Skip to content

pr.yaml: write protected config files as UTF-8 without BOM#18

Merged
Chris-Wolfgang merged 1 commit into
mainfrom
fix/pr-yaml-bom-encoding-on-protected-config-fetch
May 12, 2026
Merged

pr.yaml: write protected config files as UTF-8 without BOM#18
Chris-Wolfgang merged 1 commit into
mainfrom
fix/pr-yaml-bom-encoding-on-protected-config-fetch

Conversation

@Chris-Wolfgang

Copy link
Copy Markdown
Owner

Backport of repo-template#339.

The 'Fetch trusted configuration files from main branch' step writes the protected configs back via Out-File -Encoding UTF8 (BOM-prefixed). The .NET analyzer engine appears to ignore BOM-prefixed .editorconfig files, so project severity overrides don't apply on CI — analyzers fire at default severity and TreatWarningsAsErrors escalates findings that pass locally.

This is a 4-line workflow-only change: UTF8UTF8NoBOM at the four call sites. PowerShell 6+ supports the encoding token; shell: pwsh runners use PS 7+, so it's safe.

Diagnosed against In-memory-Logger PR #32 / run 24996715587.

🤖 Generated with Claude Code

Backport of repo-template PR #339. The 'Fetch trusted configuration files
from main branch' step writes .editorconfig / Directory.Build.props /
BannedSymbols.txt back via 'Out-File -Encoding UTF8' which writes UTF-8
*with* BOM. The .NET analyzer engine appears to ignore .editorconfig
files prefixed by a BOM, so project-level severity overrides don't apply
on CI even though they apply locally — analyzers fire at default severity
and TreatWarningsAsErrors then escalates them to errors.

Switch to 'Out-File -Encoding UTF8NoBOM' (PS 6+; the runner uses pwsh).

Diagnosed against Chris-Wolfgang/In-memory-Logger PR #32 / run
24996715587. See Chris-Wolfgang/repo-template#339 for the full write-up.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Copilot AI review requested due to automatic review settings May 9, 2026 18:16

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the CI workflow’s “Fetch trusted configuration files from main branch” PowerShell implementation to write protected config files as UTF-8 without a BOM, addressing analyzer-severity overrides being ignored when a BOM-prefixed .editorconfig is written during CI.

Changes:

  • Switch Out-File encoding from UTF8 to UTF8NoBOM at the four PowerShell write sites in the workflow.
  • Keep the existing “copy protected configs from main” security mechanism intact while fixing the file-encoding behavior.

Comment thread .github/workflows/pr.yaml
Comment thread .github/workflows/pr.yaml
Comment thread .github/workflows/pr.yaml
@Chris-Wolfgang Chris-Wolfgang merged commit 19e96ab into main May 12, 2026
10 of 11 checks passed
@Chris-Wolfgang Chris-Wolfgang deleted the fix/pr-yaml-bom-encoding-on-protected-config-fetch branch May 12, 2026 01:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants