Build 984 hardening

.github/mlc_config.json

@@ -0,0 +1,10 @@
+{
+  "ignorePatterns": [
+    { "pattern": "^file:///" }
+  ],
+  "timeout": "20s",
+  "retryOn429": true,
+  "retryCount": 5,
+  "fallbackToGet": true,
+  "aliveStatusCodes": [200, 206]
+}

.github/release-drafter.yml

@@ -0,0 +1,23 @@
+name-template: 'Build $NEXT_PATCH_VERSION'
+tag-template: 'v$NEXT_PATCH_VERSION'
+categories:
+  - title: '🛡️ Security & Hardening'
+    labels:
+      - 'security'
+      - 'hardening'
+  - title: '🔍 Forensics & Audits'
+    labels:
+      - 'forensics'
+      - 'audit'
+  - title: '🚀 Features'
+    labels:
+      - 'feature'
+  - title: '🚀 Core Updates'
+    labels:
+      - 'core'
+  - title: '🐛 Bug Fixes'
+    labels:
+      - 'bug'
+template: |
+  ## Changes
+  $CHANGES

.github/workflows/codecov.yml

@@ -0,0 +1,27 @@
+name: Codecov Coverage
+on:
+  workflow_run:
+    workflows: [".NET Test"]
+    types: [completed]
+
+jobs:
+  upload:
+    runs-on: ubuntu-latest
+    if: ${{ github.event.workflow_run.conclusion == 'success' }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Download Coverage Artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: coverage-opencover
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          run-id: ${{ github.event.workflow_run.id }}
+
+      - name: Upload to Codecov
+        uses: codecov/codecov-action@v4
+        with:
+          file: ./coverage.opencover.xml
+          token: ${{ secrets.CODECOV_TOKEN }}
+          fail_ci_if_error: true

.github/workflows/codeql.yml

@@ -21,7 +21,7 @@ jobs:
       matrix:
         include:
           - language: csharp
-            build-mode: manual
+            build-mode: none
 
     steps:
       - name: Checkout repository
@@ -33,13 +33,5 @@ jobs:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
 
-      - name: Setup .NET
-        uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9
-        with:
-          dotnet-version: "8.0.x"
-
-      - name: Manual build
-        run: dotnet build Linting.csproj --nologo
-
       - name: Analyze
         uses: github/codeql-action/analyze@7fc6561ed893d15cec696e062df840b21db27eb0

.github/workflows/dependency-review.yml

@@ -0,0 +1,14 @@
+name: 'Dependency Review'
+on: [pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  dependency-review:
+    runs-on: ubuntu-latest
+    steps:
+      - name: 'Checkout Repository'
+        uses: actions/checkout@v4
+      - name: 'Dependency Review'
+        uses: actions/dependency-review-action@v4