ci(workflows): pin actions to full sha by DariuszPorowski · Pull Request #1598 · radius-project/docs

DariuszPorowski · 2025-11-19T15:51:11Z

Thank you for helping make the Radius documentation better!

Please follow this checklist before submitting:

Read the contribution guide
Commands include options for Linux, MacOS, and Windows within codetabs
New file and folder names are globally unique
Page references use shortcodes instead of markdown or URL links
Images use HTML style and have alternative text
Places where multiple code/command options are given have codetabs

In addition, please fill out the following to help reviewers understand this pull request:

Description

ci(workflows): pin actions to full sha
ci(dependabot): add configuration for GitHub Actions updates
fix: explicitly mask token
chore: add schema for language server
style: basic lint

Issue reference

fixes: radius-project/radius#10779

Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com>

* ci(workflows): pin actions to full sha Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * ci(dependabot): add configuration for GitHub Actions updates Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * ci(workflows): ensure deployment skips when secrets are missing Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * fix(workflows): correct syntax for Azure DevOps token retrieval step Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> --------- Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com>

* ci(workflows): pin actions to full sha (#1598) * ci(workflows): pin actions to full sha Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * ci(dependabot): add configuration for GitHub Actions updates Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * ci(workflows): ensure deployment skips when secrets are missing Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * fix(workflows): correct syntax for Azure DevOps token retrieval step Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> --------- Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * fix: broken links (#1607) Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * ci(workflows): enhance permissions for jobs (#1627) Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> --------- Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> Co-authored-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com>

* ci(workflows): pin actions to full sha (radius-project#1598) * ci(workflows): pin actions to full sha Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * ci(dependabot): add configuration for GitHub Actions updates Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * ci(workflows): ensure deployment skips when secrets are missing Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * fix(workflows): correct syntax for Azure DevOps token retrieval step Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> --------- Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * fix: broken links (radius-project#1607) Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * ci(workflows): enhance permissions for jobs (radius-project#1627) Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> --------- Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> Co-authored-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com>

* Update docs for v0.53.0 * update ACI deployment prereqs to add requirement for role on the subscription (#1595) * update ACI deployment prereqs to add requirement for role on the subscription Signed-off-by: Will Tsai <28876888+willtsai@users.noreply.github.com> * minor fix Signed-off-by: Will Tsai <28876888+willtsai@users.noreply.github.com> --------- Signed-off-by: Will Tsai <28876888+willtsai@users.noreply.github.com> * Down-Merge for SHA fix in actions (#1634) * ci(workflows): pin actions to full sha (#1598) * ci(workflows): pin actions to full sha Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * ci(dependabot): add configuration for GitHub Actions updates Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * ci(workflows): ensure deployment skips when secrets are missing Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * fix(workflows): correct syntax for Azure DevOps token retrieval step Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> --------- Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * fix: broken links (#1607) Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * ci(workflows): enhance permissions for jobs (#1627) Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> --------- Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> Co-authored-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * ci(deps): bump the all group with 5 updates (#1635) Bumps the all group with 5 updates: | Package | From | To | | --- | --- | --- | | [actions/stale](https://github.com/actions/stale) | `10.1.0` | `10.1.1` | | [actions/checkout](https://github.com/actions/checkout) | `6.0.0` | `6.0.1` | | [Azure/static-web-apps-deploy](https://github.com/azure/static-web-apps-deploy) | `4d27395796ac319302594769cfe812bd207490b1` | `1a947af9992250f3bc2e68ad0754c0b0c11566c9` | | [rojopolis/spellcheck-github-actions](https://github.com/rojopolis/spellcheck-github-actions) | `0.54.0` | `0.55.0` | | [actions/setup-node](https://github.com/actions/setup-node) | `6.0.0` | `6.1.0` | Updates `actions/stale` from 10.1.0 to 10.1.1 - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](actions/stale@5f858e3...9971854) Updates `actions/checkout` from 6.0.0 to 6.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@1af3b93...8e8c483) Updates `Azure/static-web-apps-deploy` from 4d27395796ac319302594769cfe812bd207490b1 to 1a947af9992250f3bc2e68ad0754c0b0c11566c9 - [Release notes](https://github.com/azure/static-web-apps-deploy/releases) - [Commits](Azure/static-web-apps-deploy@4d27395...1a947af) Updates `rojopolis/spellcheck-github-actions` from 0.54.0 to 0.55.0 - [Release notes](https://github.com/rojopolis/spellcheck-github-actions/releases) - [Changelog](https://github.com/rojopolis/spellcheck-github-actions/blob/master/CHANGELOG.md) - [Commits](rojopolis/spellcheck-github-actions@6f2326b...16d0338) Updates `actions/setup-node` from 6.0.0 to 6.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@2028fbc...395ad32) --- updated-dependencies: - dependency-name: actions/stale dependency-version: 10.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: actions/checkout dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: Azure/static-web-apps-deploy dependency-version: 1a947af9992250f3bc2e68ad0754c0b0c11566c9 dependency-type: direct:production dependency-group: all - dependency-name: rojopolis/spellcheck-github-actions dependency-version: 0.55.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: actions/setup-node dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Revert "ci(deps): bump the all group with 5 updates (#1635)" (#1641) This reverts commit 96761da. Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * ci(dependabot): specify target branch (#1640) (#1642) Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> Co-authored-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> --------- Signed-off-by: Will Tsai <28876888+willtsai@users.noreply.github.com> Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Radius CI Bot <radiuscoreteam@service.microsoft.com> Co-authored-by: Will <28876888+willtsai@users.noreply.github.com> Co-authored-by: Yetkin Timocin <ytimocin@microsoft.com> Co-authored-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci(workflows): pin actions to full sha Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * ci(dependabot): add configuration for GitHub Actions updates Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * ci(workflows): ensure deployment skips when secrets are missing Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> * fix(workflows): correct syntax for Azure DevOps token retrieval step Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> --------- Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> Signed-off-by: Radoslav Gatev <RadoslavGatev@users.noreply.github.com>

DariuszPorowski requested review from a team as code owners November 19, 2025 15:51

DariuszPorowski temporarily deployed to edge November 19, 2025 15:51 — with GitHub Actions Inactive

DariuszPorowski temporarily deployed to edge November 19, 2025 16:46 — with GitHub Actions Inactive

DariuszPorowski temporarily deployed to edge November 19, 2025 16:47 — with GitHub Actions Inactive

DariuszPorowski added 3 commits November 19, 2025 15:37

ci(workflows): pin actions to full sha

8ebb94b

Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com>

ci(dependabot): add configuration for GitHub Actions updates

1e7bd26

Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com>

ci(workflows): ensure deployment skips when secrets are missing

376bbf5

Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com>

DariuszPorowski force-pushed the dp/gh-pin-sha branch from 014cad1 to 376bbf5 Compare November 19, 2025 23:37

DariuszPorowski temporarily deployed to edge November 19, 2025 23:38 — with GitHub Actions Inactive

fix(workflows): correct syntax for Azure DevOps token retrieval step

b5ad4c1

Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com>

DariuszPorowski temporarily deployed to edge November 20, 2025 00:26 — with GitHub Actions Inactive

DariuszPorowski temporarily deployed to edge November 20, 2025 00:27 — with GitHub Actions Inactive

willdavsmith approved these changes Nov 21, 2025

View reviewed changes

willtsai approved these changes Nov 21, 2025

View reviewed changes

willtsai merged commit 6dccc74 into radius-project:edge Nov 21, 2025
11 checks passed

willtsai temporarily deployed to edge November 21, 2025 23:03 — with GitHub Actions Inactive

DariuszPorowski deleted the dp/gh-pin-sha branch November 21, 2025 23:07

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

ci(workflows): pin actions to full sha#1598

ci(workflows): pin actions to full sha#1598
willtsai merged 4 commits intoradius-project:edgefrom
DariuszPorowski:dp/gh-pin-sha

DariuszPorowski commented Nov 19, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

DariuszPorowski commented Nov 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Issue reference

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

DariuszPorowski commented Nov 19, 2025 •

edited

Loading