Skip to content

Update dependabot config and use SHAs/tags #744

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
gewarren merged 3 commits into from
Sep 15, 2026
Merged

Update dependabot config and use SHAs/tags #744

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
aea0cc2
update dependabot config and use SHAs/tags
gewarren Sep 15, 2026
0eba1cb
remove tag for same repo
gewarren Sep 15, 2026
ed236e1
Update upload-artifact action version
gewarren Sep 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 5 additions & 2 deletions .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,10 +3,13 @@ updates:
# GitHub Actions
- package-ecosystem: "github-actions"
directory: "/"
groups:
github-actions:
patterns: ["*"]
Comment thread
gewarren marked this conversation as resolved.
schedule:
interval: "weekly"
day: "wednesday"
open-pull-requests-limit: 10
cooldown:
default-days: 7
# NuGet packages
- package-ecosystem: "nuget"
directory: "/"
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/build-docs-verifier.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,15 +10,15 @@ jobs:
configuration: [debug, release]
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@main
- uses: actions/checkout@v7
with:
fetch-depth: 0
- name: Setup .NET
uses: actions/setup-dotnet@main
uses: actions/setup-dotnet@v6
with:
dotnet-version: '10.0.x'
- name: Try get cached dependencies
uses: actions/cache@main
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v4
with:
path: ${{ github.workspace }}/.nuget/packages
key: ${{ runner.os }}-nuget-${{ hashFiles('**/packages.lock.json') }}
Expand All @@ -31,7 +31,7 @@ jobs:
- name: Test
run: dotnet test actions/docs-verifier
- name: Upload Results
uses: actions/upload-artifact@main
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
with:
name: ${{ matrix.os }}_${{ matrix.configuration }}
path: |
Expand Down
10 changes: 5 additions & 5 deletions .github/workflows/codeql-analysis.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,20 +26,20 @@ jobs:

steps:
- name: Checkout repository
uses: actions/checkout@main
uses: actions/checkout@v7

- name: Initialize CodeQL
uses: github/codeql-action/init@main
uses: github/codeql-action/init@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5
with:
languages: ${{ matrix.language }}

- name: Build JavaScript
if: ${{ matrix.language == 'javascript' }}
uses: github/codeql-action/autobuild@main
uses: github/codeql-action/autobuild@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5

- name: Setup .NET
if: ${{ matrix.language == 'csharp' }}
uses: actions/setup-dotnet@main
uses: actions/setup-dotnet@v6
with:
dotnet-version: 10.0.x

Expand All @@ -53,4 +53,4 @@ jobs:
dotnet build --configuration Release --no-restore

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@main
uses: github/codeql-action/analyze@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5
12 changes: 6 additions & 6 deletions .github/workflows/dotnet-build-validation.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ jobs:
name: build
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@main
- uses: actions/checkout@v7

- name: 'Print manual run reason'
if: ${{ github.event_name == 'workflow_dispatch' }}
Expand All @@ -33,14 +33,14 @@ jobs:
REASON: ${{ github.event.inputs.reason }}

- name: Setup .NET 10.0
uses: actions/setup-dotnet@main
uses: actions/setup-dotnet@v6
with:
dotnet-version: 10.0.x

- name: Restore dependencies for .NET docs tools
run: |
dotnet restore docs-tools.sln

- name: Build .NET docs tools
run: |
dotnet build docs-tools.sln --configuration Release --no-restore
Expand All @@ -51,10 +51,10 @@ jobs:
needs: build

steps:
- uses: actions/checkout@main
- uses: actions/checkout@v7

- name: Setup .NET 10.0
uses: actions/setup-dotnet@main
uses: actions/setup-dotnet@v6
with:
dotnet-version: 10.0.x

Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/node-build-validation.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,9 +17,9 @@ jobs:
name: build
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@main
- uses: actions/checkout@v7
- name: Use Node.js 18
uses: actions/setup-node@main
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with:
node-version: 18
cache: 'npm'
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/quest-bulk.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ jobs:
id-token: write
pull-requests: write
if: ${{ github.repository_owner == 'dotnet' }}

steps:
- name: "Print manual bulk import run reason"
if: ${{ github.event_name == 'workflow_dispatch' }}
Expand All @@ -34,23 +34,23 @@ jobs:

- name: Azure OpenID Connect
id: azure-oidc-auth
uses: dotnet/docs-tools/.github/actions/oidc-auth-flow@main
uses: $/.github/actions/oidc-auth-flow
Comment thread
gewarren marked this conversation as resolved.
with:
client-id: ${{ secrets.CLIENT_ID }}
tenant-id: ${{ secrets.TENANT_ID }}
audience: ${{ secrets.OSMP_API_AUDIENCE }}

- name: Azure DevOps OpenID Connect
id: azure-devops-oidc-auth
uses: dotnet/docs-tools/.github/actions/oidc-auth-flow@main
uses: $/.github/actions/oidc-auth-flow
with:
client-id: ${{ secrets.CLIENT_ID }}
tenant-id: ${{ secrets.TENANT_ID }}
audience: ${{ secrets.QUEST_AUDIENCE }}

- name: bulk-sequester
id: bulk-sequester
uses: dotnet/docs-tools/actions/sequester@main
uses: $/.github/actions/sequester
env:
ImportOptions__ApiKeys__GitHubToken: ${{ secrets.GITHUB_TOKEN }}
ImportOptions__ApiKeys__AzureAccessToken: ${{ steps.azure-oidc-auth.outputs.access-token }}
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/quest.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,15 +40,15 @@ jobs:

- name: Azure OpenID Connect
id: azure-oidc-auth
uses: dotnet/docs-tools/.github/actions/oidc-auth-flow@main
uses: $/.github/actions/oidc-auth-flow
Comment thread
gewarren marked this conversation as resolved.
with:
client-id: ${{ secrets.CLIENT_ID }}
tenant-id: ${{ secrets.TENANT_ID }}
audience: ${{ secrets.OSMP_API_AUDIENCE }}

- name: Azure DevOps OpenID Connect for manual test runs
id: azure-devops-oidc-auth
uses: dotnet/docs-tools/.github/actions/oidc-auth-flow@main
uses: $/.github/actions/oidc-auth-flow
with:
client-id: ${{ secrets.CLIENT_ID }}
tenant-id: ${{ secrets.TENANT_ID }}
Expand All @@ -59,7 +59,7 @@ jobs:
- name: manual-sequester
if: ${{ github.event_name == 'workflow_dispatch' }}
id: manual-sequester
uses: dotnet/docs-tools/actions/sequester@main
uses: $/.github/actions/sequester
env:
ImportOptions__ApiKeys__GitHubToken: ${{ secrets.GITHUB_TOKEN }}
ImportOptions__ApiKeys__AzureAccessToken: ${{ steps.azure-oidc-auth.outputs.access-token }}
Expand All @@ -75,7 +75,7 @@ jobs:
- name: auto-sequester
if: ${{ github.event_name != 'workflow_dispatch' }}
id: auto-sequester
uses: ./actions/sequester
uses: $/.github/actions/sequester
env:
ImportOptions__ApiKeys__GitHubToken: ${{ secrets.GITHUB_TOKEN }}
ImportOptions__ApiKeys__AzureAccessToken: ${{ steps.azure-oidc-auth.outputs.access-token }}
Expand Down
Loading