diff --git a/.github/dependabot.yml b/.github/dependabot.yml
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -10,10 +10,10 @@
     reviewers:
       - "rjmurillo"
       - "mattkotsenas"
-  # NuGet dependency management is handled by Renovate (see renovate.json).
-  # Dependabot NuGet PRs were disabled because:
-  #   1. PR titles use "Bump X from A to B" format, which fails the required
-  #      "Validate PR title" check (conventional commits required).
-  #   2. Both bots created duplicate PRs for every package update.
-  #   3. Renovate supports better grouping, automerge rules, and conventional
-  #      commit formatting out of the box.
+# NuGet dependency management is handled by Renovate (see renovate.json).
+# Dependabot NuGet PRs were disabled because:
+#   1. PR titles use "Bump X from A to B" format, which fails the required
+#      "Validate PR title" check (conventional commits required).
+#   2. Both bots created duplicate PRs for every package update.
+#   3. Renovate supports better grouping, automerge rules, and conventional
+#      commit formatting out of the box.

diff --git a/.github/labeler.yml b/.github/labeler.yml
--- a/.github/labeler.yml
+++ b/.github/labeler.yml
@@ -1,41 +1,41 @@
 # Add 'build' label to any change in the 'build' directory
 build:
-- changed-files:
-  - any-glob-to-any-file: 'build/**/*'
+  - changed-files:
+      - any-glob-to-any-file: 'build/**/*'
 
 # Add 'dependencies' label to any change in one of the packages files
 dependencies:
-- changed-files:
-  - any-glob-to-any-file: ['build/**/Packages.props', 'Directory.Packages.props']
+  - changed-files:
+      - any-glob-to-any-file: ['build/**/Packages.props', 'Directory.Packages.props']
 
 # Add 'documentation' label to any change within the 'docs' directory or any '.md' file
 documentation:
-- changed-files: 
-  - any-glob-to-any-file: ['docs/**', '**/*.md']
+  - changed-files:
+      - any-glob-to-any-file: ['docs/**', '**/*.md']
 
 # Add 'feature' label to any PR where the head branch name starts with `feature` or has a `feature` section in the name
 feature:
- - head-branch: ['^feature', 'feature']
+  - head-branch: ['^feature', 'feature']
 
 # Add 'bug' label to any PR where the head branch name starts with `bug` or has a `bug` section in the name
 bug:
- - head-branch: ['^bug', 'bug']
+  - head-branch: ['^bug', 'bug']
 
 # Add 'releasable' label to any PR that is opened against the `main` branch
 releasable:
- - base-branch: 'main'
+  - base-branch: 'main'
 
 # Add 'github_actions' label to any change to one of the GitHub workflows or configuration files
 github_actions:
-- changed-files:
-  - any-glob-to-any-file: ['.github/workflows/*.yml', '.github/dependabot.yml', '.github/labeler.yml']
+  - changed-files:
+      - any-glob-to-any-file: ['.github/workflows/*.yml', '.github/dependabot.yml', '.github/labeler.yml']
 
 # Add 'analyzers' label to any change to an analyzer, code fix, or shipping documentation
 analyzers:
-- changed-files:
-  - any-glob-to-any-file: ['src/Moq.Analyzers/AnalyzerReleases.*.md', 'src/Moq.Analyzers/**/*Analyzer.cs', 'src/Moq.Analyzers/**/*CodeFix.cs', 'src/Analyzers/**/*Analyzer.cs', 'src/CodeFixes/*Fixer.cs', 'src/Analyzers/AnalyzerReleases.*.md']
+  - changed-files:
+      - any-glob-to-any-file: ['src/Moq.Analyzers/AnalyzerReleases.*.md', 'src/Moq.Analyzers/**/*Analyzer.cs', 'src/Moq.Analyzers/**/*CodeFix.cs', 'src/Analyzers/**/*Analyzer.cs', 'src/CodeFixes/*Fixer.cs', 'src/Analyzers/AnalyzerReleases.*.md']
 
 # Add 'powershell' label to any change to a PowerShell file
 powershell:
-- changed-files:
-  - any-glob-to-any-file: ['*.ps1', '*.ps1x', '*.psm1', '*.psd1', '*.ps1xml', '*.pssc', '*.psrc', '*.cdxml']
+  - changed-files:
+      - any-glob-to-any-file: ['*.ps1', '*.ps1x', '*.psm1', '*.psd1', '*.ps1xml', '*.pssc', '*.psrc', '*.cdxml']

diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml
--- a/.github/workflows/copilot-setup-steps.yml
+++ b/.github/workflows/copilot-setup-steps.yml
@@ -22,7 +22,8 @@
       # the above doesn't work as expected, so pre-empt a workaround to avoid agent getting stuck and ignoring instructions in copilot-instructions.md
       - name: NBGV workaround
         run: git fetch --unshallow
-        
+
+
       - name: Setup .NET
         uses: actions/setup-dotnet@v5
         with:

diff --git a/.github/workflows/devskim.yml b/.github/workflows/devskim.yml
--- a/.github/workflows/devskim.yml
+++ b/.github/workflows/devskim.yml
@@ -7,9 +7,9 @@
 
 on:
   push:
-    branches: [ "main" ]
+    branches: ["main"]
   pull_request:
-    branches: [ "main" ]
+    branches: ["main"]
   schedule:
     - cron: '32 8 * * 1'
 

diff --git a/.github/workflows/label-issues.yml b/.github/workflows/label-issues.yml
--- a/.github/workflows/label-issues.yml
+++ b/.github/workflows/label-issues.yml
@@ -22,16 +22,16 @@
             // Get the issue body and title
             const body = context.payload.issue.body
             let title = context.payload.issue.title
-            
+
             // Define the labels array
             let labels = ["triage"]
-            
+
             // Check if the body or the title contains the word 'PowerShell' (case-insensitive)
             if ((body != null && body.match(/powershell/i)) || (title != null && title.match(/powershell/i))) {
               // Add the 'powershell' label to the array
               labels.push("powershell")
             }
-            
+
             // Check if the body or the title contains the words 'dotnet', '.net', 'c#' or 'csharp' (case-insensitive)
             if ((body != null && body.match(/.net/i)) || (title != null && title.match(/.net/i)) ||
                 (body != null && body.match(/dotnet/i)) || (title != null && title.match(/dotnet/i)) ||

diff --git a/.github/workflows/label-pr.yml b/.github/workflows/label-pr.yml
--- a/.github/workflows/label-pr.yml
+++ b/.github/workflows/label-pr.yml
@@ -18,4 +18,4 @@
         steps:
             - uses: actions/labeler@v6
               with:
-                  repo-token: "${{ secrets.GH_ACTIONS_PR_WRITE }}"
\ No newline at end of file
+                  repo-token: "${{ secrets.GH_ACTIONS_PR_WRITE }}"

diff --git a/.github/workflows/linters.yml b/.github/workflows/linters.yml
new file mode 100644
--- /dev/null
+++ b/.github/workflows/linters.yml
@@ -1,0 +1,40 @@
+name: Lint
+
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+    branches: ["main"]
+
+permissions: {}
+
+jobs:
+  build:
+    name: Lint
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      packages: read
+      # To report GitHub Actions status checks
+      statuses: write
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          # super-linter needs the full git history to get the
+          # list of files that changed across commits
+          fetch-depth: 0
+
+      - name: Super-linter
+        uses: super-linter/super-linter@61abc07d755095a68f4987d1c2c3d1d64408f1f9 # v8.5.0
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          DEFAULT_BRANCH: main
+          VALIDATE_GITHUB_ACTIONS: true
+          VALIDATE_YAML: true
+          VALIDATE_MARKDOWN: true
+          VALIDATE_JSON: true
+          VALIDATE_BASH: true
+          FILTER_REGEX_EXCLUDE: '\.verified\.(txt|xml|json)$'

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -86,83 +86,83 @@
     runs-on: ubuntu-24.04-arm
 
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      if: needs.check-paths.outputs.code-changed == 'true'
-      with:
-        fetch-depth: 0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        if: needs.check-paths.outputs.code-changed == 'true'
+        with:
+          fetch-depth: 0
 
-    - name: Setup, Restore, and Build Solution
-      if: needs.check-paths.outputs.code-changed == 'true'
-      uses: ./.github/actions/setup-restore-build
+      - name: Setup, Restore, and Build Solution
+        if: needs.check-paths.outputs.code-changed == 'true'
+        uses: ./.github/actions/setup-restore-build
 
-    - name: Validate analyzer host compatibility
-      if: needs.check-paths.outputs.code-changed == 'true'
-      shell: pwsh
-      run: |
-        # Verify shipped analyzer DLLs don't reference assembly versions
-        # exceeding what the minimum supported SDK host (.NET 8) provides.
-        # See: https://github.com/rjmurillo/moq.analyzers/issues/850
-        $maxVersions = @{
-          'System.Collections.Immutable' = [Version]'8.0.0.0'
-          'System.Reflection.Metadata'   = [Version]'8.0.0.0'
-        }
-        $shippedDlls = @(
-          'artifacts/bin/Moq.Analyzers/release/Moq.Analyzers.dll',
-          'artifacts/bin/Moq.Analyzers/release/Moq.CodeFixes.dll',
-          'artifacts/bin/Moq.Analyzers/release/Microsoft.CodeAnalysis.AnalyzerUtilities.dll'
-        )
-        $failed = $false
-        foreach ($dll in $shippedDlls) {
-          $name = [System.IO.Path]::GetFileName($dll)
-          $bytes = [System.IO.File]::ReadAllBytes($dll)
-          $asm = [System.Reflection.Assembly]::Load($bytes)
-          $dllFailed = $false
-          foreach ($ref in $asm.GetReferencedAssemblies()) {
-            if ($maxVersions.ContainsKey($ref.Name) -and $ref.Version -gt $maxVersions[$ref.Name]) {
-              Write-Error "$name references $($ref.Name) $($ref.Version), max allowed is $($maxVersions[$ref.Name])"
-              $failed = $true
-              $dllFailed = $true
+      - name: Validate analyzer host compatibility
+        if: needs.check-paths.outputs.code-changed == 'true'
+        shell: pwsh
+        run: |
+          # Verify shipped analyzer DLLs don't reference assembly versions
+          # exceeding what the minimum supported SDK host (.NET 8) provides.
+          # See: https://github.com/rjmurillo/moq.analyzers/issues/850
+          $maxVersions = @{
+            'System.Collections.Immutable' = [Version]'8.0.0.0'
+            'System.Reflection.Metadata'   = [Version]'8.0.0.0'
+          }
+          $shippedDlls = @(
+            'artifacts/bin/Moq.Analyzers/release/Moq.Analyzers.dll',
+            'artifacts/bin/Moq.Analyzers/release/Moq.CodeFixes.dll',
+            'artifacts/bin/Moq.Analyzers/release/Microsoft.CodeAnalysis.AnalyzerUtilities.dll'
+          )
+          $failed = $false
+          foreach ($dll in $shippedDlls) {
+            $name = [System.IO.Path]::GetFileName($dll)
+            $bytes = [System.IO.File]::ReadAllBytes($dll)
+            $asm = [System.Reflection.Assembly]::Load($bytes)
+            $dllFailed = $false
+            foreach ($ref in $asm.GetReferencedAssemblies()) {
+              if ($maxVersions.ContainsKey($ref.Name) -and $ref.Version -gt $maxVersions[$ref.Name]) {
+                Write-Error "$name references $($ref.Name) $($ref.Version), max allowed is $($maxVersions[$ref.Name])"
+                $failed = $true
+                $dllFailed = $true
+              }
             }
+            if (-not $dllFailed) { Write-Host "$name - OK" }
           }
-          if (-not $dllFailed) { Write-Host "$name - OK" }
-        }
-        if ($failed) { exit 1 }
+          if ($failed) { exit 1 }
 
-    - name: Upload binlogs
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
-      if: needs.check-paths.outputs.code-changed == 'true' && (success() || failure())
-      with:
-        name: binlogs
-        path: ./artifacts/logs
-        if-no-files-found: error
+      - name: Upload binlogs
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        if: needs.check-paths.outputs.code-changed == 'true' && (success() || failure())
+        with:
+          name: binlogs
+          path: ./artifacts/logs
+          if-no-files-found: error
 
-    - name: Upload SARIF files
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
-      if: needs.check-paths.outputs.code-changed == 'true' && (success() || failure())
-      with:
-        name: SARIF files
-        path: ./artifacts/obj/**/*.sarif
+      - name: Upload SARIF files
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        if: needs.check-paths.outputs.code-changed == 'true' && (success() || failure())
+        with:
+          name: SARIF files
+          path: ./artifacts/obj/**/*.sarif
 
-    - name: Upload packages
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
-      if: needs.check-paths.outputs.code-changed == 'true'
-      with:
-        name: packages
-        path: |
-          ./artifacts/package
-        if-no-files-found: error
+      - name: Upload packages
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        if: needs.check-paths.outputs.code-changed == 'true'
+        with:
+          name: packages
+          path: |
+            ./artifacts/package
+          if-no-files-found: error
 
-    - name: Upload artifacts
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
-      if: needs.check-paths.outputs.code-changed == 'true' && (success() || failure())
-      with:
-        name: artifacts
-        path: ./artifacts
-        if-no-files-found: error
+      - name: Upload artifacts
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        if: needs.check-paths.outputs.code-changed == 'true' && (success() || failure())
+        with:
+          name: artifacts
+          path: ./artifacts
+          if-no-files-found: error
 
-    - name: Skip notice
-      if: needs.check-paths.outputs.code-changed != 'true'
-      run: echo "Skipped -- no code changes detected"
+      - name: Skip notice
+        if: needs.check-paths.outputs.code-changed != 'true'
+        run: echo "Skipped -- no code changes detected"
 
   # Run unit tests on multiple platforms.
   # Build happens independently on each runner so tests use platform-native binaries.
@@ -181,90 +181,90 @@
       IS_TARGET_MAIN: ${{ github.ref == 'refs/heads/main' }}
 
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      if: needs.check-paths.outputs.code-changed == 'true'
-      with:
-        fetch-depth: 0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        if: needs.check-paths.outputs.code-changed == 'true'
+        with:
+          fetch-depth: 0
 
-    - name: Setup, Restore, and Build Solution
-      if: needs.check-paths.outputs.code-changed == 'true'
-      uses: ./.github/actions/setup-restore-build
+      - name: Setup, Restore, and Build Solution
+        if: needs.check-paths.outputs.code-changed == 'true'
+        uses: ./.github/actions/setup-restore-build
 
-    - name: Restore Code Coverage history
-      if: needs.check-paths.outputs.code-changed == 'true'
-      uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
-      with:
-        name: CoverageHistory-${{ matrix.os }}
-        path: ./artifacts/TestResults/coveragehistory
-      continue-on-error: true
+      - name: Restore Code Coverage history
+        if: needs.check-paths.outputs.code-changed == 'true'
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
+        with:
+          name: CoverageHistory-${{ matrix.os }}
+          path: ./artifacts/TestResults/coveragehistory
+        continue-on-error: true
 
-    - name: Test
-      if: needs.check-paths.outputs.code-changed == 'true'
-      run: dotnet test --no-build --configuration Release --settings ./build/targets/tests/test.runsettings
-      env:
-        REPORTGENERATOR_LICENSE: ${{ secrets.REPORTGENERATOR_LICENSE }}
+      - name: Test
+        if: needs.check-paths.outputs.code-changed == 'true'
+        run: dotnet test --no-build --configuration Release --settings ./build/targets/tests/test.runsettings
+        env:
+          REPORTGENERATOR_LICENSE: ${{ secrets.REPORTGENERATOR_LICENSE }}
 
-    - name: Upload coverage history
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
-      if: >-
-        needs.check-paths.outputs.code-changed == 'true'
-        && success()
-        && env.IS_TARGET_MAIN == 'true'
-      with:
-        name: CoverageHistory-${{ matrix.os }}
-        path: ./artifacts/TestResults/coveragehistory
+      - name: Upload coverage history
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        if: >-
+          needs.check-paths.outputs.code-changed == 'true'
+          && success()
+          && env.IS_TARGET_MAIN == 'true'
+        with:
+          name: CoverageHistory-${{ matrix.os }}
+          path: ./artifacts/TestResults/coveragehistory
 
-    - name: Upload *.received.* files
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
-      if: needs.check-paths.outputs.code-changed == 'true' && failure()
-      with:
-        name: verify-test-results-${{ matrix.os }}
-        path: |
-          **/*.received.*
+      - name: Upload *.received.* files
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        if: needs.check-paths.outputs.code-changed == 'true' && failure()
+        with:
+          name: verify-test-results-${{ matrix.os }}
+          path: |
+            **/*.received.*
 
-    - name: Upload Test Report
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
-      if: needs.check-paths.outputs.code-changed == 'true' && (success() || failure())
-      with:
-        name: .NET Test Reports (${{ matrix.os }})
-        path: "artifacts/TestResults/**/*.trx"
-        if-no-files-found: error
+      - name: Upload Test Report
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        if: needs.check-paths.outputs.code-changed == 'true' && (success() || failure())
+        with:
+          name: .NET Test Reports (${{ matrix.os }})
+          path: "artifacts/TestResults/**/*.trx"
+          if-no-files-found: error
 
-    - name: Upload Code Coverage Report
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
-      if: needs.check-paths.outputs.code-changed == 'true' && (success() || failure())
-      with:
-        name: .NET Code Coverage Reports (${{ matrix.os }})
-        path: "artifacts/TestResults/coverage/**"
+      - name: Upload Code Coverage Report
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        if: needs.check-paths.outputs.code-changed == 'true' && (success() || failure())
+        with:
+          name: .NET Code Coverage Reports (${{ matrix.os }})
+          path: "artifacts/TestResults/coverage/**"
 
-    - name: Publish coverage summary to GitHub
-      if: needs.check-paths.outputs.code-changed == 'true'
-      run: cat artifacts/TestResults/coverage/SummaryGithub.md >> $GITHUB_STEP_SUMMARY
-      shell: bash
+      - name: Publish coverage summary to GitHub
+        if: needs.check-paths.outputs.code-changed == 'true'
+        run: cat artifacts/TestResults/coverage/SummaryGithub.md >> $GITHUB_STEP_SUMMARY
+        shell: bash
 
-    - name: Upload coverage data to Codacy
-      if: >-
-        needs.check-paths.outputs.code-changed == 'true'
-        && runner.os == 'Linux'
-        && env.IS_CODACY_COVERAGE_ALLOWED == 'true'
-      uses: codacy/codacy-coverage-reporter-action@89d6c85cfafaec52c72b6c5e8b2878d33104c699 # v1.3.0
-      with:
-        project-token: ${{ secrets.CODACY_PROJECT_TOKEN }}
-        coverage-reports: ${{ github.workspace }}/artifacts/TestResults/coverage/Cobertura.xml
+      - name: Upload coverage data to Codacy
+        if: >-
+          needs.check-paths.outputs.code-changed == 'true'
+          && runner.os == 'Linux'
+          && env.IS_CODACY_COVERAGE_ALLOWED == 'true'
+        uses: codacy/codacy-coverage-reporter-action@89d6c85cfafaec52c72b6c5e8b2878d33104c699 # v1.3.0
+        with:
+          project-token: ${{ secrets.CODACY_PROJECT_TOKEN }}
+          coverage-reports: ${{ github.workspace }}/artifacts/TestResults/coverage/Cobertura.xml
 
-    - name: Upload coverage data to Qlty
-      if: >-
-        needs.check-paths.outputs.code-changed == 'true'
-        && runner.os == 'Linux'
-        && env.IS_QLTY_COVERAGE_ALLOWED == 'true'
-      uses: qltysh/qlty-action/coverage@a19242102d17e497f437d7466aa01b528537e899 # v2
-      with:
-        token: ${{ secrets.QLTY_COVERAGE_TOKEN }}
-        files: ${{ github.workspace }}/artifacts/TestResults/coverage/Cobertura.xml
+      - name: Upload coverage data to Qlty
+        if: >-
+          needs.check-paths.outputs.code-changed == 'true'
+          && runner.os == 'Linux'
+          && env.IS_QLTY_COVERAGE_ALLOWED == 'true'
+        uses: qltysh/qlty-action/coverage@a19242102d17e497f437d7466aa01b528537e899 # v2
+        with:
+          token: ${{ secrets.QLTY_COVERAGE_TOKEN }}
+          files: ${{ github.workspace }}/artifacts/TestResults/coverage/Cobertura.xml
 
-    - name: Skip notice
-      if: needs.check-paths.outputs.code-changed != 'true'
-      run: echo "Skipped -- no code changes detected"
+      - name: Skip notice
+        if: needs.check-paths.outputs.code-changed != 'true'
+        run: echo "Skipped -- no code changes detected"
 
   # Verify the shipped nupkg loads without CS8032 on every supported host.
   # This is the end-to-end integration test for issue #850.
@@ -320,127 +320,127 @@
             build-engine: msbuild
 
     steps:
-    - name: Setup .NET ${{ matrix.dotnet-version }}
-      if: needs.check-paths.outputs.code-changed == 'true'
-      uses: actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309 # v5
-      with:
-        dotnet-version: ${{ matrix.dotnet-version }}
+      - name: Setup .NET ${{ matrix.dotnet-version }}
+        if: needs.check-paths.outputs.code-changed == 'true'
+        uses: actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309 # v5
+        with:
+          dotnet-version: ${{ matrix.dotnet-version }}
 
-    - name: Setup MSBuild
-      if: needs.check-paths.outputs.code-changed == 'true' && matrix.build-engine == 'msbuild'
-      uses: microsoft/setup-msbuild@6fb02220983dee41ce7ae257b6f4d8f9bf5ed4ce # v2
+      - name: Setup MSBuild
+        if: needs.check-paths.outputs.code-changed == 'true' && matrix.build-engine == 'msbuild'
+        uses: microsoft/setup-msbuild@6fb02220983dee41ce7ae257b6f4d8f9bf5ed4ce # v2
 
-    - name: Download nupkg artifact
-      if: needs.check-paths.outputs.code-changed == 'true'
-      uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
-      with:
-        name: packages
-        path: ./local-feed
+      - name: Download nupkg artifact
+        if: needs.check-paths.outputs.code-changed == 'true'
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
+        with:
+          name: packages
+          path: ./local-feed
 
-    - name: Create test project
-      if: needs.check-paths.outputs.code-changed == 'true'
-      shell: pwsh
-      run: |
-        $pkg = Get-ChildItem ./local-feed -Recurse -Filter 'Moq.Analyzers.*.nupkg' |
-               Where-Object { $_.Name -notlike '*.symbols.*' } |
-               Select-Object -First 1
-        if (-not $pkg) {
-          Write-Error "Could not find Moq.Analyzers.*.nupkg (excluding symbols) in ./local-feed"
-          exit 1
-        }
-        $version = $pkg.Name -replace '^Moq\.Analyzers\.' -replace '\.nupkg$'
-        $feedDir = (Resolve-Path $pkg.DirectoryName).Path
-        Write-Host "Testing Moq.Analyzers $version with ${{ matrix.build-engine }} / ${{ matrix.tfm }}"
-        echo "ANALYZER_VERSION=$version" >> $env:GITHUB_ENV
-        echo "FEED_DIR=$feedDir" >> $env:GITHUB_ENV
+      - name: Create test project
+        if: needs.check-paths.outputs.code-changed == 'true'
+        shell: pwsh
+        run: |
+          $pkg = Get-ChildItem ./local-feed -Recurse -Filter 'Moq.Analyzers.*.nupkg' |
+                 Where-Object { $_.Name -notlike '*.symbols.*' } |
+                 Select-Object -First 1
+          if (-not $pkg) {
+            Write-Error "Could not find Moq.Analyzers.*.nupkg (excluding symbols) in ./local-feed"
+            exit 1
+          }
+          $version = $pkg.Name -replace '^Moq\.Analyzers\.' -replace '\.nupkg$'
+          $feedDir = (Resolve-Path $pkg.DirectoryName).Path
+          Write-Host "Testing Moq.Analyzers $version with ${{ matrix.build-engine }} / ${{ matrix.tfm }}"
+          echo "ANALYZER_VERSION=$version" >> $env:GITHUB_ENV
+          echo "FEED_DIR=$feedDir" >> $env:GITHUB_ENV
 
-        New-Item -ItemType Directory -Path test-project | Out-Null
+          New-Item -ItemType Directory -Path test-project | Out-Null
 
-        @"
-        <?xml version="1.0" encoding="utf-8"?>
-        <configuration>
-          <packageSources>
-            <clear />
-            <add key="local" value="$feedDir" />
-            <add key="nuget.org" value="https://api.nuget.org/v3/index.json" />
-          </packageSources>
-        </configuration>
-        "@ | Set-Content test-project/nuget.config
+          @"
+          <?xml version="1.0" encoding="utf-8"?>
+          <configuration>
+            <packageSources>
+              <clear />
+              <add key="local" value="$feedDir" />
+              <add key="nuget.org" value="https://api.nuget.org/v3/index.json" />
+            </packageSources>
+          </configuration>
+          "@ | Set-Content test-project/nuget.config
 
-        @"
-        <Project Sdk="Microsoft.NET.Sdk">
-          <PropertyGroup>
-            <OutputType>Library</OutputType>
-            <TargetFramework>${{ matrix.tfm }}</TargetFramework>
-            <LangVersion>latest</LangVersion>
-          </PropertyGroup>
-          <ItemGroup>
-            <PackageReference Include="Moq.Analyzers" Version="$version" />
-            <PackageReference Include="Microsoft.NETFramework.ReferenceAssemblies" Version="1.0.3" PrivateAssets="all" />
-          </ItemGroup>
-        </Project>
-        "@ | Set-Content test-project/TestAnalyzerLoad.csproj
+          @"
+          <Project Sdk="Microsoft.NET.Sdk">
+            <PropertyGroup>
+              <OutputType>Library</OutputType>
+              <TargetFramework>${{ matrix.tfm }}</TargetFramework>
+              <LangVersion>latest</LangVersion>
+            </PropertyGroup>
+            <ItemGroup>
+              <PackageReference Include="Moq.Analyzers" Version="$version" />
+              <PackageReference Include="Microsoft.NETFramework.ReferenceAssemblies" Version="1.0.3" PrivateAssets="all" />
+            </ItemGroup>
+          </Project>
+          "@ | Set-Content test-project/TestAnalyzerLoad.csproj
 
-        @"
-        namespace TestAnalyzerLoad;
-        public class Placeholder { }
-        "@ | Set-Content test-project/Placeholder.cs
+          @"
+          namespace TestAnalyzerLoad;
+          public class Placeholder { }
+          "@ | Set-Content test-project/Placeholder.cs
 
-    - name: Build with dotnet CLI
-      if: needs.check-paths.outputs.code-changed == 'true' && matrix.build-engine == 'dotnet'
-      shell: pwsh
-      working-directory: test-project
-      run: |
-        $output = dotnet build -v n 2>&1 | Out-String
-        $buildExitCode = $LASTEXITCODE
-        Write-Host $output
+      - name: Build with dotnet CLI
+        if: needs.check-paths.outputs.code-changed == 'true' && matrix.build-engine == 'dotnet'
+        shell: pwsh
+        working-directory: test-project
+        run: |
+          $output = dotnet build -v n 2>&1 | Out-String
+          $buildExitCode = $LASTEXITCODE
+          Write-Host $output
 
-        if ($buildExitCode -ne 0) {
-          Write-Host "::error::Build failed with exit code $buildExitCode (dotnet / ${{ matrix.tfm }})"
-          exit $buildExitCode
-        }
+          if ($buildExitCode -ne 0) {
+            Write-Host "::error::Build failed with exit code $buildExitCode (dotnet / ${{ matrix.tfm }})"
+            exit $buildExitCode
+          }
 
-        if ($output -match 'CS8032') {
-          Write-Host "::error::CS8032: analyzer failed to load (dotnet / ${{ matrix.tfm }}). See https://github.com/rjmurillo/moq.analyzers/issues/850"
-          exit 1
-        }
-        if ($output -match '(?i)could not load file or assembly') {
-          Write-Host "::error::Assembly binding failure (dotnet / ${{ matrix.tfm }}). See https://github.com/rjmurillo/moq.analyzers/issues/850"
-          exit 1
-        }
+          if ($output -match 'CS8032') {
+            Write-Host "::error::CS8032: analyzer failed to load (dotnet / ${{ matrix.tfm }}). See https://github.com/rjmurillo/moq.analyzers/issues/850"
+            exit 1
+          }
+          if ($output -match '(?i)could not load file or assembly') {
+            Write-Host "::error::Assembly binding failure (dotnet / ${{ matrix.tfm }}). See https://github.com/rjmurillo/moq.analyzers/issues/850"
+            exit 1
+          }
 
-        Write-Host ""
-        Write-Host "Analyzer loaded successfully (dotnet / ${{ matrix.tfm }})"
+          Write-Host ""
+          Write-Host "Analyzer loaded successfully (dotnet / ${{ matrix.tfm }})"
 
-    - name: Build with MSBuild
-      if: needs.check-paths.outputs.code-changed == 'true' && matrix.build-engine == 'msbuild'
-      shell: pwsh
-      working-directory: test-project
-      run: |
-        $output = msbuild TestAnalyzerLoad.csproj -restore -p:Configuration=Release -v:n 2>&1 | Out-String
-        $buildExitCode = $LASTEXITCODE
-        Write-Host $output
+      - name: Build with MSBuild
+        if: needs.check-paths.outputs.code-changed == 'true' && matrix.build-engine == 'msbuild'
+        shell: pwsh
+        working-directory: test-project
+        run: |
+          $output = msbuild TestAnalyzerLoad.csproj -restore -p:Configuration=Release -v:n 2>&1 | Out-String
+          $buildExitCode = $LASTEXITCODE
+          Write-Host $output
 
-        if ($buildExitCode -ne 0) {
-          Write-Host "::error::Build failed with exit code $buildExitCode (msbuild / ${{ matrix.tfm }})"
-          exit $buildExitCode
-        }
+          if ($buildExitCode -ne 0) {
+            Write-Host "::error::Build failed with exit code $buildExitCode (msbuild / ${{ matrix.tfm }})"
+            exit $buildExitCode
+          }
 
-        if ($output -match 'CS8032') {
-          Write-Host "::error::CS8032: analyzer failed to load (msbuild / ${{ matrix.tfm }}). See https://github.com/rjmurillo/moq.analyzers/issues/850"
-          exit 1
-        }
-        if ($output -match '(?i)could not load file or assembly') {
-          Write-Host "::error::Assembly binding failure (msbuild / ${{ matrix.tfm }}). See https://github.com/rjmurillo/moq.analyzers/issues/850"
-          exit 1
-        }
+          if ($output -match 'CS8032') {
+            Write-Host "::error::CS8032: analyzer failed to load (msbuild / ${{ matrix.tfm }}). See https://github.com/rjmurillo/moq.analyzers/issues/850"
+            exit 1
+          }
+          if ($output -match '(?i)could not load file or assembly') {
+            Write-Host "::error::Assembly binding failure (msbuild / ${{ matrix.tfm }}). See https://github.com/rjmurillo/moq.analyzers/issues/850"
+            exit 1
+          }
 
-        Write-Host ""
-        Write-Host "Analyzer loaded successfully (msbuild / ${{ matrix.tfm }})"
+          Write-Host ""
+          Write-Host "Analyzer loaded successfully (msbuild / ${{ matrix.tfm }})"
 
-    - name: Skip notice
-      if: needs.check-paths.outputs.code-changed != 'true'
-      run: echo "Skipped -- no code changes detected"
+      - name: Skip notice
+        if: needs.check-paths.outputs.code-changed != 'true'
+        run: echo "Skipped -- no code changes detected"
 
   # Performance validation runs last, after build and tests confirm correctness.
   # Builds from source on Linux ARM to get consistent benchmark results.
@@ -453,100 +453,100 @@
       FORCE_PERF_BASELINE: ${{ github.event.inputs.force_baseline }}
 
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      if: needs.check-paths.outputs.code-changed == 'true'
-      with:
-        fetch-depth: 0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        if: needs.check-paths.outputs.code-changed == 'true'
+        with:
+          fetch-depth: 0
 
-    - name: Setup, Restore, and Build Solution
-      if: needs.check-paths.outputs.code-changed == 'true'
-      uses: ./.github/actions/setup-restore-build
+      - name: Setup, Restore, and Build Solution
+        if: needs.check-paths.outputs.code-changed == 'true'
+        uses: ./.github/actions/setup-restore-build
 
-    - name: Get baseline SHA
-      if: needs.check-paths.outputs.code-changed == 'true'
-      id: get-baseline-sha
-      run: |
-        if (-not (Test-Path build/perf/baseline.json)) {
-          Write-Error "baseline.json not found - aborting performance job."
-          exit 1
-        }
-        $baseline = Get-Content build/perf/baseline.json | ConvertFrom-Json
-        echo "sha=$($baseline.sha)" >> $env:GITHUB_OUTPUT
-      shell: pwsh
+      - name: Get baseline SHA
+        if: needs.check-paths.outputs.code-changed == 'true'
+        id: get-baseline-sha
+        run: |
+          if (-not (Test-Path build/perf/baseline.json)) {
+            Write-Error "baseline.json not found - aborting performance job."
+            exit 1
+          }
+          $baseline = Get-Content build/perf/baseline.json | ConvertFrom-Json
+          echo "sha=$($baseline.sha)" >> $env:GITHUB_OUTPUT
+        shell: pwsh
 
-    # The baseline SHA may require a different .NET SDK version
-    - name: Checkout baseline
-      if: needs.check-paths.outputs.code-changed == 'true'
-      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      with:
-        ref: ${{ steps.get-baseline-sha.outputs.sha }}
-        fetch-depth: 0
+      # The baseline SHA may require a different .NET SDK version
+      - name: Checkout baseline
+        if: needs.check-paths.outputs.code-changed == 'true'
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
... diff truncated: showing 800 of 2055 lines