diff --git a/.github/workflows/dotnet.yml b/.github/workflows/dotnet.yml index 2169599..73acfa6 100644 --- a/.github/workflows/dotnet.yml +++ b/.github/workflows/dotnet.yml @@ -1,10 +1,8 @@ name: .NET on: - push: - branches: [ ] pull_request: - branches: [ ] + branches: [ main ] jobs: build: @@ -12,11 +10,11 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: Setup .NET - uses: actions/setup-dotnet@v1 + uses: actions/setup-dotnet@v5 with: - dotnet-version: 3.1.x + dotnet-version: 10.0.x - name: Restore dependencies run: dotnet restore - name: Build diff --git a/.github/workflows/publish-on-tag.yml b/.github/workflows/publish-on-tag.yml index 3616857..af54ada 100644 --- a/.github/workflows/publish-on-tag.yml +++ b/.github/workflows/publish-on-tag.yml @@ -1,55 +1,44 @@ -name: publish to GH +name: Publish to GitHub Packages on: push: - branches: - - "!*" tags: - "*" -jobs: - build: +permissions: + contents: read + packages: write +jobs: + publish: runs-on: windows-latest steps: - - uses: actions/checkout@v2 - - name: Setup .NET 3 - uses: actions/setup-dotnet@v1 - with: - dotnet-version: 3.1.x - - - name: Setup .NET 5 - uses: actions/setup-dotnet@v1 - with: - dotnet-version: 5.0.x - - - name: Restore dependencies - run: dotnet restore - - name: Build - run: dotnet build --no-restore - - name: Test - run: dotnet test --no-build --verbosity normal - - # - name: run batch file - # run: ./cd.bat - - #- name: rmdir package - - - name: pack - run: dotnet pack error-reporting-csharp --configuration Release -o package > packageoutput - - #https://github.com/pj-spoelders/ExtractNugetPackagePath - - name: set variable - run: $cmdOutput = python .\print_package_path.py; $cmdOutput; echo "NPPATH=$cmdOutput" | Out-File -FilePath $Env:GITHUB_ENV -Encoding utf-8 -Append; - - # - name: echo - # run: $cmdOutput - - - name: NuGet Add Source - run: dotnet nuget add source --username exa-ci-1 --password ${{ secrets.GITHUB_TOKEN }} --store-password-in-clear-text --name github "https://nuget.pkg.github.com/EXASOL/index.json" - - # https://stackoverflow.com/questions/57889719/how-to-push-nuget-package-in-github-actions - - name: NuGet Push to GH NuGet - run: dotnet nuget push ${{ env.NPPATH }} -s "github" --api-key ${{ secrets.GITHUB_TOKEN }} + - uses: actions/checkout@v7 + + - name: Setup .NET 10 + uses: actions/setup-dotnet@v5 + with: + dotnet-version: 10.0.x + + - name: Restore dependencies + run: dotnet restore + + - name: Build + run: dotnet build --configuration Release --no-restore + + - name: Test + run: dotnet test --configuration Release --no-build --verbosity normal + + - name: Pack + run: dotnet pack error-reporting-csharp/error-reporting-csharp.csproj --configuration Release --no-build --output package + + - name: Publish package + shell: pwsh + run: | + $packages = @(Get-ChildItem -Path package -Filter '*.nupkg') + if ($packages.Count -ne 1) { + throw "Expected exactly one package, found $($packages.Count)." + } + dotnet nuget push $packages[0].FullName --source "https://nuget.pkg.github.com/EXASOL/index.json" --api-key "${{ secrets.GITHUB_TOKEN }}" --skip-duplicate diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..5c9e6f4 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,26 @@ +# Security + +If you believe you have found a new security vulnerability in this repository, please report it to us as follows. + +## Reporting Security Issues + +* Please do **not** report security vulnerabilities through public GitHub issues. + +* Please create a draft security advisory on the Github page: the reporting form is under `> Security > Advisories`. The URL is https://github.com/exasol/error-crawler-csharp/security/advisories/new. + +* If you prefer to email, please send your report to `infosec@exasol.com`. + +## Guidelines + +* When reporting a vulnerability, please include as much information as possible, including the complete steps to reproduce the issue. + +* Avoid sending us executables. + +* Feel free to include any script you wrote and used but avoid sending us scripts that download and run binaries. + +* We will prioritise reports that show how the exploits work in realistic environments. + +* We prefer all communications to be in English. + +* We do not offer financial rewards. We are happy to acknowledge your research publicly when possible. + diff --git a/doc/changes/changelog.md b/doc/changes/changelog.md index d0cd40e..2319cb7 100644 --- a/doc/changes/changelog.md +++ b/doc/changes/changelog.md @@ -1,5 +1,6 @@ # Changes +* [1.0.0](changes_1.0.0.md) * [0.3.0](changes_0.3.0.md) * [0.2.0](changes_0.2.0.md) * [0.1.0](changes_0.1.0.md) diff --git a/doc/changes/changes_1.0.0.md b/doc/changes/changes_1.0.0.md new file mode 100644 index 0000000..88b3d34 --- /dev/null +++ b/doc/changes/changes_1.0.0.md @@ -0,0 +1,25 @@ +# error-reporting-csharp 1.0.0, released 2026-06-25 + +Code Name: Publishing Improvements + +## Features / Enhancements + +* Updated the targeted .NET framework and package dependencies +* Improved GitHub Packages publishing workflow +* Removed Python package path extraction script +* Removed generated package output file from version control + +## Dependency Updates + +### `error-reporting-csharp/error-reporting-csharp.csproj` + +* Updated `TargetFramework` from `netcoreapp3.1` to `net10.0` + +### `error-reporting-csharp-tests/error-reporting-csharp-tests.csproj` + +* Updated `TargetFramework` from `netcoreapp3.1` to `net10.0` +* Updated `Microsoft.NET.Test.Sdk` from `16.9.4` to `18.7.0` +* Updated `xunit` from `2.4.1` to `2.9.3` +* Updated `xunit.runner.console` from `2.4.1` to `2.9.3` +* Updated `xunit.runner.visualstudio` from `2.4.3` to `3.1.5` +* Updated `coverlet.collector` from `3.0.3` to `10.0.1` diff --git a/error-reporting-csharp-tests/error-reporting-csharp-tests.csproj b/error-reporting-csharp-tests/error-reporting-csharp-tests.csproj index 00d37f0..d4d4397 100644 --- a/error-reporting-csharp-tests/error-reporting-csharp-tests.csproj +++ b/error-reporting-csharp-tests/error-reporting-csharp-tests.csproj @@ -1,7 +1,7 @@  - netcoreapp3.1 + net10.0 error_reporting_csharp_tests false @@ -13,17 +13,17 @@ - - - + + + all runtime; build; native; contentfiles; analyzers; buildtransitive - + all runtime; build; native; contentfiles; analyzers; buildtransitive - + all runtime; build; native; contentfiles; analyzers; buildtransitive diff --git a/error-reporting-csharp/error-reporting-csharp.csproj b/error-reporting-csharp/error-reporting-csharp.csproj index 76b7380..36dab89 100644 --- a/error-reporting-csharp/error-reporting-csharp.csproj +++ b/error-reporting-csharp/error-reporting-csharp.csproj @@ -1,7 +1,7 @@  - netcoreapp3.1 + net10.0 error_reporting_csharp Pieterjan Spoelders Exasol AG diff --git a/packageoutput b/packageoutput deleted file mode 100644 index 120a2ce..0000000 Binary files a/packageoutput and /dev/null differ diff --git a/print_package_path.py b/print_package_path.py deleted file mode 100644 index 7f102fb..0000000 --- a/print_package_path.py +++ /dev/null @@ -1,14 +0,0 @@ -import re - - -def print_package_path(): - with open('packageoutput', 'r') as file: - packageoutput = file.read() - x = re.search("(?<= Successfully created package ')[\\w\\:\\\\\\-\\.]*(?=')", packageoutput) - print(x.group()) - - -# Press the green button in the gutter to run the script. -if __name__ == '__main__': - print_package_path() -