Bump PSModule/Process-PSModule/.github/workflows/workflow.yml from 5.5.0 to 5.5.9

[dependabot]

Bumps PSModule/Process-PSModule/.github/workflows/workflow.yml from 5.5.0 to 5.5.9.

Release notes

Sourced from PSModule/Process-PSModule/.github/workflows/workflow.yml's releases.

v5.5.9

🪲 [Fix]: Restore correct release versioning in the publish pipeline (#363)

The module publishing pipeline once again calculates and stamps the real release version before publishing, so consumer releases are versioned and tagged correctly instead of shipping the build-time placeholder. This reverts the premature Publish-PSModule major upgrade that left main in an inconsistent state.

• Relates to #326 (move version calculation ahead of the build step)
• Contains the regression introduced by #358

Fixed: Releases are versioned correctly again

Publish-PSModule is pinned back to v2.2.4, which calculates the release version (from labels and tags) and stamps it into the module manifest at publish time. On main, Build-PSModule (v4) only stamps a 999.0.0 placeholder and does not compute the real version, and Publish-PSModule v3.0.0 is publish-only — it expects the manifest to already carry the final version. With v3.0.0 in place, nothing in the pipeline computed the real version, so a real consumer release would have published and tagged 999.0.0. Reverting to v2.2.4 restores the fully consistent old pipeline: Get-Settings → Build (v4, 999.0.0) → Publish (v2.2.4, calculates + stamps).

Only the Publish-PSModule pin is reverted. The other action bumps from #358 (actions/checkout v7.0.0, super-linter v8.7.0) are left in place.

Technical Details

• .github/workflows/Publish-Module.yml: PSModule/Publish-PSModule pin reverted 03c0f8b… # v3.0.0 → 8917aed… # v2.2.4. This is the exact pin #358 replaced; no with: inputs changed — v2.2.4 consumes the version-calculation inputs the workflow already passes, whereas v3.0.0 silently ignored them.
• .github/workflows/Publish-Module.yml: normalized the APIKey action input from secrets.APIKEY to secrets.APIKey to match the APIKey secret declaration and the other workflows (workflow.yml, Workflow-Test-*.yml). GitHub Actions secret names are case-insensitive, so this is a consistency-only change with no behavioral effect (flagged during Copilot review).
• This is step 1 (containment) of #326. Follow-ups: release Resolve-PSModuleVersion with the #348 fix, then rebase and land PR #342 (Plan job + Build v5 + publish-only Publish) and re-pin the first-party actions together.

v5.5.8

[Patch]: Update GitHub Actions dependencies to latest pinned versions (#358)

Consolidates the currently-passing Dependabot GitHub Actions updates into one change, so the pipeline moves to the latest action versions in a single release instead of separate bumps. It also configures Dependabot to group future GitHub Actions updates into one pull request, so this consolidated form happens automatically from now on.

Superseded Dependabot PRs: #351, #353, #354, #355 — Dependabot closes these automatically once this merges.

⚠️ Build-PSModule v5.0.0 (#350) is intentionally excluded. v5 makes moduleVersion a required input, which the current Build-Module.yml does not provide, so it fails CI (6 checks on #350's own PR too). Adopting it needs the "decide version before build" work in #342 and should ship with/after that PR. #350 stays open to track it.

Updated GitHub Actions

Action	From	To	Bump
actions/checkout	v6.0.2	v7.0.0	Major
PSModule/Publish-PSModule	v2.2.4	v3.0.0	Major
super-linter/super-linter	v8.6.0	v8.7.0	Minor
super-linter/super-linter/slim	v8.6.0	v8.7.0	Minor

This bundle includes two major action upgrades, so it is labelled Major and cuts a major release of Process-PSModule on merge.

Changed: Dependabot groups GitHub Actions updates

.github/dependabot.yml now groups all github-actions updates into a single grouped pull request via a groups block. The github_actions label is also corrected — it was github-actions, which does not match the repository label and was silently dropped by Dependabot.

Technical Details

• Each bump is a cherry-pick of the original Dependabot commit, preserving authorship and the Bump X from A to B messages for a clean linear history.
• All bumps touch only uses: pins under .github/workflows/; no logic changes.
• Dependabot grouping added:

... (truncated)

Commits

• 8b75537 🪲 [Fix]: Restore correct release versioning in the publish pipeline (#363)
• 6aa7664 📖 [Docs]: Document the Pester major-version lock in the test pipeline (#362)
• 0506996 [Patch]: Update GitHub Actions dependencies to latest pinned versions (#358)
• 0c90c32 ⚙️ [Maintenance]: Remove instruction files colocated into the docs site (#349)
• ce64918 Bump PSModule/GitHub-Script from 1.7.10 to 1.8.0 (#346)
• dcfb311 Bump PSModule/Build-PSModule from 4.0.14 to 4.0.15 (#345)
• 762cffb Bump PSModule/Invoke-Pester from 4.2.4 to 4.2.5 (#344)
• 8bb1745 Bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 (#340)
• e34ef35 Bump actions/upload-artifact from 7.0.0 to 7.0.1 (#341)
• e8f5b22 🩹 [Patch]: Bump PSModule/Publish-PSModule to v2.2.4 (#312)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

No Significant Changes Detected

This PR does not contain changes to files that would trigger a new release:

Pattern	Description
^src/	Matches files where path matches this pattern
^README\.md$	Matches files where path matches this pattern

Build, test, and publish stages will be skipped for this PR.

If you believe this is incorrect, please verify that your changes are in the correct locations.

[github-actions]

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
MARKDOWN	Pass ✅
NATURAL_LANGUAGE	Pass ✅
POWERSHELL	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

[dependabot]

Superseded by #10.