apply updates from repository template

Author: smdn

.github/CODEOWNERS

@@ -0,0 +1,2 @@
+# The default owners for everything in the repo.
+* @smdn

.github/dependabot.yml

@@ -18,12 +18,12 @@ updates:
       GitHub-Actions-Workflows:
         patterns:
           - "actions/*"
-      GitHub-CodeQL-Action:
+      GitHub-CodeQL-Actions:
         patterns:
-          - "github/codeql-action"
+          - "github/codeql-action/*"
       smdn-workflows-dotnet:
         patterns:
-          - "smdn/workflows-dotnet"
+          - "smdn/workflows-dotnet/*"
     ignore:
       # smdn/workflows-dotnet: report major and minor updates only
       - dependency-name: "smdn/workflows-dotnet"
@@ -35,7 +35,7 @@ updates:
           - "version-update:semver-minor"
           - "version-update:semver-patch"
       # github/codeql-action: report major and minor updates only
-      - dependency-name: "github/codeql-action"
+      - dependency-name: "github/codeql-action/*"
         update-types:
           - "version-update:semver-patch"
   - package-ecosystem: "nuget"

.github/workflows/codeql-analysis.yml

@@ -11,6 +11,8 @@
 #
 name: "CodeQL"
 
+permissions: {}
+
 # ref: https://docs.microsoft.com/en-us/dotnet/devops/dotnet-secure-github-action
 on:
   # push:
@@ -36,7 +38,7 @@ env:
 # cSpell:ignore autobuild
 jobs:
   analyze:
-    name: Analyze
+    name: Analyze ${{ matrix.language }}
     runs-on: ubuntu-latest
     permissions:
       actions: read
@@ -52,15 +54,19 @@ jobs:
           - language: csharp
             build-mode: manual
             source-root: './src'
+          - language: actions
+            build-mode: none
+            source-root: './.github'
 
     steps:
     - name: Checkout repository
       uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
+      uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
       with:
         languages: ${{ matrix.language }}
+        build-mode: ${{ matrix.build-mode }}
         # If you wish to specify custom queries, you can do so here or in a config file.
         # By default, queries listed here will override any specified in a config file.
         # Prefix the list here with "+" to use these queries and those in the config file.
@@ -69,7 +75,7 @@ jobs:
 
     - name: Autobuild
       if: ${{ (matrix.build-mode == 'autobuild') || (matrix.build-mode == '') }}
-      uses: github/codeql-action/autobuild@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
+      uses: github/codeql-action/autobuild@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
 
     - name: Prepare .NET SDK ${{ env.MINIMAL_DOTNET_SDK_VERSION }}
       uses: smdn/workflows-dotnet/actions/prepare-dotnet-sdk@e294de483afffc1d3a366fbba853efe23c7b7d4c # actions/prepare-dotnet-sdk/v1.2.0
@@ -83,4 +89,6 @@ jobs:
         ./eng/BuildAllProjects.ps1
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
+      uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
+      with:
+        category: "/language:${{ matrix.language }}"

.github/workflows/generate-release-target.yml

@@ -4,9 +4,7 @@
 name: Generate release target
 run-name: Generate release target for ${{ inputs.release_target_tag_name || github.ref_name }}
 
-permissions:
-  contents: write
-  pull-requests: write
+permissions: {}
 
 on:
   push:
@@ -61,7 +59,10 @@ jobs:
         exit 1
 
   run-generate-release-target:
-    uses: smdn/workflows-dotnet/.github/workflows/generate-release-target.yml@17112594cdc2a6dd9bf2417fe103174ded21863f # release-target/v1.16.1
+    uses: smdn/workflows-dotnet/.github/workflows/generate-release-target.yml@6b1c9e567396e1e2e1e70d11a5a54cbe87d0eec6 # release-target/v1.16.4
+    permissions:
+      contents: write
+      pull-requests: write
     needs: determine-release-target
     if: startsWith(needs.determine-release-target.outputs.tag_name, 'new-release/')
     with:

.github/workflows/publish-release-target.yml

@@ -4,18 +4,19 @@
 name: Publish release target
 run-name: Publish release target ${{ github.head_ref }}
 
-permissions:
-  contents: write
-  packages: write
-  pull-requests: read
+permissions: {}
 
 on:
   pull_request:
     types: [closed]
 
 jobs:
   run-publish-release-target:
-    uses: smdn/workflows-dotnet/.github/workflows/publish-release-target.yml@17112594cdc2a6dd9bf2417fe103174ded21863f # release-target/v1.16.1
+    uses: smdn/workflows-dotnet/.github/workflows/publish-release-target.yml@6b1c9e567396e1e2e1e70d11a5a54cbe87d0eec6 # release-target/v1.16.4
+    permissions:
+      contents: write
+      packages: write
+      pull-requests: read
     if: |
       (github.event.pull_request.merged == true && startsWith(github.head_ref, 'releases/')) &&
       (contains(github.event.pull_request.labels.*.name, 'release-target'))

.github/workflows/test-packages.yml

@@ -3,6 +3,8 @@
 
 name: Run tests with released packages
 
+permissions: {}
+
 on:
   release:
     types: [published]
@@ -60,14 +62,16 @@ jobs:
     with:
       release_tag: ${{ github.event.release.tag_name }}
 
-  run-test:
+  run-tests-package-dotnet:
     name: Run tests with released packages
-    uses: smdn/workflows-dotnet/.github/workflows/test.yml@7144c60e15cd292c33d720ea0ef963abfda49dab # test/v1.10.1
+    uses: smdn/workflows-dotnet/.github/workflows/test.yml@9ec9f2dc7d5b039bbc9e22aae98cb00c84d806df # test/v1.10.4
+    permissions:
+      contents: read
     needs: await-package-publishing
     if: ${{ always() && !failure() && !cancelled() }} # run tests even if await-package-publishing is skipped
     with:
       project:                                ${{ inputs.project }}
-      os:                                     ${{ inputs.os == '' && 'ubuntu-24.04, ubuntu-22.04, windows-latest, macos-latest' || inputs.os }}
+      os:                                     ${{ inputs.os == '' && 'ubuntu-26.04, ubuntu-24.04, ubuntu-22.04, windows-latest, macos-latest' || inputs.os }}
       extra_options_common:                   '/p:TestReleasedPackage=true'
       verbose:                                ${{ inputs.verbose == true }}
       dotnet_sdk_version:                     ${{ inputs.dotnet_sdk_version == '' && '10.0.100' || inputs.dotnet_sdk_version }}

.github/workflows/test.yml

@@ -3,6 +3,8 @@
 
 name: Run tests
 
+permissions: {}
+
 on:
   push:
     branches: [ main ]
@@ -71,12 +73,14 @@ on:
         default: ''
 
 jobs:
-  run-test:
-    name: Run tests
-    uses: smdn/workflows-dotnet/.github/workflows/test.yml@7144c60e15cd292c33d720ea0ef963abfda49dab # test/v1.10.1
+  run-tests-dotnet:
+    name: Run .NET tests
+    uses: smdn/workflows-dotnet/.github/workflows/test.yml@9ec9f2dc7d5b039bbc9e22aae98cb00c84d806df # test/v1.10.4
+    permissions:
+      contents: read
     with:
       project:                                ${{ inputs.project }}
-      os:                                     ${{ inputs.os == '' && 'ubuntu-24.04, ubuntu-22.04, windows-latest, macos-latest' || inputs.os }}
+      os:                                     ${{ inputs.os == '' && 'ubuntu-26.04, ubuntu-24.04, ubuntu-22.04, windows-latest, macos-latest' || inputs.os }}
       verbose:                                ${{ inputs.verbose == true }}
       dotnet_sdk_version:                     ${{ inputs.dotnet_sdk_version == '' && '10.0.100' || inputs.dotnet_sdk_version }}
       timeout_minutes_test_job:               10
@@ -88,3 +92,14 @@ jobs:
       dotnet_test_options_output_verbosity_level: ${{ inputs.dotnet_test_options_output_verbosity_level }}
     secrets:
       token_repo: ${{ secrets.GITHUB_TOKEN }}
+
+  post-tests-dotnet:
+    # This job is intended to be referenced by the branch protection rules (Status Checks).
+    # Do not change the 'name' or job ID, as doing so will break the status check validation.
+    # Avoid adding 'if: always()', otherwise this job will report success even if previous tests fail.
+    name: .NET test status
+    needs: run-tests-dotnet
+    runs-on: ubuntu-slim
+    steps:
+      - name: .NET test status
+        run: echo "All .NET tests completed successfully."

tests/TargetFrameworks.props

@@ -1,4 +1,4 @@
-<!--
+<!--
 SPDX-FileCopyrightText: 2022 smdn <smdn@smdn.jp>
 SPDX-License-Identifier: MIT
 -->
@@ -28,14 +28,16 @@ SPDX-License-Identifier: MIT
     <EnableTargetFrameworkNetFx Condition=" '$(GITHUB_ACTIONS)' != 'true' ">false</EnableTargetFrameworkNetFx>
   </PropertyGroup>
 
-  <!-- On Ubuntu 24.04 -->
+  <!-- On Ubuntu 24.04/26.04 -->
   <PropertyGroup
     Condition="
       $([System.Runtime.InteropServices.RuntimeInformation]::RuntimeIdentifier.StartsWith('ubuntu.24.04')) or
-      $([System.Runtime.InteropServices.RuntimeInformation]::OSDescription.StartsWith('Ubuntu 24.04'))
+      $([System.Runtime.InteropServices.RuntimeInformation]::OSDescription.StartsWith('Ubuntu 24.04')) or
+      $([System.Runtime.InteropServices.RuntimeInformation]::RuntimeIdentifier.StartsWith('ubuntu.26.04')) or
+      $([System.Runtime.InteropServices.RuntimeInformation]::OSDescription.StartsWith('Ubuntu 26.04'))
     "
   >
-    <!-- disable Mono on GitHub Actions Ubuntu 24.04 runner images -->
+    <!-- disable Mono on GitHub Actions Ubuntu 24.04/26.04 runner images -->
     <EnableTargetFrameworkNetFx Condition=" '$(GITHUB_ACTIONS)' == 'true' ">false</EnableTargetFrameworkNetFx>
   </PropertyGroup>