Skip to content

🩹 [Patch]: Reusable workflow dependencies updated - #332

Merged
Marius Storhaug (MariusStorhaug) merged 7 commits into
mainfrom
maint/bump-github-actions
May 16, 2026
Merged

🩹 [Patch]: Reusable workflow dependencies updated#332
Marius Storhaug (MariusStorhaug) merged 7 commits into
mainfrom
maint/bump-github-actions

Conversation

@MariusStorhaug

@MariusStorhaugMarius Storhaug (MariusStorhaug) commented May 11, 2026

Copy link
Copy Markdown
Member

Reusable workflow dependencies are now updated to newer pinned versions, improving reliability and consistency across repository automation while preserving existing workflow behavior.

Changed: Reusable workflow dependency versions

The repository workflows now use updated pinned versions of key GitHub Actions and PSModule actions. All references remain SHA-pinned with version comments, keeping the same security model while applying dependency updates.

Technical Details

Updated action pins in .github/workflows/Build-Docs.yml, .github/workflows/Build-Site.yml, .github/workflows/Lint-Repository.yml, .github/workflows/Lint-SourceCode.yml, .github/workflows/Linter.yml, .github/workflows/Publish-Site.yml, .github/workflows/Test-Module.yml, and .github/workflows/Test-ModuleLocal.yml. Changes include actions/download-artifact (v8.0.1), actions/deploy-pages (v5.0.0), actions/configure-pages (v6.0.0), PSModule/Invoke-ScriptAnalyzer (v4.1.3), and super-linter/super-linter (v8.6.0).

dependabotBot added 5 commits May 11, 2026 22:16
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 8.0.0 to 8.0.1.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@70fc10c...3e5f45b)
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: 8.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages) from 4.0.5 to 5.0.0.
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](actions/deploy-pages@d6db901...cd2ce8f)
---
updated-dependencies:
- dependency-name: actions/deploy-pages
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/configure-pages](https://github.com/actions/configure-pages) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/configure-pages/releases)
- [Commits](actions/configure-pages@983d773...45bfe01)
---
updated-dependencies:
- dependency-name: actions/configure-pages
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Bumps [PSModule/Invoke-ScriptAnalyzer](https://github.com/psmodule/invoke-scriptanalyzer) from 4.1.2 to 4.1.3.
- [Release notes](https://github.com/psmodule/invoke-scriptanalyzer/releases)
- [Commits](PSModule/Invoke-ScriptAnalyzer@17bb50e...6aeb1bc)
---
updated-dependencies:
- dependency-name: PSModule/Invoke-ScriptAnalyzer
dependency-version: 4.1.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Bumps [super-linter/super-linter](https://github.com/super-linter/super-linter) from 8.5.0 to 8.6.0.
- [Release notes](https://github.com/super-linter/super-linter/releases)
- [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md)
- [Commits](super-linter/super-linter@61abc07...9e86335)
---
updated-dependencies:
- dependency-name: super-linter/super-linter
dependency-version: 8.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@github-actions

Copy link
Copy Markdown

No Significant Changes Detected

This PR does not contain changes to files that would trigger a new release:

PatternDescription
^src/Matches files where path matches this pattern
^README\.md$Matches files where path matches this pattern

Build, test, and publish stages will be skipped for this PR.

If you believe this is incorrect, please verify that your changes are in the correct locations.

@github-actions

Copy link
Copy Markdown

No Significant Changes Detected

This PR does not contain changes to files that would trigger a new release:

PatternDescription
^src/Matches files where path matches this pattern
^README\.md$Matches files where path matches this pattern

Build, test, and publish stages will be skipped for this PR.

If you believe this is incorrect, please verify that your changes are in the correct locations.

@github-actions

Copy link
Copy Markdown

Super-linter summary

LanguageValidation result
CHECKOVPass ✅
GITLEAKSPass ✅
GIT_MERGE_CONFLICT_MARKERSPass ✅
MARKDOWNPass ✅
NATURAL_LANGUAGEPass ✅
POWERSHELLPass ✅
PRE_COMMITPass ✅
SPELL_CODESPELLPass ✅
TRIVYPass ✅
YAMLPass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

@MariusStorhaug
Marius Storhaug (MariusStorhaug) marked this pull request as ready for review May 15, 2026 21:40
CopilotAI review requested due to automatic review settings May 15, 2026 21:40

CopilotAI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Consolidated maintenance PR that bumps five GitHub Actions dependencies across eight workflow files. All references use SHA pinning with version tag comments, consistent with repository conventions.

Changes:

  • Bump actions/download-artifact v8.0.0 → v8.0.1, super-linter/super-linter v8.5.0 → v8.6.0, PSModule/Invoke-ScriptAnalyzer v4.1.2 → v4.1.3
  • Major bump actions/configure-pages v5.0.0 → v6.0.0 and actions/deploy-pages v4.0.5 → v5.0.0 (both upgrade to Node 24)
  • Supersedes Dependabot PRs #313, #314, #316, #317, #318

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated no comments.

Show a summary per file
FileDescription
.github/workflows/Build-Docs.ymlBumps download-artifact and super-linter/slim
.github/workflows/Build-Site.ymlBumps download-artifact
.github/workflows/Lint-Repository.ymlBumps super-linter
.github/workflows/Lint-SourceCode.ymlBumps PSModule/Invoke-ScriptAnalyzer
.github/workflows/Linter.ymlBumps super-linter
.github/workflows/Publish-Site.ymlBumps configure-pages and deploy-pages (Node 24 majors)
.github/workflows/Test-Module.ymlBumps download-artifact (×2) and Invoke-ScriptAnalyzer
.github/workflows/Test-ModuleLocal.ymlBumps download-artifact

@MariusStorhaugMarius Storhaug (MariusStorhaug) changed the title ⚙️ [Maintenance]: Consolidated GitHub Actions dependency bumps🩹 [Patch]: Reusable workflow dependencies updatedMay 15, 2026
@github-actions

Copy link
Copy Markdown

Super-linter summary

LanguageValidation result
CHECKOVPass ✅
GITLEAKSPass ✅
GIT_MERGE_CONFLICT_MARKERSPass ✅
MARKDOWNPass ✅
NATURAL_LANGUAGEPass ✅
POWERSHELLPass ✅
PRE_COMMITPass ✅
SPELL_CODESPELLPass ✅
TRIVYPass ✅
YAMLPass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

CopilotAI review requested due to automatic review settings May 15, 2026 23:50

CopilotAI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 10 out of 10 changed files in this pull request and generated no new comments.

@github-actions

Copy link
Copy Markdown

Super-linter summary

LanguageValidation result
CHECKOVPass ✅
GITLEAKSPass ✅
GIT_MERGE_CONFLICT_MARKERSPass ✅
MARKDOWNPass ✅
NATURAL_LANGUAGEPass ✅
POWERSHELLPass ✅
PRE_COMMITPass ✅
SPELL_CODESPELLPass ✅
TRIVYPass ✅
YAMLPass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

@MariusStorhaug
Marius Storhaug (MariusStorhaug) merged commit 51f27f7 into mainMay 16, 2026
100 of 102 checks passed
@MariusStorhaug
Marius Storhaug (MariusStorhaug) deleted the maint/bump-github-actions branch May 16, 2026 08:38
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@MariusStorhaug