to defaults, non-.deb glob matches are skipped with a warning, duplicate entries in supported lists are deduplicated, empty commits are skipped, malformed metadata in old commits no longer bricks the action.
• page_branch/repo_folder: whitespace/empty values fall back to defaults.

Docs / housekeeping

• README corrected (file_target_version is optional with version_by_filename), new Notes section on concurrency and duplicate semantics; action.yml descriptions clarified.
• Dockerfile hygiene: --no-install-recommends, apt cache cleanup, OCI label, ca-certificates/git explicit, dropped unused expect.
• Example workflow: on: create: tags: → on: push: tags: (create doesn't support tag filters).

Note for upgraders

Commits from earlier versions used metadata format_version: 1 without a package name. On the first run with this release, previously added packages won't match the new metadata — re-adding identical files is a graceful reprepro no-op and the commit records the new metadata.

Full Changelog: smeinecke/apt-repo-action@v2.1.8...v2.2.0

v2.1.8

What's Changed

• Add Trixie support and fix lock bug by @​smeinecke in smeinecke/apt-repo-action#9

Full Changelog: smeinecke/apt-repo-action@v2.1.7...v2.1.8

v2.1.7

Update to debian trixie.

Full Changelog: smeinecke/apt-repo-action@v2.1.6...v2.1.7

v2.1.6

• add version_by_filename option

... (truncated)

Commits

• f7bfcf9 Hardening: version-segment filename parsing, glob recursion, input validation...
• 80277de Fix duplicate detection, secret redaction, and repo config handling
• ac40f0a Merge pull request #10 from smeinecke/dependabot/github_actions/actions/check...
• dd38388 Bump actions/checkout from 6 to 7
• b12d0c7 Merge pull request #9 from smeinecke/add/add-trixie-support
• 616a5cf fix lock bug.
• f9ee6b4 add trixie support.
• 5853380 Merge branch 'master' of https://github.com/smeinecke/apt-repo-action
• bc63499 Update base image to trixie.
• facbefa Merge pull request #8 from smeinecke/dependabot/github_actions/actions/checko...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
pala	Ignored	Preview	Oct 31, 2026 11:22am UTC