Skip to content

chore: dev to main merge#323

Open
Ragini-Microsoft wants to merge 64 commits intomainfrom
dev
Open

chore: dev to main merge#323
Ragini-Microsoft wants to merge 64 commits intomainfrom
dev

Conversation

@Ragini-Microsoft
Copy link
Copy Markdown
Collaborator

@Ragini-Microsoft Ragini-Microsoft commented Apr 9, 2026

Purpose

This pull request updates several GitHub Actions workflow files to standardize environment variable names, improve parameter validation, and refine workflow triggers. The main focus is on renaming variables (especially use case and resource IDs), updating input/output mappings, and tightening workflow execution to relevant file changes. These changes enhance consistency, maintainability, and reduce the risk of misconfiguration across deployment workflows.

Variable Renaming and Standardization

  • Replaced AZURE_ENV_USE_CASE with USE_CASE across all workflows and their input/output mappings to unify naming conventions. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11]
  • Renamed resource ID variables for clarity and accuracy, including AZURE_ENV_LOG_ANALYTICS_WORKSPACE_IDAZURE_ENV_EXISTING_LOG_ANALYTICS_WORKSPACE_RID and AZURE_EXISTING_AI_PROJECT_RESOURCE_IDAZURE_EXISTING_AIPROJECT_RESOURCE_ID, updating all related validation, input, and output logic. [1] [2] [3] [4] [5] [6] [7] [8]

Workflow Trigger and Path Improvements

  • Added path filters to workflow triggers so that deployments only run when relevant files or directories change, reducing unnecessary workflow executions. [1] [2] [3] [4]

Job and Step Adjustments

  • Updated environment variable usage in deployment steps and azd env set commands to reflect the new standardized names and improve clarity (e.g., AZURE_ENV_AI_SERVICE_LOCATION, AZURE_ENV_GPT_MODEL_CAPACITY, AZURE_ENV_IMAGE_TAG). [1] [2]

Workflow Logic and Notification Handling

  • Improved the notification job in orchestrator workflows to depend on cleanup and deployment jobs, ensuring notifications reflect the final deployment state.

Validation Logic Updates

  • Updated all validation logic and error messaging to use the new variable names and ensure only allowed values are accepted for use case and resource ID parameters. [1] [2]

These changes collectively improve the reliability and maintainability of the deployment workflows by enforcing consistent variable naming, better input validation, and more targeted workflow execution.

Does this introduce a breaking change?

  • Yes
  • No

Golden Path Validation

  • I have tested the primary workflows (the "golden path") to ensure they function correctly without errors.

Deployment Validation

  • I have validated the deployment process successfully and all services are running as expected with this change.

Pavan-Microsoft and others added 30 commits March 20, 2026 12:49
…ations

- Updated environment variable names in main.json and main.parameters.json to follow a consistent naming convention (e.g., AZURE_ENV_GPT_MODEL_NAME, AZURE_SQLDB_DATABASE).
- Modified scripts to support both new and legacy environment variable names for backward compatibility.
- Adjusted Docker build scripts to use the new environment variable names.
- Updated Python scripts to reference the new environment variable names for Azure SQL and OpenAI configurations.
- Ensured all relevant documentation and sample files reflect the new naming conventions.
…d improve error messaging in OpenAI client initialization
…ate environment variables for improved deployment notifications
…low)

Python dependency updates:
- aiohttp 3.13.3 -> 3.13.4 (fixes 10 alerts: SSRF, DoS, CRLF injection, header issues)
- requests 2.32.5 -> 2.33.0 in 3 manifests (fixes insecure temp file reuse)

npm dependency updates:
- lodash-es ^4.17.21 -> ^4.18.0 (fixes prototype pollution, code injection)
- lodash transitive dep updated via npm audit fix
- Added overrides for brace-expansion 1.1.13 (DoS fix) and path-to-regexp 0.1.13 (ReDoS fix)

Resolves Dependabot alerts: #84-#108

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Update types-requests from 2.32.4.20260107 to 2.33.0.20260408 to match
the requests==2.33.0 runtime version and prevent type stub drift.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
fix: resolve all Dependabot security alerts (critical, high, medium, …
chore: main to dev downmerge
refactor: remove unused axios dependency
fix: code quality findings fixes and refactor SqlConversationRepository to use ODBC for database connection
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

9 participants