chore: align the IDE settings, sponsoring and release notes

.fallout/build.schema.json

@@ -37,10 +37,9 @@
         "CodeCoverage",
         "Compile",
         "DotNetUnitTests",
-        "MutationTestComment",
-        "MutationTestDashboard",
-        "MutationTestExecution",
         "MutationTests",
+        "MutationTestsComment",
+        "MutationTestsDashboard",
         "Pack",
         "PublishBenchmarkReport",
         "Restore",

.gitattributes

@@ -7,7 +7,7 @@
 
 # ReSharper DotSettings files are in Unix Format
 *.DotSettings text eol=lf
-*.sln   text eol=crlf
+*.slnx  text eol=crlf
 
 # Allows checking out and developing in Windows
 # while mounting and running tests in Linux

.github/dependabot.yml

@@ -29,3 +29,6 @@ updates:
       aweXpect:
         patterns:
           - "aweXpect*"
+    # The analyzers and generators only load in compilers at least as new as the Roslyn they reference.
+    ignore:
+      - dependency-name: "Microsoft.CodeAnalysis*"

.github/release.yml

@@ -0,0 +1,23 @@
+changelog:
+  exclude:
+    labels:
+      - changelog-ignore
+  categories:
+    - title: "⚠️ Breaking changes"
+      labels:
+        - "breaking change"
+    - title: "🚀 New features"
+      labels:
+        - enhancement
+    - title: "🐞 Bug fixes"
+      labels:
+        - bug
+    - title: "📖 Documentation"
+      labels:
+        - documentation
+    - title: "🧰 Maintenance"
+      labels:
+        - "*"
+    - title: "⬆️ Dependencies"
+      labels:
+        - dependencies

.github/workflows/build.yml

@@ -149,7 +149,7 @@ jobs:
                         8.0.x
                         10.0.x
             -   name: Run mutation tests
-                run: ./build.sh MutationTests MutationTestDashboard
+                run: ./build.sh MutationTests MutationTestsDashboard
 
     static-code-analysis:
         name: "Static code analysis"

.github/workflows/ci-analysis.yml

@@ -12,39 +12,55 @@ jobs:
         name: "Mutation tests"
         runs-on: ubuntu-latest
         permissions:
+            actions: read
+            contents: read
             pull-requests: write
         steps:
-            -   uses: actions/checkout@v7
+            -   uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
                 with:
                     fetch-depth: 0
             -   name: Setup .NET SDKs
-                uses: actions/setup-dotnet@v6
+                uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
                 with:
                     dotnet-version: |
                         10.0.x
-            -   name: Create mutation test comment
-                run: ./build.sh MutationTestComment
+            -   name: Upload mutation dashboard and create comment
+                run: ./build.sh MutationTestsComment
+                # The artifacts of the workflow run are untrusted, because a pull request controls the code that
+                # produces them, so the build identifies the pull request by these values of the event alone.
                 env:
                     GithubToken: ${{ secrets.GITHUB_TOKEN }}
+                    STRYKER_DASHBOARD_API_KEY: ${{ secrets.STRYKER_DASHBOARD_API_KEY }}
                     WorkflowRunId: ${{ github.event.workflow_run.id }}
-
+                    WorkflowRunEvent: ${{ github.event.workflow_run.event }}
+                    WorkflowRunHeadOwner: ${{ github.event.workflow_run.head_repository.owner.login }}
+                    WorkflowRunHeadBranch: ${{ github.event.workflow_run.head_branch }}
+                    WorkflowRunHeadSha: ${{ github.event.workflow_run.head_sha }}
+
     benchmarks:
         name: "Benchmarks"
         runs-on: ubuntu-latest
         permissions:
-            contents: write
+            actions: read
+            contents: read
             pull-requests: write
         steps:
-            -   uses: actions/checkout@v7
+            -   uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
                 with:
                     fetch-depth: 0
             -   name: Setup .NET SDKs
-                uses: actions/setup-dotnet@v6
+                uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
                 with:
                     dotnet-version: |
                         10.0.x
             -   name: Create benchmark comment
                 run: ./build.sh BenchmarkComment
+                # The artifacts of the workflow run are untrusted, because a pull request controls the code that
+                # produces them, so the build identifies the pull request by these values of the event alone.
                 env:
                     GithubToken: ${{ secrets.GITHUB_TOKEN }}
                     WorkflowRunId: ${{ github.event.workflow_run.id }}
+                    WorkflowRunEvent: ${{ github.event.workflow_run.event }}
+                    WorkflowRunHeadOwner: ${{ github.event.workflow_run.head_repository.owner.login }}
+                    WorkflowRunHeadBranch: ${{ github.event.workflow_run.head_branch }}
+                    WorkflowRunHeadSha: ${{ github.event.workflow_run.head_sha }}

.github/workflows/ci.yml

@@ -14,11 +14,11 @@ jobs:
                 os: [ ubuntu-latest, windows-latest, macos-latest ]
         runs-on: ${{ matrix.os }}
         steps:
-            -   uses: actions/checkout@v7
+            -   uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
                 with:
                     fetch-depth: 0
             -   name: Setup .NET SDKs
-                uses: actions/setup-dotnet@v6
+                uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
                 with:
                     dotnet-version: |
                         8.0.x
@@ -31,7 +31,7 @@ jobs:
                 run: ./build.sh CodeCoverage
             -   name: Upload artifacts
                 if: always()
-                uses: actions/upload-artifact@v7
+                uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
                 with:
                     name: ${{ runner.os }}-artifacts
                     path: |
@@ -44,11 +44,11 @@ jobs:
         env:
             DOTNET_NOLOGO: true
         steps:
-            -   uses: actions/checkout@v7
+            -   uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
                 with:
                     fetch-depth: 0
             -   name: Setup .NET SDKs
-                uses: actions/setup-dotnet@v6
+                uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
                 with:
                     dotnet-version: |
                         8.0.x
@@ -57,7 +57,7 @@ jobs:
                 run: ./build.sh ApiChecks
             -   name: Upload artifacts
                 if: always()
-                uses: actions/upload-artifact@v7
+                uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
                 with:
                     name: API-tests
                     path: |
@@ -70,11 +70,11 @@ jobs:
         env:
             DOTNET_NOLOGO: true
         steps:
-            -   uses: actions/checkout@v7
+            -   uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
                 with:
                     fetch-depth: 0
             -   name: Setup .NET SDKs
-                uses: actions/setup-dotnet@v6
+                uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
                 with:
                     dotnet-version: |
                         8.0.x
@@ -83,7 +83,7 @@ jobs:
                 run: ./build.sh MutationTests
             -   name: Upload artifacts
                 if: always()
-                uses: actions/upload-artifact@v7
+                uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
                 with:
                     name: MutationTests
                     path: |
@@ -105,11 +105,11 @@ jobs:
         env:
             DOTNET_NOLOGO: true
         steps:
-            -   uses: actions/checkout@v7
+            -   uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
                 with:
                     fetch-depth: 0
             -   name: Setup .NET SDKs
-                uses: actions/setup-dotnet@v6
+                uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
                 with:
                     dotnet-version: |
                         8.0.x
@@ -118,7 +118,7 @@ jobs:
                 run: ./build.sh Benchmarks --benchmark-filter "*${{ matrix.benchmark }}*"
             -   name: Upload artifacts
                 if: always()
-                uses: actions/upload-artifact@v7
+                uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
                 with:
                     name: Benchmarks-${{ matrix.benchmark }}
                     path: |
@@ -134,11 +134,11 @@ jobs:
             SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
             DOTNET_NOLOGO: true
         steps:
-            -   uses: actions/checkout@v7
+            -   uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
                 with:
                     fetch-depth: 0
             -   name: Setup .NET SDKs
-                uses: actions/setup-dotnet@v6
+                uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
                 with:
                     dotnet-version: |
                         8.0.x
@@ -156,11 +156,11 @@ jobs:
         if: always()
         steps:
             -   name: Download Artifacts
-                uses: actions/download-artifact@v8
+                uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
                 with:
                     path: artifacts
             -   name: Publish Test Results
-                uses: EnricoMi/publish-unit-test-result-action@v2
+                uses: EnricoMi/publish-unit-test-result-action@7622c5bf3d112a72ab4fa3951c2aa5723d8ab92d # v2.25.0
                 with:
                     comment_mode: always
                     files: "artifacts/**/**/*.trx"

.github/workflows/notify-docs-site.yml

@@ -14,7 +14,7 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             -   name: Dispatch extension-documentation-updated-event to Testably/Testably.Site
-                uses: peter-evans/repository-dispatch@v4
+                uses: peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697 # v4.0.1
                 with:
                     token: ${{ secrets.SITE_DISPATCH_TOKEN }}
                     repository: Testably/Testably.Site