refactor(Invoke-Logging): use pre-parsed scriptblock cache + add dedicated tests

[Copilot]

Invoke-Logging was bypassing the $script:GatekeeperLogging cache built by Import-GatekeeperConfig, re-compiling scriptblocks from raw config on every rule evaluation — losing closure context for any scriptblock that had already been parsed.

Changes

• tests/Invoke-Logging.tests.ps1 (new): Dedicated test coverage for Invoke-Logging that was previously only exercised via a mock in Test-FeatureFlag.tests.ps1. Covers:

  • Cached scriptblock is invoked with the correct $Rule when the effect is enabled
  • No invocation when the effect is absent from the cache (disabled logging level)
  • Graceful no-op when $script:GatekeeperLogging is $null or empty
  • Import-GatekeeperConfig is called on every invocation to guarantee cache initialization

• CHANGELOG.md: [Unreleased] entry documenting the fix.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• www.powershellgallery.com
  • Triggering command: /usr/bin/pwsh pwsh -Command .\build.ps1 -Bootstrap (dns block)
  • Triggering command: /usr/bin/pwsh pwsh -Command Register-PSRepository -Default -ErrorAction SilentlyContinue; Set-PSRepository -Name PSGallery -InstallationPolicy Trusted; .\build.ps1 -Bootstrap (dns block)
  • Triggering command: /usr/bin/pwsh pwsh -Command Get-PSRepository (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

[github-actions]

Test Results

    4 files    448 suites   14s ⏱️
  379 tests   374 ✅  5 💤 0 ❌
1 492 runs  1 469 ✅ 23 💤 0 ❌

Results for commit 86ffb8d.