XS✔ ◾ Release v1.7.5: Licenses update

[muiriswoulfe]

Summary

This pull request updates the GitHub Actions workflows for the release process to improve security and consistency. The most significant changes include standardizing the use of a fine-grained personal access token (PAT) and refining permissions for better access control.

Updates to token usage:

• .github/workflows/release-phase-1.yml: Updated the token used for checkout to secrets.RELEASE_CHECKOUT for consistency across workflows.
• .github/workflows/release-phase-2.yml: Added a token parameter to the checkout step, using secrets.RELEASE_CHECKOUT with detailed permissions for better security.

Refinements to permissions:

• .github/workflows/release-phase-2.yml: Changed permissions from contents: write to pull-requests: write to align with the specific requirements of the workflow.

Minor adjustments:

• .github/workflows/release-phase-2.yml: Removed the "v" prefix when writing the version to the GitHub output in the Get Version step for consistency.

Testing

Test Types

• Unit tests
• Manual tests

Unit Test Coverage

100%

[Copilot]

Pull Request Overview

This pull request updates the license information and GitHub Actions workflow configurations for version 1.7.5. The primary purpose is to update dependency licenses following package version changes and standardize token usage across release workflows.

Key changes include:

• Updates to numerous package versions and their corresponding license entries in LICENSE.txt
• Standardization of GitHub Actions token usage across release workflows
• Minor workflow permission and output format adjustments

Reviewed Changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File	Description
src/LICENSE.txt	Updates license entries for multiple npm packages, reflecting version bumps and dependency changes
.github/workflows/release-phase-1.yml	Standardizes token reference to use RELEASE_CHECKOUT secret
.github/workflows/release-phase-2.yml	Adds token configuration, updates permissions, and removes "v" prefix from version output

[github-actions]

PR Metrics

✔ Thanks for keeping your pull request small.
✔ Thanks for adding tests.

	Lines
Product Code	-
Test Code	-
Subtotal	-
Ignored Code	160
Total	160

Metrics computed by PR Metrics. Add it to your Azure DevOps and GitHub PRs!