v0.6.3: dependency updates and NuGet trusted publishing#3
Merged
Conversation
Update all NuGet package references to latest (none were pinned): - Microsoft.Extensions.* and System.Security.Cryptography.ProtectedData 10.0.5 -> 10.0.9 - Spectre.Console 0.55.2 -> 0.56.0 (Spectre.Console.Cli stays at 0.55.0, latest stable) - Microsoft.SourceLink.GitHub 8.0.0 -> 10.0.300 - Test deps: Microsoft.NET.Test.Sdk 18.6.0, xunit 2.9.3, xunit.runner.visualstudio 3.1.5, coverlet.collector 10.0.1 Switch the publish job to OIDC trusted publishing via NuGet/login@v1, replacing the long-lived NUGET_API_KEY secret with a short-lived key. Build clean, all 145 tests pass.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
publishCI job to OIDC-based NuGet trusted publishing, replacing the long-livedNUGET_API_KEYsecret.0.6.3and add a CHANGELOG entry.Package updates
Library
Tests: Microsoft.NET.Test.Sdk 18.6.0, xunit 2.9.3, xunit.runner.visualstudio 3.1.5, coverlet.collector 10.0.1.
Trusted publishing
The
publishjob now requestsid-token: write, exchanges the GitHub OIDC token for a short-lived nuget.org API key viaNuGet/login@v1, and pushes with that key. Requires a trusted-publishing policy on nuget.org bound to this repo +ci.yml, and aNUGET_USERrepo secret (configured separately).Test plan
dotnet build -c Release— clean (0 warnings,TreatWarningsAsErrorson)dotnet test -c Release— all 145 tests passv0.6.3) exercises the trusted-publishing flow end to end