feat: update default branch detection and versioning in workflows

Author: CasperKristiansson

CHANGELOG.md

@@ -13,6 +13,7 @@ The project follows [Semantic Versioning](https://semver.org/) and adheres to th
 ### Fixed
 
 - Allow default runs to create pull requests again instead of always behaving like a dry-run.
+- Detect the default branch correctly even when `GITHUB_BASE_REF` is present but empty in scheduled workflows.
 
 ## [1.1.0] - 2025-10-10
 

SECURITY.md

@@ -6,7 +6,7 @@ vulnerabilities responsibly.
 
 ## Supported versions
 
-Only the latest released version (the `v0` tag during the pre-1.0 cycle) receives
+Only the latest released version (the `v1` tag) receives
 security updates. Please upgrade to the newest minor release before opening security
 reports.
 
@@ -45,7 +45,7 @@ private forks or cross-organization repositories.
 
 If we confirm a critical vulnerability, we will:
 
-1. Publish a fixed release and update the `v0` tag.
+1. Publish a fixed release and update the `v1` tag.
 2. Document the risk, affected versions, and mitigation steps in the changelog.
 3. Notify followers through the repository Security Advisory system when available.
 

dist/index.js

@@ -80933,9 +80933,11 @@ async function run() {
         const effectivePaths = resolvePathsInput();
         const securityKeywords = resolveSecurityKeywords();
         const workspace = node_process_1.default.env.GITHUB_WORKSPACE ?? node_process_1.default.cwd();
+        const baseRefEnv = (node_process_1.default.env.GITHUB_BASE_REF ?? '').trim();
+        const refNameEnv = (node_process_1.default.env.GITHUB_REF_NAME ?? '').trim();
+        const defaultBranch = baseRefEnv || refNameEnv || 'main';
         const repository = parseRepository(node_process_1.default.env.GITHUB_REPOSITORY);
         const githubToken = node_process_1.default.env.GITHUB_TOKEN;
-        const defaultBranch = node_process_1.default.env.GITHUB_BASE_REF ?? node_process_1.default.env.GITHUB_REF_NAME ?? 'main';
         const noNetworkFallback = (node_process_1.default.env.NO_NETWORK_FALLBACK ?? '').toLowerCase() === 'true';
         let cpythonTagsSnapshot;
         let pythonOrgHtmlSnapshot;
@@ -80984,6 +80986,7 @@ async function run() {
         core.info(`use_external_pr_action: ${useExternalPrAction}`);
         core.info(`dry_run: ${dryRun}`);
         core.info(`no_network_fallback: ${noNetworkFallback}`);
+        core.info(`default_branch: ${defaultBranch}`);
         if (repository) {
             core.info(`repository: ${repository.owner}/${repository.repo}`);
         }

examples/guarded/.github/workflows/python-version-patch.yml

@@ -28,7 +28,7 @@ jobs:
 
       - name: Preview CPython patch diff
         id: preview
-        uses: casperkristiansson/python-version-patch-pr@v0
+        uses: casperkristiansson/python-version-patch-pr@v1
         with:
           track: ${{ env.TRACK }}
           dry_run: true
@@ -93,7 +93,7 @@ else:
 PY
 
       - name: Apply CPython patch update
-        uses: casperkristiansson/python-version-patch-pr@v0
+        uses: casperkristiansson/python-version-patch-pr@v1
         with:
           track: ${{ env.TRACK }}
           automerge: false

examples/minimal/.github/workflows/python-version-patch.yml

@@ -16,7 +16,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Update CPython patch versions
-        uses: casperkristiansson/python-version-patch-pr@v0
+        uses: casperkristiansson/python-version-patch-pr@v1
         with:
           track: '3.12'
         env:

src/index.ts

@@ -226,9 +226,11 @@ export async function run(): Promise<void> {
     const securityKeywords = resolveSecurityKeywords();
 
     const workspace = process.env.GITHUB_WORKSPACE ?? process.cwd();
+    const baseRefEnv = (process.env.GITHUB_BASE_REF ?? '').trim();
+    const refNameEnv = (process.env.GITHUB_REF_NAME ?? '').trim();
+    const defaultBranch = baseRefEnv || refNameEnv || 'main';
     const repository = parseRepository(process.env.GITHUB_REPOSITORY);
     const githubToken = process.env.GITHUB_TOKEN;
-    const defaultBranch = process.env.GITHUB_BASE_REF ?? process.env.GITHUB_REF_NAME ?? 'main';
     const noNetworkFallback = (process.env.NO_NETWORK_FALLBACK ?? '').toLowerCase() === 'true';
 
     let cpythonTagsSnapshot: StableTag[] | undefined;
@@ -286,6 +288,7 @@ export async function run(): Promise<void> {
     core.info(`use_external_pr_action: ${useExternalPrAction}`);
     core.info(`dry_run: ${dryRun}`);
     core.info(`no_network_fallback: ${noNetworkFallback}`);
+    core.info(`default_branch: ${defaultBranch}`);
     if (repository) {
       core.info(`repository: ${repository.owner}/${repository.repo}`);
     }