From e5cf55d3ce291f90d815674ec9e3fb05a42e3e9f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jo=C3=A3o=20Ferreira?= <joao.manuel.ferreira@outsystems.com>
Date: Fri, 26 Jun 2026 11:48:17 +0100
Subject: [PATCH 1/7] ROU-12855: Update node version

---
 .github/workflows/create-n-deploy-docs.yaml      | 10 ++++++++++
 .github/workflows/create-n-deploy-npm.yaml       |  4 ++--
 .github/workflows/template-pre-release.yaml      | 10 ++++++++++
 .github/workflows/template-release.yaml          |  5 +++++
 .github/workflows/template-ts-build-project.yaml |  5 +++++
 5 files changed, 32 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/create-n-deploy-docs.yaml b/.github/workflows/create-n-deploy-docs.yaml
index 5c22904d3c..66ed841fe6 100644
--- a/.github/workflows/create-n-deploy-docs.yaml
+++ b/.github/workflows/create-n-deploy-docs.yaml
@@ -42,6 +42,11 @@ jobs:
               with:
                   ref: ${{ inputs.branch-name }}
 
+            - name: 📦 Setup Node
+              uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+              with:
+                  node-version: 24
+
             - name: 🕸️ Install project dependencies
               if: ${{ inputs.run-lint == true }}
               run: npm install
@@ -120,6 +125,11 @@ jobs:
                   ref: deploy-docs
                   token: ${{ steps.get-github-token.outputs.az-keyvault-value }}
 
+            - name: 📦 Setup Node
+              uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+              with:
+                  node-version: 24
+
             - name: 🕸️ Install project dependencies
               run: npm install
 
diff --git a/.github/workflows/create-n-deploy-npm.yaml b/.github/workflows/create-n-deploy-npm.yaml
index 46c75990eb..4246e03a82 100644
--- a/.github/workflows/create-n-deploy-npm.yaml
+++ b/.github/workflows/create-n-deploy-npm.yaml
@@ -189,10 +189,10 @@ jobs:
                   ref: deploy-npm
                   token: ${{ steps.get-github-token.outputs.az-keyvault-value }}
 
-            - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+            - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
               name: 📦 Setup Node
               with:
-                  node-version: 20
+                  node-version: 24
                   registry-url: https://registry.npmjs.org/
 
             - name: 🔄 Ensure Latest npm
diff --git a/.github/workflows/template-pre-release.yaml b/.github/workflows/template-pre-release.yaml
index 36222f5d43..943d178568 100644
--- a/.github/workflows/template-pre-release.yaml
+++ b/.github/workflows/template-pre-release.yaml
@@ -81,6 +81,11 @@ jobs:
               with:
                   ref: dev
 
+            - name: 📦 Setup Node
+              uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+              with:
+                  node-version: 24
+
             - name: 📦 Install project dependencies
               run: npm install
 
@@ -319,6 +324,11 @@ jobs:
               env:
                   GITHUB_TOKEN: ${{ steps.get-github-token.outputs.az-keyvault-value }}
 
+            - name: 📦 Setup Node
+              uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+              with:
+                  node-version: 24
+
             - name: 🕸️ Install project dependencies
               run: npm install
 
diff --git a/.github/workflows/template-release.yaml b/.github/workflows/template-release.yaml
index 433d6a8c31..c746e3cc93 100644
--- a/.github/workflows/template-release.yaml
+++ b/.github/workflows/template-release.yaml
@@ -65,6 +65,11 @@ jobs:
               with:
                   ref: rc${{ inputs.new-version }}
 
+            - name: 📦 Setup Node
+              uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+              with:
+                  node-version: 24
+
             - name: 🕸️ Install project dependencies
               run: npm install
 
diff --git a/.github/workflows/template-ts-build-project.yaml b/.github/workflows/template-ts-build-project.yaml
index 3b0ab4dfbb..23e47d3b70 100644
--- a/.github/workflows/template-ts-build-project.yaml
+++ b/.github/workflows/template-ts-build-project.yaml
@@ -93,6 +93,11 @@ jobs:
               with:
                   key-name: o11odc-github-sonarcloud-token-prd
 
+            - name: 📦 Setup Node
+              uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+              with:
+                  node-version: 24
+
             - name: 🕸️ Install dependencies
               run: npm install
 

From fcd436648fad978d0ec5e786b51c3c7120b40ff5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jo=C3=A3o=20Ferreira?= <joao.manuel.ferreira@outsystems.com>
Date: Fri, 26 Jun 2026 12:04:19 +0100
Subject: [PATCH 2/7] update actions/checkout

---
 .github/workflows/create-n-deploy-docs.yaml   | 16 +++++++--------
 .github/workflows/create-n-deploy-npm.yaml    | 16 +++++++--------
 .github/workflows/template-pre-release.yaml   | 20 +++++++++----------
 .github/workflows/template-release.yaml       |  8 ++++----
 .../workflows/template-ts-build-project.yaml  |  2 +-
 .../template-validate-pr-labels.yaml          |  2 +-
 .../workflows/template-validate-pr-title.yaml |  2 +-
 7 files changed, 33 insertions(+), 33 deletions(-)

diff --git a/.github/workflows/create-n-deploy-docs.yaml b/.github/workflows/create-n-deploy-docs.yaml
index 66ed841fe6..5ed298fd58 100644
--- a/.github/workflows/create-n-deploy-docs.yaml
+++ b/.github/workflows/create-n-deploy-docs.yaml
@@ -38,7 +38,7 @@ jobs:
             contents: read
         steps:
             - name: 📥 Checkout into ${{ inputs.branch-name }}
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
               with:
                   ref: ${{ inputs.branch-name }}
 
@@ -64,7 +64,7 @@ jobs:
 
         steps:
             - name: 📥 Checkout repository
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
             - name: 🔐 Azure Login
               uses: ./.github/actions/az-login
@@ -80,7 +80,7 @@ jobs:
                   key-name: o11odc-github-gitpersonal-token-prd
 
             - name: 📥 Checkout into ${{ inputs.branch-name }}
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
               with:
                   ref: ${{ inputs.branch-name }}
                   token: ${{ steps.get-github-token.outputs.az-keyvault-value }}
@@ -99,7 +99,7 @@ jobs:
 
         steps:
             - name: 📥 Checkout repository
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
             - name: 🔐 Azure Login
               uses: ./.github/actions/az-login
@@ -120,7 +120,7 @@ jobs:
                   git config --global user.name "UiComponentsBot"
 
             - name: 📥 Checkout into deploy-docs
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
               with:
                   ref: deploy-docs
                   token: ${{ steps.get-github-token.outputs.az-keyvault-value }}
@@ -166,7 +166,7 @@ jobs:
 
         steps:
             - name: 📥 Checkout repository
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
             - name: 🔐 Azure Login
               uses: ./.github/actions/az-login
@@ -182,7 +182,7 @@ jobs:
                   key-name: o11odc-github-gitpersonal-token-prd
 
             - name: 📥 Checkout into deploy-docs
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
               with:
                   ref: deploy-docs
                   token: ${{ steps.get-github-token.outputs.az-keyvault-value }}
@@ -207,7 +207,7 @@ jobs:
         if: ${{ inputs.delete-branch == true }}
         steps:
             - name: 📥 Checkout branch dev
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
               with:
                   ref: dev
 
diff --git a/.github/workflows/create-n-deploy-npm.yaml b/.github/workflows/create-n-deploy-npm.yaml
index 4246e03a82..bf6e0bc124 100644
--- a/.github/workflows/create-n-deploy-npm.yaml
+++ b/.github/workflows/create-n-deploy-npm.yaml
@@ -39,7 +39,7 @@ jobs:
 
         steps:
             - name: 📥 Checkout into ${{ inputs.branch-name }}
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
               with:
                   ref: ${{ inputs.branch-name }}
 
@@ -62,7 +62,7 @@ jobs:
 
         steps:
             - name: 📥 Checkout repository
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
             - name: 🔐 Azure Login
               uses: ./.github/actions/az-login
@@ -78,7 +78,7 @@ jobs:
                   key-name: o11odc-github-gitpersonal-token-prd
 
             - name: 📥 Checkout into ${{ inputs.branch-name }}
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
               with:
                   ref: ${{ inputs.branch-name }}
                   token: ${{ steps.get-github-token.outputs.az-keyvault-value }}
@@ -99,7 +99,7 @@ jobs:
             # Using remote azure/login action directly to avoid post-action failure
             # when gulp prepareToDeploy removes the .github folder
             - name: 🔐 Azure Login
-              uses: azure/login@a457da9ea143d694b1b9c7c869ebb04ebe844ef5 # v2.3.0
+              uses: azure/login@532459ea530d8321f2fb9bb10d1e0bcf23869a43 # v3.0.0 # v2.3.0
               with:
                 client-id: ${{ secrets.OSUI_AZURE_CLIENT_ID }}
                 tenant-id: ${{ secrets.OSUI_AZURE_TENANT_ID }}
@@ -122,7 +122,7 @@ jobs:
                   git config --global user.name "UiComponentsBot"
 
             - name: 📥 Checkout into deploy-npm
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
               with:
                   ref: deploy-npm
                   token: ${{ steps.get-github-token.outputs.az-keyvault-value }}
@@ -166,7 +166,7 @@ jobs:
             # Using remote azure/login action directly to avoid post-action failure
             # when gulp prepareToDeploy removes the .github folder
             - name: 🔐 Azure Login
-              uses: azure/login@a457da9ea143d694b1b9c7c869ebb04ebe844ef5 # v2.3.0
+              uses: azure/login@532459ea530d8321f2fb9bb10d1e0bcf23869a43 # v3.0.0 # v2.3.0
               with:
                 client-id: ${{ secrets.OSUI_AZURE_CLIENT_ID }}
                 tenant-id: ${{ secrets.OSUI_AZURE_TENANT_ID }}
@@ -184,7 +184,7 @@ jobs:
                       echo "az-keyvault-value=$secretValue" >> $GITHUB_OUTPUT
 
             - name: 📥 Checkout into deploy-npm
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
               with:
                   ref: deploy-npm
                   token: ${{ steps.get-github-token.outputs.az-keyvault-value }}
@@ -213,7 +213,7 @@ jobs:
         if: ${{ inputs.delete-branch == true }}
         steps:
             - name: 📥 Checkout branch dev
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
               with:
                   ref: dev
 
diff --git a/.github/workflows/template-pre-release.yaml b/.github/workflows/template-pre-release.yaml
index 943d178568..8921ddf66b 100644
--- a/.github/workflows/template-pre-release.yaml
+++ b/.github/workflows/template-pre-release.yaml
@@ -77,7 +77,7 @@ jobs:
         if: ${{ inputs.new-version }}
         steps:
             - name: 📥 Checkout into dev
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
               with:
                   ref: dev
 
@@ -103,7 +103,7 @@ jobs:
         if: ${{ inputs.new-version }}
         steps:
             - name: 📥 Checkout repository
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
             - name: 🔐 Azure login
               #uses: OutSystems/rd.github-reusable-workflows/.github/actions/az-login@9d497d1c5bc6e355aa8f4663539e6b75c212f6b4 #v2.0.7
@@ -121,7 +121,7 @@ jobs:
                   key-name: o11odc-github-gitpersonal-token-prd
 
             - name: 📥 Checkout with token
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
               with:
                   token: ${{ steps.get-github-token.outputs.az-keyvault-value }}
 
@@ -154,7 +154,7 @@ jobs:
         if: ${{ inputs.new-version }}
         steps:
             - name: 📥 Checkout repository
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
             - name: 🔐 Azure login
               #uses: OutSystems/rd.github-reusable-workflows/.github/actions/az-login@9d497d1c5bc6e355aa8f4663539e6b75c212f6b4 #v2.0.7
@@ -172,7 +172,7 @@ jobs:
                   key-name: o11odc-github-gitpersonal-token-prd
 
             - name: 📥 Checkout into dev
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
               with:
                   ref: dev
                   token: ${{ steps.get-github-token.outputs.az-keyvault-value }}
@@ -193,7 +193,7 @@ jobs:
         if: ${{ inputs.new-version }}
         steps:
             - name: 📥 Checkout repository
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
             - name: 🔐 Azure login
               #uses: OutSystems/rd.github-reusable-workflows/.github/actions/az-login@9d497d1c5bc6e355aa8f4663539e6b75c212f6b4 #v2.0.7
@@ -211,7 +211,7 @@ jobs:
                   key-name: o11odc-github-gitpersonal-token-prd
 
             - name: 📥 Checkout into rc${{ inputs.new-version }}
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
               with:
                   ref: rc${{ inputs.new-version }}
                   fetch-depth: 0
@@ -233,7 +233,7 @@ jobs:
         if: ${{ inputs.new-version }}
         steps:
             - name: 📥 Checkout repository
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
             - name: 🔐 Azure login
               #uses: OutSystems/rd.github-reusable-workflows/.github/actions/az-login@9d497d1c5bc6e355aa8f4663539e6b75c212f6b4 #v2.0.7
@@ -284,7 +284,7 @@ jobs:
         if: ${{ inputs.new-version && inputs.new-dev-release }}
         steps:
             - name: 📥 Checkout repository
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
             - name: 🔐 Azure login
               #uses: OutSystems/rd.github-reusable-workflows/.github/actions/az-login@9d497d1c5bc6e355aa8f4663539e6b75c212f6b4 #v2.0.7
@@ -302,7 +302,7 @@ jobs:
                   key-name: o11odc-github-gitpersonal-token-prd
           
             - name: 📥 Checkout into dev
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
               with:
                   ref: dev
                   token: ${{ steps.get-github-token.outputs.az-keyvault-value }}
diff --git a/.github/workflows/template-release.yaml b/.github/workflows/template-release.yaml
index c746e3cc93..580b65127f 100644
--- a/.github/workflows/template-release.yaml
+++ b/.github/workflows/template-release.yaml
@@ -61,7 +61,7 @@ jobs:
         if: ${{ inputs.new-version }}
         steps:
             - name: 📥 Checkout into rc${{ inputs.new-version }}
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
               with:
                   ref: rc${{ inputs.new-version }}
 
@@ -87,7 +87,7 @@ jobs:
         if: ${{ inputs.new-version }}
         steps:
             - name: 📥 Checkout repository
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
             - name: 🔐 Azure login
               #uses: OutSystems/rd.github-reusable-workflows/.github/actions/az-login@9d497d1c5bc6e355aa8f4663539e6b75c212f6b4 #v2.0.7
@@ -122,7 +122,7 @@ jobs:
 
         steps:
             - name: 📥 Checkout repository
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
             - name: 🔐 Azure login
               #uses: OutSystems/rd.github-reusable-workflows/.github/actions/az-login@9d497d1c5bc6e355aa8f4663539e6b75c212f6b4 #v2.0.7
@@ -158,7 +158,7 @@ jobs:
         if: ${{ inputs.delete-rc-branch == true }}
         steps:
             - name: 📥 Checkout branch dev
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
               with:
                   ref: dev
 
diff --git a/.github/workflows/template-ts-build-project.yaml b/.github/workflows/template-ts-build-project.yaml
index 23e47d3b70..944585ab00 100644
--- a/.github/workflows/template-ts-build-project.yaml
+++ b/.github/workflows/template-ts-build-project.yaml
@@ -73,7 +73,7 @@ jobs:
             contents: read
         steps:
             - name: 📥 Checkout main branch
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
               with:
                   ref: ${{ inputs.github-ref }}
 
diff --git a/.github/workflows/template-validate-pr-labels.yaml b/.github/workflows/template-validate-pr-labels.yaml
index 8a961ea783..69f79841e2 100644
--- a/.github/workflows/template-validate-pr-labels.yaml
+++ b/.github/workflows/template-validate-pr-labels.yaml
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
           
       - name: 🔎 Check PR labels
         #uses: OutSystems/rd.github-reusable-workflows/.github/actions/validate-pr-labels@v2.0.7
diff --git a/.github/workflows/template-validate-pr-title.yaml b/.github/workflows/template-validate-pr-title.yaml
index 6319b184aa..e27bbc2a80 100644
--- a/.github/workflows/template-validate-pr-title.yaml
+++ b/.github/workflows/template-validate-pr-title.yaml
@@ -46,7 +46,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: "🔎 Check PR title follows '${{ inputs.validate-semVer == true && '+semver: <minor|major|patch> ' || '' }}<ticket id> <description>'"
         #uses: OutSystems/rd.github-reusable-workflows/.github/actions/validate-pr-title@v2.0.7

From 901ecf381e84f2d78a9f9595cb3bb7b4e4ab09c9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jo=C3=A3o=20Ferreira?= <joao.manuel.ferreira@outsystems.com>
Date: Fri, 26 Jun 2026 12:11:46 +0100
Subject: [PATCH 3/7] update azure/cli action

---
 .github/workflows/create-n-deploy-npm.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/create-n-deploy-npm.yaml b/.github/workflows/create-n-deploy-npm.yaml
index bf6e0bc124..3c7a5aa4d7 100644
--- a/.github/workflows/create-n-deploy-npm.yaml
+++ b/.github/workflows/create-n-deploy-npm.yaml
@@ -109,7 +109,7 @@ jobs:
             # when gulp prepareToDeploy removes the .github folder
             - name: 🔑 Get GitHub Token from Azure Key Vault
               id: get-github-token
-              uses: azure/cli@089eac9d8cc39f5d003e94f8b65efc51076c9cbd # v2.1.0
+              uses: azure/cli@9eb25b8360668fb0ecbafa808d40e2197b2f5f52 # v3.0.0
               with:
                   inlineScript: |
                       secretValue=$(az keyvault secret show --name "o11odc-github-gitpersonal-token-prd" --vault-name "kv-ui-components" --query "value" --output tsv)
@@ -176,7 +176,7 @@ jobs:
             # when gulp prepareToDeploy removes the .github folder
             - name: 🔑 Get GitHub Token from Azure Key Vault
               id: get-github-token
-              uses: azure/cli@089eac9d8cc39f5d003e94f8b65efc51076c9cbd # v2.1.0
+              uses: azure/cli@9eb25b8360668fb0ecbafa808d40e2197b2f5f52 # v3.0.0
               with:
                   inlineScript: |
                       secretValue=$(az keyvault secret show --name "o11odc-github-gitpersonal-token-prd" --vault-name "kv-ui-components" --query "value" --output tsv)

From 9a95a31994a9ea6dd307e179f45e509518c43a1d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jo=C3=A3o=20Ferreira?= <joao.manuel.ferreira@outsystems.com>
Date: Fri, 26 Jun 2026 12:17:20 +0100
Subject: [PATCH 4/7] update Azure DevOps Login hash

---
 .github/actions/az-login/action.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/actions/az-login/action.yml b/.github/actions/az-login/action.yml
index ad89dc32c3..892e5a18dc 100644
--- a/.github/actions/az-login/action.yml
+++ b/.github/actions/az-login/action.yml
@@ -43,7 +43,7 @@ runs:
     using: composite
     steps:
         - name: Azure DevOps Login
-          uses: azure/login@a457da9ea143d694b1b9c7c869ebb04ebe844ef5 # v2.3.0
+          uses: azure/login@532459ea530d8321f2fb9bb10d1e0bcf23869a43 # v3.0.0
           with:
               client-id: ${{ inputs.client-id }}
               tenant-id: ${{ inputs.tenant-id }}

From 7e30564c02a495ef214e6a805406f7292e24f8bc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jo=C3=A3o=20Ferreira?= <joao.manuel.ferreira@outsystems.com>
Date: Thu, 2 Jul 2026 14:53:43 +0100
Subject: [PATCH 5/7] - test PR title don't merge

---
 .github/workflows/template-validate-pr-title.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/template-validate-pr-title.yaml b/.github/workflows/template-validate-pr-title.yaml
index e27bbc2a80..87ba84212e 100644
--- a/.github/workflows/template-validate-pr-title.yaml
+++ b/.github/workflows/template-validate-pr-title.yaml
@@ -50,6 +50,6 @@ jobs:
 
       - name: "🔎 Check PR title follows '${{ inputs.validate-semVer == true && '+semver: <minor|major|patch> ' || '' }}<ticket id> <description>'"
         #uses: OutSystems/rd.github-reusable-workflows/.github/actions/validate-pr-title@v2.0.7
-        uses: ./.github/actions/validate-pr-title
+        uses: OutSystems/rd.github-reusable-workflows/.github/actions/validate-pr-title@ROU-12855
         with:
           validate-semVer: ${{ inputs.validate-semVer }}        

From aadd9f0de355399a55172a1b4b5540c5bed21635 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jo=C3=A3o=20Ferreira?= <joao.manuel.ferreira@outsystems.com>
Date: Thu, 2 Jul 2026 15:59:26 +0100
Subject: [PATCH 6/7] full SHA hash

