Skip to content

chore: promote dev → main (v0.9.0-alpha.13)#267

Closed
github-actions[bot] wants to merge 13 commits into
mainfrom
dev
Closed

chore: promote dev → main (v0.9.0-alpha.13)#267
github-actions[bot] wants to merge 13 commits into
mainfrom
dev

Conversation

@github-actions
Copy link
Copy Markdown

@github-actions github-actions Bot commented May 1, 2026

Release Promotion

Merging dev into main for release v0.9.0-alpha.13.

Commits included

88a92bf feat: add Auth0 authentication skill for Blazor projects
9a80e14 chore: migrate Auth0.ManagementApi v7→v8 and bump NuGet packages (#266)
0efb404 build(deps): Bump dotnet-sdk from 10.0.100-preview.4.25258.110 to 10.0.202 in the all-actions group (#262)
9c2b6ed chore: ignore *.csproj.lscache LSP artifacts (#261)
d6af815 chore: sync squad workflows from dotfiles
137e804 chore: remove squad runtime files from tracking and update .gitignore (#259)
338a4f2 chore: Sync main back to dev after v0.8.0 release (#258)
82b2595 fix: upgrade gittools/actions to v4.5.0 for GitVersion 6.7.0 compat (#255)
e4a7189 chore: disable prerelease SDK in global.json (#254)
32cfc43 Add pre-push and merge playbooks, fix process documentation (#251)
4587eae chore: Update MCP server configurations and squad export (#246) (#250)
dbe3d11 chore: Sync dev with main (2 missing commits — #246, #247) (#249)
28d5a4f chore: Sync dev with main (2 missing commits) (#248)


After merging, run squad-milestone-release to tag and publish the GitHub Release.

mpaulosky and others added 13 commits April 12, 2026 14:50
Sync dev with main: brings in commits b529234 (#246) and 1c3b613 (#247). Establishes clean baseline for dev/main branching model.
* chore: Update MCP server configurations and squad export (#246)

* chore: merge release-process skill review decisions, update agent histories, archive aged decisions

- Merged three inbox decision entries (Aragorn/Boromir/Frodo) into decisions.md
- Updated agent history files with 2026-04-12 team sync learnings
- Archived pre-April-1 decisions to decisions-archive.md for operational clarity
- Released context by condensing aged decision records

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* .squad: Scribe logs for Frodo release-process legacy stub

Session: 2026-04-12T19:57:04Z

Tasks completed:
1. Orchestration log: frodo agent release-process deprecation task
2. Session log: release-skill-legacy-stub work summary
3. Decision inbox merged: frodo-release-process-legacy-stub.md → decisions.md
4. Frodo history.md updated: Added legacy stub deprecation entry
5. Inbox file deleted after merge

Outputs:
- .squad/orchestration-log/2026-04-12T19-57-04Z-frodo.md (new)
- .squad/log/2026-04-12T19-57-04Z-release-skill-legacy-stub.md (new)
- .squad/decisions.md (appended, 92896 bytes)
- .squad/agents/frodo/history.md (updated with team context)

No archival needed (92896 bytes < 20KB threshold would trigger archive,
but this represents 2026-04 additions; all old decisions within 30d window).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* .squad: History file summarization (aragorn, frodo, legolas, pippin)

Task 7: Summarized old entries (>30d) to '## Core Context' section.

Files:
- aragorn: 29KB → 21KB (kept March 28+ recent entries)
- frodo: 16KB → 6KB (kept April 12+ recent entries)
- legolas: 14KB → 4KB (consolidated CSS, styling, theme learnings)
- pippin: 12KB → 4KB (consolidated Aspire, Playwright, team rule learnings)

All summarized files now <12KB threshold except Aragorn (21KB still acceptable
with Core Context structure). Maintains full context while improving readability.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Update MCP server configurations and squad export

- Update .copilot/mcp-config.json with enhanced MCP server definitions
- Add .mcp.json for MCP client integration (untracked)
- Update squad-export.json with latest team metadata

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* chore: update frodo agent history

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* chore: scribe log and decisions export (#247)

* scribe: Log PR flow and merge decisions inbox

- Added orchestration log for Boromir PR creation/merge attempt (PR #246)
- Added session log for PR workflow (squad/scribe-log-mcp-export)
- Merged 3 decision inbox files into decisions.md:
  * Boromir: Branch strategy (dev/main model) feasibility audit
  * Boromir: MCP config commit safety assessment
  * Frodo: Documentation audit for dev/main branch model
- Cleared .squad/decisions/inbox/ (all inbox files processed)

This completes the spawn manifest processing for Boromir's two-pass PR flow attempt.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* scribe: Add Aragorn adoption decision to decisions.md

- Merged Aragorn's comprehensive two-branch strategy assessment
- Includes GitVersion.yml configuration recommendations
- Provides phased implementation roadmap (Phase 1 infrastructure, Phase 2 docs)
- Clearcut approval gate: requires Matthew Paulosky sign-off
- All decision inbox files now processed and cleared

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Adopts dev/main two-branch model across all infrastructure (workflows, dependabot, pre-push, GitVersion, docs, skills). Replaces squad-promote from Node.js to .NET/GitVersion.
Add pre-push and merge playbooks, fix process documentation

- New .squad/playbooks/pre-push-process.md (5-gate walkthrough)
- New .squad/playbooks/pr-merge-process.md (8-step merge lifecycle)
- Fix release-issuetracker.md (NBGV→GitVersion, two-branch model)
- Rewrite pre-push-test-gate skill (all 5 gates, 10 test projects)
- Flag 3 Squad CLI skills as non-applicable to IssueTrackerApp
- Update routing.md with playbook-aware routing
- Add playbook cross-references to ceremonies.md

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>"
Set allowPrerelease to false to use stable .NET SDK only.
…255)

v3.1.11 and v3 tags only support GitVersion <6.1.0, but 6.x now
resolves to 6.7.0 which is out of range. Upgrade all four release
workflows to gittools/actions@v4.5.0.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sync main back to dev after release v0.8.0

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
…#259)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Syncs squad workflow files from the dotfiles repository into this
project.

## Changes
- Updated `squad-export.json` with latest squad workflow configuration
(81 insertions / 25 deletions)

## Notes
Working as Ralph (Work Monitor)

---
*All pre-push gates passed: build ✅ | unit tests (2,026) ✅ | integration
tests (339) ✅*

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Adds `*.csproj.lscache` pattern to `.gitignore` to suppress 16 untracked
LSP artifact files generated by the C# language server.

These files are build/IDE artifacts and should never be committed.

---
🤖 Ralph (Work Monitor) — housekeeping chore

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
…0.202 in the all-actions group (#262)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
## Summary

Resolves the breaking changes introduced by Dependabot PR #264
(Auth0.ManagementApi 7.46.0 → 8.1.0 major bump) and bumps remaining
packages.

### Changes

**`Directory.Packages.props`** — version bumps applied (mirrors
Dependabot PR #264):
- `Auth0.ManagementApi`: 7.46.0 → 8.2.0

**`src/Web/Features/Admin/Users/UserManagementService.cs`**
- Removed manual token-fetch machinery (`IHttpClientFactory`,
`TokenCacheService`, token endpoint calls)
- Inject `IManagementApiClient` directly — v8 handles token caching
internally
- All five public methods updated to v8 call patterns

**`src/Web/Features/Admin/Users/UserManagementExtensions.cs`**
- Replaced `AddHttpClient` + `TokenCacheService` registration with
`AddSingleton<IManagementApiClient>` using
`ManagementClient(ManagementClientOptions { TokenProvider = new
ClientCredentialsTokenProvider(...) })`

**`tests/Web.Tests/Services/UserManagementServiceTests.cs`**
- Constructor updated to accept `IManagementApiClient?` instead of
`IHttpClientFactory?`
- Token-caching tests removed (v8 handles internally)
- `FakeHttpMessageHandler` deleted


**`tests/Web.Tests/Features/Admin/Users/UserManagementServiceCacheTests.cs`**
-
`DefaultOptions`/`IHttpClientFactory`/`TokenOnlyHttpClientFactory`/`FakeHttpMessageHandler`
all removed
- `CreateSut` accepts `IManagementApiClient?`
- Cache-miss tests now assert `ExternalService` error code

### Test results (local)

| Suite | Result |
|---|---|
| Architecture.Tests | ✅ 63/63 |
| Domain.Tests | ✅ 419/419 |
| Web.Tests.Bunit | ✅ 934/934 |
| Persistence.MongoDb.Tests | ✅ 77/77 |
| Web.Tests | ✅ 498/498 |
| Persistence.AzureStorage.Tests | ✅ 33/33 |

> ⚠️ This task was flagged as "needs review" — please have a squad
member review before merging.

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
## Summary

Reworks this PR into a **skill-only** change set and keeps the Auth0
guidance aligned with the current `dev` branch after the Auth0
Management API v8 migration.

---

### Changes

**Skill package only** —
`.github/skills/implement-auth0-authentication/`

| File | Purpose |
|------|---------|
| `SKILL.md` | Main skill entry point with secure Auth0 workflow
guidance |
| `references/configuration-prompts.md` | Prompts for collecting Auth0
web-app and M2M configuration |
| `references/auth-implementation.md` | Auth0 claims transformation, UI
components, and secure login/logout examples |
| `references/program-configuration.md` | `Program.cs` wiring, secure
endpoint mapping, antiforgery, and testing-mode auth |
| `references/admin-user-management.md` | Current Auth0 Management API
v8 patterns for user/role management |

### Rework notes

- Removed the obsolete `Directory.Packages.props` rollback entirely
- Updated the skill to reflect the merged Auth0 Management API
**v8.2.0** path on `dev`
- Replaced stale v7 guidance (`ManagementApiClient`, manual token
fetching, `Auth0.ManagementApi.Models/Paging`) with the current v8
approach (`IManagementApiClient`, `ManagementClient`,
`ClientCredentialsTokenProvider`, `Auth0.ManagementApi.Users`)
- Updated the login guidance to use local return-url validation and
CSRF-safe logout patterns

### Validation

- `dotnet build IssueTrackerApp.slnx --configuration Release`
- All unit, integration, and AppHost test suites passed via the pre-push
gate

⚠️ Please have a squad reviewer confirm the Auth0 guidance before
merging.

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@mpaulosky
Copy link
Copy Markdown
Owner

Superseded by #268.

#267 could not be merged cleanly because global.json and .github/workflows/squad-promote.yml conflicted between main and dev. #268 carries the same promotion with those two conflicts resolved to the current dev content.

@mpaulosky mpaulosky closed this May 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant