Skip to content

[JD.Worker] add CI, CodeQL, dependabot actions coverage, and MIT LICENSE#5

Merged
JerrettDavis merged 4 commits into
mainfrom
ci/add-ci-codeql-dependabot-license
Jun 23, 2026
Merged

[JD.Worker] add CI, CodeQL, dependabot actions coverage, and MIT LICENSE#5
JerrettDavis merged 4 commits into
mainfrom
ci/add-ci-codeql-dependabot-license

Conversation

@JerrettDavis

Copy link
Copy Markdown
Owner
  • Add .github/workflows/ci.yml: build + test on push/PR to main (.NET 10, Aspire workload restore, xunit tests)
  • Add .github/workflows/codeql.yml: CodeQL csharp analysis on push/PR + weekly schedule
  • Update .github/dependabot.yml: add github-actions ecosystem entry (nuget preserved)
  • Add MIT LICENSE (Jerrett Davis, 2026)

Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

JerrettDavis and others added 4 commits June 22, 2026 19:23
- Add .github/workflows/ci.yml: build + test on push/PR to main (.NET 10, Aspire workload restore, xunit tests)
- Add .github/workflows/codeql.yml: CodeQL csharp analysis on push/PR + weekly schedule
- Update .github/dependabot.yml: add github-actions ecosystem entry (nuget preserved)
- Add MIT LICENSE (Jerrett Davis, 2026)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…SA-2m69-gcr7-jv3q

- MessagePack: transitive pin to 2.5.302 to fix GHSA-hv8m-jj95-wg3x (fixed >= 2.5.301)
- SQLitePCLRaw.lib.e_sqlite3 2.1.11: NuGetAuditSuppress for GHSA-2m69-gcr7-jv3q
  (last_affected=2.1.11; no patched version published by upstream yet)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Add `partial` to test classes (TBDD010: TinyBDD source-gen requires partial types):
  - ConfigurationParsingTests, ConfigurationValidationTests
  - JobStateMachineTests, StepRunnerTests
- Rewrite JD.Worker.Cli/Program.cs for System.CommandLine 2.0.9 API:
  - Option.IsRequired -> Option.Required
  - command.AddOption() -> command.Options.Add()
  - command.SetHandler() -> command.SetAction()
  - root.AddCommand() -> root.Subcommands.Add()
  - root.InvokeAsync(args) -> root.Parse(args).InvokeAsync()

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
TinyBDD 0.19.26 source generator (TinyBddOptimizer) generates invalid C#
for the method-group and fluent-chain patterns used in these tests. The
generated code incorrectly treats method groups as values and produces
compile errors (CS0428, CS1061 on generated .g.cs files).

Resolution: suppress TBDD010 via NoWarn in the test-project PropertyGroup
in Directory.Build.props. Tests run correctly via the standard (non-optimized)
TinyBDD pipeline; the optimization opt-out has no functional impact.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@JerrettDavis JerrettDavis merged commit 3eda42c into main Jun 23, 2026
3 checks passed
@JerrettDavis JerrettDavis deleted the ci/add-ci-codeql-dependabot-license branch June 23, 2026 00:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants