Skip to content

OSOE-1187: Update default .NET SDK version to 8.0.318 due to CVE-2025-55315 in Lombiq.GitHub.Actions #1160

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Piedone merged 3 commits into from
Nov 2, 2025
Merged

OSOE-1187: Update default .NET SDK version to 8.0.318 due to CVE-2025-55315 in Lombiq.GitHub.Actions #1160

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
fe2110f
Submodule tools/Lombiq.GitHub.Actions updated
Piedone Nov 2, 2025
2c87350
Pointing GHA to issue branch
Piedone Nov 2, 2025
58adfda
Updating submodules to merged dev
Piedone Nov 2, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions .github/workflows/build-and-test-windows.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ jobs:
timeout-minutes: 2
steps:
- name: Remove Run Windows Build Label
uses: Lombiq/GitHub-Actions/.github/actions/add-remove-label@dev
uses: Lombiq/GitHub-Actions/.github/actions/add-remove-label@issue/OSOE-1187
with:
# The token is necessary to be able to remove the label even if the workflow is triggered by a pull request
# coming from a fork.
Expand All @@ -36,7 +36,7 @@ jobs:
github.event.label.name == 'run-windows-build' ||
(github.event.review.state == 'APPROVED' && contains(github.event.pull_request.labels.*.name, 'requires-windows-build')))
name: Build and Test Windows - root solution (larger runners)
uses: Lombiq/GitHub-Actions/.github/workflows/build-and-test-orchard-core.yml@dev
uses: Lombiq/GitHub-Actions/.github/workflows/build-and-test-orchard-core.yml@issue/OSOE-1187
with:
parent-job-name: root-solution-larger-runners
machine-types: '["warp-windows-2025-x64-8x"]'
Expand All @@ -60,7 +60,7 @@ jobs:
build-and-test-standard-runners:
if: github.ref_name == github.event.repository.default_branch
name: Build and Test Windows - root solution (standard runners)
uses: Lombiq/GitHub-Actions/.github/workflows/build-and-test-orchard-core.yml@dev
uses: Lombiq/GitHub-Actions/.github/workflows/build-and-test-orchard-core.yml@issue/OSOE-1187
with:
parent-job-name: root-solution-standard-runners
# Since dev builds are not awaited by anyone, they can run on the slower free runners.
Expand All @@ -86,7 +86,7 @@ jobs:
github.event.label.name == 'run-windows-build' ||
(github.event.review.state == 'APPROVED' && contains(github.event.pull_request.labels.*.name, 'requires-windows-build'))
name: Build and Test Windows - NuGetTest solution
uses: Lombiq/GitHub-Actions/.github/workflows/build-and-test-orchard-core.yml@dev
uses: Lombiq/GitHub-Actions/.github/workflows/build-and-test-orchard-core.yml@issue/OSOE-1187
with:
parent-job-name: nuget-solution
machine-types: '["windows-2025"]'
Expand Down Expand Up @@ -150,7 +150,7 @@ jobs:
name: Post Pull Request Checks Automation
needs: [build-and-test-larger-runners, build-and-test-nuget-test, powershell-static-code-analysis]
if: github.event.pull_request != ''
uses: Lombiq/GitHub-Actions/.github/workflows/post-pull-request-checks-automation.yml@dev
uses: Lombiq/GitHub-Actions/.github/workflows/post-pull-request-checks-automation.yml@issue/OSOE-1187
secrets:
JIRA_BASE_URL: ${{ secrets.DEFAULT_JIRA_BASE_URL }}
JIRA_USER_EMAIL: ${{ secrets.DEFAULT_JIRA_USER_EMAIL }}
Expand All @@ -164,7 +164,7 @@ jobs:
needs: [build-and-test-larger-runners, build-and-test-nuget-test, asset-lint, powershell-static-code-analysis]
steps:
- name: Remove Windows Build Warning Label
uses: Lombiq/GitHub-Actions/.github/actions/add-remove-label@dev
uses: Lombiq/GitHub-Actions/.github/actions/add-remove-label@issue/OSOE-1187
with:
# The token is necessary to be able to remove the label even if the workflow is triggered by a pull request
# coming from a fork.
Expand Down
14 changes: 7 additions & 7 deletions .github/workflows/build-and-test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ jobs:
build-and-test-larger-runners:
if: github.ref_name != github.event.repository.default_branch
name: Build and Test - root solution (larger runners)
uses: Lombiq/GitHub-Actions/.github/workflows/build-and-test-orchard-core.yml@dev
uses: Lombiq/GitHub-Actions/.github/workflows/build-and-test-orchard-core.yml@issue/OSOE-1187
with:
parent-job-name: root-solution-larger-runners
machine-types: '["warp-ubuntu-2404-x64-4x"]'
Expand All @@ -30,7 +30,7 @@ jobs:
build-and-test-standard-runners:
if: github.ref_name == github.event.repository.default_branch
name: Build and Test - root solution (standard runners)
uses: Lombiq/GitHub-Actions/.github/workflows/build-and-test-orchard-core.yml@dev
uses: Lombiq/GitHub-Actions/.github/workflows/build-and-test-orchard-core.yml@issue/OSOE-1187
with:
# Since dev builds are not awaited by anyone, they can run on the slower free runners.
parent-job-name: root-solution-standard-runners
Expand All @@ -46,7 +46,7 @@ jobs:

