chore: update action versions and package references#767
Conversation
Dependency ReviewThe following issues were found:
License Issuessrc/XtremeIdiots.Portal.Repository.Abstractions.V1/XtremeIdiots.Portal.Repository.Abstractions.V1.csproj
src/XtremeIdiots.Portal.Repository.Abstractions.V2/XtremeIdiots.Portal.Repository.Abstractions.V2.csproj
src/XtremeIdiots.Portal.Repository.Api.Client.Testing/XtremeIdiots.Portal.Repository.Api.Client.Testing.csproj
src/XtremeIdiots.Portal.Repository.Api.Client.V1/XtremeIdiots.Portal.Repository.Api.Client.V1.csproj
src/XtremeIdiots.Portal.Repository.Api.Client.V2/XtremeIdiots.Portal.Repository.Api.Client.V2.csproj
src/XtremeIdiots.Portal.Repository.Api.V1/XtremeIdiots.Portal.Repository.Api.V1.csproj
src/XtremeIdiots.Portal.Repository.Api.V2/XtremeIdiots.Portal.Repository.Api.V2.csproj
OpenSSF ScorecardScorecard details
Scanned Files
|
There was a problem hiding this comment.
Pull request overview
This pull request updates GitHub Actions workflow versions and NuGet package dependencies to ensure reproducible builds and maintain compatibility with latest features and bug fixes. The changes include pinning custom action versions to specific tags instead of main branches, updating the MX.Api package family from 2.2.40 to 2.3.25, and replacing the XtremeIdiots.CallOfDuty.DemoReader package with its renamed successor MX.CodDemoReader.
Changes:
- Pinned all custom GitHub Actions (dotnet-ci, dotnet-web-ci, terraform-plan, terraform-plan-and-apply, terraform-destroy, deploy-sql-database, deploy-app-service, publish-nuget-packages) to specific version tags across all workflow files
- Updated MX.Api packages (Abstractions, Client, Web.Extensions) from 2.2.40 to 2.3.25 across all projects
- Replaced XtremeIdiots.CallOfDuty.DemoReader 1.1.62.1 with MX.CodDemoReader 1.0.15 and updated namespace references
- Updated Azure.Storage.Blobs from 12.26.0 to 12.27.0 with corresponding API adjustments
- Updated Scalar.AspNetCore to 2.12.46 in both API hosts
Reviewed changes
Copilot reviewed 19 out of 19 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| .github/workflows/build-and-test.yml | Updated dotnet-ci and terraform-plan action versions |
| .github/workflows/deploy-dev.yml | Updated dotnet-web-ci, terraform-plan-and-apply, deploy-sql-database, and deploy-app-service action versions |
| .github/workflows/deploy-prd.yml | Updated dotnet-web-ci, terraform-plan-and-apply, deploy-sql-database, and deploy-app-service action versions |
| .github/workflows/destroy-development.yml | Updated terraform-destroy action version |
| .github/workflows/destroy-environment.yml | Updated terraform-destroy action version |
| .github/workflows/pr-verify.yml | Updated dotnet-ci, dotnet-web-ci, terraform-plan, terraform-plan-and-apply, deploy-sql-database, and deploy-app-service action versions |
| .github/workflows/release-publish-nuget.yml | Updated publish-nuget-packages action version |
| .github/workflows/release-version-and-tag.yml | Updated dotnet-ci action version |
| .github/workflows/update-dashboard-from-staging.yml | Updated terraform-plan action version |
| src/XtremeIdiots.Portal.Repository.Abstractions.V1/XtremeIdiots.Portal.Repository.Abstractions.V1.csproj | Updated MX.Api.Abstractions to 2.3.25 |
| src/XtremeIdiots.Portal.Repository.Abstractions.V2/XtremeIdiots.Portal.Repository.Abstractions.V2.csproj | Updated MX.Api.Abstractions to 2.3.25 |
| src/XtremeIdiots.Portal.Repository.Api.Client.Testing/XtremeIdiots.Portal.Repository.Api.Client.Testing.csproj | Updated MX.Api.Abstractions to 2.3.25 |
| src/XtremeIdiots.Portal.Repository.Api.Client.V1/XtremeIdiots.Portal.Repository.Api.Client.V1.csproj | Updated MX.Api.Client and MX.Api.Abstractions to 2.3.25 |
| src/XtremeIdiots.Portal.Repository.Api.Client.V2/XtremeIdiots.Portal.Repository.Api.Client.V2.csproj | Updated MX.Api.Client and MX.Api.Abstractions to 2.3.25 |
| src/XtremeIdiots.Portal.Repository.Api.V1/XtremeIdiots.Portal.Repository.Api.V1.csproj | Updated Azure.Storage.Blobs, MX.Api packages, Scalar.AspNetCore, and replaced XtremeIdiots.CallOfDuty.DemoReader with MX.CodDemoReader |
| src/XtremeIdiots.Portal.Repository.Api.V2/XtremeIdiots.Portal.Repository.Api.V2.csproj | Updated Azure.Storage.Blobs, MX.Api packages, Scalar.AspNetCore, and replaced XtremeIdiots.CallOfDuty.DemoReader with MX.CodDemoReader |
| src/XtremeIdiots.Portal.Repository.Api.V1/Controllers/V1/DataMaintenanceController.cs | Added explicit prefix: null parameter to GetBlobsAsync calls for Azure.Storage.Blobs 12.27.0 compatibility |
| src/XtremeIdiots.Portal.Repository.Api.V1/Controllers/V1/DemosController.cs | Updated namespace from XtremeIdiots.CallOfDuty.DemoReader.Models to MX.CodDemoReader.Models |
| src/XtremeIdiots.Portal.Repository.Api.V1/Extensions/GameTypeExtensions.cs | Updated namespace from XtremeIdiots.CallOfDuty.DemoReader.Models to MX.CodDemoReader.Models |
🏗️ Terraform Plan
✅ Validate — Passed ✅ Plan
Full Plan OutputNo changes. Your infrastructure matches the configuration.
Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed. |
|



This pull request updates the versions of several GitHub Actions used in the CI/CD workflow files and bumps the
MX.Api.AbstractionsNuGet package to a newer version across multiple projects. These changes aim to keep the build, deployment, and infrastructure automation up-to-date and compatible with the latest features and bug fixes.Workflow and CI/CD automation updates:
dotnet-ci,dotnet-web-ci,terraform-plan,terraform-plan-and-apply,terraform-destroy,deploy-sql-database,deploy-app-service, andpublish-nuget-packages) to reference specific, newer version tags instead ofmainor previous versions in all workflow YAML files. This ensures reproducible builds and deployments by locking to known-good action versions. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16] [17] [18] [19] [20] [21] [22] [23] [24] [25] [26] [27] [28] [29] [30] [31]Dependency updates:
MX.Api.AbstractionsNuGet package from version2.2.40to2.3.25in the following projects to take advantage of the latest features and fixes:XtremeIdiots.Portal.Repository.Abstractions.V1.csprojXtremeIdiots.Portal.Repository.Abstractions.V2.csprojXtremeIdiots.Portal.Repository.Api.Client.Testing.csproj