Skip to content

Commit aa5e329

Browse files
Merge pull request #712 from microsoft/main
chore: Down mere from main to dev
2 parents 3fab586 + cea5548 commit aa5e329

21 files changed

Lines changed: 63 additions & 61 deletions

‎.github/dependabot.yml‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,8 @@ updates:
1414
patterns:
1515
- "*"
1616
# uv dependencies (grouped)
17+
cooldown:
18+
default-days: 7
1719
- package-ecosystem: "uv"
1820
directory: "/src/ContentProcessor"
1921
schedule:
@@ -53,4 +55,4 @@ updates:
5355
groups:
5456
all-npm-deps:
5557
patterns:
56-
- "*"
58+
- "*"

‎.github/workflows/azd-template-validation.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,12 +15,12 @@ jobs:
1515
name: azd template validation
1616
environment: production
1717
steps:
18-
- uses: actions/checkout@v7
18+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
1919

2020
- name: Set timestamp
2121
run: echo "HHMM=$(date -u +'%H%M')" >> $GITHUB_ENV
2222

23-
- uses: microsoft/template-validation-action@v0.4.4
23+
- uses: microsoft/template-validation-action@bae4895d0a8abd4f0d5aad68ae8647b3027f4c91 # v0.4.4
2424
with:
2525
validateAzd: ${{ vars.TEMPLATE_VALIDATE_AZD }}
2626
validateTests: ${{ vars.TEMPLATE_VALIDATE_TESTS }}

‎.github/workflows/azure-dev.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -21,18 +21,18 @@ jobs:
2121
AZURE_DEV_COLLECT_TELEMETRY: ${{ vars.AZURE_DEV_COLLECT_TELEMETRY }}
2222
steps:
2323
- name: Checkout Code
24-
uses: actions/checkout@v7
24+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
2525

2626
- name: Set timestamp and env name
2727
run: |
2828
HHMM=$(date -u +'%H%M')
2929
echo "AZURE_ENV_NAME=azd-${{ vars.AZURE_ENV_NAME }}-${HHMM}" >> $GITHUB_ENV
3030
3131
- name: Install azd
32-
uses: Azure/setup-azd@v2
32+
uses: Azure/setup-azd@0b7e3a35ab00f2eee7080c845eb39c3f0ebfa553 # v2.4.0
3333

3434
- name: Login to Azure
35-
uses: azure/login@v3
35+
uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1
3636
with:
3737
client-id: ${{ secrets.AZURE_CLIENT_ID }}
3838
tenant-id: ${{ secrets.AZURE_TENANT_ID }}

‎.github/workflows/broken-links-checker.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616

1717
steps:
1818
- name: Checkout Repo
19-
uses: actions/checkout@v7
19+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
2020
with:
2121
fetch-depth: 0
2222

@@ -34,7 +34,7 @@ jobs:
3434
- name: Check Broken Links in Changed Markdown Files
3535
id: lychee-check-pr
3636
if: github.event_name == 'pull_request' && steps.changed-markdown-files.outputs.any_changed == 'true'
37-
uses: lycheeverse/lychee-action@v2.9.0
37+
uses: lycheeverse/lychee-action@e7477775783ea5526144ba13e8db5eec57747ce8 # v2.9.0
3838
with:
3939
args: >
4040
--verbose --no-progress --exclude ^https?://
@@ -47,7 +47,7 @@ jobs:
4747
- name: Check Broken Links in All Markdown Files in Entire Repo (Manual Trigger)
4848
id: lychee-check-manual
4949
if: github.event_name == 'workflow_dispatch'
50-
uses: lycheeverse/lychee-action@v2.9.0
50+
uses: lycheeverse/lychee-action@e7477775783ea5526144ba13e8db5eec57747ce8 # v2.9.0
5151
with:
5252
args: >
5353
--verbose --no-progress --exclude ^https?://

‎.github/workflows/build-docker-image.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -59,18 +59,18 @@ jobs:
5959

6060
steps:
6161
- name: Checkout repository
62-
uses: actions/checkout@v7
62+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
6363

6464
- name: Set up Docker Buildx
65-
uses: docker/setup-buildx-action@v4
65+
uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
6666

6767
- name: Get current date
6868
id: date
6969
run: echo "date=$(date +'%Y-%m-%d')" >> $GITHUB_OUTPUT
7070

7171
- name: Login to Azure
7272
if: ${{ github.ref_name == 'main' || github.ref_name == 'dev' || github.ref_name == 'demo' || github.ref_name == 'hotfix' || github.ref_name == 'dependabotchanges' }}
73-
uses: azure/login@v3
73+
uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1
7474
with:
7575
client-id: ${{ secrets.AZURE_CLIENT_ID }}
7676
tenant-id: ${{ secrets.AZURE_TENANT_ID }}
@@ -110,7 +110,7 @@ jobs:
110110
echo "Base tag: $BASE_TAG, Date tag: $DATE_TAG"
111111
112112
- name: Build and Push ContentProcessor Docker image
113-
uses: docker/build-push-action@v7
113+
uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
114114
with:
115115
context: ./src/ContentProcessor
116116
file: ./src/ContentProcessor/Dockerfile
@@ -120,7 +120,7 @@ jobs:
120120
${{ steps.registry.outputs.ext_registry }}/contentprocessor:${{ env.DATE_TAG }}
121121
122122
- name: Build and Push ContentProcessorAPI Docker image
123-
uses: docker/build-push-action@v7
123+
uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
124124
with:
125125
context: ./src/ContentProcessorAPI
126126
file: ./src/ContentProcessorAPI/Dockerfile
@@ -130,7 +130,7 @@ jobs:
130130
${{ steps.registry.outputs.ext_registry }}/contentprocessorapi:${{ env.DATE_TAG }}
131131
132132
- name: Build and Push ContentProcessorWeb Docker image
133-
uses: docker/build-push-action@v7
133+
uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
134134
with:
135135
context: ./src/ContentProcessorWeb
136136
file: ./src/ContentProcessorWeb/Dockerfile
@@ -140,7 +140,7 @@ jobs:
140140
${{ steps.registry.outputs.ext_registry }}/contentprocessorweb:${{ env.DATE_TAG }}
141141
142142
- name: Build and Push ContentProcessorWorkflow Docker image
143-
uses: docker/build-push-action@v7
143+
uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
144144
with:
145145
context: ./src/ContentProcessorWorkflow
146146
file: ./src/ContentProcessorWorkflow/Dockerfile

‎.github/workflows/codeql.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -72,11 +72,11 @@ jobs:
7272
# your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
7373
steps:
7474
- name: Checkout repository
75-
uses: actions/checkout@v7
75+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
7676

7777
# Initializes the CodeQL tools for scanning.
7878
- name: Initialize CodeQL
79-
uses: github/codeql-action/init@v4.37.3
79+
uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
8080
with:
8181
languages: ${{ matrix.language }}
8282
build-mode: ${{ matrix.build-mode }}
@@ -104,6 +104,6 @@ jobs:
104104
exit 1
105105
106106
- name: Perform CodeQL Analysis
107-
uses: github/codeql-action/analyze@v4.37.3
107+
uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
108108
with:
109109
category: "/language:${{matrix.language}}"

‎.github/workflows/deploy.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -33,10 +33,10 @@ jobs:
3333

3434
steps:
3535
- name: Checkout Code
36-
uses: actions/checkout@v7
36+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
3737

3838
- name: Login to Azure
39-
uses: azure/login@v3
39+
uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1
4040
with:
4141
client-id: ${{ secrets.AZURE_CLIENT_ID }}
4242
tenant-id: ${{ secrets.AZURE_TENANT_ID }}
@@ -282,7 +282,7 @@ jobs:
282282
ENVIRONMENT_NAME: ${{ needs.deploy.outputs.ENVIRONMENT_NAME }}
283283
steps:
284284
- name: Login to Azure
285-
uses: azure/login@v3
285+
uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1
286286
with:
287287
client-id: ${{ secrets.AZURE_CLIENT_ID }}
288288
tenant-id: ${{ secrets.AZURE_TENANT_ID }}

‎.github/workflows/job-cleanup-deployment.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -200,7 +200,7 @@ jobs:
200200
echo "✅ All input parameters validated successfully!"
201201
202202
- name: Login to Azure
203-
uses: azure/login@v3
203+
uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1
204204
with:
205205
client-id: ${{ secrets.AZURE_CLIENT_ID }}
206206
tenant-id: ${{ secrets.AZURE_TENANT_ID }}

‎.github/workflows/job-deploy-linux.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -187,7 +187,7 @@ jobs:
187187
echo "✅ All input parameters validated successfully!"
188188
189189
- name: Checkout Code
190-
uses: actions/checkout@v7
190+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
191191

192192
- name: Configure Parameters Based on WAF Setting
193193
shell: bash
@@ -214,10 +214,10 @@ jobs:
214214
fi
215215
216216
- name: Install azd
217-
uses: Azure/setup-azd@v2
217+
uses: Azure/setup-azd@0b7e3a35ab00f2eee7080c845eb39c3f0ebfa553 # v2.4.0
218218

219219
- name: Login to Azure
220-
uses: azure/login@v3
220+
uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1
221221
with:
222222
client-id: ${{ secrets.AZURE_CLIENT_ID }}
223223
tenant-id: ${{ secrets.AZURE_TENANT_ID }}

‎.github/workflows/job-deploy-windows.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -187,7 +187,7 @@ jobs:
187187
echo "✅ All input parameters validated successfully!"
188188
189189
- name: Checkout Code
190-
uses: actions/checkout@v7
190+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
191191

192192
- name: Configure Parameters Based on WAF Setting
193193
shell: bash
@@ -214,10 +214,10 @@ jobs:
214214
fi
215215
216216
- name: Setup Azure Developer CLI (Windows)
217-
uses: Azure/setup-azd@v2
217+
uses: Azure/setup-azd@0b7e3a35ab00f2eee7080c845eb39c3f0ebfa553 # v2.4.0
218218

219219
- name: Login to Azure
220-
uses: azure/login@v3
220+
uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1
221221
with:
222222
client-id: ${{ secrets.AZURE_CLIENT_ID }}
223223
tenant-id: ${{ secrets.AZURE_TENANT_ID }}

0 commit comments

Comments
 (0)