Skip to content

Update workflows - #35

Merged
matthewdevenny merged 1 commit into
mainfrom
matt/use-nuget-trusted-publish
Jun 30, 2026
Merged

matthewdevenny merged 1 commit into
mainfrom
matt/use-nuget-trusted-publish

Conversation

@matthewdevenny

Copy link
Copy Markdown
Contributor

No description provided.

Signed-off-by: Matthew DeVenny <matt@codecargo.com>

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates CI and release automation to be more deterministic and secure, and refreshes documentation to reflect current target/runtime support for this NATS-backed HybridCache / IDistributedCache library.

Changes:

  • Tighten GitHub Actions reliability with job timeouts and PR concurrency cancellation.
  • Improve supply-chain/security posture by pinning key Actions to commit SHAs and disabling checkout credential persistence.
  • Switch NuGet publishing to Trusted Publishing (OIDC) and update README details/links for ASP.NET Core 10.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File Description
README.md Updates overview text to note testing on .NET 8 and .NET 10; updates HybridCache doc link to aspnetcore-10.0.
.github/workflows/publish.yml Adds job timeout, pins Actions, disables persisted checkout credentials, and publishes via NuGet Trusted Publishing (OIDC) using NuGet/login.
.github/workflows/build.yml Expands path triggers, adds concurrency cancellation for PRs, adds job timeout, and pins Actions + disables persisted checkout credentials.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@matthewdevenny
matthewdevenny merged commit 84a3a99 into main Jun 30, 2026
3 checks passed
@matthewdevenny
matthewdevenny deleted the matt/use-nuget-trusted-publish branch June 30, 2026 18:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants