🩹[Patch]: Configure Dependabot and rename Auto-Release to Release-GHRepository #106

MariusStorhaug · 2026-01-22T18:19:13Z

🩹 [Patch]: Rename Auto-Release to Release-GHRepository

This PR updates the workflow to use the renamed release action.

Changed

Update Release.yml workflow to use PSModule/Release-GHRepository@v2 instead of the deprecated PSModule/Auto-Release@v1.9.5
Configure Dependabot for daily schedule with 7-day cooldown

Summary

The PSModule/Auto-Release action has been renamed to PSModule/Release-GHRepository. This change updates the workflow configuration to reference the new action name and version.

Copilot

Pull request overview

This PR aims to configure Dependabot to check for updates daily while implementing a 7-day cooldown period. However, the PR includes several changes beyond what's described in the title and description.

Changes:

Modified .github/dependabot.yml to use daily scheduling and attempted to add a cooldown configuration
Updated GitHub Actions to pinned versions with commit hashes (actions/checkout, super-linter/super-linter, PSModule/Auto-Release)
Deleted .github/release.yml file that configures automated release notes

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
`.github/dependabot.yml`	Changed schedule from weekly to daily and added cooldown configuration (invalid option)
`.github/workflows/Linter.yml`	Updated actions/checkout to v6.0.2 and super-linter to v8.3.2 with commit hash pinning
`.github/workflows/Auto-Release.yml`	Updated actions/checkout to v6.0.2 and PSModule/Auto-Release to v1.9.5 with commit hash pinning
`.github/workflows/Action-Test-outputs.yml`	Updated actions/checkout to v6.0.2 with commit hash pinning
`.github/workflows/Action-Test-Src-WithManifest.yml`	Updated actions/checkout to v6.0.2 with commit hash pinning
`.github/workflows/Action-Test-Src-Default.yml`	Updated actions/checkout to v6.0.2 with commit hash pinning
`.github/release.yml`	Deleted release notes configuration file (not mentioned in PR description)

Comments suppressed due to low confidence (1)

.github/release.yml:1

The deletion of the .github/release.yml file is not mentioned in the PR description, which only references changes to .github/dependabot.yml. This file configures automatically generated release notes for GitHub releases. Its removal will affect how release notes are generated and categorized (breaking changes, new features, etc.). If this deletion is intentional, it should be documented in the PR description. If it's accidental, the file should be restored.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-01-22T18:21:22Z

.github/dependabot.yml

+    cooldown:
+      default-days: 7


The cooldown configuration option does not exist in GitHub's Dependabot configuration schema. According to GitHub's documentation (as of my knowledge cutoff in January 2025), Dependabot supports options like schedule, open-pull-requests-limit, target-branch, reviewers, assignees, labels, milestone, versioning-strategy, commit-message, rebase-strategy, ignore, allow, insecure-external-code-execution, registries, and groups, but not cooldown. This configuration will likely be ignored or cause Dependabot to fail validation. If you want to delay updates, you should use the schedule option with interval: weekly or use the ignore option with update-types to skip certain updates temporarily.

Suggested change

cooldown:

default-days: 7

Copilot · 2026-01-22T18:21:23Z

.github/workflows/Linter.yml

    steps:
      - name: Checkout repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2


The updates to GitHub Actions (actions/checkout, super-linter/super-linter, PSModule/Auto-Release) are not mentioned in the PR description. The PR description states only changes to the Dependabot configuration schedule and cooldown settings. These action updates appear to be actual dependency updates that should either be in a separate PR or explicitly mentioned in the description if they're part of demonstrating the new Dependabot configuration.

- Created a new GitHub Actions workflow (`Release.yml`) to automate the release process on pull request events. - Added a main script (`main.ps1`) to handle module name resolution and test path setup. - Introduced configuration files for module and source code tests. - Implemented test scripts for module and source code, including validation for module imports and manifest checks. - Updated test configuration to enable detailed output and code coverage. - Removed obsolete `SourceCode.Configuration.ps1` file from tests.

action.yml

      run: |
        # Get test paths
-        ${{ github.action_path }}/scripts/main.ps1
+        ${{ github.action_path }}/src/main.ps1


In general, to fix this class of problem in GitHub Actions, you assign the expression (${{ ... }}) to an environment variable in env: and then reference that variable using the shell’s native syntax inside the run: block. This prevents accidental interpretation of expression output as shell code and aligns with GitHub’s secure usage guidance.

Here, we should define an environment variable (for example ACTION_PATH) set to ${{ github.action_path }} in the Get test paths step, and then change the PowerShell script so it uses $env:ACTION_PATH instead of interpolating ${{ github.action_path }} directly. Concretely, in action.yml around line 276–282, add an ACTION_PATH entry under env: and modify the run: script line from ${{ github.action_path }}/src/main.ps1 to $env:ACTION_PATH/src/main.ps1. No other behavior changes: it still points to the same path; we just route the value through an environment variable and access it with PowerShell syntax.

Copilot

Pull request overview

Copilot reviewed 9 out of 16 changed files in this pull request and generated no new comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot

Pull request overview

Copilot reviewed 10 out of 17 changed files in this pull request and generated 1 comment.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-01-25T21:08:33Z

action.yml

      run: |
        # Get test paths
-        ${{ github.action_path }}/scripts/main.ps1
+        ${{ github.action_path }}/src/main.ps1



The PR description focuses on workflow pinning/Dependabot/release config, but this PR also adds a new action entrypoint script (src/main.ps1) and a new Pester test suite/config under src/tests/**. Please update the PR description (or split the PR) so reviewers understand the additional functional changes to the action.

Copilot

Pull request overview

Copilot reviewed 10 out of 17 changed files in this pull request and generated 1 comment.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-01-25T21:52:04Z

.github/workflows/Release.yml

+name: Release
+
+run-name: "Release - [${{ github.event.pull_request.title }} #${{ github.event.pull_request.number }}] by @${{ github.actor }}"
+
+on:


PR description focuses on Dependabot + renaming the release action, but this PR also adds a new internal test harness under src/ and removes .github/release.yml / .github/linters/.jscpd.json. Please update the PR description to reflect these additional changes (or split them) so reviewers know what's being shipped.

Configure Dependabot for daily schedule with 7-day cooldown

4f65a03

MariusStorhaug requested a review from a team as a code owner January 22, 2026 18:19

Copilot AI review requested due to automatic review settings January 22, 2026 18:19

Copilot started reviewing on behalf of MariusStorhaug January 22, 2026 18:19 View session

Copilot AI reviewed Jan 22, 2026

View reviewed changes

MariusStorhaug changed the title ~~🩹 Configure Dependabot for daily schedule with 7-day cooldown~~ 🩹[Patch] Configure Dependabot for daily schedule with 7-day cooldown Jan 22, 2026

MariusStorhaug changed the title ~~🩹[Patch] Configure Dependabot for daily schedule with 7-day cooldown~~ 🩹[Patch]: Configure Dependabot for daily schedule with 7-day cooldown Jan 22, 2026

MariusStorhaug added the Patch label Jan 22, 2026

🩹 [Patch]: Update action dependencies to specific versions for stability

4fc5705

MariusStorhaug changed the title ~~🩹[Patch]: Configure Dependabot for daily schedule with 7-day cooldown~~ 🩹 [Patch] Configure Dependabot for daily schedule with 7-day cooldown Jan 22, 2026

MariusStorhaug changed the title ~~🩹 [Patch] Configure Dependabot for daily schedule with 7-day cooldown~~ 🩹[Patch]: Configure Dependabot for daily schedule with 7-day cooldown Jan 22, 2026

MariusStorhaug self-assigned this Jan 22, 2026

Copilot AI review requested due to automatic review settings January 25, 2026 20:32

Copilot started reviewing on behalf of MariusStorhaug January 25, 2026 20:33 View session

github-advanced-security bot found potential problems Jan 25, 2026

View reviewed changes

Copilot AI reviewed Jan 25, 2026

View reviewed changes

fix: Add persist-credentials: false to checkout actions

f093fb0

MariusStorhaug changed the title ~~🩹[Patch]: Configure Dependabot for daily schedule with 7-day cooldown~~ 🩹 [Patch]: Standardize workflows with SHA pinning and daily Dependabot Jan 25, 2026

Disable JSCPD linter and remove configuration file

b005a9a

Copilot AI review requested due to automatic review settings January 25, 2026 21:01

Copilot started reviewing on behalf of MariusStorhaug January 25, 2026 21:02 View session

Copilot AI reviewed Jan 25, 2026

View reviewed changes

Rename Auto-Release to Release-GHRepository

e9a6a49

MariusStorhaug changed the title ~~🩹 [Patch]: Standardize workflows with SHA pinning and daily Dependabot~~ 🩹[Patch]: Configure Dependabot and rename Auto-Release to Release-GHRepository Jan 25, 2026

Fix version comment to use patch level

7d1be2f

Copilot AI review requested due to automatic review settings January 25, 2026 21:44

Copilot started reviewing on behalf of MariusStorhaug January 25, 2026 21:45 View session

Copilot AI reviewed Jan 25, 2026

View reviewed changes

@@ -276,9 +276,10 @@
                   env:
                     PSMODULE_TEST_PSMODULE_INPUT_Name: ${{ inputs.Name }}
                     PSMODULE_TEST_PSMODULE_INPUT_Settings: ${{ inputs.Settings }}
+                    ACTION_PATH: ${{ github.action_path }}
                   run: |
                     # Get test paths
-                    ${{ github.action_path }}/src/main.ps1
+                    $env:ACTION_PATH/src/main.ps1
                 - name: Invoke-Pester
                   uses: PSModule/Invoke-Pester@882994cbe1ff07c3fc8afdac52404c940f99b331 # v4.2.2

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

🩹[Patch]: Configure Dependabot and rename Auto-Release to Release-GHRepository #106

🩹[Patch]: Configure Dependabot and rename Auto-Release to Release-GHRepository #106

MariusStorhaug commented Jan 22, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Jan 22, 2026

Uh oh!

Copilot AI Jan 22, 2026

Uh oh!

Check warning

Copilot Autofix

Copilot AI left a comment

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Jan 25, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Jan 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

🩹[Patch]: Configure Dependabot and rename Auto-Release to Release-GHRepository #106

Are you sure you want to change the base?

🩹[Patch]: Configure Dependabot and rename Auto-Release to Release-GHRepository #106

Conversation

MariusStorhaug commented Jan 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🩹 [Patch]: Rename Auto-Release to Release-GHRepository

Changed

Summary

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Jan 22, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Jan 22, 2026

Choose a reason for hiding this comment

Uh oh!

Check warning

Uh oh!

Copilot Autofix

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI Jan 25, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI Jan 25, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

MariusStorhaug commented Jan 22, 2026 •

edited

Loading