Skip to content

Pin Kiota API surface actions to full commit SHA - #3216

Merged
Gavin Barron (gavinbarron) merged 1 commit into
mainfrom
gavinbarron-pin-dotnet-api-actions
Oct 30, 2026
Merged

Gavin Barron (gavinbarron) merged 1 commit into
mainfrom
gavinbarron-pin-dotnet-api-actions

Conversation

@gavinbarron

@gavinbarron Gavin Barron (gavinbarron) commented Oct 30, 2026 •

Copy link
Copy Markdown
Member

Changes proposed in this pull request

  • Pin the Kiota DOM export diff export, tool, and comment actions in .github/workflows/validatePublicAPISurface.yml to 4bac01e28c98a4c619612403660b5f9ef4ec6f9d, confirmed as the action repository's current main head.
  • Preserve all existing workflow settings, inputs, conditions, and permissions; only the three action refs change.
  • Verified exact substitutions with a PowerShell comparison against the original workflow; git -c core.longpaths=true diff --check passed. Application tests were not run because no application code changed.

Other links

Microsoft Reviewers: Open in CodeFlow

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@gavinbarron
Gavin Barron (gavinbarron) requested a review from a team as a code owner October 30, 2026 21:25
Copilot AI balanced review requested due to automatic review settings October 30, 2026 21:25

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No active review issues are reported for the change pinning the Kiota actions to an immutable commit.

No open issues 🎉

What changed in this PR

Pins the Kiota actions used for public API surface validation to an immutable commit, preventing unexpected changes from a moving main reference.

Changes:

  • Pins the export, tool, and comment actions to 4bac01e28c98a4c619612403660b5f9ef4ec6f9d.
  • Preserves existing workflow inputs, conditions, and permissions; no application code changes.
File Description
.github/​workflows/​validatePublicAPISurface.yml Replaces three Kiota action main references with a full commit SHA.

Review effort: Balanced

@gavinbarron
Gavin Barron (gavinbarron) merged commit 9a4c90c into main Oct 30, 2026
7 checks passed
@gavinbarron
Gavin Barron (gavinbarron) deleted the gavinbarron-pin-dotnet-api-actions branch October 30, 2026 22:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants