Skip to content

v4.1.2

Latest

Choose a tag to compare

@github-actions github-actions released this 27 Jan 16:14
· 2 commits to main since this release
17bb50e

🩹[Patch]: Workflow improvements (#24)

This release focuses on updating and improving the project's GitHub Actions workflows and configuration files. The main goals are to enhance security and reliability by pinning action versions, streamline release and dependency management, and clean up unused or redundant configuration files.

Workflow and Action Updates:

  • Updated all uses of actions/checkout to reference a specific commit hash (de0fac2e4500dabe0009e67214ff5f5447ce83dd) for improved security and reproducibility across workflows.
  • Replaced unpinned or generic action versions with commit-pinned versions for PSModule/GitHub-Script, super-linter/super-linter, and PSModule/Invoke-Pester to ensure consistent behavior and improve security.
  • Updated the linter workflow to use a pinned version of super-linter and added/adjusted validation environment variables.

Release and Dependency Management:

  • Renamed .github/workflows/Auto-Release.yml to .github/workflows/Release.yml, updated the workflow name, and switched the trigger from pull_request_target to pull_request for better security. Also restricted the workflow to run only on changes to action.yml and src/**.
  • Replaced the use of PSModule/Auto-Release with PSModule/Release-GHRepository in the release workflow, and updated job names accordingly.
  • Changed the Dependabot update schedule from weekly to daily and added a cooldown period to manage update frequency.

Configuration Cleanup:

  • Removed the .github/linters/.jscpd.json file and .github/release.yml, indicating a cleanup of unused or redundant configuration files.

Other Improvements:

  • Fixed a typo in README.md for clarity.
  • Updated script paths in action.yml from scripts/ to src/ to reflect directory restructuring.