Skip to content

ci: Pin public API validation actions to full commit SHA (#2697) #1113

ci: Pin public API validation actions to full commit SHA (#2697)

ci: Pin public API validation actions to full commit SHA (#2697) #1113

name: Validate Public API surface changes
on:
workflow_dispatch:
push:
pull_request:
branches: [ 'main' ]
paths:
- 'src/**/generated/**'
permissions:
contents: read
pull-requests: write
issues: write
jobs:
validate-public-api-surface:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
- uses: microsoftgraph/kiota-dom-export-diff-tool/export@4bac01e28c98a4c619612403660b5f9ef4ec6f9d
id: generatePatch
- uses: microsoftgraph/kiota-dom-export-diff-tool/tool@4bac01e28c98a4c619612403660b5f9ef4ec6f9d
if: ${{ steps.generatePatch.outputs.patchFilePath != '' }}
with:
path: ${{ steps.generatePatch.outputs.patchFilePath }}
fail-on-removal: true
id: diff
- uses: microsoftgraph/kiota-dom-export-diff-tool/comment@4bac01e28c98a4c619612403660b5f9ef4ec6f9d
if: ${{ always() && steps.generatePatch.outputs.patchFilePath != '' && steps.diff.outputs.hasExplanations != '' && github.event_name == 'pull_request' }}
continue-on-error: true
with:
comment: ${{ steps.diff.outputs.explanationsFilePath }}
prNumber: ${{ github.event.pull_request.number }}
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Upload patch file as artifact
if: always()
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
continue-on-error: true
with:
name: patch
path: '*.patch'
- name: Upload explanations file as artifact
if: always()
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
continue-on-error: true
with:
name: explanations
path: 'explanations.txt'