🩹 [Patch]: Reusable workflow dependencies updated#332
Conversation
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 8.0.0 to 8.0.1. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@70fc10c...3e5f45b) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages) from 4.0.5 to 5.0.0. - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](actions/deploy-pages@d6db901...cd2ce8f) --- updated-dependencies: - dependency-name: actions/deploy-pages dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/configure-pages](https://github.com/actions/configure-pages) from 5.0.0 to 6.0.0. - [Release notes](https://github.com/actions/configure-pages/releases) - [Commits](actions/configure-pages@983d773...45bfe01) --- updated-dependencies: - dependency-name: actions/configure-pages dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [PSModule/Invoke-ScriptAnalyzer](https://github.com/psmodule/invoke-scriptanalyzer) from 4.1.2 to 4.1.3. - [Release notes](https://github.com/psmodule/invoke-scriptanalyzer/releases) - [Commits](PSModule/Invoke-ScriptAnalyzer@17bb50e...6aeb1bc) --- updated-dependencies: - dependency-name: PSModule/Invoke-ScriptAnalyzer dependency-version: 4.1.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [super-linter/super-linter](https://github.com/super-linter/super-linter) from 8.5.0 to 8.6.0. - [Release notes](https://github.com/super-linter/super-linter/releases) - [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md) - [Commits](super-linter/super-linter@61abc07...9e86335) --- updated-dependencies: - dependency-name: super-linter/super-linter dependency-version: 8.6.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
No Significant Changes DetectedThis PR does not contain changes to files that would trigger a new release:
Build, test, and publish stages will be skipped for this PR. If you believe this is incorrect, please verify that your changes are in the correct locations. |
No Significant Changes DetectedThis PR does not contain changes to files that would trigger a new release:
Build, test, and publish stages will be skipped for this PR. If you believe this is incorrect, please verify that your changes are in the correct locations. |
Super-linter summary
All files and directories linted successfully For more information, see the GitHub Actions workflow run Powered by Super-linter |
There was a problem hiding this comment.
Pull request overview
Consolidated maintenance PR that bumps five GitHub Actions dependencies across eight workflow files. All references use SHA pinning with version tag comments, consistent with repository conventions.
Changes:
- Bump
actions/download-artifactv8.0.0 → v8.0.1,super-linter/super-linterv8.5.0 → v8.6.0,PSModule/Invoke-ScriptAnalyzerv4.1.2 → v4.1.3 - Major bump
actions/configure-pagesv5.0.0 → v6.0.0 andactions/deploy-pagesv4.0.5 → v5.0.0 (both upgrade to Node 24) - Supersedes Dependabot PRs #313, #314, #316, #317, #318
Reviewed changes
Copilot reviewed 8 out of 8 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| .github/workflows/Build-Docs.yml | Bumps download-artifact and super-linter/slim |
| .github/workflows/Build-Site.yml | Bumps download-artifact |
| .github/workflows/Lint-Repository.yml | Bumps super-linter |
| .github/workflows/Lint-SourceCode.yml | Bumps PSModule/Invoke-ScriptAnalyzer |
| .github/workflows/Linter.yml | Bumps super-linter |
| .github/workflows/Publish-Site.yml | Bumps configure-pages and deploy-pages (Node 24 majors) |
| .github/workflows/Test-Module.yml | Bumps download-artifact (×2) and Invoke-ScriptAnalyzer |
| .github/workflows/Test-ModuleLocal.yml | Bumps download-artifact |
Super-linter summary
All files and directories linted successfully For more information, see the GitHub Actions workflow run Powered by Super-linter |
…-existing security findings
Super-linter summary
All files and directories linted successfully For more information, see the GitHub Actions workflow run Powered by Super-linter |
51f27f7
into
main
Reusable workflow dependencies are now updated to newer pinned versions, improving reliability and consistency across repository automation while preserving existing workflow behavior.
Changed: Reusable workflow dependency versions
The repository workflows now use updated pinned versions of key GitHub Actions and PSModule actions. All references remain SHA-pinned with version comments, keeping the same security model while applying dependency updates.
Technical Details
Updated action pins in
.github/workflows/Build-Docs.yml,.github/workflows/Build-Site.yml,.github/workflows/Lint-Repository.yml,.github/workflows/Lint-SourceCode.yml,.github/workflows/Linter.yml,.github/workflows/Publish-Site.yml,.github/workflows/Test-Module.yml, and.github/workflows/Test-ModuleLocal.yml. Changes includeactions/download-artifact(v8.0.1),actions/deploy-pages(v5.0.0),actions/configure-pages(v6.0.0),PSModule/Invoke-ScriptAnalyzer(v4.1.3), andsuper-linter/super-linter(v8.6.0).