Release 3.0.0-rc.1 readiness

.github/dependabot.yml

@@ -0,0 +1,24 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "09:00"
+      timezone: "America/Sao_Paulo"
+    open-pull-requests-limit: 5
+
+  - package-ecosystem: "nuget"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "09:30"
+      timezone: "America/Sao_Paulo"
+    open-pull-requests-limit: 5
+    groups:
+      dotnet-minor-patch:
+        update-types:
+          - "minor"
+          - "patch"

.github/workflows/ci.yml

@@ -4,7 +4,7 @@ on:
   push:
     branches:
       - master
-      - chore/net10-migration
+      - feature/etapa-3
   pull_request:
 
 env:
@@ -15,39 +15,195 @@ env:
 permissions:
   contents: read
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
-  build:
-    name: Build, test and pack
+  compatibility:
+    name: Compatibility (${{ matrix.dapper-lane }}, Dapper ${{ matrix.dapper-version }})
     runs-on: ubuntu-latest
+    timeout-minutes: 30
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - dapper-lane: minimum-and-latest-stable
+            dapper-version: 2.1.79
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          fetch-depth: 1
+          persist-credentials: false
+          show-progress: false
 
       - name: Setup .NET
-        uses: actions/setup-dotnet@v6
+        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
         with:
-          dotnet-version: 10.0.x
-          dotnet-quality: ga
+          global-json-file: global.json
 
       - name: Show .NET info
         run: dotnet --info
 
+      - name: Restore
+        run: dotnet restore ./Dapper.FluentMap.sln -p:DapperPackageVersion=${{ matrix.dapper-version }}
+
+      - name: Audit NuGet dependencies
+        run: dotnet list ./Dapper.FluentMap.sln package --vulnerable --include-transitive
+
+      - name: Build Release
+        run: dotnet build ./Dapper.FluentMap.sln --configuration Release --no-restore -p:DapperPackageVersion=${{ matrix.dapper-version }}
+
+      - name: Test core compatibility
+        run: dotnet test ./test/Dapper.FluentMap.Tests/Dapper.FluentMap.Tests.csproj --configuration Release --no-build
+
+      - name: Test generated registration compatibility
+        run: dotnet test ./test/Dapper.FluentMap.GeneratedRegistration.Tests/Dapper.FluentMap.GeneratedRegistration.Tests.csproj --configuration Release --no-build
+
+      - name: Test dependency injection compatibility
+        run: dotnet test ./test/Dapper.FluentMap.DependencyInjection.Tests/Dapper.FluentMap.DependencyInjection.Tests.csproj --configuration Release --no-build
+
+      - name: Test Dommel compatibility
+        run: dotnet test ./test/Dapper.FluentMap.Dommel.Tests/Dapper.FluentMap.Dommel.Tests.csproj --configuration Release --no-build
+
+      - name: Test provider compatibility
+        run: dotnet test ./test/Dapper.FluentMap.ProviderCompatibility.Tests/Dapper.FluentMap.ProviderCompatibility.Tests.csproj --configuration Release --no-build
+
+  roslyn-components:
+    name: Analyzer and generator compatibility
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          fetch-depth: 1
+          persist-credentials: false
+          show-progress: false
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
+        with:
+          global-json-file: global.json
+
+      - name: Restore
+        run: dotnet restore ./Dapper.FluentMap.sln
+
+      - name: Audit NuGet dependencies
+        run: dotnet list ./Dapper.FluentMap.sln package --vulnerable --include-transitive
+
+      - name: Build analyzers
+        run: dotnet build ./src/Dapper.FluentMap.Analyzers/Dapper.FluentMap.Analyzers.csproj --configuration Release --no-restore
+
+      - name: Build generators
+        run: dotnet build ./src/Dapper.FluentMap.Generators/Dapper.FluentMap.Generators.csproj --configuration Release --no-restore
+
+      - name: Test analyzers
+        run: dotnet test ./test/Dapper.FluentMap.Analyzers.Tests/Dapper.FluentMap.Analyzers.Tests.csproj --configuration Release
+
+      - name: Test generators
+        run: dotnet test ./test/Dapper.FluentMap.Generators.Tests/Dapper.FluentMap.Generators.Tests.csproj --configuration Release
+
+  pack:
+    name: Pack
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    needs:
+      - compatibility
+      - roslyn-components
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          fetch-depth: 1
+          persist-credentials: false
+          show-progress: false
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
+        with:
+          global-json-file: global.json
+
       - name: Restore
         run: dotnet restore ./Dapper.FluentMap.sln
 
       - name: Build Release
         run: dotnet build ./Dapper.FluentMap.sln --configuration Release --no-restore
 
-      - name: Test Release
-        run: dotnet test ./Dapper.FluentMap.sln --configuration Release --no-build
-
       - name: Pack Release
         run: dotnet pack ./Dapper.FluentMap.sln --configuration Release --no-build --output ./artifacts/packages
 
+      - name: Validate package artifact set
+        shell: pwsh
+        run: |
+          $ErrorActionPreference = 'Stop'
+          $packageDir = './artifacts/packages'
+          $nupkgs = @(Get-ChildItem -Path $packageDir -Filter '*.nupkg' -File)
+          $snupkgs = @(Get-ChildItem -Path $packageDir -Filter '*.snupkg' -File)
+          $unexpected = @($nupkgs + $snupkgs | Where-Object { $_.Name -match '(Tests|Benchmarks|AotSmoke)' })
+
+          if ($nupkgs.Count -ne 5) {
+            throw "Expected 5 .nupkg files, found $($nupkgs.Count)."
+          }
+
+          if ($snupkgs.Count -ne 3) {
+            throw "Expected 3 .snupkg files, found $($snupkgs.Count)."
+          }
+
+          if ($unexpected.Count -gt 0) {
+            throw "Unexpected test/benchmark artifacts: $($unexpected.Name -join ', ')"
+          }
+
+          $unsafe = @($nupkgs + $snupkgs | Where-Object { $_.Name -match '\.(2\.0\.0|3\.0\.0)\.(nupkg|snupkg)$' })
+          if ($unsafe.Count -gt 0) {
+            throw "Unsafe package versions produced by default CI pack: $($unsafe.Name -join ', ')"
+          }
+
+      - name: Write release metadata
+        shell: pwsh
+        run: |
+          $ErrorActionPreference = 'Stop'
+          New-Item -ItemType Directory -Force -Path './artifacts/release-metadata' | Out-Null
+          dotnet list ./Dapper.FluentMap.sln package --include-transitive --format json |
+            Set-Content -Encoding utf8NoBOM -Path './artifacts/release-metadata/dependencies.json'
+
+          $packageFiles = @(
+            Get-ChildItem -Path './artifacts/packages' -Filter '*.nupkg' -File
+            Get-ChildItem -Path './artifacts/packages' -Filter '*.snupkg' -File
+          ) |
+            Sort-Object Name |
+            ForEach-Object {
+              [ordered]@{
+                name = $_.Name
+                sha256 = (Get-FileHash -LiteralPath $_.FullName -Algorithm SHA256).Hash.ToLowerInvariant()
+                size = $_.Length
+              }
+            }
+
+          [ordered]@{
+            schemaVersion = '1.0'
+            repository = '${{ github.repository }}'
+            ref = '${{ github.ref }}'
+            sha = '${{ github.sha }}'
+            runId = '${{ github.run_id }}'
+            runAttempt = '${{ github.run_attempt }}'
+            dotnetSdk = (dotnet --version)
+            packageFiles = @($packageFiles)
+          } |
+            ConvertTo-Json -Depth 5 |
+            Set-Content -Encoding utf8NoBOM -Path './artifacts/release-metadata/release-metadata.json'
+
       - name: Upload NuGet packages
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: nuget-packages
-          path: ./artifacts/packages/*.nupkg
+          path: |
+            ./artifacts/packages/*.nupkg
+            ./artifacts/packages/*.snupkg
+            ./artifacts/release-metadata/*.json
           if-no-files-found: error
+          retention-days: 14