---
 .github/workflows/template-validate-pr-title.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/template-validate-pr-title.yaml b/.github/workflows/template-validate-pr-title.yaml
index 87ba84212e..fdb6dd06c6 100644
--- a/.github/workflows/template-validate-pr-title.yaml
+++ b/.github/workflows/template-validate-pr-title.yaml
@@ -50,6 +50,6 @@ jobs:
 
       - name: "🔎 Check PR title follows '${{ inputs.validate-semVer == true && '+semver: <minor|major|patch> ' || '' }}<ticket id> <description>'"
         #uses: OutSystems/rd.github-reusable-workflows/.github/actions/validate-pr-title@v2.0.7
-        uses: OutSystems/rd.github-reusable-workflows/.github/actions/validate-pr-title@ROU-12855
+        uses: OutSystems/rd.github-reusable-workflows/.github/actions/validate-pr-title@ad2f024d9ba70e786fb50af98df165c04360a297
         with:
           validate-semVer: ${{ inputs.validate-semVer }}        

From 7bbd7a84f02c13430d9ad16e2f032bcc4d36c783 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jo=C3=A3o=20Ferreira?= <joao.manuel.ferreira@outsystems.com>
Date: Thu, 2 Jul 2026 16:07:51 +0100
Subject: [PATCH 7/7] - dummy action to test reusable action change on other
 repo

---
 .github/actions/validate-pr-title/action.yml     | 16 +++++++++++++---
 .../workflows/template-validate-pr-title.yaml    |  2 +-
 2 files changed, 14 insertions(+), 4 deletions(-)

diff --git a/.github/actions/validate-pr-title/action.yml b/.github/actions/validate-pr-title/action.yml
index abf533c937..eff7261057 100644
--- a/.github/actions/validate-pr-title/action.yml
+++ b/.github/actions/validate-pr-title/action.yml
@@ -37,7 +37,17 @@ runs:
   using: composite
   steps:
     - name: "Check PR title follows '${{ inputs.validate-semVer == true && '+semver: <minor|major|patch> ' || '' }}<ticket id> <description>'"
-      uses: deepakputhraya/action-pr-title@3864bebc79c5f829d25dd42d3c6579d040b0ef16 #v1.0.2
-      with:
-        regex: ^${{ inputs.validate-semVer == true && '(\+semver:\s(minor|major|patch)\s)?' || '' }}([A-Z][A-Z0-9]*-\d+(:)?\s\w)
       if: ${{ contains(github.head_ref, 'release/') == false && contains(github.head_ref, 'merge/') == false }}
+      shell: bash
+      env:
+        GH_TOKEN: ${{ github.token }}
+        PR_NUMBER: ${{ github.event.pull_request.number }}
+        REPO: ${{ github.repository }}
+        SEMVER_PREFIX: ${{ inputs.validate-semVer == true && '(\+semver:\s(minor|major|patch)\s)?' || '' }}
+      run: |
+        TITLE=$(gh pr view "$PR_NUMBER" --repo "$REPO" --json title --jq '.title')
+        REGEX="^${SEMVER_PREFIX}([A-Z][A-Z0-9]*-[0-9]+(:)?\s\w)"
+        if ! echo "$TITLE" | grep -Pq "$REGEX"; then
+          echo "::error::Pull Request title \"$TITLE\" failed to pass match regex - $REGEX"
+          exit 1
+        fi
diff --git a/.github/workflows/template-validate-pr-title.yaml b/.github/workflows/template-validate-pr-title.yaml
index fdb6dd06c6..e27bbc2a80 100644
--- a/.github/workflows/template-validate-pr-title.yaml
+++ b/.github/workflows/template-validate-pr-title.yaml
@@ -50,6 +50,6 @@ jobs:
 
       - name: "🔎 Check PR title follows '${{ inputs.validate-semVer == true && '+semver: <minor|major|patch> ' || '' }}<ticket id> <description>'"
         #uses: OutSystems/rd.github-reusable-workflows/.github/actions/validate-pr-title@v2.0.7
-        uses: OutSystems/rd.github-reusable-workflows/.github/actions/validate-pr-title@ad2f024d9ba70e786fb50af98df165c04360a297
+        uses: ./.github/actions/validate-pr-title
         with:
           validate-semVer: ${{ inputs.validate-semVer }}