[dependabot]

Bumps azure/login from 3.0.1 to 3.1.0.

Release notes

Sourced from azure/login's releases.

Azure Login Action v3.1.0

What's Changed

• Pin GitHub Actions to full-length commit SHAs by @​danfiedler-msft in Azure/login#636
• Add the ability to prevent the masking of clientId by @​the-coding-cuzzy in Azure/login#634
• Automate release tagging via deploy key + self-pin bump by @​MaddyMicrosoft in Azure/login#638
• docs: document immutable release model and correct branch reference by @​MaddyMicrosoft in Azure/login#640
• ci: reduce scheduled test frequency and clarify workflow names by @​MaddyMicrosoft in Azure/login#639
• Bump js-yaml from 3.14.2 to 3.15.2 by @​dependabot[bot] in Azure/login#643
• Bump browserslist from 4.21.4 to 4.28.8 by @​dependabot[bot] in Azure/login#637
• Add max-context-population input to override Azure PowerShell MaxCont… by @​MaddyMicrosoft in Azure/login#642

New Contributors

• @​danfiedler-msft made their first contribution in Azure/login#636
• @​the-coding-cuzzy made their first contribution in Azure/login#634

Full Changelog: Azure/login@v3.0.2...v3.1.0

Azure Login Action v3.0.2

What's Changed

Security & hardening

• Refactor PowerShell login to a static param()-bound script — eliminates string-interpolation in the AzPS login path so credential/config values can never be re-parsed as PowerShell (injection-safe by construction) by @​MaddyMicrosoft in Azure/login#607
• Pin third-party GitHub Actions to commit SHAs — supply-chain hardening for the CI/release workflows by @​MaddyMicrosoft in Azure/login#615
• Add admin-gated Release workflow — reproducible, approval-gated release + rollback pipeline by @​MaddyMicrosoft in Azure/login#610

Telemetry

• Emit the real action ref in telemetry via GITHUB_ACTION_REF — corrects the previously stale hard-coded value so usage reports the version consumers actually pin by @​MaddyMicrosoft in Azure/login#614

Dependencies

• Cap @actions/exec and @actions/core below the ESM-only 3.x majors (keeps the CommonJS ncc build working) by @​MaddyMicrosoft in Azure/login#628
• Harden Dependabot config for the CommonJS ncc build by @​MaddyMicrosoft in Azure/login#622
• Bump the github-actions group across 1 directory with 7 updates by @​MaddyMicrosoft in Azure/login#621
• Bump uuid and @actions/core by @​dependabot in Azure/login#589
• Bump brace-expansion from 1.1.12 to 1.1.18 by @​dependabot in Azure/login#616
• Bump picomatch from 2.3.1 to 2.3.2 by @​dependabot in Azure/login#582

Maintenance & docs

• Cleanup package.json and Dependabot config by @​MaddyMicrosoft in Azure/login#608
• Workflows/CI hygiene by @​MaddyMicrosoft in Azure/login#609
• Docs uplift by @​MaddyMicrosoft in Azure/login#620
• Add version support policy and security update guidance by @​Alex-AZPS in Azure/login#604

Full Changelog: Azure/login@v3.0.1...v3.1.0

Commits

• a641126 prepare release v3.1.0
• 3c5b5ce Add max-context-population input to override Azure PowerShell MaxCont… (#642)
• fcd0340 Bump browserslist from 4.21.4 to 4.28.8 (#637)
• 5a8018f Bump js-yaml from 3.14.2 to 3.15.2 (#643)
• a23dddf ci: reduce scheduled test frequency and clarify workflow names (#639)
• 4c016e0 docs: document immutable release model and correct branch reference (#640)
• 63f3c38 Automate release tagging via deploy key + self-pin bump (#638)
• 92a0b67 Add the ability to prevent the masking of clientId (#634)
• 5cb857d Pin GitHub Actions to full-length commit SHAs (#636)
• d90bae5 Cap @​actions/exec and @​actions/core below the ESM-only 3.x majors (#628)
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[Copilot]

Copilot review overview

🟢 Approval recommended

All reviewed workflow updates are limited to the intended action pin change.

Review effort: Lite
Findings: None

What changed in this PR

Updates azure/login from v3.0.1 to the immutable v3.1.0 commit across CI and deployment workflows.

Changes:

• Bumps the Azure Login action pin in three workflows.
• Preserves existing OIDC configuration.

File	Description
.github/​workflows/​integration-test.yaml	Updates Azure Login pin
.github/​workflows/​e2e-test.yaml	Updates Azure Login pin
.github/​workflows/​_siteops-deploy.yaml	Updates Azure Login pin

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Paymaun (digimaun)]

Dependabot (@dependabot) rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.