-
Notifications
You must be signed in to change notification settings - Fork 0
🩹[Patch]: Workflows improvements #11
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
This PR updates GitHub Actions workflows to pin actions to specific commit SHAs and adjusts Dependabot’s configuration to run daily with a 7‑day cooldown for GitHub Actions updates.
Changes:
- Pin
actions/checkoutandsuper-linter/super-linterin the linter workflow to specific commit SHAs with version comments. - Pin
actions/checkoutandPSModule/Auto-Releasein the auto-release workflow to specific commit SHAs with version comments. - Pin
actions/checkoutandactions/upload-artifactin the action test workflow to specific commit SHAs with version comments. - Remove
.github/release.yml(GitHub’s auto-generated release notes configuration). - Update
.github/dependabot.ymlto use adailyschedule and add acooldownblock withdefault-days: 7for thegithub-actionsecosystem.
Reviewed changes
Copilot reviewed 5 out of 5 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
.github/workflows/Linter.yml |
Pins checkout and super-linter actions to specific commit SHAs to improve reproducibility and align with Dependabot-managed actions. |
.github/workflows/Auto-Release.yml |
Pins checkout and Auto-Release actions to specific commit SHAs for more controlled updates. |
.github/workflows/Action-Test.yml |
Pins checkout and upload-artifact actions to specific commit SHAs, including a major-version bump for upload-artifact. |
.github/release.yml |
Removes the configuration for GitHub’s automatically generated release notes, reverting behavior to GitHub defaults. |
.github/dependabot.yml |
Switches Dependabot GitHub Actions updates to a daily interval and adds a 7‑day cooldown configuration. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
Copilot reviewed 6 out of 6 changed files in this pull request and generated no new comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
Copilot reviewed 7 out of 8 changed files in this pull request and generated no new comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
Copilot reviewed 8 out of 9 changed files in this pull request and generated no new comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
Copilot reviewed 8 out of 9 changed files in this pull request and generated 1 comment.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
This release primarily updates and improves the project's GitHub Actions workflows and configuration files. The changes focus on increasing security and maintainability by pinning action versions, updating release processes, and cleaning up unnecessary configuration files. There are also minor documentation and description corrections.
GitHub Actions and Workflow Improvements:
Action-Test.ymlandLinter.yml) to use pinned commit SHAs instead of floating version tags, improving security and reproducibility. Also setpersist-credentials: falsefor checkout steps to reduce risk..github/workflows/Auto-Release.ymlwith a new.github/workflows/Release.ymlworkflow that triggers on pull requests tomainand uses thePSModule/Release-GHRepositoryaction, ensuring a more robust and targeted release process.Configuration and Linting:
.github/linters/.jscpd.jsonconfiguration file and disabled JSCPD validation in the linter workflow, simplifying the linting setup.super-linterand disabled certain validations for more control and consistency.Release and Documentation Updates:
.github/release.ymlconfiguration for automatic release note categorization, streamlining release management.descriptionfield ofaction.ymland updated script paths and action versions for better clarity and maintainability.