CI/CD workflow hardening and API-shipping log clarity by arturcic · Pull Request #4881 · GitTools/GitVersion

arturcic · 2026-03-18T15:49:43Z

Summary

Improve CI/CD consistency and API-shipping observability across the workflow and automation changes in this branch.

Scope

Standardize behavior across affected GitHub Actions workflows and composite actions.
Improve consistency for checkout/auth/provenance-related pipeline paths.
Improve API shipping log readability with explicit per-target change count output.

Validation

Workflow and script changes were validated during branch development.

Issue

Resolves #4880

Copilot

Pull request overview

This PR standardizes and hardens CI/CD GitHub Actions workflows while improving the readability/observability of the Public API “mark shipped” automation output.

Changes:

Update multiple workflows/composite actions for more consistent formatting and standardized checkout/auth/credential patterns.
Improve mark-shipped.ps1 output to emit an explicit per-target change count and ignore the #nullable enable header line.
Update artifact/provenance-related composite actions (artifact restore + build provenance attestation) to newer action versions.

Reviewed changes

Copilot reviewed 25 out of 26 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
src/mark-shipped.ps1	Adds per-target API change count logging and header filtering; adds a post-run “changes detected” log.
.github/workflows/public-api.yml	Switches to `gittools/cicd/checkout` + `gittools/cicd/git-commit-push` for the public API shipping workflow.
.github/workflows/mkdocs.yml	Adds `workflow_dispatch` and switches to `gittools/cicd/checkout` + `gittools/cicd/git-commit-push` for docs snippet updates.
.github/workflows/winget.yml	Replaces GitHub App token generation with `gittools/cicd/github-creds` for komac submissions.
.github/workflows/homebrew.yml	Replaces GitHub App token generation with `gittools/cicd/github-creds` and targets `gittools-bot/homebrew-core`.
.github/workflows/gittools-actions.yml	Updates GitHub App credential loading step/action naming and formatting for dispatch automation.
.github/workflows/release.yml	Formatting/consistency updates to steps.
.github/workflows/new-cli.yml	Formatting/consistency updates to triggers and steps.
.github/workflows/format.yml	Formatting/consistency updates to triggers and steps.
.github/workflows/docs.yml	Formatting/consistency updates across jobs/steps.
.github/workflows/codeql-analysis.yml	Formatting/consistency updates to steps and ordering.
.github/workflows/_prepare.yml	Formatting/consistency updates to matrix and steps.
.github/workflows/_build.yml	Formatting/consistency updates to matrix and steps.
.github/workflows/_unit_tests.yml	Formatting/consistency updates to steps.
.github/workflows/_publish.yml	Formatting/consistency updates to steps and env blocks.
.github/workflows/_docker.yml	Formatting/consistency updates to steps and conditions.
.github/workflows/_docker_manifests.yml	Formatting/consistency updates to steps and conditions.
.github/workflows/_artifacts_windows.yml	Formatting/consistency updates to steps.
.github/workflows/_artifacts_linux.yml	Formatting/consistency updates to steps and retry command indentation.
.github/actions/cache-restore/action.yml	Formatting/consistency updates to composite action steps.
.github/actions/artifacts-restore/action.yml	Updates artifact download action version and normalizes step formatting.
.github/actions/artifacts-attest/action.yml	Updates provenance attestation action version and normalizes step formatting.
.github/actions/docker-setup/action.yml	Fixes composite action indentation/formatting.
.github/actions/docker-test/action.yml	Normalizes composite action indentation/formatting.
.github/actions/docker-publish/action.yml	Normalizes composite action indentation/formatting.
.github/actions/docker-manifests/action.yml	Normalizes composite action indentation/formatting.

.github/workflows/public-api.yml

.github/workflows/mkdocs.yml

src/mark-shipped.ps1

sonarqubecloud · 2026-03-18T15:59:50Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

mergify · 2026-03-18T16:19:06Z

Thank you @arturcic for your contribution!

Updated [coverlet.collector](https://github.com/coverlet-coverage/coverlet) from 8.0.0 to 8.0.1. <details> <summary>Release notes</summary> _Sourced from [coverlet.collector's releases](https://github.com/coverlet-coverage/coverlet/releases)._ ## 8.0.1 ### Fixed - Fix [BUG] TypeInitializationException when targeting .NET Framework [#1818](coverlet-coverage/coverlet#1818) - Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true [#1827](coverlet-coverage/coverlet#1827) ### Improvements - Additional improvements needed for .NET Framework instrumentation type import [#1825](coverlet-coverage/coverlet#1825) [Diff between 8.0.0 and 8.0.1](coverlet-coverage/coverlet@v8.0.0...v8.0.1) Commits viewable in [compare view](coverlet-coverage/coverlet@v8.0.0...v8.0.1). </details> Updated [GitVersion.MsBuild](https://github.com/GitTools/GitVersion) from 6.6.0 to 6.7.0. <details> <summary>Release notes</summary> _Sourced from [GitVersion.MsBuild's releases](https://github.com/GitTools/GitVersion/releases)._ ## 6.7.0 As part of this release we had [46 commits](GitTools/GitVersion@6.6.2...6.7.0) which resulted in [3 issues](https://github.com/GitTools/GitVersion/milestone/85?closed=1) being closed. __Features__ - [__#4369__](GitTools/GitVersion#4369) [FEATURE]: Modernize YAML configuration serialization strategy by [arturcic](https://github.com/arturcic) resolved in [__!4686__](GitTools/GitVersion#4686) by [copilot-swe-agent](https://github.com/apps/copilot-swe-agent), [__!4688__](GitTools/GitVersion#4688) by [copilot-swe-agent](https://github.com/apps/copilot-swe-agent), [__!4886__](GitTools/GitVersion#4886) by [arturcic](https://github.com/arturcic) __Improvements__ - [__#4880__](GitTools/GitVersion#4880) CI/CD workflow hardening and release-process observability by [arturcic](https://github.com/arturcic) resolved in [__!4881__](GitTools/GitVersion#4881) by [arturcic](https://github.com/arturcic) - [__#4883__](GitTools/GitVersion#4883) Support nuget.org Trusted Publishing by [arturcic](https://github.com/arturcic) resolved in [__!4884__](GitTools/GitVersion#4884) by [copilot-swe-agent](https://github.com/apps/copilot-swe-agent) __Contributors__ 2 contributors made this release possible. <a href="https://github.com/arturcic"><img src="https://avatars.githubusercontent.com/u/1760506?v=4" alt="arturcic" height="32" width="32"/></a> <a href="https://github.com/apps/copilot-swe-agent"><img src="https://avatars.githubusercontent.com/in/1143301?v=4" alt="copilot-swe-agent" height="32" width="32"/></a> ### SHA256 Hashes of the release artifacts - `180fd7cf40fdfacf2c251176a4b613a444db2b40af477fd07a7c6d4d6b355dc6 - gitversion-linux-arm64-6.7.0.tar.gz` - `254d1de40ac82af4c17771f996cb6656e6f3ba0f9cd2f6e94e07d983ac79595a - gitversion-linux-musl-arm64-6.7.0.tar.gz` - `d59557ebd5fcd036387cf1c7e6fb82df7fe71b5409ec1a69fd4a0ba614ccbcb7 - gitversion-linux-musl-x64-6.7.0.tar.gz` - `e2012abfb3392a6f0ccf5f82738173c291b15bfdb2d5e9197777ec3f41b88f76 - gitversion-linux-x64-6.7.0.tar.gz` - `429108e0d51f98815b6fbf4ebba84cf53812a4c71eee67180456e8771e9f4320 - gitversion-osx-arm64-6.7.0.tar.gz` - `02f6b9ac0d70a18d8bc2c0e3eaf183377a2417ecadd5df452ab3150b4404182c - gitversion-osx-x64-6.7.0.tar.gz` - `873cdc294068cbbda43717e6384b849599d2d0db0db6f7c2592074c8f9386116 - gitversion-win-arm64-6.7.0.zip` - `55b43a1c1e1d174675ca1500410e64a0ad9904425f2329fe6b35b5368a31f629 - gitversion-win-x64-6.7.0.zip` ## 6.6.2 As part of this release we had [30 commits](GitTools/GitVersion@6.6.1...6.6.2) which resulted in [2 issues](https://github.com/GitTools/GitVersion/milestone/84?closed=1) being closed. __Improvements__ - [__#4873__](GitTools/GitVersion#4873) [ISSUE]: Improve error message for unsupported keys in /overrideconfig command line option by [denisbredikhin](https://github.com/denisbredikhin) resolved in [__!4874__](GitTools/GitVersion#4874) by [denisbredikhin](https://github.com/denisbredikhin) - [__#4877__](GitTools/GitVersion#4877) Define CI/CD publishing policy and secure token ownership boundaries by [arturcic](https://github.com/arturcic) resolved in [__!4876__](GitTools/GitVersion#4876) by [arturcic](https://github.com/arturcic) __Contributors__ 2 contributors made this release possible. <a href="https://github.com/denisbredikhin"><img src="https://avatars.githubusercontent.com/u/11455823?v=4" alt="denisbredikhin" height="32" width="32"/></a> <a href="https://github.com/arturcic"><img src="https://avatars.githubusercontent.com/u/1760506?v=4" alt="arturcic" height="32" width="32"/></a> ### SHA256 Hashes of the release artifacts - `4d0637a80cdf5b615b0b5426f4c8a670db3f44d696bb68c2935b3ab801698090 - gitversion-linux-arm64-6.6.2.tar.gz` - `11e0bd3daa1b40f63dc5f61192a41a9d59f76a2513ddefa28ec47ac65c34ee00 - gitversion-linux-musl-arm64-6.6.2.tar.gz` - `fa526a55aa10a80e53ab6e85896144e23350c7366d6307b0f353d9d2d8353e73 - gitversion-linux-musl-x64-6.6.2.tar.gz` - `1c436efca8063f936ef9144b71350e813ae1a0d6dcd8256ef85c5254ce00714c - gitversion-linux-x64-6.6.2.tar.gz` - `3c7c331999ff6a69ca4942f4dbc84a87998b5f278df509551be0160415f9e67e - gitversion-osx-arm64-6.6.2.tar.gz` - `fb4d8c16e64360e9fb7df1c507d30c5a959fc0c41e0db2bc2dbcc55808b6d24b - gitversion-osx-x64-6.6.2.tar.gz` - `d0dfba1cdec96efcf5742173aa249fcd8cd866bd0cc519539976c0eaf49556f6 - gitversion-win-arm64-6.6.2.zip` - `8013cc3422d26ef014c903554be8be6a1b835514e8064f0ec6a63ca52c7f3729 - gitversion-win-x64-6.6.2.zip` ## 6.6.1 As part of this release we had [67 commits](GitTools/GitVersion@6.6.0...6.6.1) which resulted in [2 issues](https://github.com/GitTools/GitVersion/milestone/83?closed=1) being closed. __Improvements__ - [__#4839__](GitTools/GitVersion#4839) [ISSUE]: Refactor help and version command handling by [arturcic](https://github.com/arturcic) resolved in [__!4838__](GitTools/GitVersion#4838) by [arturcic](https://github.com/arturcic) __Contributors__ 1 contributors made this release possible. <a href="https://github.com/arturcic"><img src="https://avatars.githubusercontent.com/u/1760506?v=4" alt="arturcic" height="32" width="32"/></a> ### SHA256 Hashes of the release artifacts - `abd80a77ebb3f4750255378f222076bef6884be46b07ee5bb35d84a5c2d5b6fb - gitversion-linux-arm64-6.6.1.tar.gz` - `37cf7184e9f94de20d1dfd80f5d94a20c74327cab241ba90116531559630a9df - gitversion-linux-musl-arm64-6.6.1.tar.gz` - `bdd393d9ab7a37811bc04a9b92687e99de6b5c0162be416aa6db0dbb9dae51ec - gitversion-linux-musl-x64-6.6.1.tar.gz` - `613b1247794aaf541b3060d5d5d6ef53e6b7a5779b0bf446f7549ebf935a1d38 - gitversion-linux-x64-6.6.1.tar.gz` - `2c19105a672c0da445c6998429cd6034b864b707bcd830bb5d4e9862572cc3e2 - gitversion-osx-arm64-6.6.1.tar.gz` - `ee07876b25cd5c53a4500ac94373dd07e207db64fca67201daaa4a78397aba20 - gitversion-osx-x64-6.6.1.tar.gz` - `d333202ff9c95131644a1d093c8e75fd4e29277168d3bdd72342d95c11b9ef08 - gitversion-win-arm64-6.6.1.zip` - `9a4deffb3c8ad25276577d3a6b8a69d80c3b6a0cb8f0b9c3a933fac7a2c46bbc - gitversion-win-x64-6.6.1.zip` Commits viewable in [compare view](GitTools/GitVersion@6.6.0...6.7.0). </details> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

arturcic added 5 commits March 18, 2026 16:38

build: Update GitHub Action versions for provenance and download

02431d1

style: Standardize GitHub Actions workflow formatting

30dae43

refactor: Consolidate GitHub credentials and git operations in workflows

7ba7f0e

ci: Add workflow_dispatch trigger to mkdocs.yml

841bf8d

build: Enhance mark-shipped script for public API changes

44f60b5

Copilot AI review requested due to automatic review settings March 18, 2026 15:49

arturcic mentioned this pull request Mar 18, 2026

CI/CD workflow hardening and release-process observability #4880

Closed

Copilot started reviewing on behalf of arturcic March 18, 2026 15:51 View session

Copilot AI reviewed Mar 18, 2026

View reviewed changes

.github/workflows/public-api.yml Show resolved Hide resolved

.github/workflows/mkdocs.yml Show resolved Hide resolved

.github/workflows/mkdocs.yml Show resolved Hide resolved

src/mark-shipped.ps1 Show resolved Hide resolved

arturcic force-pushed the main branch from 65c588b to 74f0b76 Compare March 18, 2026 15:56

arturcic added this to the 6.x milestone Mar 18, 2026

arturcic added the build label Mar 18, 2026

arturcic merged commit 2a1bbe4 into GitTools:main Mar 18, 2026
126 checks passed

arturcic deleted the feature/cicd-improvements branch March 18, 2026 16:19

arturcic modified the milestones: 6.x, 6.7.0 Mar 23, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

CI/CD workflow hardening and API-shipping log clarity#4881

CI/CD workflow hardening and API-shipping log clarity#4881
arturcic merged 5 commits intoGitTools:mainfrom
arturcic:feature/cicd-improvements

arturcic commented Mar 18, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

sonarqubecloud bot commented Mar 18, 2026

Uh oh!

Uh oh!

mergify bot commented Mar 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

arturcic commented Mar 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Scope

Validation

Issue

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

sonarqubecloud bot commented Mar 18, 2026

Quality Gate passed

Uh oh!

Uh oh!

mergify bot commented Mar 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

arturcic commented Mar 18, 2026 •

edited

Loading