V5.0.2/service update#47
Conversation
📝 WalkthroughWalkthroughThis PR consolidates dependency updates for version 5.0.2, refactors the CI pipeline to support multi-architecture builds (X64/ARM64) with separate Linux/Windows test jobs, bumps infrastructure images (NGINX, LocalStack), and updates package release notes consistently across all NuGet packages. Changes
Estimated code review effort🎯 3 (Moderate) | ⏱️ ~22 minutes Possibly related PRs
Poem
🚥 Pre-merge checks | ✅ 3 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing touches🧪 Generate unit tests (beta)
⚔️ Resolve merge conflicts (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Pull request overview
This pull request is a service update (version 5.0.2) that primarily focuses on upgrading package dependencies to their latest compatible versions and enhancing the CI pipeline with multi-architecture support. The changes ensure the project stays current with external dependencies while expanding build and test coverage across X64 and ARM64 architectures on both Linux and Windows platforms.
Changes:
- Enhanced CI pipeline with multi-architecture build and test support for X64 and ARM64 on Linux and Windows runners
- Upgraded all package dependencies to their latest compatible versions across multiple frameworks (AWS SDK, Azure SDK, Cuemon, NATS, Entity Framework Core, coverlet, etc.)
- Updated Docker images (LocalStack 4.12.0→4.13.1, Nginx 1.29.4→1.29.5, Ubuntu test runner) to latest versions
- Added consistent release notes for version 5.0.2 across all 33 NuGet packages
Reviewed changes
Copilot reviewed 43 out of 43 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
| .github/workflows/ci-pipeline.yml | Added multi-architecture matrix (X64/ARM64), split test jobs by platform (test_linux, test_windows), updated artifact naming patterns, and updated job dependencies |
| Directory.Packages.props | Upgraded package versions: AWS SDKs, Codebelt extensions, Cuemon libraries, NATS clients, Entity Framework Core, coverlet, and Microsoft.Data.Sqlite |
| testenvironments.json | Updated Ubuntu test runner image from gimlichael to codebeltnet organization with newer SDK versions |
| docker-compose.yml | Updated LocalStack image from 4.12.0 to 4.13.1 |
| Dockerfile.localstack | Updated LocalStack base image from 4.12.0 to 4.13.1 |
| .docfx/Dockerfile.docfx | Updated Nginx version from 1.29.4-alpine to 1.29.5-alpine |
| README.md | Updated build status badge to reference ci-pipeline.yml workflow and simplified project description |
| CHANGELOG.md | Added version 5.0.2 entry dated 2026-02-15 noting package dependency updates |
| .nuget/*/PackageReleaseNotes.txt (33 files) | Added identical version 5.0.2 release notes documenting dependency upgrades for all NuGet packages |
| with: | ||
| configuration: ${{ matrix.configuration }} | ||
| version: ${{ needs.build.outputs.version }} | ||
| download-build-artifact-pattern: build-${{ matrix.configuration }}-X64 |
There was a problem hiding this comment.
The pack job only downloads X64 build artifacts using the pattern build-${{ matrix.configuration }}-X64. However, the build job now produces artifacts for both X64 and ARM64 architectures. Consider whether ARM64 build artifacts should also be included in the packing process, or if this is intentionally architecture-agnostic since .NET packages typically contain platform-neutral IL code. If packing is intentionally architecture-agnostic and only requires one architecture's output, this is acceptable. Otherwise, the download pattern should be adjusted to include both architectures or clarified with a comment.
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Fix all issues with AI agents
In `@Directory.Packages.props`:
- Around line 34-35: Replace the coverlet package versions to a NuGet-available
release by changing the PackageVersion entries for "coverlet.collector" and
"coverlet.msbuild" (the PackageVersion Include="coverlet.collector" and
PackageVersion Include="coverlet.msbuild" elements) from 8.0.0 back to 6.0.4 so
package restore succeeds; if you intend to keep 8.x, instead ensure your project
TFMs target .NET 8.0 LTS and that 8.0.0 is published to NuGet before updating.
🧹 Nitpick comments (2)
.nuget/Savvyio.Extensions.QueueStorage/PackageReleaseNotes.txt (1)
5-5: Consider adding specific dependency details in future releases.While the current message follows the established pattern across many releases, users might benefit from knowing which specific dependencies were upgraded (e.g., "nats.client to 2.7.2" as mentioned in the commit messages). This would make the release notes more actionable for assessing upgrade impact.
.docfx/Dockerfile.docfx (1)
1-1: NGINX base image updated to 1.29.5-alpine — valid version.The version bump is straightforward and the tag exists on Docker Hub.
Trivy flags the absence of a non-root
USERdirective (DS-0002). This is pre-existing and not introduced by this change. Consider addressing it in a follow-up to harden the container.🛡️ Optional: Add a non-root user for the final stage
FROM nginx:${NGINX_VERSION} AS final WORKDIR /usr/share/nginx/html COPY --from=build /build/docfx/wwwroot /usr/share/nginx/html + +RUN addgroup -S nginx-app && adduser -S -G nginx-app nginx-app +USER nginx-app ENTRYPOINT ["nginx", "-g", "daemon off;"]Note: NGINX on Alpine may need additional configuration (e.g., writable paths for temp/pid files) to run as non-root.
| <PackageVersion Include="coverlet.collector" Version="8.0.0" /> | ||
| <PackageVersion Include="coverlet.msbuild" Version="8.0.0" /> |
There was a problem hiding this comment.
🧩 Analysis chain
🌐 Web query:
coverlet 8.0.0 NuGet release
💡 Result:
Coverlet v8.0.0 was released on GitHub on February 15, 2026 (same-day listing via NewReleases) and includes (highlights): breaking change upgrading the minimum required SDK/runtime to .NET 8.0 LTS, plus fixes around System.CommandLine 2.0, branchpoint exclusion for SDK 8.0.407, NuGet copyright info, and improvements like generating an SBOM and multi-targeting updates for some packages. [1]
As of the most recently crawlable NuGet Gallery pages, the latest published versions shown for the main NuGet packages are still 6.0.4 (for both coverlet.collector and coverlet.msbuild), i.e., 8.0.0 is not yet visible on NuGet Gallery from these pages. [2] [3]
Sources: [1] [2] [3]
Revert coverlet to 6.0.4 (v8.0.0 is not yet available on NuGet).
Coverlet v8.0.0 was released on GitHub on February 15, 2026, but is not yet published to the NuGet Gallery. Package restoration will fail. Additionally, v8.0.0 introduces a breaking change requiring .NET 8.0 LTS as the minimum SDK/runtime; verify this aligns with your TFM requirements before upgrading.
🤖 Prompt for AI Agents
In `@Directory.Packages.props` around lines 34 - 35, Replace the coverlet package
versions to a NuGet-available release by changing the PackageVersion entries for
"coverlet.collector" and "coverlet.msbuild" (the PackageVersion
Include="coverlet.collector" and PackageVersion Include="coverlet.msbuild"
elements) from 8.0.0 back to 6.0.4 so package restore succeeds; if you intend to
keep 8.x, instead ensure your project TFMs target .NET 8.0 LTS and that 8.0.0 is
published to NuGet before updating.
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #47 +/- ##
=======================================
Coverage 79.11% 79.11%
=======================================
Files 177 177
Lines 3711 3711
Branches 365 365
=======================================
Hits 2936 2936
Misses 774 774
Partials 1 1 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
|
This pull request introduces improvements to the CI pipeline and updates release notes for multiple NuGet packages. The CI pipeline is now enhanced for multi-architecture support, and all package dependencies have been upgraded to their latest compatible versions.
CI pipeline enhancements:
.github/workflows/ci-pipeline.yml, including splitting test jobs by platform and updating artifact naming and download patterns. [1] [2]sonarcloud,codecov,codeql, anddeploy) to depend on the new architecture-specific test jobs. [1] [2]Release notes and dependency upgrades:
Container base image update:
NGINX_VERSIONin.docfx/Dockerfile.docfxfrom1.29.4-alpineto1.29.5-alpine.Summary by CodeRabbit
Release Notes
New Features
Chores