🩹[Patch]: Workflow improvements (#24)
This release focuses on updating and improving the project's GitHub Actions workflows and configuration files. The main goals are to enhance security and reliability by pinning action versions, streamline release and dependency management, and clean up unused or redundant configuration files.
- Fixes #23
Workflow and Action Updates:
- Updated all uses of
actions/checkoutto reference a specific commit hash (de0fac2e4500dabe0009e67214ff5f5447ce83dd) for improved security and reproducibility across workflows. - Replaced unpinned or generic action versions with commit-pinned versions for
PSModule/GitHub-Script,super-linter/super-linter, andPSModule/Invoke-Pesterto ensure consistent behavior and improve security. - Updated the linter workflow to use a pinned version of
super-linterand added/adjusted validation environment variables.
Release and Dependency Management:
- Renamed
.github/workflows/Auto-Release.ymlto.github/workflows/Release.yml, updated the workflow name, and switched the trigger frompull_request_targettopull_requestfor better security. Also restricted the workflow to run only on changes toaction.ymlandsrc/**. - Replaced the use of
PSModule/Auto-ReleasewithPSModule/Release-GHRepositoryin the release workflow, and updated job names accordingly. - Changed the Dependabot update schedule from weekly to daily and added a cooldown period to manage update frequency.
Configuration Cleanup:
- Removed the
.github/linters/.jscpd.jsonfile and.github/release.yml, indicating a cleanup of unused or redundant configuration files.
Other Improvements:
- Fixed a typo in
README.mdfor clarity. - Updated script paths in
action.ymlfromscripts/tosrc/to reflect directory restructuring.