build-and-test-nuget-test:
name: Build and Test - NuGetTest solution
uses: Lombiq/GitHub-Actions/.github/workflows/build-and-test-orchard-core.yml@dev
uses: Lombiq/GitHub-Actions/.github/workflows/build-and-test-orchard-core.yml@issue/OSOE-1187
with:
parent-job-name: nuget-solution
build-directory: NuGetTest
Expand All @@ -58,7 +58,7 @@ jobs:

codespell:
name: Codespell
uses: Lombiq/GitHub-Actions/.github/workflows/codespell.yml@dev
uses: Lombiq/GitHub-Actions/.github/workflows/codespell.yml@issue/OSOE-1187

asset-lint:
name: Lint Assets
Expand Down Expand Up @@ -94,7 +94,7 @@ jobs:

yaml-linting:
name: YAML Linting
uses: Lombiq/GitHub-Actions/.github/workflows/yaml-lint.yml@dev
uses: Lombiq/GitHub-Actions/.github/workflows/yaml-lint.yml@issue/OSOE-1187
with:
config-file-path: tools/Lombiq.GitHub.Actions/.trunk/configs/.yamllint.yaml
search-path: .
Expand All @@ -103,7 +103,7 @@ jobs:
name: Post Pull Request Checks Automation
needs: [build-and-test-larger-runners, build-and-test-nuget-test, codespell, asset-lint, powershell-static-code-analysis]
if: github.event.pull_request != ''
uses: Lombiq/GitHub-Actions/.github/workflows/post-pull-request-checks-automation.yml@dev
uses: Lombiq/GitHub-Actions/.github/workflows/post-pull-request-checks-automation.yml@issue/OSOE-1187
secrets:
JIRA_BASE_URL: ${{ secrets.DEFAULT_JIRA_BASE_URL }}
JIRA_USER_EMAIL: ${{ secrets.DEFAULT_JIRA_USER_EMAIL }}
Expand All @@ -117,7 +117,7 @@ jobs:
needs: [build-and-test-larger-runners, build-and-test-nuget-test, powershell-static-code-analysis]
steps:
- name: Add Windows Build Warning Label
uses: Lombiq/GitHub-Actions/.github/actions/add-remove-label@dev
uses: Lombiq/GitHub-Actions/.github/actions/add-remove-label@issue/OSOE-1187
with:
# The token is necessary to be able to add the label even if the workflow is triggered by a pull request
# coming from a fork.
Expand Down
2 changes: 1 addition & 1 deletion tools/Lombiq.GitHub.Actions
Open in desktop
Submodule Lombiq.GitHub.Actions updated 11 files
+1 −1 .github/actions/setup-dotnet/action.yml
+1 −1 .github/workflows/build-and-test-dotnet.yml
+1 −1 .github/workflows/build-and-test-orchard-core.yml
+1 −1 .github/workflows/build-dotnet.yml
+1 −1 .github/workflows/deploy-orchard1-to-azure-app-service.yml
+1 −1 .github/workflows/deploy-to-azure-app-service.yml
+1 −1 .github/workflows/msbuild-and-test.yml
+1 −1 .github/workflows/publish-nuget.yml
+1 −1 .github/workflows/test-analysis-failure.yml
+1 −1 .github/workflows/validate-nuget-publish.yml
+5 −3 Readme.md