Promote Develop to Main

[ptr727]

Summary

Promotes develop to main: #463 bumped the
ptr727/ProjectTemplate hub-hosted reusable workflow pins from 2.0.539 to 2.0.560 across
test-pull-request.yml, publish-release.yml, and merge-bot-pull-request.yml. NuGet
packages, dotnet local tools, and third-party Actions were already at their latest versions on
both branches, so no other change is carried.

main had not yet picked up this hub-pin bump on its own (its independent dependabot bumps
since the last promotion, #460/#462,
covered nuget-deps/actions-deps groups only), so this promotion could not fast-forward and used a
promote/develop-to-main branch to resolve the resulting three-file merge conflict.

Supersedes #464

#464 carried this same promotion and was
auto-closed by GitHub when main was force-pushed during the commit-signature remediation
described below: its timeline records base_ref_force_pushed and closed at the same
timestamp. Its recorded head commit is no longer reachable from the branch, so GitHub refuses to
reopen it, and this pull request replaces it. The promoted content is unchanged.

Every commit was re-signed

All history on main, develop, and this branch was rewritten to restore commit signatures.
Background: an earlier identity rewrite (removing a stale pieter_viljoen@symantec.com author
identity from 27 commits dating to 2018-2019) shifted the parent chain of every descendant
commit, and git filter-repo drops the now-stale gpgsig field from every commit it rewrites.
That silently left the entire mainline unsigned, which is what blocked #464 under
Commits must have verified signatures.

The remediation re-signed all 884 commits with the maintainer's SSH key. Because GitHub matches a
signing key against the committer identity, the committer on every commit is now
Pieter Viljoen <ptr727@users.noreply.github.com>. Commit authors are preserved unchanged,
including dependabot[bot], Copilot, github-actions[bot], and ptr727-codegen[bot], as are
the original author and committer dates.

Verification

• This branch's tree is unchanged by the re-sign: the merge commit's tree is 7b43593e, which
  equals origin/develop^{tree} exactly, so no content was lost or introduced.
• Commit counts match pre-rewrite exactly: main 880, develop 807, this branch 884.
• GitHub reports every commit as verified: 880/880 on main, 807/807 on develop, and 884/884
  on this branch.
• This branch's tip is a clean two-parent merge of the current main and develop tips.
• The content-level verification of the promoted change (clean-compile chain with 0 warnings,
  212/212 tests, actionlint clean, and the reusable-workflow interface compatibility check
  across the 2.0.539 to 2.0.560 pin bump) was performed on Promote Develop to Main #464 against a tree byte-identical to
  this one.

🤖 Generated with Claude Code

[qodo-code-review]

ⓘ Qodo reviews are paused because your trial has ended. Ask your workspace admin to add credits to resume reviews. Manage billing

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Team

Run ID: 68cbbaa8-53b1-4b79-9227-7a7bb9928f29

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70.54%. Comparing base (7502aef) to head (761b214).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #465   +/-   ##
=======================================
  Coverage   70.54%   70.54%           
=======================================
  Files          13       13           
  Lines        1219     1219           
  Branches      111      111           
=======================================
  Hits          860      860           
  Misses        319      319           
  Partials       40       40           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

🟢 Approval recommended

The PR only updates reusable-workflow pins, and the pinned SHAs match the stated upstream tags (2.0.560 / d6a4d7e…) consistently across all changed workflows.

Pull request overview

Promotes develop to main by carrying the previously-reviewed hub reusable-workflow pin bump, updating this repo’s GitHub Actions callers to use ptr727/ProjectTemplate tag 2.0.560 (commit d6a4d7e…) instead of 2.0.539 (commit a9afa1d…).

Changes:

• Bump validate-task.yml workflow pin from 2.0.539 to 2.0.560.
• Bump build-release-task.yml workflow pin from 2.0.539 to 2.0.560.
• Bump publish-plan-task.yml / merge-bot-task.yml workflow pins from 2.0.539 to 2.0.560.

File summaries

File	Description
.github/workflows/test-pull-request.yml	Updates hub reusable-workflow pins for validation and smoke build jobs to 2.0.560.
.github/workflows/publish-release.yml	Updates hub reusable-workflow pins for plan/validate/build-release jobs to 2.0.560.
.github/workflows/merge-bot-pull-request.yml	Updates hub reusable-workflow pin for merge-bot task to 2.0.560.

Review details

• Files reviewed: 3/3 changed files
• Comments generated: 0
• Review effort level: Lite

---

💡 Configure MCP servers for context-aware, tailored reviews. Learn more in the docs.