chore(deps): update action versions and packages#932
Merged
Conversation
…kflows and projects
Contributor
Dependency ReviewThe following issues were found:
License Issuessrc/XtremeIdiots.Portal.Integrations.Servers.Abstractions.V1/XtremeIdiots.Portal.Integrations.Servers.Abstractions.V1.csproj
src/XtremeIdiots.Portal.Integrations.Servers.Api.Client.Testing/XtremeIdiots.Portal.Integrations.Servers.Api.Client.Testing.csproj
src/XtremeIdiots.Portal.Integrations.Servers.Api.Client.V1/XtremeIdiots.Portal.Integrations.Servers.Api.Client.V1.csproj
src/XtremeIdiots.Portal.Integrations.Servers.Api.V1/XtremeIdiots.Portal.Integrations.Servers.Api.V1.csproj
OpenSSF ScorecardScorecard details
Scanned Files
|
frasermolyneux
temporarily deployed
to
Development
GitHub Actions
Inactive
There was a problem hiding this comment.
Pull request overview
Updates CI/CD workflows and .NET project dependencies to improve stability by pinning internal GitHub Actions to version tags and upgrading shared NuGet packages across the Servers integrations solution.
Changes:
- Pin
frasermolyneux/actions/*usages in multiple workflows from@mainto version tags (e.g.,.../v1.4,.../v1.2). - Upgrade
MX.Api.*packages to2.3.25across API/client/abstractions/testing projects. - Bump
Scalar.AspNetCoreandXtremeIdiots.Portal.Repository.Api.Client.V1in the API project.
Reviewed changes
Copilot reviewed 10 out of 10 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
src/XtremeIdiots.Portal.Integrations.Servers.Api.V1/XtremeIdiots.Portal.Integrations.Servers.Api.V1.csproj |
Updates MX.Api packages and bumps Scalar + Repository API client versions. |
src/XtremeIdiots.Portal.Integrations.Servers.Api.Client.V1/XtremeIdiots.Portal.Integrations.Servers.Api.Client.V1.csproj |
Upgrades MX.Api.Client to align with other projects. |
src/XtremeIdiots.Portal.Integrations.Servers.Api.Client.Testing/XtremeIdiots.Portal.Integrations.Servers.Api.Client.Testing.csproj |
Upgrades MX.Api.Abstractions for the testing helper package. |
src/XtremeIdiots.Portal.Integrations.Servers.Abstractions.V1/XtremeIdiots.Portal.Integrations.Servers.Abstractions.V1.csproj |
Upgrades MX.Api.Abstractions for the DTO/abstractions package. |
.github/workflows/pr-verify.yml |
Pins terraform plan/apply and deploy actions to version tags. |
.github/workflows/destroy-environment.yml |
Pins terraform destroy action to a version tag. |
.github/workflows/destroy-development.yml |
Pins terraform destroy action to a version tag. |
.github/workflows/deploy-prd.yml |
Pins dotnet CI, terraform plan/apply, and deploy actions to version tags. |
.github/workflows/deploy-dev.yml |
Pins dotnet CI, terraform plan/apply, and deploy actions to version tags. |
.github/workflows/build-and-test.yml |
Pins terraform plan action to a version tag. |
Contributor
🏗️ Terraform Plan
✅ Validate — Passed ✅ Plan
|
|
This was referenced Feb 20, 2026
This was referenced Mar 1, 2026
This was referenced Mar 22, 2026
This was referenced Apr 5, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This pull request updates several GitHub Actions workflow files and project dependencies to use newer, versioned releases of internal and third-party actions and packages. The main focus is on improving reliability and consistency by pinning to specific action and package versions, rather than using the
mainbranch or older versions.Workflow action updates:
terraform-plan,dotnet-web-ci,terraform-plan-and-apply,deploy-app-service, andterraform-destroy) in workflow files to reference specific version tags instead of themainbranch. This ensures more stable and predictable CI/CD pipelines. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15]Dependency upgrades:
MX.Api.Abstractions,MX.Api.Client, andMX.Api.Web.ExtensionsNuGet packages to version2.3.25across all relevant projects to ensure compatibility and take advantage of bug fixes and new features. [1] [2] [3] [4]Scalar.AspNetCoreto version2.12.46andXtremeIdiots.Portal.Repository.Api.Client.V1to version2.1.135in theXtremeIdiots.Portal.Integrations.Servers.Api.V1project.These changes help standardize the build and deployment processes and ensure that all environments are using the latest stable dependencies and action versions.