Skip to content

fix: scope sed to Identity element when bumping VSIX version#337

Merged
cx-luis-ventuzelos merged 1 commit into
mainfrom
fix/vsix-manifest-sed-pattern
Jun 12, 2026
Merged

fix: scope sed to Identity element when bumping VSIX version#337
cx-luis-ventuzelos merged 1 commit into
mainfrom
fix/vsix-manifest-sed-pattern

Conversation

@cx-luis-ventuzelos

@cx-luis-ventuzelos cx-luis-ventuzelos commented Jun 12, 2026

Copy link
Copy Markdown
Contributor

Summary

  • The broad sed pattern introduced in Replace third-party VSIX action and use GITHUB_TOKEN #335 was replacing all Version="..." attributes in the manifest, including the required PackageManifest Version="2.0.0"
  • This caused VSSDK1061: 'PackageManifest' element requires a Version equal to '2.0.0' build failure
  • Scoped the pattern to only match the Identity element's Version attribute

Root cause

s/Version="[^"]*"/Version="$version"/ matches every Version= in the file. The manifest has several:

  • PackageManifest Version="2.0.0" ← must stay fixed
  • Identity ... Version="x.x" ← this is the one to bump
  • InstallationTarget Version="[17.0, 18.0)" ← must stay fixed

Broad pattern was replacing all Version attributes in the manifest,
including the required PackageManifest Version="2.0.0", causing
VSSDK1061 build error. Scoped to Identity element only.
@stepsecurity-app

Copy link
Copy Markdown
Contributor

Security Policy Alert: Actions Policy Violation

This workflow run has been blocked by StepSecurity's actions policy.

Disallowed Actions:

  • darenm/setup-vstest@3a16d909a1f3bbc65b52f8270d475d905e7d3e44

To fix this issue, please modify the workflow to use only allowed actions. Contact your organization administrator to request changes to the allowed actions list if needed.

For more information, see StepSecurity's Actions Policy documentation.

@stepsecurity-app

Copy link
Copy Markdown
Contributor

Security Policy Alert: Actions Policy Violation

This workflow run has been blocked by StepSecurity's actions policy.

Disallowed Actions:

  • timonvs/pr-labeler-action@f9c084306ce8b3f488a8f3ee1ccedc6da131d1af

To fix this issue, please modify the workflow to use only allowed actions. Contact your organization administrator to request changes to the allowed actions list if needed.

For more information, see StepSecurity's Actions Policy documentation.

@cx-luis-ventuzelos cx-luis-ventuzelos merged commit 669499b into main Jun 12, 2026
5 of 7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant