Replace all desktop/copilot-release-notes references with github/#4
Conversation
Update workflow files to point to github org. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
There was a problem hiding this comment.
Pull request overview
Updates GitHub Actions workflows to use the new github/copilot-release-notes repository reference (replacing desktop/copilot-release-notes) so workflows continue to function after the desktop repo is removed.
Changes:
- Switch
uses:references fromdesktop/copilot-release-notes@maintogithub/copilot-release-notes@main. - Update
actions/checkoutrepository:inputs to fetch instructions fromgithub/copilot-release-notes.
Reviewed changes
Copilot reviewed 4 out of 4 changed files in this pull request and generated 4 comments.
| File | Description |
|---|---|
| .github/workflows/test.yml | Updates the action reference used to generate release notes. |
| .github/workflows/test-custom.yml | Updates both the instructions checkout repo and the action reference. |
| .github/workflows/test-cli.yml | Updates both the instructions checkout repo and the action reference. |
| .github/workflows/test-cli-generic.yml | Updates the action reference used for generic release note generation. |
Comments suppressed due to low confidence (2)
.github/workflows/test-custom.yml:39
- The workflow pins this action to the
mainbranch. For supply-chain security and reproducibility, consider pinninggithub/copilot-release-notesto a tagged release or a full commit SHA instead of a moving branch.
uses: github/copilot-release-notes@main
.github/workflows/test-cli.yml:39
- The workflow pins this action to the
mainbranch. For supply-chain security and reproducibility, consider pinninggithub/copilot-release-notesto a tagged release or a full commit SHA instead of a moving branch.
uses: github/copilot-release-notes@main
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| - name: Generate Release Notes | ||
| id: notes | ||
| uses: desktop/copilot-release-notes@main | ||
| uses: github/copilot-release-notes@main |
There was a problem hiding this comment.
The workflow pins this action to the main branch. For supply-chain security and reproducibility, consider pinning github/copilot-release-notes to a tagged release or a full commit SHA instead of a moving branch.
| uses: github/copilot-release-notes@main | |
| uses: github/copilot-release-notes@v1.6.5 |
| repository: github/copilot-release-notes | ||
| path: _action-config | ||
| sparse-checkout: release-notes-guide.md |
There was a problem hiding this comment.
actions/checkout is pulling instruction content from the default branch of github/copilot-release-notes. To keep these tests deterministic (and reduce supply-chain risk), consider pinning the checkout to an explicit ref (tag or commit SHA).
This issue also appears on line 39 of the same file.
See below for a potential fix:
ref: v1.7.1
path: _action-config
sparse-checkout: release-notes-guide.md
- name: Generate Release Notes (Custom Instructions)
id: notes
uses: github/copilot-release-notes@v1.7.1
| repository: github/copilot-release-notes | ||
| path: _action-config | ||
| sparse-checkout: cli-release-notes-instructions.md |
There was a problem hiding this comment.
actions/checkout is pulling instruction content from the default branch of github/copilot-release-notes. To keep these tests deterministic (and reduce supply-chain risk), consider pinning the checkout to an explicit ref (tag or commit SHA).
This issue also appears on line 39 of the same file.
See below for a potential fix:
ref: v1
path: _action-config
sparse-checkout: cli-release-notes-instructions.md
- name: Generate Release Notes (CLI Style)
id: notes
uses: github/copilot-release-notes@v1
| - name: Generate Release Notes (Generic) | ||
| id: notes | ||
| uses: desktop/copilot-release-notes@main | ||
| uses: github/copilot-release-notes@main |
There was a problem hiding this comment.
The workflow pins this action to the main branch. For supply-chain security and reproducibility, consider pinning github/copilot-release-notes to a tagged release or a full commit SHA instead of a moving branch.
| uses: github/copilot-release-notes@main | |
| uses: github/copilot-release-notes@v1.0.0 |
Updates all workflow files to point to
github/copilot-release-notesinstead ofdesktop/copilot-release-notes. The desktop repo is being deleted.