Skip to content

[Sync] Update project files from source repository (0f07170) - #271

Merged
mrz1836 merged 2 commits into
masterfrom
chore/sync-files-mrz-sdks-20260723-075803-0f07170
Jul 23, 2026
Merged

[Sync] Update project files from source repository (0f07170)#271
mrz1836 merged 2 commits into
masterfrom
chore/sync-files-mrz-sdks-20260723-075803-0f07170

Conversation

@mrz1836

@mrz1836 mrz1836 commented Jul 23, 2026

Copy link
Copy Markdown
Owner

What Changed

  • Updated actions/checkout action from v7.0.0 (commit 9c091bb) to v7.0.1 (commit 3d3c42e) in .github/actions/warm-cache/action.yml (2 occurrences)
  • Updated github/codeql-action/init from v4.37.2 (commit e064762) to v4.37.3 (commit e4fba86) in .github/workflows/codeql-analysis.yml
  • Updated github/codeql-action/autobuild from v4.37.2 (commit e064762) to v4.37.3 (commit e4fba86) in .github/workflows/codeql-analysis.yml
  • Updated github/codeql-action/analyze from v4.37.2 (commit e064762) to v4.37.3 (commit e4fba86) in .github/workflows/codeql-analysis.yml
  • Updated github/codeql-action/upload-sarif from v4.37.2 (commit e064762) to v4.37.3 (commit e4fba86) in .github/workflows/scorecard.yml

Why It Was Necessary

  • Patch version updates to GitHub Actions typically include bug fixes, security improvements, or minor enhancements
  • Keeping GitHub Actions up to date ensures the CI/CD pipeline benefits from the latest fixes and maintains security best practices
  • CodeQL action updates may include improved detection rules or analysis performance improvements

Testing Performed

  • CI workflows will automatically validate the updated actions when this PR is opened
  • Existing test suites will run against the updated GitHub Actions versions
  • CodeQL analysis, cache warming, and scorecard workflows will execute with the new action versions to verify compatibility

Impact / Risk

  • Breaking Change: None - these are patch version updates to GitHub Actions
  • Risk: Very low - patch updates are designed to be backwards compatible and only include bug fixes
  • Performance: No negative impact expected; CodeQL updates may improve analysis performance

Copilot AI review requested due to automatic review settings July 23, 2026 11:58
@mrz1836 mrz1836 self-assigned this Jul 23, 2026
@mrz1836 mrz1836 added automated-sync Automated sync PR, e.g. from a fork or external repo automerge Label to automatically merge pull requests that meet all required conditions chore Simple dependency updates or version bumps labels Jul 23, 2026
@github-actions github-actions Bot added update General updates size/S Small change (11-50 lines) labels Jul 23, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR syncs the template repository鈥檚 GitHub Actions configuration with the source repo by applying patch-level updates to pinned action SHAs for actions/checkout and github/codeql-action, keeping CI/security tooling current while remaining on immutable commits.

Changes:

  • Bumped actions/checkout from v7.0.0 to v7.0.1 (pinned SHA) in the warm-cache composite action.
  • Bumped github/codeql-action steps (init, autobuild, analyze) from v4.37.2 to v4.37.3 (pinned SHA) in CodeQL analysis workflow.
  • Bumped github/codeql-action/upload-sarif from v4.37.2 to v4.37.3 (pinned SHA) in the scorecard workflow.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File Description
.github/actions/warm-cache/action.yml Updates actions/checkout pinned SHA to v7.0.1 for cache-warming checkouts.
.github/workflows/codeql-analysis.yml Updates CodeQL action pinned SHAs to v4.37.3 for analysis steps.
.github/workflows/scorecard.yml Updates SARIF upload action pinned SHA to v4.37.3.

馃挕 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Removed the external goreportcard badge link from the README.
@mrz1836

mrz1836 commented Jul 23, 2026

Copy link
Copy Markdown
Owner Author

LGTM!

@mrz1836
mrz1836 merged commit 5eaef59 into master Jul 23, 2026
20 checks passed
@github-actions
github-actions Bot deleted the chore/sync-files-mrz-sdks-20260723-075803-0f07170 branch July 23, 2026 12:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated-sync Automated sync PR, e.g. from a fork or external repo automerge Label to automatically merge pull requests that meet all required conditions chore Simple dependency updates or version bumps size/S Small change (11-50 lines) update General updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants