Skip to content

build!: target net11.0 only and fix repo audit failures - #12

Open
StevenTCramer wants to merge 11 commits into
masterfrom
task/012-fix-repo-audit-failures
Open

StevenTCramer wants to merge 11 commits into
masterfrom
task/012-fix-repo-audit-failures

Conversation

@StevenTCramer

@StevenTCramer StevenTCramer commented Nov 10, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Two things in one PR (kanban task 012):

1. Everything moves to .NET 11 (GA on 2026-11-10)

  • The repo targets net11.0 only: library, tests, dev CLI and git hook runfiles. Breaking: the package no longer ships lib/net10.0, so the version goes from 1.1.0 to 2.0.0.
  • TimeWarp.Amuru and Amuru.Tools move to 3.0.0-beta.2, TimeWarp.Terminal to 2.0.0-beta.1 (the newest published net11 versions; no stable net11 release exists yet), and Microsoft.CodeAnalysis.NetAnalyzers to 11.0.100.
  • CI installs only the .NET 11 SDK, from the GA channel instead of preview.
  • AGENTS.md, readme.md and the releasing guide say net11.0 only.

2. ganda repo audit passes (it reported 6 failures on master)

  • Audit --fix: seeds .timewarp/suppression-baseline.json, bumps TimeWarp.Nuru and Nuru.DevCli to 4.0.0-beta.12, ignores /.timewarp/signals/, refreshes the .githooks/*.cs scaffold.
  • Nuru beta.12 migration: dev CLI endpoints move to IRequestHandler and ValueTask<Unit>.
  • workflow-pwsh-shell: the workflow defaults to pwsh; the Run CI Pipeline and Keep last two Packages artifacts steps are rewritten from bash.
  • ci-code-coverage: dev test --coverage wraps each Jaribu runfile in dotnet-coverage collect (local tool pinned in .config/dotnet-tools.json) and writes Cobertura files to artifacts/coverage; the CI pipeline uses it and a coverage step uploads the folder.

Notes for review

  • Local verification used the 11.0.100-rc.3 SDK. When the GA switch was made, the .NET release metadata did not list a GA 11.0 SDK yet, so actions/setup-dotnet with 11.0.x may fail until it does.
  • The artifact-pruning step only runs on a green master push, so its first real run is after merge (it was tested locally against a fake gh).

Test plan

  • ganda repo audit — 43 passed, 0 failed
  • dev build — 0 warnings, 0 errors
  • dev test --coverage — all 6 test files pass
  • dev pack — nupkg contains only lib/net11.0
  • dev check-version — 2.0.0 is safe to release
  • CI green on this PR with the GA SDK channel

🤖 Generated with Claude Code

StevenTCramer and others added 5 commits November 10, 2026 22:02
Seeds the analyzer suppression baseline, bumps Nuru to 4.0.0-beta.12,
ignores ganda signal state, and refreshes the git hook scaffold. Nuru
beta.12 renamed ICommandHandler to IRequestHandler and made Handle return
ValueTask, so the dev CLI endpoints are migrated to match. The fixer also
moved Amuru and Terminal to net11-only previews, which breaks the net10
git hook runfiles, so those pins stay at 2.0.0 and 1.0.2. dev test gains
a --coverage option (see the following ci commit)

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
Default the workflow shell to pwsh and rewrite the two bash steps in
PowerShell with the same behavior. Tests are Jaribu runfiles rather than
a dotnet test project, so coverage is collected by wrapping each runfile
in a pinned dotnet-coverage tool (dotnet dotnet-coverage collect) via
dev test --coverage, and the Cobertura files in artifacts/coverage are
uploaded as the coverage artifact

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
StevenTCramer and others added 6 commits November 10, 2026 22:24
Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
net11.0 is GA, so the net10.0 target is dropped everywhere. The package version moves to 2.0.0 because removing a target framework is breaking.

BREAKING CHANGE: TimeWarp.Builder no longer ships a net10.0 assembly; consumers must target net11.0 or later.

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
The hold-back existed only because the git hook runfiles built for net10.0. Amuru and Amuru.Tools 3.0.0-beta.2, Terminal 2.0.0-beta.1 and NetAnalyzers 11.0.100 are the newest published.

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
Drop the .NET 10 setup step and the preview quality channel now that only net11.0 is built.

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
@StevenTCramer StevenTCramer changed the title chore: fix repo audit failures build!: target net11.0 only and fix repo audit failures Nov 10, 2026
@StevenTCramer StevenTCramer reopened this Nov 10, 2026
@StevenTCramer StevenTCramer reopened this Nov 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant