From 659d6874937b5801d63067fcd7ca8aafe87a80a2 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Tue, 24 Mar 2026 19:58:54 +0000 Subject: [PATCH 1/5] Update actions/checkout to v6.0.2 (de0fac2e4500dabe0009e67214ff5f5447ce83dd) Co-authored-by: radical <1472+radical@users.noreply.github.com> Agent-Logs-Url: https://github.com/microsoft/aspire/sessions/9a19a0dd-4765-4392-9a1b-041f62e2028b --- .github/actions/enumerate-tests/action.yml | 2 +- .github/workflows/apply-test-attributes.yml | 2 +- .github/workflows/auto-rerun-transient-ci-failures.yml | 4 ++-- .github/workflows/backmerge-release.yml | 2 +- .github/workflows/backport.yml | 2 +- .github/workflows/build-cli-native-archives.yml | 2 +- .github/workflows/build-packages.yml | 2 +- .github/workflows/ci.yml | 2 +- .github/workflows/copilot-setup-steps.yml | 2 +- .github/workflows/deployment-tests.yml | 8 ++++---- .github/workflows/generate-api-diffs.yml | 2 +- .github/workflows/generate-ats-diffs.yml | 2 +- .github/workflows/locker.yml | 2 +- .github/workflows/markdownlint.yml | 2 +- .github/workflows/polyglot-validation.yml | 10 +++++----- .github/workflows/pr-docs-hook.yml | 2 +- .github/workflows/refresh-manifests.yml | 2 +- .github/workflows/release-github-tasks.yml | 8 ++++---- .github/workflows/reproduce-flaky-tests.yml | 2 +- .github/workflows/run-tests.yml | 2 +- .github/workflows/specialized-test-runner.yml | 4 ++-- .github/workflows/tests.yml | 6 +++--- .github/workflows/typescript-sdk-tests.yml | 2 +- .github/workflows/update-ai-foundry-models.yml | 2 +- .github/workflows/update-dependencies.yml | 2 +- .github/workflows/update-github-models.yml | 2 +- 26 files changed, 40 insertions(+), 40 deletions(-) diff --git a/.github/actions/enumerate-tests/action.yml b/.github/actions/enumerate-tests/action.yml index f13fb81b093..c5486587665 100644 --- a/.github/actions/enumerate-tests/action.yml +++ b/.github/actions/enumerate-tests/action.yml @@ -31,7 +31,7 @@ runs: using: "composite" steps: - name: Checkout code - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Set up .NET Core uses: actions/setup-dotnet@3951f0dfe7a07e2313ec93c75700083e2005cbab # v4.3.0 diff --git a/.github/workflows/apply-test-attributes.yml b/.github/workflows/apply-test-attributes.yml index 13f5802d605..ec33c806d09 100644 --- a/.github/workflows/apply-test-attributes.yml +++ b/.github/workflows/apply-test-attributes.yml @@ -366,7 +366,7 @@ jobs: # Credentials must persist for git push operations later in workflow - name: Checkout repo if: success() - uses: actions/checkout@v4 # zizmor: ignore[artipacked] + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 # zizmor: ignore[artipacked] with: ref: ${{ steps.determine-target.outputs.checkout_ref }} fetch-depth: 0 diff --git a/.github/workflows/auto-rerun-transient-ci-failures.yml b/.github/workflows/auto-rerun-transient-ci-failures.yml index 96f8a9255e9..9ef72c20430 100644 --- a/.github/workflows/auto-rerun-transient-ci-failures.yml +++ b/.github/workflows/auto-rerun-transient-ci-failures.yml @@ -55,7 +55,7 @@ jobs: max_retryable_jobs: ${{ steps.analyze.outputs.max_retryable_jobs }} steps: - name: Checkout code - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Analyze failed jobs id: analyze @@ -285,7 +285,7 @@ jobs: pull-requests: write steps: - name: Checkout code - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Rerun matched jobs uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1 diff --git a/.github/workflows/backmerge-release.yml b/.github/workflows/backmerge-release.yml index 3856fc3b191..b367ee129b0 100644 --- a/.github/workflows/backmerge-release.yml +++ b/.github/workflows/backmerge-release.yml @@ -25,7 +25,7 @@ jobs: private-key: ${{ secrets.ASPIRE_BOT_PRIVATE_KEY }} - name: Checkout repository - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 # Full history needed for merge token: ${{ steps.app-token.outputs.token }} diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml index 5eea0307e0c..2e9e5748680 100644 --- a/.github/workflows/backport.yml +++ b/.github/workflows/backport.yml @@ -108,7 +108,7 @@ jobs: private-key: ${{ secrets.ASPIRE_BOT_PRIVATE_KEY }} - name: Checkout repo - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 token: ${{ steps.app-token.outputs.token }} diff --git a/.github/workflows/build-cli-native-archives.yml b/.github/workflows/build-cli-native-archives.yml index fbcd43eca02..1843425b6d2 100644 --- a/.github/workflows/build-cli-native-archives.yml +++ b/.github/workflows/build-cli-native-archives.yml @@ -34,7 +34,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 # Build RID-specific NuGet packages (DCP + Dashboard) locally instead of # downloading them from the build_packages job. This allows the CLI archive diff --git a/.github/workflows/build-packages.yml b/.github/workflows/build-packages.yml index bf030dc93e0..08589031fd4 100644 --- a/.github/workflows/build-packages.yml +++ b/.github/workflows/build-packages.yml @@ -13,7 +13,7 @@ jobs: runs-on: 8-core-ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Build with packages run: ./build.sh -restore -build -ci -pack -bl -p:InstallBrowsersForPlaywright=false -p:SkipTestProjects=true -p:SkipPlaygroundProjects=true -p:SkipBundleDeps=true ${{ inputs.versionOverrideArg }} diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e3a6d9c5ae4..ee3416b5943 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -28,7 +28,7 @@ jobs: steps: - name: Checkout code if: ${{ github.event_name == 'pull_request' }} - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml index 57298a08a49..9b2cf00c13c 100644 --- a/.github/workflows/copilot-setup-steps.yml +++ b/.github/workflows/copilot-setup-steps.yml @@ -14,7 +14,7 @@ jobs: # You can define any steps you want, and they will run before the agent starts. # If you do not check out your code, Copilot will do this for you. steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Build solution # a full build is too slow; also do not fail on errors, continue so that diff --git a/.github/workflows/deployment-tests.yml b/.github/workflows/deployment-tests.yml index 0e51d0c4abd..70b418b3633 100644 --- a/.github/workflows/deployment-tests.yml +++ b/.github/workflows/deployment-tests.yml @@ -63,7 +63,7 @@ jobs: outputs: matrix: ${{ steps.enumerate.outputs.all_tests }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./.github/actions/enumerate-tests id: enumerate @@ -83,7 +83,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Setup .NET uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4.3.1 @@ -146,7 +146,7 @@ jobs: ASPIRE_DEPLOYMENT_TEST_RG_PREFIX: ${{ vars.ASPIRE_DEPLOYMENT_TEST_RG_PREFIX || 'aspire-e2e' }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Setup .NET uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4.3.1 @@ -282,7 +282,7 @@ jobs: permissions: issues: write steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Create GitHub Issue uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1 diff --git a/.github/workflows/generate-api-diffs.yml b/.github/workflows/generate-api-diffs.yml index 9d07b5ecb12..5214f1af134 100644 --- a/.github/workflows/generate-api-diffs.yml +++ b/.github/workflows/generate-api-diffs.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest if: ${{ github.repository_owner == 'microsoft' }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Restore and build run: | diff --git a/.github/workflows/generate-ats-diffs.yml b/.github/workflows/generate-ats-diffs.yml index ba41b7eace0..87b0ac7e545 100644 --- a/.github/workflows/generate-ats-diffs.yml +++ b/.github/workflows/generate-ats-diffs.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest if: ${{ github.repository_owner == 'microsoft' }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Restore run: ./restore.sh diff --git a/.github/workflows/locker.yml b/.github/workflows/locker.yml index fdc01ddbd2f..0170f13db1c 100644 --- a/.github/workflows/locker.yml +++ b/.github/workflows/locker.yml @@ -23,7 +23,7 @@ jobs: if: ${{ github.repository_owner == 'microsoft' }} steps: - name: Checkout Actions - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: repository: "microsoft/vscode-github-triage-actions" path: ./actions diff --git a/.github/workflows/markdownlint.yml b/.github/workflows/markdownlint.yml index baa26b83b15..62105094ac8 100644 --- a/.github/workflows/markdownlint.yml +++ b/.github/workflows/markdownlint.yml @@ -15,7 +15,7 @@ jobs: if: ${{ github.repository_owner == 'microsoft' }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Use Node.js uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0 with: diff --git a/.github/workflows/polyglot-validation.yml b/.github/workflows/polyglot-validation.yml index 40c06de6e0a..004296b8f3f 100644 --- a/.github/workflows/polyglot-validation.yml +++ b/.github/workflows/polyglot-validation.yml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Download CLI archive uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 @@ -71,7 +71,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Download CLI archive uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 @@ -125,7 +125,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Download CLI archive uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 @@ -181,7 +181,7 @@ jobs: continue-on-error: true steps: - name: Checkout code - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Download CLI archive uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 @@ -235,7 +235,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Download CLI archive uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 diff --git a/.github/workflows/pr-docs-hook.yml b/.github/workflows/pr-docs-hook.yml index d13e21bf4f8..2a68c4c6ccb 100644 --- a/.github/workflows/pr-docs-hook.yml +++ b/.github/workflows/pr-docs-hook.yml @@ -25,7 +25,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 diff --git a/.github/workflows/refresh-manifests.yml b/.github/workflows/refresh-manifests.yml index 621f5b389d3..5373d218b9c 100644 --- a/.github/workflows/refresh-manifests.yml +++ b/.github/workflows/refresh-manifests.yml @@ -14,7 +14,7 @@ jobs: runs-on: windows-latest # Using Windows because the script uses PowerShell and build.cmd if: ${{ github.repository_owner == 'microsoft' }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Setup .NET SDK uses: actions/setup-dotnet@v4 diff --git a/.github/workflows/release-github-tasks.yml b/.github/workflows/release-github-tasks.yml index 7c84cae0033..5a6a26c7357 100644 --- a/.github/workflows/release-github-tasks.yml +++ b/.github/workflows/release-github-tasks.yml @@ -147,7 +147,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 @@ -209,7 +209,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Check if Release Exists id: check-release @@ -314,7 +314,7 @@ jobs: private-key: ${{ secrets.ASPIRE_BOT_PRIVATE_KEY }} - name: Checkout Repository - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 @@ -395,7 +395,7 @@ jobs: private-key: ${{ secrets.ASPIRE_BOT_PRIVATE_KEY }} - name: Checkout Repository - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: ref: main fetch-depth: 1 diff --git a/.github/workflows/reproduce-flaky-tests.yml b/.github/workflows/reproduce-flaky-tests.yml index 1a76fba0338..3bec91f6bb5 100644 --- a/.github/workflows/reproduce-flaky-tests.yml +++ b/.github/workflows/reproduce-flaky-tests.yml @@ -140,7 +140,7 @@ jobs: echo "${{ github.workspace }}\.dotnet" >> $env:GITHUB_PATH - name: Checkout code - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Trust HTTPS development certificate (Linux) if: runner.os == 'Linux' diff --git a/.github/workflows/run-tests.yml b/.github/workflows/run-tests.yml index 62ad4c43211..1dd92946e0c 100644 --- a/.github/workflows/run-tests.yml +++ b/.github/workflows/run-tests.yml @@ -97,7 +97,7 @@ jobs: echo ${{ github.workspace }}\.dotnet >> $env:GITHUB_PATH - name: Checkout code - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Set up .NET Core uses: actions/setup-dotnet@v4 diff --git a/.github/workflows/specialized-test-runner.yml b/.github/workflows/specialized-test-runner.yml index 0e01c55c8bb..44f2b4f001e 100644 --- a/.github/workflows/specialized-test-runner.yml +++ b/.github/workflows/specialized-test-runner.yml @@ -40,7 +40,7 @@ jobs: requiresNugets: ${{ steps.check_nugets.outputs.requiresNugets }} requiresCliArchive: ${{ steps.check_cli_archive.outputs.requiresCliArchive }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Identify relevant test projects run: ./eng/scripts/generate-specialized-test-projects-list.sh ${{ inputs.attributeName }} ${{ github.workspace }}/artifacts/BeforeBuildProps.props @@ -143,7 +143,7 @@ jobs: name: Final Results needs: [generate_tests_matrix, build_packages, build_cli_archives, run_tests] steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 # Check if there were no tests to run - name: Check if tests were run diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index b2295116337..a4986fa0caf 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -20,7 +20,7 @@ jobs: tests_matrix_requires_nugets_macos: ${{ steps.split_matrix.outputs.tests_matrix_requires_nugets_macos }} tests_matrix_requires_cli_archive: ${{ steps.split_matrix.outputs.tests_matrix_requires_cli_archive }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./.github/actions/enumerate-tests id: generate_tests_matrix @@ -197,7 +197,7 @@ jobs: working-directory: ./extension steps: - name: Checkout code - uses: actions/checkout@v2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Setup Node.js environment uses: actions/setup-node@v2 with: @@ -240,7 +240,7 @@ jobs: ] steps: - name: Checkout code - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 with: diff --git a/.github/workflows/typescript-sdk-tests.yml b/.github/workflows/typescript-sdk-tests.yml index dc5852f9545..6d8ba30a937 100644 --- a/.github/workflows/typescript-sdk-tests.yml +++ b/.github/workflows/typescript-sdk-tests.yml @@ -18,7 +18,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Setup Node.js uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 diff --git a/.github/workflows/update-ai-foundry-models.yml b/.github/workflows/update-ai-foundry-models.yml index 12b245a171a..567d7ef0125 100644 --- a/.github/workflows/update-ai-foundry-models.yml +++ b/.github/workflows/update-ai-foundry-models.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest if: ${{ github.repository_owner == 'microsoft' }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Generate updated Microsoft Foundry model descriptors working-directory: src/Aspire.Hosting.Foundry/tools diff --git a/.github/workflows/update-dependencies.yml b/.github/workflows/update-dependencies.yml index d19b4931d1b..6b6495d279b 100644 --- a/.github/workflows/update-dependencies.yml +++ b/.github/workflows/update-dependencies.yml @@ -15,7 +15,7 @@ jobs: runs-on: ubuntu-latest if: ${{ github.repository_owner == 'microsoft' }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Restore solution run: ./build.sh -restore diff --git a/.github/workflows/update-github-models.yml b/.github/workflows/update-github-models.yml index 43aafc9b013..2f6574b7d18 100644 --- a/.github/workflows/update-github-models.yml +++ b/.github/workflows/update-github-models.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest if: ${{ github.repository_owner == 'microsoft' }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Generate updated Github model descriptors working-directory: src/Aspire.Hosting.GitHub.Models/tools From a42d5611f30048e556768776320f8a8266b48442 Mon Sep 17 00:00:00 2001 From: Ankit Jain Date: Tue, 24 Mar 2026 16:19:51 -0400 Subject: [PATCH 2/5] Update workflow action pins to latest released versions Update actions/setup-dotnet, actions/setup-node, and actions/upload-artifact to their latest released SHA-pinned versions. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .github/workflows/apply-test-attributes.yml | 2 +- .github/workflows/build-cli-native-archives.yml | 6 +++--- .github/workflows/build-packages.yml | 4 ++-- .github/workflows/copilot-setup-steps.yml | 4 ++-- .github/workflows/deployment-tests.yml | 10 +++++----- .github/workflows/markdownlint.yml | 2 +- .github/workflows/pr-docs-hook.yml | 2 +- .github/workflows/refresh-manifests.yml | 2 +- .github/workflows/run-tests.yml | 6 +++--- .github/workflows/specialized-test-runner.yml | 2 +- .github/workflows/tests.yml | 6 +++--- .github/workflows/typescript-sdk-tests.yml | 2 +- 12 files changed, 24 insertions(+), 24 deletions(-) diff --git a/.github/workflows/apply-test-attributes.yml b/.github/workflows/apply-test-attributes.yml index ec33c806d09..2b2d45d75a0 100644 --- a/.github/workflows/apply-test-attributes.yml +++ b/.github/workflows/apply-test-attributes.yml @@ -374,7 +374,7 @@ jobs: - name: Setup .NET if: success() - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0 with: global-json-file: global.json diff --git a/.github/workflows/build-cli-native-archives.yml b/.github/workflows/build-cli-native-archives.yml index 1843425b6d2..d6467691f57 100644 --- a/.github/workflows/build-cli-native-archives.yml +++ b/.github/workflows/build-cli-native-archives.yml @@ -71,7 +71,7 @@ jobs: # Upload DCP + Dashboard NuGets so test/polyglot jobs can download them - name: Upload RID-specific NuGets - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: built-nugets-for-${{ matrix.targets.rids }} path: | @@ -146,7 +146,7 @@ jobs: - name: Upload CLI archives if: success() - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: cli-native-archives-${{ matrix.targets.rids }} path: artifacts/packages/**/aspire-cli* @@ -155,7 +155,7 @@ jobs: - name: Upload logs if: always() - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: cli-native-logs-${{ matrix.targets.rids }} path: artifacts/log/** diff --git a/.github/workflows/build-packages.yml b/.github/workflows/build-packages.yml index 08589031fd4..cee838ba1c8 100644 --- a/.github/workflows/build-packages.yml +++ b/.github/workflows/build-packages.yml @@ -24,7 +24,7 @@ jobs: rm -rf artifacts/obj - name: Upload built NuGets - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: built-nugets path: artifacts/packages @@ -34,7 +34,7 @@ jobs: # Always upload logs, even if the build fails, to enable debugging - name: Upload logs if: always() - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: build_packages_logs path: artifacts/log diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml index 9b2cf00c13c..49137510c1e 100644 --- a/.github/workflows/copilot-setup-steps.yml +++ b/.github/workflows/copilot-setup-steps.yml @@ -32,7 +32,7 @@ jobs: # For MCP servers like nuget's - name: Install .NET 10.x - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0 with: dotnet-version: | 10.x @@ -40,7 +40,7 @@ jobs: # for MCP servers - name: Install .NET 8.x - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0 with: dotnet-version: | 8.x diff --git a/.github/workflows/deployment-tests.yml b/.github/workflows/deployment-tests.yml index 70b418b3633..a0c54d375d3 100644 --- a/.github/workflows/deployment-tests.yml +++ b/.github/workflows/deployment-tests.yml @@ -86,7 +86,7 @@ jobs: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Setup .NET - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4.3.1 + uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0 with: global-json-file: global.json @@ -122,7 +122,7 @@ jobs: echo "Package count: $(find "$ARTIFACT_DIR/packages" -name "*.nupkg" | wc -l)" - name: Upload CLI artifacts - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: aspire-cli-artifacts path: ${{ github.workspace }}/cli-artifacts/ @@ -149,7 +149,7 @@ jobs: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Setup .NET - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4.3.1 + uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0 with: global-json-file: global.json @@ -250,7 +250,7 @@ jobs: - name: Upload test results if: always() - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: deployment-test-results-${{ matrix.shortname }} path: | @@ -259,7 +259,7 @@ jobs: - name: Upload recordings if: always() - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: deployment-test-recordings-${{ matrix.shortname }} path: | diff --git a/.github/workflows/markdownlint.yml b/.github/workflows/markdownlint.yml index 62105094ac8..80e0adc2aa0 100644 --- a/.github/workflows/markdownlint.yml +++ b/.github/workflows/markdownlint.yml @@ -17,7 +17,7 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Use Node.js - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0 + uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: node-version: 20.x - name: Run Markdownlint diff --git a/.github/workflows/pr-docs-hook.yml b/.github/workflows/pr-docs-hook.yml index 2a68c4c6ccb..acaf3131874 100644 --- a/.github/workflows/pr-docs-hook.yml +++ b/.github/workflows/pr-docs-hook.yml @@ -30,7 +30,7 @@ jobs: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: node-version: '24' diff --git a/.github/workflows/refresh-manifests.yml b/.github/workflows/refresh-manifests.yml index 5373d218b9c..fa10c66dd91 100644 --- a/.github/workflows/refresh-manifests.yml +++ b/.github/workflows/refresh-manifests.yml @@ -17,7 +17,7 @@ jobs: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Setup .NET SDK - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0 with: global-json-file: global.json diff --git a/.github/workflows/run-tests.yml b/.github/workflows/run-tests.yml index 1dd92946e0c..b56ae47944a 100644 --- a/.github/workflows/run-tests.yml +++ b/.github/workflows/run-tests.yml @@ -100,7 +100,7 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Set up .NET Core - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0 # Used for running tests outside the repo if: ${{ inputs.requiresNugets }} with: @@ -527,7 +527,7 @@ jobs: - name: Upload logs, and test results id: upload-logs if: always() - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: logs-${{ inputs.testShortName }}-${{ inputs.os }} path: | @@ -549,7 +549,7 @@ jobs: - name: Upload CLI E2E recordings if: always() - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: cli-e2e-recordings-${{ inputs.testShortName }} path: cli-e2e-recordings/*.cast diff --git a/.github/workflows/specialized-test-runner.yml b/.github/workflows/specialized-test-runner.yml index 44f2b4f001e..0e52f8aa458 100644 --- a/.github/workflows/specialized-test-runner.yml +++ b/.github/workflows/specialized-test-runner.yml @@ -96,7 +96,7 @@ jobs: - name: Upload logs, and test results if: ${{ always() }} - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: logs-runsheet path: | diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index a4986fa0caf..88d92fee16f 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -199,7 +199,7 @@ jobs: - name: Checkout code uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Setup Node.js environment - uses: actions/setup-node@v2 + uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: node-version: '20.x' - name: Install dependencies @@ -209,7 +209,7 @@ jobs: - name: Package VSIX run: npm exec @vscode/vsce -- package --pre-release -o out/aspire-extension.vsix - name: Upload VSIX - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: aspire-extension path: extension/out/aspire-extension.vsix @@ -262,7 +262,7 @@ jobs: - name: Upload test results if: always() - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: All-TestResults path: ${{ github.workspace }}/testresults/**/*.trx diff --git a/.github/workflows/typescript-sdk-tests.yml b/.github/workflows/typescript-sdk-tests.yml index 6d8ba30a937..9263bc1aef2 100644 --- a/.github/workflows/typescript-sdk-tests.yml +++ b/.github/workflows/typescript-sdk-tests.yml @@ -21,7 +21,7 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Setup Node.js - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 + uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: node-version: '22' From 52adcd2b36c4f81128ff0e5f85886d038c6a27a2 Mon Sep 17 00:00:00 2001 From: Ankit Jain Date: Tue, 24 Mar 2026 16:28:15 -0400 Subject: [PATCH 3/5] Update remaining workflow action pins Update the remaining actions/setup-dotnet and actions/upload-artifact pins in .github/actions/enumerate-tests/action.yml to the latest released SHA-pinned versions used elsewhere in the repo. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .github/actions/enumerate-tests/action.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/actions/enumerate-tests/action.yml b/.github/actions/enumerate-tests/action.yml index c5486587665..ed12d1c444e 100644 --- a/.github/actions/enumerate-tests/action.yml +++ b/.github/actions/enumerate-tests/action.yml @@ -34,7 +34,7 @@ runs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Set up .NET Core - uses: actions/setup-dotnet@3951f0dfe7a07e2313ec93c75700083e2005cbab # v4.3.0 + uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0 with: global-json-file: ${{ github.workspace }}/global.json @@ -73,7 +73,7 @@ runs: - name: Upload logs if: always() - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: logs-enumerate-tests-${{ runner.os }} path: | From 50c1ee8b1d01debd2e14db3750fbd463a966dae4 Mon Sep 17 00:00:00 2001 From: Ankit Jain Date: Tue, 24 Mar 2026 16:48:19 -0400 Subject: [PATCH 4/5] Update download-artifact workflow pins Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .github/workflows/deployment-tests.yml | 2 +- .github/workflows/polyglot-validation.yml | 30 +++++++++---------- .github/workflows/run-tests.yml | 4 +-- .github/workflows/specialized-test-runner.yml | 2 +- .github/workflows/tests.yml | 6 ++-- 5 files changed, 22 insertions(+), 22 deletions(-) diff --git a/.github/workflows/deployment-tests.yml b/.github/workflows/deployment-tests.yml index a0c54d375d3..d2dbf1d5329 100644 --- a/.github/workflows/deployment-tests.yml +++ b/.github/workflows/deployment-tests.yml @@ -161,7 +161,7 @@ jobs: SkipNativeBuild: true - name: Download CLI artifacts - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: aspire-cli-artifacts path: ${{ github.workspace }}/cli-artifacts diff --git a/.github/workflows/polyglot-validation.yml b/.github/workflows/polyglot-validation.yml index 004296b8f3f..7eef05a9106 100644 --- a/.github/workflows/polyglot-validation.yml +++ b/.github/workflows/polyglot-validation.yml @@ -20,19 +20,19 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Download CLI archive - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: cli-native-archives-linux-x64 path: ${{ github.workspace }}/artifacts/cli-archive - name: Download NuGet packages - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: built-nugets path: ${{ github.workspace }}/artifacts/nugets - name: Download RID-specific NuGet packages - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: built-nugets-for-linux-x64 path: ${{ github.workspace }}/artifacts/nugets-rid @@ -74,19 +74,19 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Download CLI archive - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: cli-native-archives-linux-x64 path: ${{ github.workspace }}/artifacts/cli-archive - name: Download NuGet packages - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: built-nugets path: ${{ github.workspace }}/artifacts/nugets - name: Download RID-specific NuGet packages - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: built-nugets-for-linux-x64 path: ${{ github.workspace }}/artifacts/nugets-rid @@ -128,19 +128,19 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Download CLI archive - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: cli-native-archives-linux-x64 path: ${{ github.workspace }}/artifacts/cli-archive - name: Download NuGet packages - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: built-nugets path: ${{ github.workspace }}/artifacts/nugets - name: Download RID-specific NuGet packages - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: built-nugets-for-linux-x64 path: ${{ github.workspace }}/artifacts/nugets-rid @@ -184,19 +184,19 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Download CLI archive - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: cli-native-archives-linux-x64 path: ${{ github.workspace }}/artifacts/cli-archive - name: Download NuGet packages - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: built-nugets path: ${{ github.workspace }}/artifacts/nugets - name: Download RID-specific NuGet packages - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: built-nugets-for-linux-x64 path: ${{ github.workspace }}/artifacts/nugets-rid @@ -238,19 +238,19 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Download CLI archive - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: cli-native-archives-linux-x64 path: ${{ github.workspace }}/artifacts/cli-archive - name: Download NuGet packages - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: built-nugets path: ${{ github.workspace }}/artifacts/nugets - name: Download RID-specific NuGet packages - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: built-nugets-for-linux-x64 path: ${{ github.workspace }}/artifacts/nugets-rid diff --git a/.github/workflows/run-tests.yml b/.github/workflows/run-tests.yml index b56ae47944a..b65b0d1239d 100644 --- a/.github/workflows/run-tests.yml +++ b/.github/workflows/run-tests.yml @@ -132,7 +132,7 @@ jobs: - name: Download built nugets if: ${{ inputs.requiresNugets }} - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: pattern: built-nugets path: ${{ github.workspace }}/artifacts/packages @@ -162,7 +162,7 @@ jobs: - name: Download arch-specific nugets if: ${{ inputs.requiresNugets }} continue-on-error: true - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: built-nugets-for-${{ steps.compute_rid.outputs.rid }} path: ${{ github.workspace }}/arch-specific diff --git a/.github/workflows/specialized-test-runner.yml b/.github/workflows/specialized-test-runner.yml index 0e52f8aa458..53d99c07f5c 100644 --- a/.github/workflows/specialized-test-runner.yml +++ b/.github/workflows/specialized-test-runner.yml @@ -157,7 +157,7 @@ jobs: fi # get all the test logs artifacts into a single directory - - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 if: steps.check_tests.outputs.tests_run == 'true' with: pattern: 'logs-*' diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 88d92fee16f..d675000705d 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -242,19 +242,19 @@ jobs: - name: Checkout code uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: pattern: logs-*-ubuntu-latest merge-multiple: true path: ${{ github.workspace }}/testresults/ubuntu-latest - - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: pattern: logs-*-windows-latest merge-multiple: true path: ${{ github.workspace }}/testresults/windows-latest - - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: pattern: logs-*-macos-latest merge-multiple: true From c3f29d8d5ea646840abe29cdc3a9bd71310e92d8 Mon Sep 17 00:00:00 2001 From: Ankit Jain Date: Tue, 24 Mar 2026 17:44:36 -0400 Subject: [PATCH 5/5] Handle download-artifact path layout Support both the legacy nested artifact path and the direct extraction layout introduced by newer actions/download-artifact versions so nuget-based test jobs can find packages again. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .github/workflows/run-tests.yml | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) diff --git a/.github/workflows/run-tests.yml b/.github/workflows/run-tests.yml index b65b0d1239d..e4546fa0041 100644 --- a/.github/workflows/run-tests.yml +++ b/.github/workflows/run-tests.yml @@ -140,8 +140,18 @@ jobs: - name: Copy nugets to the correct location if: ${{ inputs.requiresNugets }} shell: pwsh - run: - Move-Item -Path "${{ github.workspace }}/artifacts/packages/built-nugets/Debug" -Destination "${{ github.workspace }}/artifacts/packages" + run: | + $packageRoot = "${{ github.workspace }}/artifacts/packages" + $nestedDebugPath = Join-Path $packageRoot "built-nugets/Debug" + $directDebugPath = Join-Path $packageRoot "Debug" + + if (Test-Path $nestedDebugPath) { + Move-Item -Path $nestedDebugPath -Destination $packageRoot + } + elseif (-not (Test-Path $directDebugPath)) { + Get-ChildItem -Path $packageRoot -Recurse | Select-Object -ExpandProperty FullName + Write-Error "Unable to find downloaded NuGet packages at '$nestedDebugPath' or '$directDebugPath'." + } - name: Compute RID for arch-specific packages if: ${{ inputs.requiresNugets }}