XS✔ ◾ Release v1.7.14 with Package Updates

.devcontainer/devcontainer.json

@@ -1,32 +1,37 @@
 {
   "$schema": "https://raw.githubusercontent.com/microsoft/vscode/main/extensions/configuration-editing/schemas/devContainer.codespaces.schema.json",
-  "name": "PR Metrics",
-  "imageContainer": {
-    "image": "mcr.microsoft.com/devcontainers/typescript-node:24"
-  },
   "customizations": {
     "vscode": {
       "extensions": [
         "christian-kohler.npm-intellisense",
         "DavidAnson.vscode-markdownlint",
         "dbaeumer.vscode-eslint",
         "EditorConfig.EditorConfig",
+        "fcrespo82.markdown-table-formatter",
         "streetsidesoftware.code-spell-checker"
       ],
       "settings": {
+        "[javascript][typescript]": {
+          "editor.defaultFormatter": "vscode.typescript-language-features"
+        },
+        "[markdown]": {
+          "editor.codeActionsOnSave": {
+            "source.fixAll.markdownlint": "explicit"
+          },
+          "editor.defaultFormatter": "fcrespo82.markdown-table-formatter",
+          "editor.formatOnSave": true
+        },
         "cSpell.caseSensitive": true,
         "cSpell.language": "en-US",
         "editor.codeActionsOnSave": {
-          "source.fixAll.eslint": true
+          "source.fixAll.eslint": "always"
         },
-        "editor.formatOnPaste": true,
         "editor.formatOnSave": true,
-        "editor.formatOnType": true,
         "editor.inlineSuggest.enabled": true,
         "editor.quickSuggestions": {
           "comments": "on",
-          "strings": "on",
-          "other": "on"
+          "other": "on",
+          "strings": "on"
         },
         "editor.renderWhitespace": "all",
         "editor.rulers": [80],
@@ -39,13 +44,53 @@
         "git.autofetch": true,
         "git.confirmSync": false,
         "git.enableSmartCommit": true,
-        "[markdown]": {
-          "editor.defaultFormatter": "DavidAnson.vscode-markdownlint"
-        },
-        "[typescript]": {
-          "editor.defaultFormatter": "dbaeumer.vscode-eslint"
+        "markdownlint.config": {
+          "MD003": {
+            "style": "atx"
+          },
+          "MD004": {
+            "style": "dash"
+          },
+          "MD009": {
+            "code_blocks": true,
+            "strict": true
+          },
+          "MD010": {
+            "spaces_per_tab": 2
+          },
+          "MD024": {
+            "siblings_only": true
+          },
+          "MD029": {
+            "style": "one"
+          },
+          "MD040": {
+            "language_only": true
+          },
+          "MD046": {
+            "style": "fenced"
+          },
+          "MD048": {
+            "style": "backtick"
+          },
+          "MD049": {
+            "style": "underscore"
+          },
+          "MD050": {
+            "style": "asterisk"
+          },
+          "MD055": {
+            "style": "leading_and_trailing"
+          },
+          "MD060": {
+            "style": "aligned"
+          }
         }
       }
     }
-  }
+  },
+  "imageContainer": {
+    "image": "mcr.microsoft.com/devcontainers/typescript-node:24"
+  },
+  "name": "PR Metrics"
 }

.github/azure-devops/template.yml

@@ -40,8 +40,6 @@ stages:
               displayName: npm – Install Dependencies
               inputs:
                 command: ci
-                customRegistry: useFeed
-                customFeed: Office
 
             - task: Npm@1
               displayName: npm – Build Release

.github/workflows/build.yml

@@ -36,7 +36,7 @@ jobs:
           token: ${{ secrets.PR_METRICS_TOKEN }}
 
       - name: Install Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24.13.0
 
@@ -87,7 +87,7 @@ jobs:
           persist-credentials: false
 
       - name: Install Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24.13.0
 
@@ -108,7 +108,7 @@ jobs:
         working-directory: ${{ github.workspace }}/release
 
       - name: Release – Upload
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: PRMetrics
           path: ${{ github.workspace }}/ms-omex.PRMetrics.vsix
@@ -147,15 +147,15 @@ jobs:
           persist-credentials: false
 
       - name: CodeQL – Initialize
-        uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+        uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
         with:
           build-mode: none
           config-file: .github/linters/codeql.yml
           languages: javascript-typescript
           queries: code-quality,code-scanning,security-and-quality,security-experimental,security-extended
 
       - name: CodeQL – Analyze
-        uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+        uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
         with:
           category: TypeScript
 

.github/workflows/release-initiate.yml

@@ -13,7 +13,7 @@ permissions: {}
 env:
   major: 1
   minor: 7
-  patch: 14
+  patch: 15
 
 defaults:
   run:
@@ -85,7 +85,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.PR_METRICS_TOKEN }}
 
