Fixes

Author: BernieWhite

.github/dependabot.yml

@@ -37,6 +37,9 @@ updates:
       codeql-actions:
         patterns:
           - 'github/codeql-action/*' # group github/codeql-action/* actions for Dependabot to update these together in one PR
+      standard-actions:
+        patterns:
+          - 'actions/*' # group actions/* actions for Dependabot to update these together in one PR
   # Maintain dependencies for Python
   - package-ecosystem: pip
     directory: '/'

.github/workflows/build.yaml

@@ -121,13 +121,19 @@ jobs:
         name: Install dependencies (PowerShell)
         shell: pwsh
         timeout-minutes: 3
-        run: ./scripts/pipeline-deps.ps1
+        run: |
+          ./scripts/pipeline-deps.ps1;
+          Import-Module ./scripts/dependencies.psm1 -Force;
+          Install-Dependencies -Dev -Repository 'PSGallery' -TrustRepository;
 
       - if: ${{ matrix.shell == 'powershell' }}
         name: Install dependencies (Windows PowerShell)
         shell: powershell
-        timeout-minutes: 3
-        run: ./scripts/pipeline-deps.ps1
+        timeout-minutes: 5
+        run: |
+          ./scripts/pipeline-deps.ps1;
+          Import-Module ./scripts/dependencies.psm1 -Force;
+          Install-Dependencies -Dev -Repository 'PSGallery' -TrustRepository;
 
       - name: Download module
         uses: actions/download-artifact@v8
@@ -173,7 +179,10 @@ jobs:
       - name: Install dependencies (PowerShell)
         shell: pwsh
         timeout-minutes: 3
-        run: ./scripts/pipeline-deps.ps1
+        run: |
+          ./scripts/pipeline-deps.ps1;
+          Import-Module ./scripts/dependencies.psm1 -Force;
+          Install-Dependencies -Dev -Repository 'PSGallery' -TrustRepository;
 
       - name: Build docs
         shell: pwsh

.github/workflows/copilot-setup-steps.yml

@@ -40,4 +40,4 @@ jobs:
           dotnet restore;
           ./scripts/pipeline-deps.ps1;
           Import-Module ./scripts/dependencies.psm1 -Force;
-          Install-Dependencies -Dev;
+          Install-Dependencies -Dev -Repository 'PSGallery' -TrustRepository;

pipeline.build.ps1

@@ -49,6 +49,13 @@ if ($Env:BUILD_SOURCEBRANCH -like '*/tags/*' -and $Env:BUILD_SOURCEBRANCHNAME -l
     $Build = $Env:BUILD_SOURCEBRANCHNAME.Substring(1);
 }
 
+$PSUpstream = 'PSGallery';
+if ($Env:PSUPSTREAM -ne $Null -and $Env:PSUPSTREAM -ne '') {
+    $PSUpstream = $Env:PSUPSTREAM;
+}
+
+Write-Host -Object "[Pipeline] -- Using PSUpstream: $PSUpstream" -ForegroundColor Green;
+
 $version = $Build;
 $versionSuffix = [String]::Empty;
 
@@ -560,7 +567,7 @@ task Benchmark {
 
 task Dependencies NuGet, {
     Import-Module $PWD/scripts/dependencies.psm1;
-    Install-Dependencies -Path $PWD/modules.json -Dev;
+    Install-Dependencies -Path $PWD/modules.json -Dev -Repository $PSUpstream;
 }
 
 task ExportData {

requirements-docs.txt

@@ -1,11 +1,11 @@
 mkdocs==1.6.1
 mkdocs-material==9.7.7
-pymdown-extensions==11.0.1
+pymdown-extensions==11.0.2
 mike==2.2.0
-mkdocs-git-revision-date-localized-plugin==1.5.3
+mkdocs-git-revision-date-localized-plugin==1.5.4
 mkdocs-git-committers-plugin-2==2.5.0
 mdx-truly-sane-lists==1.3
 mkdocs-redirects==1.2.3
 semver==3.0.4
-pygments==2.20.0
+pygments==2.21.0
 ./packages/bicep-syntax

tests/PSRule.Rules.Azure.Tests/Azure.APIM.Tests.ps1

@@ -274,6 +274,8 @@ Describe 'Azure.APIM' -Tag 'APIM' {
             $filteredResult = $result | Where-Object { $_.RuleName -eq 'Azure.APIM.CertificateExpiry' };
 
             # Fail
+            # Note: Certificate for apim-p fails every year in August, which is but design.
+            # Bump the certificate expiry one year in Resources.APIM.json to fix the test.
             $ruleResult = @($filteredResult | Where-Object { $_.Outcome -eq 'Fail' });
             $ruleResult | Should -Not -BeNullOrEmpty;
             $ruleResult.TargetName | Should -Be 'apim-C', 'apim-D', 'apim-E', 'apim-F', 'apim-G', 'apim-H', 'apim-I', 'apim-J', 'apim-K', 'apim-L', 'apim-M', 'apim-N', 'apim-O';

tests/PSRule.Rules.Azure.Tests/Resources.APIM.json

@@ -3061,7 +3061,7 @@
           "certificatePassword": null,
           "negotiateClientCertificate": false,
           "certificate": {
-            "expiry": "2026-09-01T12:00:00+00:00",
+            "expiry": "2027-09-01T12:00:00+00:00",
             "thumbprint": "0000000000000000000000000000000000000000",
             "subject": "CN=api.contoso.com, OU=A, O=O, L=L, S=S, C=C"
           },