🩹[Patch]: Workflow improvements (#9)
This release updates and improves several aspects of the project's GitHub Actions workflows and related configuration files. The main changes include refactoring the release workflow for clarity and security, updating dependencies and action versions to use specific commit SHAs, and cleaning up unused or redundant configuration files.
Workflow and CI/CD Improvements:
- Renamed
.github/workflows/Auto-Release.ymlto.github/workflows/Release.yml, updated its trigger topull_request(instead ofpull_request_target), restricted its scope to changes inaction.ymlandsrc/**, and changed the main job and step names fromAuto-ReleasetoRelease. Also replaced the action used for releases toPSModule/Release-GHRepository@88c70461c8f16cc09682005bcf3b7fca4dd8dc1aand updated the checkout action to a specific SHA with credentials disabled for improved security. - Updated the
Action-TestandLinterworkflows to use specific commit SHAs for theactions/checkoutandsuper-linter/super-linteractions, and setpersist-credentials: falsefor security. Also, in theLinterworkflow, disabled some validators and set additional environment variables.
Dependency and Automation Configuration:
- Changed the Dependabot update schedule from weekly to daily and added a cooldown period of 7 days between updates.
Configuration Cleanup:
- Removed the
.github/linters/.jscpd.jsonfile, which is no longer needed. - Removed the
.github/release.ymlconfiguration for automatically generated release notes, as this is now handled by the updated release workflow.
Other Notable Changes:
- Updated the
action.ymlto reference the new script location atsrc/main.ps1instead ofscripts/main.ps1.