Azure · Dan Fiedler (danfiedler-msft) · Aug 29, 2026
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,11 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    groups:
+      github-actions:
+        patterns: ["*"]
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
@@ -6,9 +6,9 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4 # Updated to v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
       - name: Set up Node.js
-        uses: actions/setup-node@v4 # Updated to v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: '20' # Updated to a current LTS version (e.g., 18, 20)
           # cache: 'npm' # Removed to avoid error if lockfile is missing.
@@ -25,7 +25,7 @@ jobs:
 
       - name: Post comment on PR if linting fails
         if: failure() # This condition correctly triggers on previous step failure
-        uses: actions/github-script@v7 # Updated to v7
+        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
         with:
           script: |
             const prNumber = context.issue.number;

diff --git a/.github/workflows/ps-module_azure.arc.jumpstart.common.yaml b/.github/workflows/ps-module_azure.arc.jumpstart.common.yaml
@@ -24,7 +24,7 @@ jobs:
     name: Build & Package Module
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
         with:
          fetch-depth: 0
 
@@ -46,7 +46,7 @@ jobs:
           ModuleVersion: ${{ env.VERSION }}
 
       - name: Upload Build Artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: ${{ env.buildArtifactName }}
           path: ${{ env.buildFolderName }}/
@@ -56,8 +56,8 @@ jobs:
     runs-on: ubuntu-latest
     needs: build
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/download-artifact@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: ${{ env.buildArtifactName }}
           path: ${{ env.buildFolderName }}
@@ -66,7 +66,7 @@ jobs:
         run: pwsh ./powershell/modules/Azure.Arc.Jumpstart.Common/build.ps1 -tasks test
 
       - name: Upload Test Results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: CodeCoverageLinux
           path: ${{ env.buildFolderName }}/${{ env.testResultFolderName }}/
@@ -76,8 +76,8 @@ jobs:
     runs-on: windows-latest
     needs: build
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/download-artifact@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: ${{ env.buildArtifactName }}
           path: ${{ env.buildFolderName }}
@@ -87,7 +87,7 @@ jobs:
         run: ./powershell/modules/Azure.Arc.Jumpstart.Common/build.ps1 -tasks test
 
       - name: Upload Test Results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: CodeCoverageWinPS7
           path: ${{ env.buildFolderName }}\${{ env.testResultFolderName }}\
@@ -97,8 +97,8 @@ jobs:
     runs-on: windows-latest
     needs: build
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/download-artifact@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: ${{ env.buildArtifactName }}
           path: ${{ env.buildFolderName }}
@@ -108,7 +108,7 @@ jobs:
         run: ./powershell/modules/Azure.Arc.Jumpstart.Common/build.ps1 -tasks test
 
       - name: Upload Test Results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: CodeCoverageWinPS51
           path: ${{ env.buildFolderName }}\${{ env.testResultFolderName }}\
@@ -118,8 +118,8 @@ jobs:
     runs-on: macos-latest
     needs: build
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/download-artifact@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: ${{ env.buildArtifactName }}
           path: ${{ env.buildFolderName }}
@@ -128,7 +128,7 @@ jobs:
         run: pwsh ./powershell/modules/Azure.Arc.Jumpstart.Common/build.ps1 -tasks test
 
       - name: Upload Test Results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: CodeCoverageMacOS
           path: ${{ env.buildFolderName }}/${{ env.testResultFolderName }}/
@@ -138,28 +138,28 @@ jobs:
     runs-on: ubuntu-latest
     needs: [test_linux, test_windows_core, test_windows_ps, test_macos]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
 
       - name: Download Linux Test Artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: CodeCoverageLinux
           path: ${{ env.buildFolderName }}/${{ env.testResultFolderName }}
 
       - name: Download Windows PS7 Test Artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: CodeCoverageWinPS7
           path: ${{ env.buildFolderName }}/${{ env.testResultFolderName }}
 
       - name: Download Windows PS51 Test Artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: CodeCoverageWinPS51
           path: ${{ env.buildFolderName }}/${{ env.testResultFolderName }}
 
       - name: Download macOS Test Artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: CodeCoverageMacOS
           path: ${{ env.buildFolderName }}/${{ env.testResultFolderName }}
@@ -173,8 +173,8 @@ jobs:
     if: |
       github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/download-artifact@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: ${{ env.buildArtifactName }}
           path: ${{ env.buildFolderName }}

diff --git a/.github/workflows/ps-module_azure.arc.jumpstart.localbox.yaml b/.github/workflows/ps-module_azure.arc.jumpstart.localbox.yaml
@@ -24,7 +24,7 @@ jobs:
     name: Build & Package Module
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
         with:
          fetch-depth: 0
 
@@ -46,7 +46,7 @@ jobs:
           ModuleVersion: ${{ env.VERSION }}
 
       - name: Upload Build Artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: ${{ env.buildArtifactName }}
           path: ${{ env.buildFolderName }}/
@@ -56,8 +56,8 @@ jobs:
     runs-on: ubuntu-latest
     needs: build
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/download-artifact@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: ${{ env.buildArtifactName }}
           path: ${{ env.buildFolderName }}
@@ -66,7 +66,7 @@ jobs:
         run: pwsh ./powershell/modules/Azure.Arc.Jumpstart.LocalBox/build.ps1 -tasks test
 
       - name: Upload Test Results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: CodeCoverageLinux
           path: ${{ env.buildFolderName }}/${{ env.testResultFolderName }}/
@@ -76,8 +76,8 @@ jobs:
     runs-on: windows-latest
     needs: build
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/download-artifact@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: ${{ env.buildArtifactName }}
           path: ${{ env.buildFolderName }}
@@ -87,7 +87,7 @@ jobs:
         run: ./powershell/modules/Azure.Arc.Jumpstart.LocalBox/build.ps1 -tasks test
 
       - name: Upload Test Results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: CodeCoverageWinPS7
           path: ${{ env.buildFolderName }}\${{ env.testResultFolderName }}\
@@ -97,8 +97,8 @@ jobs:
     runs-on: macos-latest
     needs: build
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/download-artifact@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: ${{ env.buildArtifactName }}
           path: ${{ env.buildFolderName }}
@@ -107,7 +107,7 @@ jobs:
         run: pwsh ./powershell/modules/Azure.Arc.Jumpstart.LocalBox/build.ps1 -tasks test
 
       - name: Upload Test Results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: CodeCoverageMacOS
           path: ${{ env.buildFolderName }}/${{ env.testResultFolderName }}/
@@ -117,22 +117,22 @@ jobs:
     runs-on: ubuntu-latest
     needs: [test_linux, test_windows_core, test_macos]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
 
       - name: Download Linux Test Artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: CodeCoverageLinux
           path: ${{ env.buildFolderName }}/${{ env.testResultFolderName }}
 
       - name: Download Windows PS7 Test Artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: CodeCoverageWinPS7
           path: ${{ env.buildFolderName }}/${{ env.testResultFolderName }}
 
       - name: Download macOS Test Artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: CodeCoverageMacOS
           path: ${{ env.buildFolderName }}/${{ env.testResultFolderName }}
@@ -146,8 +146,8 @@ jobs:
     if: |
       github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/download-artifact@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: ${{ env.buildArtifactName }}
           path: ${{ env.buildFolderName }}

diff --git a/SUPPORT.md b/SUPPORT.md
@@ -1,25 +1,25 @@
-# TODO: The maintainer of this repo has not yet edited this file
-
-**REPO OWNER**: Do you want Customer Service & Support (CSS) support for this product/project?
-
-- **No CSS support:** Fill out this template with information about how to file issues and get help.
-- **Yes CSS support:** Fill out an intake form at [aka.ms/onboardsupport](https://aka.ms/onboardsupport). CSS will work with/help you to determine next steps.
-- **Not sure?** Fill out an intake as though the answer were "Yes". CSS will help you decide.
-
-*Then remove this first heading from this SUPPORT.MD file before publishing your repo.*
-
-# Support
-
-## How to file issues and get help  
-
-This project uses GitHub Issues to track bugs and feature requests. Please search the existing 
-issues before filing new issues to avoid duplicates.  For new issues, file your bug or 
-feature request as a new Issue.
-
-For help and questions about using this project, please **REPO MAINTAINER: INSERT INSTRUCTIONS HERE 
-FOR HOW TO ENGAGE REPO OWNERS OR COMMUNITY FOR HELP. COULD BE A STACK OVERFLOW TAG OR OTHER
-CHANNEL. WHERE WILL YOU HELP PEOPLE?**.
-
-## Microsoft Support Policy  
-
-Support for this **PROJECT or PRODUCT** is limited to the resources listed above.
+# TODO: The maintainer of this repo has not yet edited this file
+
+**REPO OWNER**: Do you want Customer Service & Support (CSS) support for this product/project?
+
+- **No CSS support:** Fill out this template with information about how to file issues and get help.
+- **Yes CSS support:** Fill out an intake form at [aka.ms/onboardsupport](https://aka.ms/onboardsupport). CSS will work with/help you to determine next steps.
+- **Not sure?** Fill out an intake as though the answer were "Yes". CSS will help you decide.
+
+*Then remove this first heading from this SUPPORT.MD file before publishing your repo.*
+
+# Support
+
+## How to file issues and get help  
+
+This project uses GitHub Issues to track bugs and feature requests. Please search the existing 
+issues before filing new issues to avoid duplicates.  For new issues, file your bug or 
+feature request as a new Issue.
+
+For help and questions about using this project, please **REPO MAINTAINER: INSERT INSTRUCTIONS HERE 
+FOR HOW TO ENGAGE REPO OWNERS OR COMMUNITY FOR HELP. COULD BE A STACK OVERFLOW TAG OR OTHER
+CHANNEL. WHERE WILL YOU HELP PEOPLE?**.
+
+## Microsoft Support Policy  
+
+Support for this **PROJECT or PRODUCT** is limited to the resources listed above.