Net9/housekeeping (#6)

⬆️ bump dependencies

👷 tweaking of pipeline

💬 updated community health pages

.github/workflows/pipelines.yml

@@ -3,10 +3,10 @@ on:
   pull_request:
     branches: [main]
     paths-ignore:
-      - .codecov
-      - .docfx
-      - .github
-      - .nuget
+      - .codecov/**
+      - .docfx/**
+      - .nuget/**
+      - '**/*.md'
   workflow_dispatch:
     inputs:
       configuration:

.github/workflows/scorecard.yml

@@ -0,0 +1,42 @@
+name: Scorecard supply-chain security
+on:
+  branch_protection_rule:
+  schedule:
+    - cron: '45 17 * * 2'
+  push:
+    branches: [ "main" ]
+
+permissions: read-all
+
+jobs:
+  analysis:
+    name: Scorecard analysis
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+      id-token: write
+
+    steps:
+      - name: "Checkout code"
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
+      - name: "Run analysis"
+        uses: ossf/scorecard-action@v2.4.0
+        with:
+          results_file: results.sarif
+          results_format: sarif
+          publish_results: true
+
+      - name: "Upload artifact"
+        uses: actions/upload-artifact@v4
+        with:
+          name: SARIF file
+          path: results.sarif
+          retention-days: 5
+
+      - name: "Upload to code-scanning"
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: results.sarif

Directory.Build.props

@@ -42,8 +42,8 @@
   </ItemGroup>
 
   <ItemGroup Condition="'$(IsTestProject)' == 'false'">
-    <PackageReference Include="Microsoft.SourceLink.GitHub" Version="8.0.0" PrivateAssets="all" />
-    <PackageReference Include="MinVer" Version="6.0.0" PrivateAssets="all" />
+    <PackageReference Include="Microsoft.SourceLink.GitHub" PrivateAssets="all" />
+    <PackageReference Include="MinVer" PrivateAssets="all" />
     <None Include="..\..\.nuget\$(MSBuildProjectName)\icon.png" Pack="true" Visible="false" PackagePath="\" />
     <None Include="..\..\.nuget\$(MSBuildProjectName)\README.md" Pack="true" PackagePath="\" />
   </ItemGroup>
@@ -69,19 +69,19 @@
   </PropertyGroup>
 
   <ItemGroup Condition="'$(IsTestProject)' == 'true'">
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.11.1" />
-    <PackageReference Include="xunit" Version="2.9.0" />
-    <PackageReference Include="xunit.runner.console" Version="2.9.0" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="2.8.2" />
-    <PackageReference Include="coverlet.msbuild" Version="6.0.2">
+    <PackageReference Include="Microsoft.NET.Test.Sdk" />
+    <PackageReference Include="xunit" />
+    <PackageReference Include="xunit.runner.console" />
+    <PackageReference Include="xunit.runner.visualstudio" />
+    <PackageReference Include="coverlet.msbuild">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="coverlet.collector" Version="6.0.2">
+    <PackageReference Include="coverlet.collector">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="Codebelt.Extensions.Xunit.App" Version="8.4.1" PrivateAssets="all" />
+    <PackageReference Include="Codebelt.Extensions.Xunit.App" PrivateAssets="all" />
   </ItemGroup>
 
 </Project>

Directory.Packages.props

@@ -0,0 +1,16 @@
+<Project>
+  <PropertyGroup>
+    <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
+  </PropertyGroup>
+  <ItemGroup>
+    <PackageVersion Include="Codebelt.Extensions.Xunit.App" Version="9.0.0" />
+    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="17.12.0" />
+    <PackageVersion Include="Microsoft.SourceLink.GitHub" Version="8.0.0" />
+    <PackageVersion Include="MinVer" Version="6.0.0" />
+    <PackageVersion Include="coverlet.collector" Version="6.0.2" />
+    <PackageVersion Include="coverlet.msbuild" Version="6.0.2" />
+    <PackageVersion Include="xunit" Version="2.9.2" />
+    <PackageVersion Include="xunit.runner.console" Version="2.9.2" />
+    <PackageVersion Include="xunit.runner.visualstudio" Version="2.8.2" />
+  </ItemGroup>
+</Project>

README.md

@@ -1,8 +1,10 @@
 ![ClassLibrary1](.nuget/ClassLibrary1/icon.png)
 
-# Repository template for .NET class library projects
+# Classlibrary1 API by Codebelt
 
-Template repository for .NET class library projects following [Microsoft Engineering Guidelines](https://github.com/dotnet/aspnetcore/wiki/Engineering-guidelines) as well as Conventions, Idioms and Patterns by [Codebelt](https://github.com/codebeltnet#conventions-idioms-and-patterns).
+[![ClassLibrary1 CI/CD Pipeline](https://github.com/codebeltnet/ClassLibrary1/actions/workflows/pipelines.yml/badge.svg)](https://github.com/codebeltnet/ClassLibrary1/actions/workflows/pipelines.yml) [![codecov](https://codecov.io/gh/codebeltnet/ClassLibrary1/graph/badge.svg?token=WAmfmpQyCz)](https://codecov.io/gh/codebeltnet/ClassLibrary1) [![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=ClassLibrary1&metric=alert_status)](https://sonarcloud.io/dashboard?id=ClassLibrary1) [![Maintainability Rating](https://sonarcloud.io/api/project_badges/measure?project=ClassLibrary1&metric=sqale_rating)](https://sonarcloud.io/dashboard?id=ClassLibrary1) [![Reliability Rating](https://sonarcloud.io/api/project_badges/measure?project=ClassLibrary1&metric=reliability_rating)](https://sonarcloud.io/dashboard?id=ClassLibrary1) [![Security Rating](https://sonarcloud.io/api/project_badges/measure?project=ClassLibrary1&metric=security_rating)](https://sonarcloud.io/dashboard?id=ClassLibrary1) [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/codebeltnet/ClassLibrary1/badge)](https://scorecard.dev/viewer/?uri=github.com/codebeltnet/ClassLibrary1)
+
+Provides a focused API for .NET class library projects following [Microsoft Engineering Guidelines](https://github.com/dotnet/aspnetcore/wiki/Engineering-guidelines) as well as Conventions, Idioms and Patterns by [Codebelt](https://github.com/codebeltnet#conventions-idioms-and-patterns).
 
 ## 📦 Standalone Packages
 
@@ -20,8 +22,9 @@ Provides a convenient set of default API additions for ...
 |:--|:-:|:-:|:-:|
 | [ClassLibrary1.App](https://www.nuget.org/packages/ClassLibrary1.App/) | ![vNext](https://img.shields.io/nuget/vpre/ClassLibrary1.App?logo=nuget) | ![Stable](https://img.shields.io/nuget/v/ClassLibrary1.App?logo=nuget) | ![Downloads](https://img.shields.io/nuget/dt/ClassLibrary1.App?color=blueviolet&logo=nuget) |
 
-### Contributing to `Extensions for xUnit API by Codebelt`
-Contributions are welcome! 
+### Contributing to `Extensions for ClassLibrary1 API by Codebelt`
+[Contributions](.github/CONTRIBUTING.md) are welcome and appreciated.
+
 Feel free to submit issues, feature requests, or pull requests to help improve this library.
 
 ### License

testenvironments.json

@@ -9,7 +9,7 @@
         {
             "name": "Docker-Ubuntu",
             "type": "docker",
-            "dockerImage": "gimlichael/ubuntu-testrunner:net6.0.424-net8.0.303"
+            "dockerImage": "gimlichael/ubuntu-testrunner:net8.0.404-9.0.100"
         }
     ]
 }