Releases: PSModule/Process-PSModule
v5.3.13
Add documentation for skipping individual PSModule framework tests (#252)
The Test-PSModule framework runs style and standards tests against source code (e.g., enforcing one function per file, requiring CmdletBinding attributes). Users needed guidance on skipping specific tests per-file when framework rules don't apply.
Changes
- New documentation section "Skipping Individual Framework Tests" added to README
- Syntax:
#SkipTest:<TestID>:<Reason>comment at file top - Complete reference table of 10 SourceCode test IDs with descriptions
- Module test overview (import/manifest validation)
- Code example demonstrating skip usage
- Best practices and configuration cross-references
- Syntax:
Available Test IDs
| Test ID | What It Enforces |
|---|---|
NumberOfProcessors |
Use [System.Environment]::ProcessorCount not $env:NUMBER_OF_PROCESSORS |
Verbose |
Don't pass -Verbose to commands (overrides user preference) |
OutNull |
Use $null = ... not | Out-Null |
FunctionCount |
One function per file |
FunctionName |
Filename matches function name |
CmdletBinding |
All functions have [CmdletBinding()] |
ParamBlock |
All functions have param() block |
FunctionTest |
Public functions have tests |
Example
#SkipTest:FunctionCount:Contains helper functions for main function
function Get-ComplexData {
[CmdletBinding()]
param([string]$Path)
$data = Get-RawData -Path $Path
return Format-ComplexData -Data $data
}
function Get-RawData { ... }
function Format-ComplexData { ... }Based on analysis of Test-PSModule framework tests.
Original prompt
This section details on the original issue you should resolve
<issue_title>🩹 [Patch]: Add doc for how to skip framework (PSModule) tests</issue_title>
<issue_description>### Describe the changeBased on the code in PSModule/Test-PSModule, we need to recreate guidance in the readme on Process-PSModule for how users can skip individual tests from the framework, i.e. number of functions to have in a file.</issue_description>
Comments on the Issue (you are @copilot in this section)
- Fixes #251
💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.
v5.3.12
Bump actions/upload-artifact from 5.0.0 to 6.0.0 (#249)
Bumps actions/upload-artifact from 5.0.0 to 6.0.0.
Release notes
Sourced from actions/upload-artifact's releases.
v6.0.0
v6 - What's new
[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (
runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.Node.js 24
This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
What's Changed
- Upload Artifact Node 24 support by
@salmanmkcin actions/upload-artifact#719- fix: update
@actions/artifactfor Node.js 24 punycode deprecation by@salmanmkcin actions/upload-artifact#744- prepare release v6.0.0 for Node.js 24 support by
@salmanmkcin actions/upload-artifact#745Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0
Commits
b7c566aMerge pull request #745 from actions/upload-artifact-v6-releasee516bc8docs: correct description of Node.js 24 support in READMEddc45eddocs: update README to correct action name for Node.js 24 support615b319chore: release v6.0.0 for Node.js 24 support017748bMerge pull request #744 from actions/fix-storage-blob38d4c79chore: rebuild dist7d27270chore: add missing license cache files for@actions/core,@actions/io, and mi...5f643d3chore: update license files for@actions/artifact@5.0.1 dependencies1df1684chore: update package-lock.json with@actions/artifact@5.0.1b5b1a91fix: update@actions/artifactto ^5.0.0 for Node.js 24 punycode fix- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
v5.3.11
Bump actions/download-artifact from 6.0.0 to 7.0.0 (#248)
Bumps actions/download-artifact from 6.0.0 to 7.0.0.
Release notes
Sourced from actions/download-artifact's releases.
v7.0.0
v7 - What's new
[!IMPORTANT] actions/download-artifact@v7 now runs on Node.js 24 (
runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.Node.js 24
This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
What's Changed
- Update GHES guidance to include reference to Node 20 version by
@patrikpolyakin actions/download-artifact#440- Download Artifact Node24 support by
@salmanmkcin actions/download-artifact#415- fix: update
@actions/artifactto fix Node.js 24 punycode deprecation by@salmanmkcin actions/download-artifact#451- prepare release v7.0.0 for Node.js 24 support by
@salmanmkcin actions/download-artifact#452New Contributors
@patrikpolyakmade their first contribution in actions/download-artifact#440@salmanmkcmade their first contribution in actions/download-artifact#415Full Changelog: actions/download-artifact@v6.0.0...v7.0.0
Commits
37930b1Merge pull request #452 from actions/download-artifact-v7-release72582b9doc: update readme0d2ec9dchore: release v7.0.0 for Node.js 24 supportfd7ae8fMerge pull request #451 from actions/fix-storage-blobd484700chore: restore minimatch.dep.yml license file03a8080chore: remove obsolete dependency license files56fe6d9chore: update@actions/artifactlicense file to 5.0.18e3ebc4chore: update package-lock.json with@actions/artifact@5.0.11e3c4b4fix: update@actions/artifactto ^5.0.0 for Node.js 24 punycode fix458627dchore: use local@actions/artifactpackage for Node.js 24 testing- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
v5.3.10
Bump actions/checkout from 6.0.0 to 6.0.1 (#247)
Bumps actions/checkout from 6.0.0 to 6.0.1.
