chore: Update InvokeBuild to 5.14.23 and actions/checkout to v4#142
chore: Update InvokeBuild to 5.14.23 and actions/checkout to v4#142tablackburn wants to merge 1 commit into
Conversation
Phase 1 non-breaking dependency refresh from the v1.0.0 roadmap (#120): - InvokeBuild 5.8.1 -> 5.14.23 (latest) in requirements.psd1 - actions/checkout v2 -> v4 in the publish workflow Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01BxrhSpD47TSrS9hEJpDMaH
There was a problem hiding this comment.
Pull request overview
Updates internal build/CI dependencies to current, supported versions as part of Phase 1 of the v1.0.0 roadmap dependency refresh.
Changes:
- Bump
InvokeBuildbuild dependency from 5.8.1 to 5.14.23 inrequirements.psd1. - Update
actions/checkoutin the publish workflow fromv2tov4to move off deprecated Node runtimes.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| requirements.psd1 | Updates the pinned InvokeBuild version used during bootstrap/build dependency installation. |
| .github/workflows/publish.yaml | Upgrades the checkout action used by the publish job to actions/checkout@v4. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v2 | ||
| - uses: actions/checkout@v4 |
There was a problem hiding this comment.
Keeping the moving tag here for consistency: this repo's workflows reference actions by tag throughout (and test.yml delegates to the org-shared ModuleCI.yml@main, a moving ref), so SHA-pinning this one step wouldn't change the effective supply-chain posture. Repo-wide SHA pinning (ideally with Dependabot keeping the pins fresh) is worth considering as its own hardening pass alongside the org .github repo — out of scope for this dependency-refresh PR.
Generated by Claude Code
Description
requirements.psd1:InvokeBuildbuild dependency bumped 5.8.1 → 5.14.23 (latest on PSGallery, verified today).github/workflows/publish.yaml:actions/checkoutbumped v2 → v4Related Issue
Phase 1 of #120 — "Refresh non-breaking dependency versions": the
InvokeBuildandactions/checkoutitems.Motivation and Context
Both are the last remaining non-breaking dependency refreshes in Phase 1 (psake and platyPS are deferred to Phase 2 as breaking upgrades). The checkout v2 action runs on a deprecated Node runtime; v4 is the current supported line.
How Has This Been Tested?
./build.ps1 -Task Test -Bootstrap) run locally with InvokeBuild 5.14.23 installed — theIBTasks.tests.ps1file exercises the Invoke-Build task surface against the new versionChecklist
IBTasks.tests.ps1)Breaking Changes
None — repo-internal only. Consumer-facing
RequiredModulesis untouched.🤖 Generated with Claude Code
https://claude.ai/code/session_01BxrhSpD47TSrS9hEJpDMaH
Generated by Claude Code