Skip to content

chore: update action versions and package references#767

Merged
frasermolyneux merged 1 commit into
mainfrom
feature/dependency-update
Feb 19, 2026
Merged

chore: update action versions and package references#767
frasermolyneux merged 1 commit into
mainfrom
feature/dependency-update

Conversation

@frasermolyneux

Copy link
Copy Markdown
Owner

This pull request updates the versions of several GitHub Actions used in the CI/CD workflow files and bumps the MX.Api.Abstractions NuGet package to a newer version across multiple projects. These changes aim to keep the build, deployment, and infrastructure automation up-to-date and compatible with the latest features and bug fixes.

Workflow and CI/CD automation updates:

Dependency updates:

  • Bumped the MX.Api.Abstractions NuGet package from version 2.2.40 to 2.3.25 in the following projects to take advantage of the latest features and fixes:
    • XtremeIdiots.Portal.Repository.Abstractions.V1.csproj
    • XtremeIdiots.Portal.Repository.Abstractions.V2.csproj
    • XtremeIdiots.Portal.Repository.Api.Client.Testing.csproj

Copilot AI review requested due to automatic review settings February 19, 2026 23:37
@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 15 package(s) with unknown licenses.
See the Details below.

License Issues

src/XtremeIdiots.Portal.Repository.Abstractions.V1/XtremeIdiots.Portal.Repository.Abstractions.V1.csproj

PackageVersionLicenseIssue Type
MX.Api.Abstractions2.3.25NullUnknown License

src/XtremeIdiots.Portal.Repository.Abstractions.V2/XtremeIdiots.Portal.Repository.Abstractions.V2.csproj

PackageVersionLicenseIssue Type
MX.Api.Abstractions2.3.25NullUnknown License

src/XtremeIdiots.Portal.Repository.Api.Client.Testing/XtremeIdiots.Portal.Repository.Api.Client.Testing.csproj

PackageVersionLicenseIssue Type
MX.Api.Abstractions2.3.25NullUnknown License

src/XtremeIdiots.Portal.Repository.Api.Client.V1/XtremeIdiots.Portal.Repository.Api.Client.V1.csproj

PackageVersionLicenseIssue Type
MX.Api.Abstractions2.3.25NullUnknown License
MX.Api.Client2.3.25NullUnknown License

src/XtremeIdiots.Portal.Repository.Api.Client.V2/XtremeIdiots.Portal.Repository.Api.Client.V2.csproj

PackageVersionLicenseIssue Type
MX.Api.Abstractions2.3.25NullUnknown License
MX.Api.Client2.3.25NullUnknown License

src/XtremeIdiots.Portal.Repository.Api.V1/XtremeIdiots.Portal.Repository.Api.V1.csproj

PackageVersionLicenseIssue Type
MX.Api.Abstractions2.3.25NullUnknown License
MX.Api.Web.Extensions2.3.25NullUnknown License
MX.CodDemoReader1.0.15NullUnknown License
Scalar.AspNetCore2.12.46NullUnknown License

src/XtremeIdiots.Portal.Repository.Api.V2/XtremeIdiots.Portal.Repository.Api.V2.csproj

PackageVersionLicenseIssue Type
MX.Api.Abstractions2.3.25NullUnknown License
MX.Api.Web.Extensions2.3.25NullUnknown License
MX.CodDemoReader1.0.15NullUnknown License
Scalar.AspNetCore2.12.46NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
actions/frasermolyneux/actions/terraform-destroy terraform-destroy/v1.1.2 UnknownUnknown
actions/frasermolyneux/actions/terraform-plan terraform-plan/v1.3.1 UnknownUnknown
nuget/MX.Api.Abstractions 2.3.25 UnknownUnknown
nuget/MX.Api.Abstractions 2.3.25 UnknownUnknown
nuget/MX.Api.Abstractions 2.3.25 UnknownUnknown
nuget/MX.Api.Abstractions 2.3.25 UnknownUnknown
nuget/MX.Api.Client 2.3.25 UnknownUnknown
nuget/MX.Api.Abstractions 2.3.25 UnknownUnknown
nuget/MX.Api.Client 2.3.25 UnknownUnknown
nuget/Azure.Storage.Blobs 12.27.0 🟢 6.9
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 9binaries present in source code
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
nuget/MX.Api.Abstractions 2.3.25 UnknownUnknown
nuget/MX.Api.Web.Extensions 2.3.25 UnknownUnknown
nuget/MX.CodDemoReader 1.0.15 UnknownUnknown
nuget/Scalar.AspNetCore 2.12.46 UnknownUnknown
nuget/Azure.Storage.Blobs 12.27.0 🟢 6.9
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 9binaries present in source code
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
nuget/MX.Api.Abstractions 2.3.25 UnknownUnknown
nuget/MX.Api.Web.Extensions 2.3.25 UnknownUnknown
nuget/MX.CodDemoReader 1.0.15 UnknownUnknown
nuget/Scalar.AspNetCore 2.12.46 UnknownUnknown

Scanned Files

  • .github/workflows/destroy-environment.yml
  • .github/workflows/update-dashboard-from-staging.yml
  • src/XtremeIdiots.Portal.Repository.Abstractions.V1/XtremeIdiots.Portal.Repository.Abstractions.V1.csproj
  • src/XtremeIdiots.Portal.Repository.Abstractions.V2/XtremeIdiots.Portal.Repository.Abstractions.V2.csproj
  • src/XtremeIdiots.Portal.Repository.Api.Client.Testing/XtremeIdiots.Portal.Repository.Api.Client.Testing.csproj
  • src/XtremeIdiots.Portal.Repository.Api.Client.V1/XtremeIdiots.Portal.Repository.Api.Client.V1.csproj
  • src/XtremeIdiots.Portal.Repository.Api.Client.V2/XtremeIdiots.Portal.Repository.Api.Client.V2.csproj
  • src/XtremeIdiots.Portal.Repository.Api.V1/XtremeIdiots.Portal.Repository.Api.V1.csproj
  • src/XtremeIdiots.Portal.Repository.Api.V2/XtremeIdiots.Portal.Repository.Api.V2.csproj

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request updates GitHub Actions workflow versions and NuGet package dependencies to ensure reproducible builds and maintain compatibility with latest features and bug fixes. The changes include pinning custom action versions to specific tags instead of main branches, updating the MX.Api package family from 2.2.40 to 2.3.25, and replacing the XtremeIdiots.CallOfDuty.DemoReader package with its renamed successor MX.CodDemoReader.

Changes:

  • Pinned all custom GitHub Actions (dotnet-ci, dotnet-web-ci, terraform-plan, terraform-plan-and-apply, terraform-destroy, deploy-sql-database, deploy-app-service, publish-nuget-packages) to specific version tags across all workflow files
  • Updated MX.Api packages (Abstractions, Client, Web.Extensions) from 2.2.40 to 2.3.25 across all projects
  • Replaced XtremeIdiots.CallOfDuty.DemoReader 1.1.62.1 with MX.CodDemoReader 1.0.15 and updated namespace references
  • Updated Azure.Storage.Blobs from 12.26.0 to 12.27.0 with corresponding API adjustments
  • Updated Scalar.AspNetCore to 2.12.46 in both API hosts

Reviewed changes

Copilot reviewed 19 out of 19 changed files in this pull request and generated no comments.

Show a summary per file
File Description
.github/workflows/build-and-test.yml Updated dotnet-ci and terraform-plan action versions
.github/workflows/deploy-dev.yml Updated dotnet-web-ci, terraform-plan-and-apply, deploy-sql-database, and deploy-app-service action versions
.github/workflows/deploy-prd.yml Updated dotnet-web-ci, terraform-plan-and-apply, deploy-sql-database, and deploy-app-service action versions
.github/workflows/destroy-development.yml Updated terraform-destroy action version
.github/workflows/destroy-environment.yml Updated terraform-destroy action version
.github/workflows/pr-verify.yml Updated dotnet-ci, dotnet-web-ci, terraform-plan, terraform-plan-and-apply, deploy-sql-database, and deploy-app-service action versions
.github/workflows/release-publish-nuget.yml Updated publish-nuget-packages action version
.github/workflows/release-version-and-tag.yml Updated dotnet-ci action version
.github/workflows/update-dashboard-from-staging.yml Updated terraform-plan action version
src/XtremeIdiots.Portal.Repository.Abstractions.V1/XtremeIdiots.Portal.Repository.Abstractions.V1.csproj Updated MX.Api.Abstractions to 2.3.25
src/XtremeIdiots.Portal.Repository.Abstractions.V2/XtremeIdiots.Portal.Repository.Abstractions.V2.csproj Updated MX.Api.Abstractions to 2.3.25
src/XtremeIdiots.Portal.Repository.Api.Client.Testing/XtremeIdiots.Portal.Repository.Api.Client.Testing.csproj Updated MX.Api.Abstractions to 2.3.25
src/XtremeIdiots.Portal.Repository.Api.Client.V1/XtremeIdiots.Portal.Repository.Api.Client.V1.csproj Updated MX.Api.Client and MX.Api.Abstractions to 2.3.25
src/XtremeIdiots.Portal.Repository.Api.Client.V2/XtremeIdiots.Portal.Repository.Api.Client.V2.csproj Updated MX.Api.Client and MX.Api.Abstractions to 2.3.25
src/XtremeIdiots.Portal.Repository.Api.V1/XtremeIdiots.Portal.Repository.Api.V1.csproj Updated Azure.Storage.Blobs, MX.Api packages, Scalar.AspNetCore, and replaced XtremeIdiots.CallOfDuty.DemoReader with MX.CodDemoReader
src/XtremeIdiots.Portal.Repository.Api.V2/XtremeIdiots.Portal.Repository.Api.V2.csproj Updated Azure.Storage.Blobs, MX.Api packages, Scalar.AspNetCore, and replaced XtremeIdiots.CallOfDuty.DemoReader with MX.CodDemoReader
src/XtremeIdiots.Portal.Repository.Api.V1/Controllers/V1/DataMaintenanceController.cs Added explicit prefix: null parameter to GetBlobsAsync calls for Azure.Storage.Blobs 12.27.0 compatibility
src/XtremeIdiots.Portal.Repository.Api.V1/Controllers/V1/DemosController.cs Updated namespace from XtremeIdiots.CallOfDuty.DemoReader.Models to MX.CodDemoReader.Models
src/XtremeIdiots.Portal.Repository.Api.V1/Extensions/GameTypeExtensions.cs Updated namespace from XtremeIdiots.CallOfDuty.DemoReader.Models to MX.CodDemoReader.Models

@github-actions

Copy link
Copy Markdown
Contributor

🏗️ Terraform Plan

🌍 Environment: dev

✅ Validate — Passed

✅ Plan

No changes. Your infrastructure matches the configuration.

Full Plan Output
No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

@sonarqubecloud

Copy link
Copy Markdown

@frasermolyneux frasermolyneux merged commit 35464f3 into main Feb 19, 2026
26 checks passed
@frasermolyneux frasermolyneux deleted the feature/dependency-update branch February 19, 2026 23:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants