apply updates from template

Author: smdn

.github/dependabot.yml

@@ -18,6 +18,9 @@ updates:
       GitHub-Actions-Workflows:
         patterns:
           - "actions/*"
+      GitHub-CodeQL-Action:
+        patterns:
+          - "github/codeql-action/*"
       smdn-workflows-dotnet:
         patterns:
           - "smdn/workflows-dotnet/*"
@@ -31,6 +34,10 @@ updates:
         update-types:
           - "version-update:semver-minor"
           - "version-update:semver-patch"
+      # github/codeql-action/*: report major and minor updates only
+      - dependency-name: "github/codeql-action/*"
+        update-types:
+          - "version-update:semver-patch"
   - package-ecosystem: "nuget"
     directory: "/"
     schedule:

.github/workflows/codeql-analysis.yml

@@ -55,10 +55,10 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/[email protected].1
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v4
+      uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -69,10 +69,10 @@ jobs:
 
     - name: Autobuild
       if: ${{ (matrix.build-mode == 'autobuild') || (matrix.build-mode == '') }}
-      uses: github/codeql-action/autobuild@v4
+      uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
 
     - name: Prepare .NET SDK ${{ env.MINIMAL_DOTNET_SDK_VERSION }}
-      uses: smdn/workflows-dotnet/actions/prepare-dotnet-sdk@actions/prepare-dotnet-sdk/v1.1.0
+      uses: smdn/workflows-dotnet/actions/prepare-dotnet-sdk@e294de483afffc1d3a366fbba853efe23c7b7d4c # actions/prepare-dotnet-sdk/v1.2.0
       if: ${{ (matrix.build-mode == 'manual') && (matrix.language == 'csharp') }}
       with:
         minimal_dotnet_sdk_version: '${{ env.MINIMAL_DOTNET_SDK_VERSION }}'
@@ -83,4 +83,4 @@ jobs:
         ./eng/BuildAllProjects.ps1
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4
+      uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1

.github/workflows/generate-release-target.yml

@@ -61,7 +61,7 @@ jobs:
         exit 1
 
   run-generate-release-target:
-    uses: smdn/workflows-dotnet/.github/workflows/generate-release-target.yml@release-target/v1.14.1
+    uses: smdn/workflows-dotnet/.github/workflows/generate-release-target.yml@17112594cdc2a6dd9bf2417fe103174ded21863f # release-target/v1.16.1
     needs: determine-release-target
     if: startsWith(needs.determine-release-target.outputs.tag_name, 'new-release/')
     with:

.github/workflows/publish-release-target.yml

@@ -15,7 +15,7 @@ on:
 
 jobs:
   run-publish-release-target:
-    uses: smdn/workflows-dotnet/.github/workflows/publish-release-target.yml@release-target/v1.14.1
+    uses: smdn/workflows-dotnet/.github/workflows/publish-release-target.yml@17112594cdc2a6dd9bf2417fe103174ded21863f # release-target/v1.16.1
     if: |
       (github.event.pull_request.merged == true && startsWith(github.head_ref, 'releases/')) &&
       (contains(github.event.pull_request.labels.*.name, 'release-target'))

.github/workflows/test-packages.yml

@@ -56,20 +56,20 @@ jobs:
   await-package-publishing:
     name: Wait for publishing of released package
     if: ${{ github.event_name == 'release' }}
-    uses: smdn/workflows-dotnet/.github/workflows/nuget-await-package-publishing.yml@nuget/v1.1.1
+    uses: smdn/workflows-dotnet/.github/workflows/nuget-await-package-publishing.yml@35043858ed6e4363e999b82c4182cf5c4b2a2ca4 # nuget/v1.2.1
     with:
       release_tag: ${{ github.event.release.tag_name }}
 
   run-test:
     name: Run tests with released packages
-    uses: smdn/workflows-dotnet/.github/workflows/test.yml@test/v1.9.0
+    uses: smdn/workflows-dotnet/.github/workflows/test.yml@bad79296a13ba75d915c7c1935cd9679958d217d # test/v1.9.2
     needs: await-package-publishing
     if: ${{ always() && !failure() && !cancelled() }} # run tests even if await-package-publishing is skipped
     with:
       project:                                ${{ inputs.project }}
       os:                                     ${{ inputs.os == '' && 'ubuntu-24.04, ubuntu-22.04, windows-latest, macos-latest' || inputs.os }}
       extra_options_common:                   '/p:TestReleasedPackage=true'
-      verbose:                                ${{ inputs.verbose == 'true' }}
+      verbose:                                ${{ inputs.verbose == true }}
       dotnet_sdk_version:                     ${{ inputs.dotnet_sdk_version == '' && '10.0.100' || inputs.dotnet_sdk_version }}
       timeout_minutes_test_job:               10
       timeout_hang:                           "[ {'OS':'windows','Timeout':'6min'}, {'OS':'macos','Timeout':'3min'}, {'OS':'','Timeout':'1min'} ]"

.github/workflows/test.yml

@@ -73,11 +73,11 @@ on:
 jobs:
   run-test:
     name: Run tests
-    uses: smdn/workflows-dotnet/.github/workflows/test.yml@test/v1.9.0
+    uses: smdn/workflows-dotnet/.github/workflows/test.yml@bad79296a13ba75d915c7c1935cd9679958d217d # test/v1.9.2
     with:
       project:                                ${{ inputs.project }}
       os:                                     ${{ inputs.os == '' && 'ubuntu-24.04, ubuntu-22.04, windows-latest, macos-latest' || inputs.os }}
-      verbose:                                ${{ inputs.verbose == 'true' }}
+      verbose:                                ${{ inputs.verbose == true }}
       dotnet_sdk_version:                     ${{ inputs.dotnet_sdk_version == '' && '10.0.100' || inputs.dotnet_sdk_version }}
       timeout_minutes_test_job:               10
       timeout_hang:                           "[ {'OS':'windows','Timeout':'6min'}, {'OS':'macos','Timeout':'3min'}, {'OS':'','Timeout':'1min'} ]"

global.json

@@ -5,8 +5,8 @@
     "allowPrerelease": false
   },
   "msbuild-sdks": {
-    "Smdn.MSBuild.ProjectAssets.Common": "1.6.2",
-    "Smdn.MSBuild.ProjectAssets.Library": "1.12.5"
+    "Smdn.MSBuild.ProjectAssets.Common": "1.7.1",
+    "Smdn.MSBuild.ProjectAssets.Library": "1.14.0"
   },
   "test": {
     "runner": "Microsoft.Testing.Platform"

src/Directory.Build.props

@@ -8,7 +8,7 @@ SPDX-License-Identifier: MIT
   <PropertyGroup Label="Configurations for Smdn.MSBuild.ProjectAssets.*">
     <SmdnBuildAssetRootDirectory>$(MSBuildThisFileDirectory)..\</SmdnBuildAssetRootDirectory>
     <APIListOutputBaseDirectory>$(MSBuildThisFileDirectory)..\doc\api-list\</APIListOutputBaseDirectory>
-    <!-- <APIListPackageVersion>1.6.0</APIListPackageVersion> -->
+    <APIListMinPackageVersion>1.8.1</APIListMinPackageVersion>
   </PropertyGroup>
 
   <PropertyGroup Label="package properties">
@@ -24,7 +24,7 @@ SPDX-License-Identifier: MIT
   <ItemGroup>
     <PackageReference
       Include="Smdn.MSBuild.DefineConstants.NETSdkApi"
-      Version="[1.6.2]"
+      Version="[1.8.2]"
       PrivateAssets="all"
       IncludeAssets="build"
     />

tests/Directory.Build.props

@@ -11,14 +11,14 @@ SPDX-License-Identifier: MIT
   />
 
   <ItemGroup Condition=" '$(IsTestProject)' == 'true' ">
-    <PackageReference Include="NUnit" Version="4.4.0" />
-    <PackageReference Include="NUnit3TestAdapter" Version="6.0.0" />
+    <PackageReference Include="NUnit" Version="4.5.1" />
+    <PackageReference Include="NUnit3TestAdapter" Version="6.1.0" />
   </ItemGroup>
 
   <ItemGroup>
     <PackageReference
       Include="Smdn.MSBuild.DefineConstants.NETSdkApi"
-      Version="[1.6.2]"
+      Version="[1.8.2]"
       PrivateAssets="all"
       IncludeAssets="build"
     />