       - name: Install Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24.13.0
 

.github/workflows/release-publish.yml

@@ -36,7 +36,7 @@ jobs:
         run: gh --version
 
       - name: Install Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24.13.0
 
@@ -68,7 +68,7 @@ jobs:
           "${{ github.workspace }}/ms-omex.PRMetrics.vsix"
 
       - name: Release – Publish
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: ms-omex.PRMetrics
           path: |

.github/workflows/support/release-publish-trigger.txt

@@ -1 +1 @@
-1.7.13
+1.7.14

.github/workflows/update-ci-dependencies.md

@@ -27,6 +27,8 @@ permissions:
   pull-requests: read
   actions: read
 
+environment: production
+
 engine: copilot
 
 tools:
@@ -83,7 +85,9 @@ Catalog every pinned version before editing. Use `grep` to locate each pattern.
 
 ### GitHub Workflows
 
-Files under `.github/workflows/*.yml`:
+Editable files in `.github/workflows/`: `build.yml`, `release-initiate.yml`,
+`release-publish.yml`. lockfiles (`*.lock.yml`) are gh-aw-generated and out
+of scope.
 
 - **SHA-Pinned Actions**: `uses: owner/repo@<40-char SHA> # vX.Y.Z`. The SHA and
   the trailing version comment must stay in sync.
@@ -145,7 +149,9 @@ but it flags and resolves inconsistencies.
 
 Locate every occurrence with `grep`:
 
-- `.github/workflows/*.yml` – `node-version: X.Y.Z` under `actions/setup-node`.
+- `.github/workflows/build.yml`, `.github/workflows/release-initiate.yml`,
+  `.github/workflows/release-publish.yml` – `node-version: X.Y.Z` under
+  `actions/setup-node`.
 - `.github/azure-devops/*.yml` – `UseNode@1` with `version: X.Y.Z`.
 - `package.json` – `engines.node`.
 - `.nvmrc` if present.
@@ -177,16 +183,19 @@ file changed most recently). Do not change the value itself.
 - **Never Hard-Pin a 1ES Template Ref Without Justification**: The `release` tag
   is intentionally moving.
 - **Never Modify Files Outside the Allowed Set**: Only
-  `.github/workflows/*.yml`, `.github/azure-devops/*.yml`, `package.json`, and
-  `.nvmrc` may be edited.
+  `.github/workflows/build.yml`, `.github/workflows/release-initiate.yml`,
+  `.github/workflows/release-publish.yml`, `.github/azure-devops/*.yml`,
+  `package.json`, and `.nvmrc` may be edited. Lockfiles (`*.lock.yml`) are
+  gh-aw-generated and must not be edited.
 
 ## Quick Reference
 
-| Dependency Type   | Files                        | Update Source          |
-| ----------------- | ---------------------------- | ---------------------- |
-| GitHub Action     | `.github/workflows/*.yml`    | `gh api` latest tag    |
-| Azure DevOps Task | `.github/azure-devops/*.yml` | ADO task reference     |
-| 1ES Template Ref  | `.github/azure-devops/*.yml` | `git ls-remote --tags` |
+- **GitHub Action**: `.github/workflows/build.yml`, `release-initiate.yml`,
+  `release-publish.yml` — update from `gh api` latest tag
+- **Azure DevOps Task**: `.github/azure-devops/*.yml` — update from ADO task
+  reference
+- **1ES Template Ref**: `.github/azure-devops/*.yml` — update from
+  `git ls-remote --tags`
 
 ## Verification
 

README.md

@@ -130,7 +130,7 @@ The default input values are expected to be appropriate for most builds.
 Therefore, the following YAML definition is recommended:
 
 ```yaml
-uses: microsoft/PR-Metrics@v1.7.13
+uses: microsoft/PR-Metrics@v1.7.14
 name: PR Metrics
 env:
   PR_METRICS_ACCESS_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -140,7 +140,7 @@ continue-on-error: true
 If you wish to modify the inputs, YAML akin the to the following can be used:
 
 ```yaml
-uses: microsoft/PR-Metrics@v1.7.13
+uses: microsoft/PR-Metrics@v1.7.14
 name: PR Metrics
 env:
   PR_METRICS_ACCESS_TOKEN: ${{ secrets.GITHUB_TOKEN }}

dist/resources.resjson

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/resjson.json",
   "loc.description": "Augments pull request titles to let reviewers quickly determine PR size and test coverage.",
   "loc.description.comment": "The description of the task.",
-  "loc.friendlyName": "PR Metrics v1.7.13",
+  "loc.friendlyName": "PR Metrics v1.7.14",
   "loc.friendlyName.comment": "The name of the task.",
   "loc.helpMarkDown": "[More information](https://aka.ms/PRMetrics/README)",
   "loc.helpMarkDown.comment": "The Markdown-formatted help text of the task.",