feat(github-action)!: Update codex-/return-dispatch (v3.0.3 → v4.0.1)

[home-infrastructure-renovate]

This PR contains the following updates:

Package	Type	Update	Change
codex-/return-dispatch	action	major	v3.0.3 → v4.0.1

---

Release Notes

codex-/return-dispatch (codex-/return-dispatch)

v4.0.1

Compare Source

   🐞 Bug Fixes

• Pin dispatch to API version 2026-03-10  -  by @​Codex- (b6899)

    View changes on GitHub

v4.0.0

Compare Source

Github finally added proper support for returning the run ID when dispatching: https://github.blog/changelog/2026-02-19-workflow-dispatch-api-now-returns-run-ids/

This release focuses on using the changes made to the dispatch endpoints, removing the overhead of trawling/polling
for the distinct ID previously required.

⚠️ Breaking changes

Server support

• Requires github.com or GitHub Enterprise Server 3.21+.
• On older GHES the dispatch API rejects the return_run_details field with a 400, and the action fails with a message explaining the requirement.
  • If you are on GHES ≤ 3.20, stay on v3.

Removed inputs

Input	What to do
distinct_id	Remove. Run identification no longer uses an injected ID.
workflow_timeout_seconds	Remove. There is no polling to time out.
workflow_job_steps_retry_seconds	Remove. There are no retries.

distinct_id is no longer injected into the dispatched workflow's inputs

Your receiving workflow no longer needs the distinct_id:

 on:
   workflow_dispatch:
     inputs:
-      distinct_id:
-        required: true
       custom_inputs:

 jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - name: echo distinct ID ${{ inputs.distinct_id }}
-        run: echo "${{ inputs.distinct_id }}"

[!IMPORTANT]
If your receiving workflow declares distinct_id as a required input, v4 dispatches to it will fail because the action no longer sends it. Make it optional or remove it before upgrading.

Migration checklist

1. Remove distinct_id, workflow_timeout_seconds, and workflow_job_steps_retry_seconds
   from the return-dispatch step.
2. Remove the distinct_id input and echo step from the receiving workflow (or mark it non-required as a preliminary step)
3. Optionally narrow token permissions: only actions: write (fine-grained PAT / GitHub App / GITHUB_TOKEN) or repo scope (classic PAT) is needed.

🚀 Features

• "Use new dispatch API body, remove manual ID trawling" - by @​Codex- (37ba2)

View changes on GitHub

v4

Compare Source

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.