ci: 0.10.1 CI-infra bundle (protected + supporting files) - #247
Merged
Conversation
Brings the 0.10.1 thorough-review cycle's protected files (21 workflows, .zizmor.yml, root + aot-smoke + sourcelink Directory.Build.*, aot-smoke & samples .editorconfig) onto main together with the non-protected files they reference (scripts/, aot-smoke consumer, sourcelink consumer, license-audit configs, samples project, the new Concurrency/Fuzz/ DocExamples test projects + stryker-config.json, and the .slnx). Merging this via admin-bypass drops the protected delta from the vNext→ main release PR (#246) so its Detect .NET Projects guard passes and Stage 1/2/3 run before merge. Same pattern as ETL-Abstractions #306. No src/ or public-API change; version bump, CHANGELOG, docs and the Unit-test additions stay in #246. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
main is ahead of vNext on Directory.Build.props (Meziantou 3.0.123→ 3.0.125, SonarAnalyzer 10.29→10.30 via dependabot group bump #243). The bundle carried vNext's older copy, which would have downgraded those analyzers on main. Restore Directory.Build.props to main's version so the bundle introduces zero reversions; vNext's copy is reconciled by the main→vNext merge that clears #246's guard. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Keeps the bundle's pr.yaml identical to vNext's so it stays out of #246's protected diff after this merges. See vNext commit for rationale. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This was referenced Jul 29, 2026
This was referenced Aug 5, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Purpose
Land the 0.10.1 thorough-review cycle's CI-infrastructure files on
mainahead of the release PR (#246), so #246'sDetect .NET Projectsguard clears and Stage 1/2/3 run before merge.This is the admin-bypass half of a protected-file split (same pattern as ETL-Abstractions #306). The guard will FAIL on this PR by design — it modifies protected files. Please merge with admin bypass.
Contents (56 files)
Protected (the delta that trips #246's guard):
.github/workflows/*(calibrated on vNext).zizmor.yml, rootDirectory.Build.propsaot-smoke/+.github/sourcelink/Directory.Build.props/.targetsaot-smoke/.editorconfig,samples/.editorconfigSupporting non-protected (so
mainstays buildable/consistent):scripts/(normalize-trx, reproducible-manifest .sh/.py, stryker-score)aot-smoke/consumer project,.github/sourcelink/consumer + verify + README,.github/license-audit/*.jsonsamples/Wolfgang.Etl.TestKit.Sample/projecttests/…Tests.{Concurrency,Fuzz,DocExamples}/projects +Tests.Unit/stryker-config.jsonETL-Test-Kit.slnx(keeps the solution consistent with the added projects)Not here (stays in #246)
src/**(version bump + Abstractions ref),CHANGELOG.md,README.md,SECURITY.md,docs/**,docfx_project/docfx.json, and the Unit-test.csadditions — none protected.After merge
Merge
main→vNextso #246's protected diff drops; its guard then passes and Stage 1/2/3 run before the release merge.