Release notes
Sourced from actions/checkout's releases.
v6.0.1
What's Changed
- Update all references from v5 and v4 to v6 by
@ericsciplein actions/checkout#2314- Add worktree support for persist-credentials includeIf by
@ericsciplein actions/checkout#2327- Clarify v6 README by
@ericsciplein actions/checkout#2328Full Changelog: actions/checkout@v6...v6.0.1
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
v5.3.9
Bump PSModule/GitHub-Script from 1.7.4 to 1.7.6 (#246)
Bumps PSModule/GitHub-Script from 1.7.4 to 1.7.6.
Release notes
Sourced from PSModule/GitHub-Script's releases.
v1.7.6
Bumps azure/login from v2.2.0 to v2.3.0 (#70)
Bumps azure/login from v2.2.0 to v2.3.0.
Changes
- Updated version comment to use patch-level semver (
# v2.3.0instead of# v2)- Updated PR title and description to reference semver versions
# Before uses: azure/login@1384c340ab2dda50fed2bee3041d1d87018aa5e8 # v2 After uses: azure/login@a457da9ea143d694b1b9c7c869ebb04ebe844ef5 # v2.3.0
💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.
v1.7.5
Bump super-linter/super-linter from 8.2.1 to 8.3.0 (#69)
Bumps super-linter/super-linter from 8.2.1 to 8.3.0.
... (truncated)
Commits
8b9d273Bumps azure/login from v2.2.0 to v2.3.0 (#70)413d904Bump super-linter/super-linter from 8.2.1 to 8.3.0 (#69)- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
v5.3.8
Bump super-linter/super-linter from 8.3.0 to 8.3.1 (#250)
Bumps super-linter/super-linter from 8.3.0 to 8.3.1.
Release notes
Sourced from super-linter/super-linter's releases.
v8.3.1
8.3.1 (2025-12-15)
🐛 Bugfixes
- docs: ansible-lints lints the entire dir (#7272) (b721f3c), closes #7263
- handle paths with parentheses (#7273) (d29d0d4)
- rollback to python 3.13 (#7269) (10265f1)
- trivial log message bug when file does not exist (#7268) (c6a7b38)
⬆️ Dependency updates
- bundler: bump rubocop-rails in /dependencies in the rubocop group (#7251) (d8a2032)
- java: bump com.google.googlejavaformat:google-java-format (#7270) (140a2e3)
- java: bump com.puppycrawl.tools:checkstyle (#7264) (550df3c)
- java: bump the java-gradle group across 3 directories with 3 updates (#7252) (5306a0a)
- npm: bump
@modelcontextprotocol/sdkin /dependencies (#7248) (4d59852)- npm: bump express from 5.1.0 to 5.2.1 in /dependencies (#7246) (50462d3)
- npm: bump jws from 4.0.0 to 4.0.1 in /dependencies (#7260) (cc90344)
- npm: bump next from 16.0.7 to 16.0.9 in /dependencies (#7277) (b7cedfb)
- npm: bump the npm group across 1 directory with 3 updates (#7289) (f65215e)
- npm: bump the npm group across 1 directory with 5 updates (#7271) (b4e616f)
- npm: bump the npm group across 1 directory with 7 updates (#7259) (0ab9ad4)
- npm: bump the npm group across 1 directory with 8 updates (#7266) (39e94f8)
- python: bump the pip group across 1 directory with 2 updates (#7288) (4559b6e)
- python: bump the pip group across 1 directory with 7 updates (#7265) (026d3fe)
🧰 Maintenance
Changelog
Sourced from super-linter/super-linter's changelog.
Changelog
8.3.1 (2025-12-15)
🐛 Bugfixes
- docs: ansible-lints lints the entire dir (#7272) (b721f3c), closes #7263
- handle paths with parentheses (#7273) (d29d0d4)
- rollback to python 3.13 (#7269) (10265f1)
- trivial log message bug when file does not exist (#7268) (c6a7b38)
⬆️ Dependency updates
- bundler: bump rubocop-rails in /dependencies in the rubocop group (#7251) (d8a2032)
- java: bump com.google.googlejavaformat:google-java-format (#7270) (140a2e3)
- java: bump com.puppycrawl.tools:checkstyle (#7264) (550df3c)
- java: bump the java-gradle group across 3 directories with 3 updates (#7252) (5306a0a)
- npm: bump
@modelcontextprotocol/sdkin /dependencies (#7248) (4d59852)- npm: bump express from 5.1.0 to 5.2.1 in /dependencies (
v5.3.7
Update dependencies and doc cleanup (#245)
This release updates workflow dependencies to their latest versions and standardizes table formatting across documentation files.
Workflow Dependency Updates:
- Updated actions in various workflows to their latest versions:
super-linter/super-linterfrom 8.2.1 to 8.3.0PSModule/Document-PSModulefrom 1.0.11 to 1.0.12PSModule/Install-PSModuleHelpersfrom 1.0.5 to 1.0.6PSModule/Test-PSModulefrom 3.0.6 to 3.0.7
Documentation and Table Formatting Improvements:
- Standardized markdown table column alignment and spacing in multiple documentation files.
- Added a style configuration for markdown tables (MD060) in
.github/linters/.markdown-lint.ymlto enforce leading column style and avoid emoji width issues.
v5.3.6
Use commit SHA with version comments for all workflow action references (#239)
Standardize all GitHub Actions workflow references to use commit SHAs with version comments instead of mutable tags, ensuring deterministic builds and supply chain security.
Changes
- GitHub Actions: Updated
actions/checkout,actions/download-artifact,actions/upload-artifact,actions/upload-pages-artifact,actions/configure-pages,actions/deploy-pagesto SHA references - PSModule Actions: Updated all PSModule actions (
Auto-Release,Document-PSModule,GitHub-Script,Build-PSModule,Install-PSModuleHelpers,Get-PesterCodeCoverage,Get-PesterTestResults,Invoke-ScriptAnalyzer,Test-PSModule,Invoke-Pester,Publish-PSModule) to SHA references - 13 workflow files updated in
.github/workflows/
Format
# Before
uses: actions/checkout@v6
# After
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0Dependabot supports SHA references for automated update PRs.
Original prompt
This section details on the original issue you should resolve
<issue_title>🩹 [Patch]: Use commit SHA with specific version comments for all workflow action references</issue_title>
<issue_description>### Describe the changeStandardize all GitHub Actions workflow references in this repository so that every action uses a commit SHA, with a comment specifying the most specific version tag (e.g.,
# v1.2.3).Why:
- Ensures deterministic builds and protects against unexpected updates or supply chain attacks.
- Improves maintainability and readability by documenting the exact version in use.
Examples:
✅ Correct:- name: Checkout Code uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v1.2.3 with: persist-credentials: false❌ Incorrect:
- name: Checkout Code uses: actions/checkout@v1Scope of change:
- Update all workflow files in
.github/workflows/*. ymlto reference actions by SHA with a version comment, instead of by tag.- Use the most specific version tag in comments (e.g.,
v1.2.3instead ofv1).- Affected actions may include but are not limited to:
actions/checkout,actions/download-artifact,actions/upload-artifact,actions/configure-pages,actions/deploy-pages, custom PSModule actions, etc.- Ensure CI and linting checks do not break.
- Document changes in affected files.
Security Note:
Dependabot is configured to notify and create PRs when upstream actions/workflows update. Dependabot supports SHA references, so using them does not reduce security or update capabilities.Acceptance:
- All workflows use commit SHA with a version comment specifying the most specific tag
- No workflows reference actions by tag (e.g.,
@v1)- All CI/CD checks pass
- Documentation is updated as needed</issue_description>
Comments on the Issue (you are @copilot in this section)
- Fixes #238
✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.
v5.3.5
Bump actions/checkout from 5 to 6 (#237)
Bumps actions/checkout from 5 to 6.
Release notes
Sourced from actions/checkout's releases.
v6.0.0
What's Changed
- Update README to include Node.js 24 support details and requirements by
@salmanmkcin actions/checkout#2248- Persist creds to a separate file by
@ericsciplein actions/checkout#2286- v6-beta by
@ericsciplein actions/checkout#2298- update readme/changelog for v6 by
@ericsciplein actions/checkout#2311Full Changelog: actions/checkout@v5.0.0...v6.0.0
v6-beta
What's Changed
Updated persist-credentials to store the credentials under
$RUNNER_TEMPinstead of directly in the local git config.This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.
v5.0.1
What's Changed
- Port v6 cleanup to v5 by
@ericsciplein actions/checkout#2301Full Changelog: actions/checkout@v5...v5.0.1
Changelog
Sourced from actions/checkout's changelog.
Changelog
V6.0.0
- Persist creds to a separate file by
@ericsciplein actions/checkout#2286- Update README to include Node.js 24 support details and requirements by
@salmanmkcin actions/checkout#2248V5.0.1
- Port v6 cleanup to v5 by
@ericsciplein actions/checkout#2301V5.0.0
- Update actions checkout to use node 24 by
@salmanmkcin actions/checkout#2226V4.3.1
- Port v6 cleanup to v4 by
@ericsciplein actions/checkout#2305V4.3.0
- docs: update README.md by
@motssin actions/checkout#1971- Add internal repos for checking out multiple repositories by
@mouismailin actions/checkout#1977- Documentation update - add recommended permissions to Readme by
@benwellsin actions/checkout#2043- Adjust positioning of user email note and permissions heading by
@joshmgrossin actions/checkout#2044- Update README.md by
@nebuk89in actions/checkout#2194- Update CODEOWNERS for actions by
@TingluoHuangin actions/checkout#2224- Update package dependencies by
@salmanmkcin actions/checkout#2236v4.2.2
url-helper.tsnow leverages well-known environment variables by@jww3in actions/checkout#1941- Expand unit test coverage for
isGhesby@jww3in actions/checkout#1946v4.2.1
- Check out other refs/* by commit if provided, fall back to ref by
@orhantoyin actions/checkout#1924v4.2.0
- Add Ref and Commit outputs by
@lucacomein actions/checkout#1180- Dependency updates by
@dependabot- actions/checkout#1777, actions/checkout#1872v4.1.7
- Bump the minor-npm-dependencies group across 1 directory with 4 updates by
@dependabotin actions/checkout#1739- Bump actions/checkout from 3 to 4 by
@dependabotin actions/checkout#1697- Check out other refs/* by commit by
@orhantoyin actions/checkout#1774- Pin actions/checkout's own workflows to a known, good, stable version. by
@jww3in actions/checkout#1776v4.1.6
- Check platform to set archive extension appropriately by
@cory-millerin actions/checkout#1732v4.1.5
- Update NPM dependencies by
@cory-millerin actions/checkout#1703- Bump github/codeql-action from 2 to 3 by
@dependabotin actions/checkout#1694- Bump actions/setup-node from 1 to 4 by
@dependabotin actions/checkout#1696- Bump actions/upload-artifact from 2 to 4 by
@dependabotin actions/checkout#1695
... (truncated)
Commits
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-...
v5.3.4
Bump actions/download-artifact from 5 to 6 (#236)
Bumps actions/download-artifact from 5 to 6.
Release notes
Sourced from actions/download-artifact's releases.
v6.0.0
What's Changed
BREAKING CHANGE: this update supports Node
v24.x. This is not a breaking change per-se but we're treating it as such.
- Update README for download-artifact v5 changes by
@yacaovsncin actions/download-artifact#417- Update README with artifact extraction details by
@yacaovsncin actions/download-artifact#424- Readme: spell out the first use of GHES by
@danwkennedyin actions/download-artifact#431- Bump
@actions/artifacttov4.0.0- Prepare
v6.0.0by@danwkennedyin actions/download-artifact#438New Contributors
@danwkennedymade their first contribution in actions/download-artifact#431Full Changelog: actions/download-artifact@v5...v6.0.0
Commits
018cc2cMerge pull request #438 from actions/danwkennedy/prepare-6.0.0815651cRevert "Removegithub.dep.yml"bb3a066Removegithub.dep.ymlfa1ce46Preparev6.0.04a24838Merge pull request #431 from danwkennedy/patch-15e3251cReadme: spell out the first use of GHESabefc31Merge pull request #424 from actions/yacaovsnc/update_readmeac43a60Update README with artifact extraction detailsde96f46Merge pull request #417 from actions/yacaovsnc/update_readme7993cb4Remove migration guide for artifact download changes- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)