From 5da4f42e00da96d69b34e4d4449df2985beebc1f Mon Sep 17 00:00:00 2001 From: Dan Fiedler <151573964+danfiedler-msft@users.noreply.github.com> Date: Mon, 7 Sep 2026 15:45:12 -0400 Subject: [PATCH 1/2] Pin GitHub Actions to full-length commit SHAs (#456) --- .github/dependabot.yml | 11 +++++++++++ .github/workflows/expectations.yml | 2 +- .github/workflows/quality.issue.yml | 8 ++++---- .github/workflows/quality.pr.yml | 2 +- .github/workflows/stale-content.yml | 2 +- 5 files changed, 18 insertions(+), 7 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..2c48305b --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,11 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + groups: + github-actions: + patterns: ["*"] + schedule: + interval: "weekly" + cooldown: + default-days: 7 diff --git a/.github/workflows/expectations.yml b/.github/workflows/expectations.yml index 4bf6ac83..daac8b1e 100644 --- a/.github/workflows/expectations.yml +++ b/.github/workflows/expectations.yml @@ -20,7 +20,7 @@ jobs: steps: - name: Checkout Repository id: checkout_repo - uses: actions/checkout@v3 + uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 - name: Comment on Community PRs uses: MicrosoftDocs/PowerShell-Docs/.github/actions/commenting/expectations/v1@main with: diff --git a/.github/workflows/quality.issue.yml b/.github/workflows/quality.issue.yml index de956745..095139b5 100644 --- a/.github/workflows/quality.issue.yml +++ b/.github/workflows/quality.issue.yml @@ -12,7 +12,7 @@ jobs: outputs: check: ${{ steps.is-quality.outputs.match != '' }} steps: - - uses: actions-ecosystem/action-regex-match@v2 + - uses: actions-ecosystem/action-regex-match@9e6c4fb3d5e898f505be7a1fb6e7b0a278f6665b # v2.0.2 id: is-quality with: text: ${{ github.event.issue.body }} @@ -25,7 +25,7 @@ jobs: if: needs.quality.outputs.check == 'true' runs-on: ubuntu-latest steps: - - uses: actions-ecosystem/action-add-assignees@v1 + - uses: actions-ecosystem/action-add-assignees@ce5019e63cc4f35aba27308dc88d19c8f3686747 # v1.0.0 with: github_token: ${{ secrets.github_token }} assignees: ${{ github.event.issue.user.login }} @@ -52,13 +52,13 @@ jobs: - regex: Spelling label: quality-spelling steps: - - uses: actions-ecosystem/action-regex-match@v2 + - uses: actions-ecosystem/action-regex-match@9e6c4fb3d5e898f505be7a1fb6e7b0a278f6665b # v2.0.2 id: matcher with: text: ${{ github.event.issue.body }} regex: '^### Quality Areas\s*^.*${{ matrix.regex }}.*$' flags: gm - - uses: actions-ecosystem/action-add-labels@v1 + - uses: actions-ecosystem/action-add-labels@18f1af5e3544586314bbe15c0273249c770b2daf # v1.1.3 if: steps.matcher.outputs.match != '' with: labels: ${{ matrix.label }} diff --git a/.github/workflows/quality.pr.yml b/.github/workflows/quality.pr.yml index 072672cd..79662e67 100644 --- a/.github/workflows/quality.pr.yml +++ b/.github/workflows/quality.pr.yml @@ -33,6 +33,6 @@ jobs: needs.check.outputs.title == 'true' runs-on: ubuntu-latest steps: - - uses: actions-ecosystem/action-add-labels@v1 + - uses: actions-ecosystem/action-add-labels@18f1af5e3544586314bbe15c0273249c770b2daf # v1.1.3 with: labels: project-quality diff --git a/.github/workflows/stale-content.yml b/.github/workflows/stale-content.yml index 87db1548..f8faee89 100644 --- a/.github/workflows/stale-content.yml +++ b/.github/workflows/stale-content.yml @@ -22,7 +22,7 @@ jobs: steps: - name: Checkout Repository id: checkout_repo - uses: actions/checkout@v3 + uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 - name: Write Report uses: MicrosoftDocs/PowerShell-Docs/.github/actions/reporting/stale-content/v1@main with: From a896c33af39063eb5d7cbc950c35104312692441 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 7 Sep 2026 14:49:01 -0500 Subject: [PATCH 2/2] Bump the github-actions group with 2 updates (#457) Bumps the github-actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [actions-ecosystem/action-add-assignees](https://github.com/actions-ecosystem/action-add-assignees). Updates `actions/checkout` from 3.7.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/a37ce9120846195fa4ece8f58b268e6043cb2f26...3d3c42e5aac5ba805825da76410c181273ba90b1) Updates `actions-ecosystem/action-add-assignees` from 1.0.0 to 1.0.1 - [Release notes](https://github.com/actions-ecosystem/action-add-assignees/releases) - [Commits](https://github.com/actions-ecosystem/action-add-assignees/compare/ce5019e63cc4f35aba27308dc88d19c8f3686747...a5b84af721c4a621eb9c7a4a95ec20a90d0b88e9) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions-ecosystem/action-add-assignees dependency-version: 1.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/expectations.yml | 2 +- .github/workflows/quality.issue.yml | 2 +- .github/workflows/stale-content.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/expectations.yml b/.github/workflows/expectations.yml index daac8b1e..826a6638 100644 --- a/.github/workflows/expectations.yml +++ b/.github/workflows/expectations.yml @@ -20,7 +20,7 @@ jobs: steps: - name: Checkout Repository id: checkout_repo - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Comment on Community PRs uses: MicrosoftDocs/PowerShell-Docs/.github/actions/commenting/expectations/v1@main with: diff --git a/.github/workflows/quality.issue.yml b/.github/workflows/quality.issue.yml index 095139b5..7bfc83d8 100644 --- a/.github/workflows/quality.issue.yml +++ b/.github/workflows/quality.issue.yml @@ -25,7 +25,7 @@ jobs: if: needs.quality.outputs.check == 'true' runs-on: ubuntu-latest steps: - - uses: actions-ecosystem/action-add-assignees@ce5019e63cc4f35aba27308dc88d19c8f3686747 # v1.0.0 + - uses: actions-ecosystem/action-add-assignees@a5b84af721c4a621eb9c7a4a95ec20a90d0b88e9 # v1.0.1 with: github_token: ${{ secrets.github_token }} assignees: ${{ github.event.issue.user.login }} diff --git a/.github/workflows/stale-content.yml b/.github/workflows/stale-content.yml index f8faee89..b2e35d0c 100644 --- a/.github/workflows/stale-content.yml +++ b/.github/workflows/stale-content.yml @@ -22,7 +22,7 @@ jobs: steps: - name: Checkout Repository id: checkout_repo - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Write Report uses: MicrosoftDocs/PowerShell-Docs/.github/actions/reporting/stale-content/v1@main with: