fix: Merging dev to main branch

[Roopan-Microsoft]

Purpose

• This pull request updates several CI/CD workflow files and infrastructure templates to improve automation, support new scenarios, and keep dependencies up to date. The most significant changes include updating GitHub Actions versions, adding support for the dependabotchanges branch in Docker build workflows, and introducing a new parameter for purge protection in the infrastructure templates.

CI/CD Workflow Updates

• Updated actions/checkout and other GitHub Actions to their latest major versions across all workflow files for improved stability and security. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13]
• Upgraded third-party actions for broken link checking, semantic release, and stale issue management to newer versions for enhanced features and reliability. [1] [2] [3] [4] [5]

Docker Build Workflow Enhancements

• Added support for the dependabotchanges branch, allowing Docker images to be built and pushed for this branch, including updates to branch conditionals and tagging logic in .github/workflows/build-docker-image.yml. [1] [2] [3] [4] [5]

Infrastructure Template Improvements

• Introduced a new enablePurgeProtection parameter in infra/main.bicep and infra/main.json to allow configurable purge protection for resources, and updated the relevant module and parameter references. [1] [2] [3] [4]
• Improved output variable naming for clarity, changing resourceGroupName to AZURE_RESOURCE_GROUP in infra/main.bicep.
• Enhanced robustness of configuration values by using safe navigation and default values when referencing outputs, particularly for AI project endpoint variables. [1] [2]

Azure Deployment Script Changes

• Changed the deployment hook in azure.yaml from postdeploy to postprovision and updated script execution logic for both POSIX and Windows environments to use centralized deployment scripts.

Dependency Order Fixes

• Corrected the ordering of resource dependencies in infra/main.json to ensure proper deployment sequencing. [1] [2]

Does this introduce a breaking change?

• Yes
• No

Golden Path Validation

• I have tested the primary workflows (the "golden path") to ensure they function correctly without errors.

Deployment Validation

• I have validated the deployment process successfully and all services are running as expected with this change.

What to Check

Verify that the following are valid

• ...

Other Information

[Copilot]

Pull Request Overview

This pull request merges changes from the dev branch to main, focusing on dependency updates, CI/CD workflow improvements, and infrastructure configuration enhancements. The changes include upgrading GitHub Actions to their latest versions, adding support for a new dependabotchanges branch in Docker workflows, and introducing configurable purge protection for Azure resources.

• Updated GitHub Actions dependencies from v4 to v5/v6 and third-party actions to newer versions across all workflows
• Added support for dependabotchanges branch in Docker build and push workflows
• Introduced enablePurgeProtection parameter in Bicep templates for configurable resource protection

Reviewed Changes

Copilot reviewed 18 out of 20 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
src/ContentProcessorWeb/package.json	Updated npm package dependencies to newer versions
src/ContentProcessor/requirements.txt	Upgraded OpenAI Python package from 1.65.5 to 2.0.0
infra/scripts/post_deployment.sh	Removed debug timestamp output
infra/main.json	Added purge protection parameter, reordered dependencies, updated output variable name, improved safe navigation
infra/main.bicep	Added purge protection parameter, improved safe navigation with null coalescing, renamed output variable
azure.yaml	Changed deployment hook from postdeploy to postprovision, simplified to call centralized scripts
.github/workflows/test.yml	Updated actions/checkout from v4 to v5, actions/setup-python from v5 to v6
.github/workflows/test-automation.yml	Updated actions/checkout from v4 to v5, actions/setup-python from v4 to v6
.github/workflows/telemetry-template-check.yml	Updated actions/checkout from v4 to v5
.github/workflows/stale-bot.yml	Updated actions/stale from v9 to v10
.github/workflows/scheduled-Dependabot-PRs-Auto-Merge.yml	Updated actions/checkout from v4 to v5
.github/workflows/pylint.yml	Updated actions/checkout from v4 to v5, actions/setup-python from v5 to v6
.github/workflows/pr-title-checker.yml	Updated amannn/action-semantic-pull-request from v5 to v6
.github/workflows/deploy.yml	Updated actions/checkout from v4 to v5
.github/workflows/create-release.yml	Updated actions/checkout from v4 to v5, codfish/semantic-release-action from v3 to v4
.github/workflows/build-docker-image.yml	Updated actions/checkout from v4 to v5, added dependabotchanges branch support
.github/workflows/broken-links-checker.yml	Updated actions/checkout from v4 to v5, lycheeverse/lychee-action from v2.4.1 to v2.6.1
.github/workflows/azure-dev.yaml	Updated actions/checkout from v4 to v5, added useDevContainer configuration

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

🎉 This PR is included in version 1.10.2 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