chore(deps): bump devantler-tech/actions/.github/workflows/create-release.yaml from 8.0.0 to 9.0.0

[dependabot]

Bumps devantler-tech/actions/.github/workflows/create-release.yaml from 8.0.0 to 9.0.0.

Release notes

Sourced from devantler-tech/actions/.github/workflows/create-release.yaml's releases.

v9.0.0

9.0.0 (2026-07-03)

⚠ BREAKING CHANGES

• remove the sync-github-labels composite action (superseded by declarative IssueLabels) (#418)
• All callers referencing old file names, input names, output names, or secret keys must be updated.
• run-dotnet-tests: run-dotnet-tests no longer accepts app-id or app-private-key inputs. Callers pinning by SHA are unaffected; on repin any still-passed values are simply ignored (unexpected-input warning).
• the setup-copilot-skills/update-copilot-skills action paths are removed and setup-agent-skills's agent input is renamed to agents. Consumers on a pinned major (e.g. @​v4) are unaffected until they bump; migration guides are in each action's README.
• the codecov-token input is removed from both actions. Callers must stop passing it (the reusable workflows are updated in lockstep).
• copilot-skills: setup-copilot-skills and update-copilot-skills both remove the skills-lock input; setup-copilot-skills also removes the source input and redefines skills as the sole list input. Delete any skills-lock.json and move each entry onto its own <owner/repo> <skill> line in setup-copilot-skills.with.skills.
• Action directories and input names have been renamed.

Features

• add .NET project and test configurations (#10) (1ce56da)
• add require-checks-in-pr composite action (#113) (1f66c91)
• add auto-merge composite action for PRs (#14) (a8f34bd)
• add automation configuration for PR reviews and issue sessions (f4b7152)
• add blocked label and update label sync configuration (3041247)
• add Calculator class with basic arithmetic operations and corresponding unit tests (f5c21a1)
• add collapsible sections for workflow details in README (2e8d0f9)
• add docs (aba6c52)
• add dotnet-test-action for testing .NET solutions with GitHub Actions (ad39d59)
• add EditorConfig file and update Calculator and CalculatorTests for consistency and clarity (f032439)
• add GitHub workflows (861d3e2)
• add GitOps deployment workflow for managing Kubernetes resources (f6f0ce7)
• add GitOps validation workflow (8505da2)
• add Hadolint action for linting Dockerfiles (9f610a8)
• add Homebrew setup and environment initialization to GitOps workflows (c4b0fe5)
• add Homebrew setup step to GitOps workflows for consistent environment setup (e300bd6)
• add initial release configuration for semantic-release (3c4f906)
• add inputs for HOSTS_FILE and ROOT_CA_CERT_FILE in GitOps workflow (6eefeeb)
• add pull_request and merge_group triggers to Zizmor workflow (1ce3f4b)
• add pull_request trigger to auto-merge and dotnet-test workflows (63097da)
• add pull_request trigger to GitOps lint and test workflows (dbd5fe8)
• add released label to labels configuration (a803193)
• add Repo Assist labels to central config (#161) (b41fbfe)
• add reusable workflow to sync upstream Kyverno policies and update README with usage instructions (b119b9f)
• add schedule trigger for sync labels workflow (5f3527e)
• add shared workflows (0fe78df)
• add step to append hosts file if it exists (6f22cd1)
• add upload-coverage action for GitHub Code Quality (#170) (60d895a)
• add upsert-issue composite action (#55) (e3a0bd5)
• add VERSION_ARGS input to dotnet-embed-binaries workflow for version retrieval (a648561)
• add workflow for cleaning up ghcr packages (856fea4)
• add Zizmor composite action workflow (c0b70d3)
• add Zizmor security analysis workflow and action documentation (dbae7c7)
• add Zizmor workflow configuration (6e1f9b5)

... (truncated)

Changelog

Sourced from devantler-tech/actions/.github/workflows/create-release.yaml's changelog.

Changelog

9.0.0 (2026-07-03)

⚠ BREAKING CHANGES

• remove the sync-github-labels composite action (superseded by declarative IssueLabels) (#418)
• All callers referencing old file names, input names, output names, or secret keys must be updated.
• run-dotnet-tests: run-dotnet-tests no longer accepts app-id or app-private-key inputs. Callers pinning by SHA are unaffected; on repin any still-passed values are simply ignored (unexpected-input warning).
• the setup-copilot-skills/update-copilot-skills action paths are removed and setup-agent-skills's agent input is renamed to agents. Consumers on a pinned major (e.g. @​v4) are unaffected until they bump; migration guides are in each action's README.
• the codecov-token input is removed from both actions. Callers must stop passing it (the reusable workflows are updated in lockstep).
• copilot-skills: setup-copilot-skills and update-copilot-skills both remove the skills-lock input; setup-copilot-skills also removes the source input and redefines skills as the sole list input. Delete any skills-lock.json and move each entry onto its own <owner/repo> <skill> line in setup-copilot-skills.with.skills.
• Action directories and input names have been renamed.

Features

• add .NET project and test configurations (#10) (1ce56da)
• add require-checks-in-pr composite action (#113) (1f66c91)
• add auto-merge composite action for PRs (#14) (a8f34bd)
• add automation configuration for PR reviews and issue sessions (f4b7152)
• add blocked label and update label sync configuration (3041247)
• add Calculator class with basic arithmetic operations and corresponding unit tests (f5c21a1)
• add collapsible sections for workflow details in README (2e8d0f9)
• add docs (aba6c52)
• add dotnet-test-action for testing .NET solutions with GitHub Actions (ad39d59)
• add EditorConfig file and update Calculator and CalculatorTests for consistency and clarity (f032439)
• add GitHub workflows (861d3e2)
• add GitOps deployment workflow for managing Kubernetes resources (f6f0ce7)
• add GitOps validation workflow (8505da2)
• add Hadolint action for linting Dockerfiles (9f610a8)
• add Homebrew setup and environment initialization to GitOps workflows (c4b0fe5)
• add Homebrew setup step to GitOps workflows for consistent environment setup (e300bd6)
• add initial release configuration for semantic-release (3c4f906)
• add inputs for HOSTS_FILE and ROOT_CA_CERT_FILE in GitOps workflow (6eefeeb)
• add pull_request and merge_group triggers to Zizmor workflow (1ce3f4b)
• add pull_request trigger to auto-merge and dotnet-test workflows (63097da)
• add pull_request trigger to GitOps lint and test workflows (dbd5fe8)
• add released label to labels configuration (a803193)
• add Repo Assist labels to central config (#161) (b41fbfe)
• add reusable workflow to sync upstream Kyverno policies and update README with usage instructions (b119b9f)
• add schedule trigger for sync labels workflow (5f3527e)
• add shared workflows (0fe78df)
• add step to append hosts file if it exists (6f22cd1)
• add upload-coverage action for GitHub Code Quality (#170) (60d895a)
• add upsert-issue composite action (#55) (e3a0bd5)
• add VERSION_ARGS input to dotnet-embed-binaries workflow for version retrieval (a648561)
• add workflow for cleaning up ghcr packages (856fea4)
• add Zizmor composite action workflow (c0b70d3)
• add Zizmor security analysis workflow and action documentation (dbae7c7)

... (truncated)

Commits

• 5aa2657 chore(main): release 9.0.0 (#442)
• d817fa2 chore(main): release 8.0.2 (#441)
• 6f07366 fix(scan-for-todo-comments): restore self-checkout for post-cleanup (#437)
• bd78711 chore(main): release 8.0.1 (#436)
• 96b8f82 fix: resolve first-party self-references at the same commit (#427)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 858d9e08-fb2d-4e39-8432-6f259877ceb6

📥 Commits

Reviewing files that changed from the base of the PR and between 7a79a78 and 7f790b8.

📒 Files selected for processing (1)

• .github/workflows/release.yaml

---

📝 Walkthrough

Walkthrough

This change updates the GitHub Actions release workflow to reference a newer pinned commit of the reusable create-release.yaml workflow, moving from a v8.0.0 pinned commit to a v9.0.0 pinned commit. No other workflow logic or structure is modified.

Changes

Cohort / File(s)	Summary
Release workflow (.github/workflows/release.yaml)	Bumped the pinned commit reference for the reusable create-release.yaml workflow from v8.0.0 to v9.0.0.

Sequence Diagram(s)

Not applicable — this change is a version pin update in a workflow file with no observable interaction flow to diagram.

Related issues: None specified.

Related PRs: None specified.

Suggested labels: ci, dependencies

Suggested reviewers: None specified.

Poem: A rabbit hops through YAML lines so neat, / One digit changed beneath its feet. / v8 to v9, a tiny leap, / Commits pinned tight, secrets to keep. / Hop on, release, your workflow's fleet! 🐇

---

_{Comment @coderabbitai help to get the list of available commands.}