Skip to content

Update workflow actions and package references to latest versions#125

Merged
frasermolyneux merged 5 commits into
mainfrom
feature/updates
Feb 21, 2026
Merged

Update workflow actions and package references to latest versions#125
frasermolyneux merged 5 commits into
mainfrom
feature/updates

Conversation

@frasermolyneux
Copy link
Copy Markdown
Owner

This pull request focuses on updating dependencies and refactoring code to support a new version of the Invision Community API client. The main changes include switching from the old XtremeIdiots.InvisionCommunity package to the new MX.InvisionCommunity.Api.Client and MX.InvisionCommunity.Api.Abstractions packages, updating related code to handle new response structures, and updating several GitHub Actions to use specific versioned tags for reliability.

Dependency and API Client Updates:

  • Replaced XtremeIdiots.InvisionCommunity with MX.InvisionCommunity.Api.Client and MX.InvisionCommunity.Api.Abstractions in both the integrations and web projects, updating all relevant using statements and package references. Also updated other related dependencies to newer versions. [1] [2] [3] [4] [5] [6] [7]

  • Refactored service registration in Startup.cs to use the new API client’s builder pattern for configuration.

Code Refactoring for New API Responses:

  • Updated all usages of the forums API client to handle the new response structure, accessing data via Result.Data instead of direct properties. This affects topic creation, downloads, health checks, and user authentication flows. [1] [2] [3] [4] [5] [6]

CI/CD Pipeline Improvements:

  • Updated GitHub Actions workflows to reference specific versioned tags of custom actions (e.g., @dotnet-web-ci/v1.4 instead of @main) for improved stability and reproducibility. This applies to build, test, deploy, and destroy workflows. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16]

These changes modernize the integration with the forums API, improve code clarity and error handling, and ensure more reliable CI/CD processes.

Copilot AI review requested due to automatic review settings February 21, 2026 11:51
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Feb 21, 2026

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 7 package(s) with unknown licenses.
See the Details below.

License Issues

src/XtremeIdiots.Portal.Integrations.Forums/XtremeIdiots.Portal.Integrations.Forums.csproj

PackageVersionLicenseIssue Type
MX.InvisionCommunity.Api.Client1.0.18NullUnknown License
XtremeIdiots.Portal.Repository.Api.Client.V12.1.135NullUnknown License

src/XtremeIdiots.Portal.Web/XtremeIdiots.Portal.Web.csproj

PackageVersionLicenseIssue Type
MX.Api.Abstractions2.3.25NullUnknown License
MX.GeoLocation.Api.Client.V11.2.2NullUnknown License
Microsoft.EntityFrameworkCore.Tools9.0.13NullUnknown License
XtremeIdiots.Portal.Integrations.Servers.Api.Client.V12.1.109NullUnknown License
XtremeIdiots.Portal.Repository.Api.Client.V12.1.135NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
actions/frasermolyneux/actions/deploy-app-service deploy-app-service/v1.2 UnknownUnknown
actions/frasermolyneux/actions/dotnet-web-ci dotnet-web-ci/v1.4 UnknownUnknown
actions/frasermolyneux/actions/terraform-plan terraform-plan/v1.4 UnknownUnknown
actions/frasermolyneux/actions/terraform-plan-and-apply terraform-plan-and-apply/v1.4 UnknownUnknown
nuget/MX.InvisionCommunity.Api.Client 1.0.18 UnknownUnknown
nuget/XtremeIdiots.Portal.Repository.Api.Client.V1 2.1.135 UnknownUnknown
nuget/MX.Api.Abstractions 2.3.25 UnknownUnknown
nuget/MX.GeoLocation.Api.Client.V1 1.2.2 UnknownUnknown
nuget/Microsoft.EntityFrameworkCore.Tools 9.0.13 🟢 6.3
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Binary-Artifacts🟢 10no binaries found in the repo
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
nuget/XtremeIdiots.Portal.Integrations.Servers.Api.Client.V1 2.1.109 UnknownUnknown
nuget/XtremeIdiots.Portal.Repository.Api.Client.V1 2.1.135 UnknownUnknown

Scanned Files

  • .github/workflows/pr-verify.yml
  • src/XtremeIdiots.Portal.Integrations.Forums/XtremeIdiots.Portal.Integrations.Forums.csproj
  • src/XtremeIdiots.Portal.Web/XtremeIdiots.Portal.Web.csproj

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the Portal web app and forums integration to use the newer MX Invision Community API client packages and adjusts code to the new Result.Data response shape, while also pinning GitHub Actions references to versioned tags for more reproducible CI/CD.

Changes:

  • Replace XtremeIdiots.InvisionCommunity with MX.InvisionCommunity.Api.* packages and update DI registration to the new builder-style configuration.
  • Refactor forums-client call sites to read data from response.Result.Data.
  • Pin custom GitHub Actions references from @main to versioned tags across build/test/deploy/destroy workflows.

Reviewed changes

Copilot reviewed 12 out of 12 changed files in this pull request and generated 2 comments.

Show a summary per file
File Description
src/XtremeIdiots.Portal.Web/XtremeIdiots.Portal.Web.csproj Bumps dependency versions (EF tools, MX/Portal API clients, GeoLocation client).
src/XtremeIdiots.Portal.Web/Startup.cs Switches Invision client registration to the new builder pattern and namespace.
src/XtremeIdiots.Portal.Web/Auth/XtremeIdiots/XtremeIdiotsAuth.cs Adapts member lookup and DTO typing to the new response/DTO model.
src/XtremeIdiots.Portal.Web/ApiControllers/HealthCheckController.cs Updates forums health check to read CommunityUrl from Result.Data.
src/XtremeIdiots.Portal.Integrations.Forums/XtremeIdiots.Portal.Integrations.Forums.csproj Replaces old InvisionCommunity package with MX.InvisionCommunity.Api.Client.
src/XtremeIdiots.Portal.Integrations.Forums/DemoManager.cs Adapts downloads call to read Result.Data.
src/XtremeIdiots.Portal.Integrations.Forums/AdminActionTopics.cs Adapts topic creation response handling to Result.Data.
.github/workflows/pr-verify.yml Pins custom actions to versioned tags for PR verification, terraform plan/apply, and deploy.
.github/workflows/destroy-environment.yml Pins terraform destroy action to a versioned tag.
.github/workflows/deploy-prd.yml Pins CI/terraform/deploy actions to versioned tags for production pipeline.
.github/workflows/deploy-dev.yml Pins CI/terraform/deploy actions to versioned tags for dev pipeline.
.github/workflows/build-and-test.yml Pins CI and terraform plan actions to versioned tags.

Comment thread src/XtremeIdiots.Portal.Web/ApiControllers/HealthCheckController.cs Outdated
Comment thread src/XtremeIdiots.Portal.Integrations.Forums/AdminActionTopics.cs
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Feb 21, 2026

Superseded — A newer run has replaced this result.
Superseded — A newer run has replaced this result.

🏗️ Terraform Plan

🌍 Environment: dev

✅ Validate — Passed

✅ Plan

No changes. Your infrastructure matches the configuration.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Feb 21, 2026

Superseded — A newer run has replaced this result.

🏗️ Terraform Plan

🌍 Environment: dev

✅ Validate — Passed

✅ Plan

No changes. Your infrastructure matches the configuration.

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 12 out of 12 changed files in this pull request and generated 3 comments.

Comment thread src/XtremeIdiots.Portal.Web/Auth/XtremeIdiots/XtremeIdiotsAuth.cs Outdated
Comment thread src/XtremeIdiots.Portal.Web/Auth/XtremeIdiots/XtremeIdiotsAuth.cs Outdated
Comment thread src/XtremeIdiots.Portal.Integrations.Forums/AdminActionTopics.cs Outdated
@github-actions
Copy link
Copy Markdown
Contributor

🏗️ Terraform Plan

🌍 Environment: dev

✅ Validate — Passed

✅ Plan

No changes. Your infrastructure matches the configuration.

@sonarqubecloud
Copy link
Copy Markdown

@frasermolyneux frasermolyneux merged commit c24c40d into main Feb 21, 2026
19 checks passed
@frasermolyneux frasermolyneux deleted the feature/updates branch February 21, 2026 12:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants