Merge main to dev

[Bryan Soltis (BryanSoltis)]

This pull request introduces several improvements focused on dependency management, build process reliability, and maintainability for both GitHub Actions workflows and the main project. The most significant changes include pinning GitHub Actions to specific commit SHAs for enhanced security and reproducibility, updating and grouping Dependabot configuration, and refactoring the EditModal.razor component for better state management and code clarity.

CI/CD and Dependency Management

• All GitHub Actions in workflow files are now pinned to specific commit SHAs instead of floating version tags, improving build security and ensuring consistent CI/CD runs. This affects actions such as actions/checkout, github/codeql-action, actions/setup-dotnet, actions/cache, actions/upload-artifact, actions/download-artifact, azure/webapps-deploy, sigstore/cosign-installer, and various Docker actions. [1] [2] [3] [4] [5] [6] [7] [8] [9]
• Added a new .github/dependabot.yml configuration file to enable and group automated dependency updates for GitHub Actions, scheduled to run weekly with a 7-day cooldown.

Project File and Package Updates

• Updated src/AzureNamingTool.csproj to:
  • Bump the project version from 5.0.2 to 5.0.3.
  • Exclude all files in the publish directory from content, compile, embedded resources, and additional files.
  • Upgrade Microsoft.OpenApi from 2.3.10 to 3.9.0 and add SQLitePCLRaw.lib.e_sqlite3 as a new dependency.
  • Grant InternalsVisibleTo for the AzureNamingTool.UnitTests project to support unit testing of internal members. [1] [2] [3] [4]

EditModal Component Refactor

• Refactored the EditModal.razor component to:
  • Use HashSet<string> for managing optional and excluded resource components, improving state management and performance.
  • Simplify checkbox rendering logic, binding directly to the new sets and handling changes via a dedicated method, removing complex string parsing and JavaScript interop for checkbox state.
  • Streamline the logic for saving and updating resource type options and exclusions, making the code more maintainable and less error-prone. [1] [2] [3] [4] [5] [6] [7] [8]

[Copilot]

Copilot review overview

🟡 Changes recommended

Four unresolved moderate issues remain affecting exclusion handling, generated-name consistency, cache rollback behavior, and validation rules.

Get a fresh assessment by requesting another Copilot review.

Review effort: Lite
Findings: 1

Open (1)

• Align generated-name regex length with declared validation bounds · New

What changed in this PR

This PR merges main into dev and prepares release 5.0.3 with CI hardening, dependency updates, catalog changes, and component refactoring.

Changes:

• Pins GitHub Actions and adds grouped weekly Dependabot updates.
• Updates dependencies, versions, resource metadata, and related tests.
• Refactors component selection, auto-increment handling, and SQLite persistence.

File	Reviewed changes
tests/​AzureNamingTool.UnitTests/​Services/​ResourceTypeServiceTests.cs	Tests batched component updates.
tests/​AzureNamingTool.UnitTests/​Services/​ResourceNamingRequestServiceTests.cs	Tests Resource Instance replacement.
tests/​AzureNamingTool.UnitTests/​Repositories/​SQLiteConfigurationRepositoryTests.cs	Tests SQLite replacement persistence.
tests/​AzureNamingTool.UnitTests/​Helpers/​ValidationHelperTests.cs	Tests catalog validation.
tests/​AzureNamingTool.UiTests/​AzureNamingTool.UiTests.csproj	Targets .NET 10 and updates AngleSharp.
src/​versionalerts.json	Adds 5.0.3 release notes.
src/​Services/​ResourceTypeService.cs	Batches component updates.
src/​Services/​ResourceNamingRequestService.cs	Updates Resource Instance auto-increment handling.
src/​repository/​resourcetypes.json	Updates and expands resource metadata.
src/​repository/​resourcelocations.json	Adds Azure locations.
src/​Repositories/​SQLiteConfigurationRepository.cs	Separates replacement deletes and inserts.
src/​programsettings.json	Updates the tool version.
src/​configurationfileversions.json	Updates catalog versions.
src/​Components/​Modals/​EditModal.razor	Refactors checkbox state management.
src/​AzureNamingTool.csproj	Updates version, dependencies, and publish exclusions.
.github/​workflows/​docker-publish.yml	Pins Docker workflow actions.
.github/​workflows/​deploy-azure-naming-tool-to-azure-webapps-dotnet-core.yml	Pins deployment actions.
.github/​workflows/​codeql.yml	Pins CodeQL actions.
.github/​dependabot.yml	Configures weekly grouped updates.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.