[build] Use self-repository syntax for same-repository references - #5106
Merged
arturcic merged 1 commit intoAug 14, 2026
Merged
Conversation
arturcic
force-pushed
the
build/5103-self-repository-syntax
branch
from
August 1, 2026 20:51
d857724 to
69319bf
Compare
Contributor
There was a problem hiding this comment.
Pull request overview
Updates GitHub Actions workflow composition across the repository to use GitHub’s new self-repository $/ syntax for same-repo actions and reusable workflows, ensuring references resolve from the exact commit running the workflow (without requiring checkout solely to load local actions). It also introduces a temporary, narrowly scoped Actionlint ignore configuration to accommodate current Actionlint limitations with the new syntax.
Changes:
- Replaced same-repository reusable workflow calls (previously
./.github/workflows/...) with$/...references in the main CI workflow. - Replaced same-repository action references (previously
./.github/actions/...) with$/...references across several reusable workflows and docs workflow steps. - Added
.github/actionlint.yamland updated the Actionlint workflow triggers to include it, to temporarily ignore the two known diagnostics that don’t yet understand$/.
Reviewed changes
Copilot reviewed 12 out of 12 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| .github/workflows/docs.yml | Switches cache restore action to $/ syntax in docs build/publish jobs. |
| .github/workflows/ci.yml | Switches reusable workflow calls and a few internal action steps to $/ syntax. |
| .github/workflows/actionlint.yml | Ensures Actionlint workflow runs when the Actionlint config file changes. |
| .github/workflows/_unit_tests.yml | Switches cache restore action to $/ syntax in unit test workflow. |
| .github/workflows/_publish.yml | Switches cache restore action to $/ syntax in publish workflow. |
| .github/workflows/_prepare.yml | Switches cache restore action to $/ syntax in prepare workflow. |
| .github/workflows/_docker.yml | Switches internal cache/docker action references to $/ syntax. |
| .github/workflows/_docker_manifests.yml | Switches internal cache/docker action references to $/ syntax. |
| .github/workflows/_build.yml | Switches cache restore action to $/ syntax in build workflow. |
| .github/workflows/_artifacts_windows.yml | Switches cache restore action to $/ syntax in Windows artifacts workflow. |
| .github/workflows/_artifacts_linux.yml | Switches internal cache/docker action references to $/ syntax in Linux artifacts workflow. |
| .github/actionlint.yaml | Adds temporary ignores for the two Actionlint diagnostics that don’t yet support $/. |
arturcic
force-pushed
the
build/5103-self-repository-syntax
branch
from
August 14, 2026 09:29
69319bf to
9e4c28e
Compare
arturcic
marked this pull request as ready for review
August 14, 2026 09:29
arturcic
force-pushed
the
build/5103-self-repository-syntax
branch
from
August 14, 2026 09:34
9e4c28e to
42bc570
Compare
arturcic
force-pushed
the
build/5103-self-repository-syntax
branch
from
August 14, 2026 09:38
42bc570 to
92a3b5b
Compare
|
Member
Author
|
@Mergifyio queue |
Contributor
Merge Queue Status
Waiting for
All conditions
|
Contributor
|
Thank you @arturcic for your contribution! |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
$/syntax.$/references.githubactions:S7637only on$/references, which already resolve to the exact running commit.OP_SERVICE_ACCOUNT_TOKENwhere required.Related Issue
Resolves #5103
Static-analysis Compatibility
Actionlint 1.7.12 does not yet recognize the
$/self-repository syntax. The temporary path-scoped ignores in.github/actionlint.yamlsuppress only the two obsolete diagnostics while keeping all other lint checks active.Native support is tracked by rhysd/actionlint#711. Remove the workaround once upstream support is released and used by this repository.
Sonar rule
githubactions:S7637likewise treats$/references as unpinned external dependencies. Each self-reference carries a line-levelNOSONARexplanation because adding an@refwould invalidate the self-repository syntax.Motivation and Context
Self-repository references resolve actions and reusable workflows from the exact commit running the workflow. This keeps internal composition aligned when callers pin a workflow to a full commit SHA and avoids requiring checkout solely to load an action.
How Has This Been Tested?
actionlintgit diff --check.github/workflowscontains no remaining workspace-relativeuses: ./references.Screenshots
Not applicable.
Checklist