🩹[Patch]: Test important file changes and rename Auto-Release to Release-GHRepository #272
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
There was a problem hiding this comment.
Pull request overview
This pull request updates GitHub Actions dependencies and modifies workflow configuration for testing and debugging purposes. The changes primarily focus on updating the actions/checkout action to v6.0.2 across all workflows, adding a Debug job, and modifying action references for testing.
Changes:
- Updated
actions/checkoutfrom v6.0.1 (SHA: 8e8c483) to v6.0.2 (SHA: de0fac2) across 14 workflow files - Added new Debug job to main workflow using
PSModule/Debug@mainaction - Changed
PSModule/Get-PSModuleSettingsaction reference from v1.4.0 tofeature/important-file-changesbranch - Deleted
.github/release.ymlconfiguration file for GitHub's automatic release notes - Updated PR prompt template to clarify title format and add MCP tool usage guidance
Reviewed changes
Copilot reviewed 17 out of 17 changed files in this pull request and generated 2 comments.
Show a summary per file
| File | Description |
|---|---|
.github/workflows/workflow.yml |
Added Debug job using PSModule/Debug action |
.github/workflows/Test-SourceCode.yml |
Updated actions/checkout to v6.0.2 |
.github/workflows/Test-ModuleLocal.yml |
Updated actions/checkout to v6.0.2 |
.github/workflows/Test-Module.yml |
Updated actions/checkout to v6.0.2 (2 instances) |
.github/workflows/Publish-Module.yml |
Updated actions/checkout to v6.0.2 |
.github/workflows/Linter.yml |
Updated actions/checkout to v6.0.2 |
.github/workflows/Lint-SourceCode.yml |
Updated actions/checkout to v6.0.2 |
.github/workflows/Lint-Repository.yml |
Updated actions/checkout to v6.0.2 |
.github/workflows/Get-Settings.yml |
Updated actions/checkout to v6.0.2; changed Get-PSModuleSettings to feature branch |
.github/workflows/Build-Site.yml |
Updated actions/checkout to v6.0.2 |
.github/workflows/Build-Module.yml |
Updated actions/checkout to v6.0.2 |
.github/workflows/Build-Docs.yml |
Updated actions/checkout to v6.0.2 |
.github/workflows/BeforeAll-ModuleLocal.yml |
Updated actions/checkout to v6.0.2 |
.github/workflows/Auto-Release.yml |
Updated actions/checkout to v6.0.2 |
.github/workflows/AfterAll-ModuleLocal.yml |
Updated actions/checkout to v6.0.2 |
.github/release.yml |
Deleted GitHub release notes configuration |
.github/prompts/PSModule.pr.prompt.md |
Clarified PR title format and added MCP tool guidance |
ℹ️ No Significant Changes DetectedThis PR does not contain changes to files that would trigger a new release:
Build and test stages will be skipped for this PR. If you believe this is incorrect, please verify that your changes are in the correct locations. |
1 similar comment
ℹ️ No Significant Changes DetectedThis PR does not contain changes to files that would trigger a new release:
Build and test stages will be skipped for this PR. If you believe this is incorrect, please verify that your changes are in the correct locations. |
MariusStorhaug
changed the title
MariusStorhaug
changed the title
.github/workflows/Auto-Release.yml
Outdated
|
|
||
| - name: Auto-Release | ||
| uses: PSModule/Auto-Release@eabd533035e2cb9822160f26f2eda584bd012356 # v1.9.5 | ||
| uses: PSModule/Release-GHRepository@88c70461c8f16cc09682005bcf3b7fca4dd8dc1a # v2 |
There was a problem hiding this comment.
The action name has changed from 'PSModule/Auto-Release' to 'PSModule/Release-GHRepository'. While using a commit SHA is good practice, the version comment indicates 'v2' but there's no verification that this commit actually corresponds to the v2 release. Consider using a tag reference like '@v2' instead of a commit SHA with a comment, or verify that the commit SHA matches the v2 tag to ensure the comment is accurate.
| uses: PSModule/Release-GHRepository@88c70461c8f16cc09682005bcf3b7fca4dd8dc1a # v2 | |
| uses: PSModule/Release-GHRepository@88c70461c8f16cc09682005bcf3b7fca4dd8dc1a # PSModule/Release-GHRepository pinned commit |
…ettings and remove Debug job
| - name: Publish module | ||
| uses: PSModule/Publish-PSModule@e1b338d1266dee28c6d6218756979597c8a77b7a # v2.2.0 | ||
| # uses: PSModule/Publish-PSModule@e1b338d1266dee28c6d6218756979597c8a77b7a # v2.2.0 | ||
| uses: PSModule/Publish-PSModule@workflow-updates |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
| # uses: PSModule/Publish-PSModule@e1b338d1266dee28c6d6218756979597c8a77b7a # v2.2.0 | ||
| uses: PSModule/Publish-PSModule@workflow-updates |
There was a problem hiding this comment.
Using a branch reference (@workflow-updates) instead of a pinned SHA or version tag is not recommended for production workflows. Branch references can change without notice, making builds non-reproducible and potentially introducing breaking changes. Replace this with a specific commit SHA or version tag once testing is complete.
| # uses: PSModule/Publish-PSModule@e1b338d1266dee28c6d6218756979597c8a77b7a # v2.2.0 | |
| uses: PSModule/Publish-PSModule@workflow-updates | |
| uses: PSModule/Publish-PSModule@e1b338d1266dee28c6d6218756979597c8a77b7a # v2.2.0 |
🩹 [Patch]: Test important file changes and rename Auto-Release to Release-GHRepository
This PR updates the workflow to use the renamed release action.
Changed
PSModule/Release-GHRepository@v2instead of the deprecatedPSModule/Auto-Release@v1.9.5PSModule/GitHub-Scriptfrom v1.7.8 to v1.7.10 (SHA:0097f3bbe3f413f3b577b9bcc600727b0ca3201a)Summary
The
PSModule/Auto-Releaseaction has been renamed toPSModule/Release-GHRepository. This change updates the workflow configuration to reference the new action name and version.