Release v0.5.0 — trim / Native AOT-compatible

[Chris-Wolfgang]

Summary

Release cut of Wolfgang.TryPattern v0.5.0, a MINOR bump from v0.4.1. There was no vNext this cycle: the 58 commits since v0.4.1 landed on main directly, so this PR carries only the release commit (version, CHANGELOG, fragment removal).

Version bump rationale

• MINOR: build: mark the net8.0+ assemblies IsAotCompatible and IsTrimmable #371 marks the net8.0+ assemblies IsAotCompatible / IsTrimmable. This is new consumer-facing behavior, and its fragment is typed feature. scripts/changelog.ps1 bump also derives 0.5.0.
• Public API unchanged: git diff v0.4.1..origin/main -- 'src/**/PublicAPI*.txt' is empty, and all three Unshipped files hold only #nullable enable, so nothing needed folding.
• AssemblyVersion stays 1.0.0.0 (full pin). PackageValidationBaselineVersion stays 0.4.1 until after publish.

What shipped since v0.4.1

• src:
  • build: mark the net8.0+ assemblies IsAotCompatible and IsTrimmable #371 IsAotCompatible/IsTrimmable (net8+).
  • PackageValidation enabled against 0.4.1 (ci(pack): enable PackageValidation with baseline v0.4.1 (post-deploy baseline bump) #319).
  • Analyzer/SourceLink bumps (PrivateAssets).
• Tests:
  • test: bring the test assembly to 100% line coverage #373 test assembly at 100% coverage.
  • chore(deps): migrate FsCheck.Xunit 2.16.6 -> 3.4.0 #374 FsCheck 3.4.0.
  • test: add a concurrency stress suite #376/test(concurrency): clear the seven InspectCode alerts in ConcurrencyStressTests #391 concurrency stress suite.
  • test: make the mid-flight cancellation test cover every line deterministically #383/test(concurrency): clear the seven InspectCode alerts in ConcurrencyStressTests #391 deterministic cancellation test.
  • test(aot): smoke-check every public member under Native AOT, and guard it #392 Native AOT smoke check for every public member.
• CI:
  • ci(coverage): gate test assemblies at 100% and stop gating class rows #379/chore(build-pr): mirror the pr.yaml test-assembly coverage gate #380 100% test-assembly coverage gate.
  • ci: weekly concurrency stress run #377 weekly concurrency run.
  • test(stryker): move stryker-config.json into the test project #378/ci(stryker): pin dotnet-stryker 5.0.0 and re-enable the PR gate #381 Stryker 5.0.0 re-enabled.
  • ci(pr-benchmarks): require an absolute delta as well as a percentage to fail #372 benchmark absolute floors.
  • ci(guard): configuration-only PRs pass the protected-file guard; mixed PRs fail and cannot be bypassed #358/ci(guard): find the merge base on a shallow checkout and fail closed when it cannot #359 protected-file guard.
  • ci(pr): InspectCode builds PR code with no write scope; SARIF upload moves to a no-checkout job #360/security(ci): pass step outcomes to the CodeQL summary through env, not template expansion #364/security(ci): pass the resolved package version to apicompat through env #365/security(ci): silence zizmor self-repository on the docfx call, with the reason #366 InspectCode and zizmor hardening.
  • ci: pin every workflow action to a commit SHA with an exact # vX.Y.Z comment #340 SHA pins.
  • ci(release): upload release assets with gh instead of softprops/action-gh-release #351/ci: run the changelog-fragment check on every PR #352/ci(gitleaks): allowlist docfx's generated public/*.min.js bundle and source maps #353 release, changelog and gitleaks fixes.

Verified locally (worktree at this branch's head, 7ea2f85)

• dotnet build TryPattern.sln -c Release -p:TreatWarningsAsErrors=true: 0 errors. The 3 warnings are the existing System.IO.Hashing TFM notices on the net5–7 test slices.
• dotnet test -c Release: 11/11 test runs passed (net462–net10.0).
• dotnet pack -c Release: produced Wolfgang.TryPattern.0.5.0.nupkg + .snupkg, with PackageValidation run against baseline 0.4.1.

Test plan

• Detect .NET Projects guard passes (no protected files in this diff)
• All checks green: Stage 1/2/3 coverage gate, InspectCode, Semgrep, zizmor, actionlint, CodeQL, DevSkim, gitleaks, SourceLink, AOT, License, PR benchmarks, changelog fragment check
• After merge, tag v0.5.0 on main to trigger release.yaml (the user tags)
• release.yaml publishes to NuGet, deploys docs and attaches release assets

Post-release

Tracked in a follow-up issue:

• NuGet flatcontainer shows 0.5.0
• PackageValidationBaselineVersion 0.4.1 → 0.5.0
• Release the held D20-Dice v0.9.0 (it was waiting on this TryPattern release)
• Branch cleanup

🤖 Generated with Claude Code

[github-actions]

PR benchmarks vs base (7ea2f85)

Thresholds: time > +20% and ≥ +1000 ns or allocations > +50% and ≥ +16 B (or any allocation ≥ 16 B where the base allocated none) trigger a gate failure (label perf-impact-acknowledged overrides).

Benchmark	Δ time	Δ alloc
Action_Success	+14.0%	0 (new)
Action_WithException	+2.1%	+0.0%
RunAsync_Action_Success	-4.1%	+0.1%
RunAsync_Action_WithException	-1.7%	+0.0%
RunAsync_Func_Success	-0.2%	+0.0%
RunAsync_Func_WithException	+0.4%	+0.0%
Run_Func_Success	+0.9%	+0.0%
Run_Func_WithException	+0.7%	+0.0%