Modernize ESI.NET: netstandard2.0/net8.0/net10.0, ESI compatibility-date versioning, full endpoint coverage

.gitattributes

@@ -61,3 +61,11 @@
 #*.PDF   diff=astextplain
 #*.rtf   diff=astextplain
 #*.RTF   diff=astextplain
+
+###############################################################################
+# Keep shell scripts and CI YAML LF-only for the Linux CI runners, regardless
+# of the checkout platform's autocrlf setting.
+###############################################################################
+*.sh   text eol=lf
+*.yml  text eol=lf
+*.yaml text eol=lf

.github/actions/ci-dotnet/action.yml

@@ -0,0 +1,28 @@
+name: CI — .NET
+description: >
+  Restore, Release-build and test the solution. The library multi-targets
+  netstandard2.0, net8.0, and net10.0; netstandard2.0 covers .NET Framework
+  4.6.1+ consumers. Runs on Linux. Assumes the repo is already checked out.
+
+runs:
+  using: composite
+  steps:
+    - name: Setup .NET SDK
+      uses: actions/setup-dotnet@v6
+      with:
+        # A 10.0.x SDK builds/tests net8.0 and netstandard2.0 targets fine too
+        # (a newer SDK always understands older TFMs) - the reverse isn't
+        # true, so this must stay at least as new as the highest TargetFramework.
+        dotnet-version: '10.0.x'
+
+    - name: Restore
+      shell: bash
+      run: dotnet restore ESI.NET.sln
+
+    - name: Build (Release)
+      shell: bash
+      run: dotnet build ESI.NET.sln --configuration Release --no-restore
+
+    - name: Test
+      shell: bash
+      run: dotnet test ESI.NET.sln --configuration Release --no-build --verbosity normal

.github/dependabot.yml

@@ -0,0 +1,36 @@
+# Dependabot version updates. Each ecosystem is grouped, so a run opens at most
+# one PR per ecosystem (plus stragglers that can't be grouped). PRs target `dev`
+# — the integration branch, where CI (ci-dev.yml) runs. Security alerts are a
+# separate repo setting and open PRs only for actual advisories.
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: "/"
+    target-branch: dev
+    schedule:
+      interval: weekly
+    commit-message:
+      prefix: ci
+    groups:
+      actions:
+        patterns:
+          - "*"
+
+  - package-ecosystem: nuget
+    directory: "/ESI.NET"
+    target-branch: dev
+    schedule:
+      interval: weekly
+    commit-message:
+      prefix: deps
+    groups:
+      nuget:
+        patterns:
+          - "*"
+    # Majors (Microsoft.IdentityModel 7.x/8.x, Microsoft.Extensions.* 9.x, …)
+    # tend to need code changes — take those by hand; grouped minor/patch keep
+    # the package graph fresh in the meantime.
+    ignore:
+      - dependency-name: "*"
+        update-types:
+          - version-update:semver-major

.github/workflows/ci-dev.yml

@@ -0,0 +1,26 @@
+name: CI (dev)
+
+# Per-commit coverage on the long-lived dev branch, so a break is pinned to the
+# commit that caused it instead of surfacing across a whole delta at PR time.
+# Separate workflow (not the `check` context) so it never touches the dev->master
+# PR gate. Skips doc-only pushes.
+on:
+  push:
+    branches: [dev]
+    paths-ignore:
+      - 'docs/**'
+      - '**.md'
+
+concurrency:
+  group: ci-dev-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: ./.github/actions/ci-dotnet

.github/workflows/ci.yml

@@ -0,0 +1,29 @@
+name: CI
+
+# PR gate for both branches: dev->master (the release gate) and feature->dev
+# (contributor PRs). The `check` job aggregates the build and is the required
+# status check on master (branch protection) — keep its name stable.
+on:
+  pull_request:
+    branches: [master, dev]
+
+# Newer commits on the PR branch supersede an in-flight run.
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: ./.github/actions/ci-dotnet
+
+  check:
+    needs: [build]
+    runs-on: ubuntu-latest
+    steps:
+      - run: echo "build passed"

.github/workflows/integration.yml

@@ -0,0 +1,52 @@
+name: Integration (live)
+
+# Live tests against the real ESI API. Deliberately NOT a PR or push gate - it
+# makes ~25 real calls and needs secrets. Runs weekly and on demand; a failed
+# run emails the maintainer. Also the manual pre-release check: dispatch it,
+# confirm green, then merge dev -> master.
+#
+# Public smoke tests always run. The auth probe self-skips unless ALL of
+# ESI_CLIENT_ID / ESI_SECRET_KEY / ESI_REFRESH_TOKEN are set as repo secrets
+# (mint the refresh token with tools/MintToken). Fork PRs never get secrets and
+# this never runs on PRs, so that path does not arise.
+on:
+  schedule:
+    - cron: '41 6 * * 1' # Mondays 06:41 UTC (after spec-check)
+  workflow_dispatch:
+
+concurrency:
+  group: integration-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  integration:
+    runs-on: ubuntu-latest
+    env:
+      ESI_USER_AGENT: 'ESI.NET integration (github.com/seraphx2/ESI.NET)'
+      ESI_CLIENT_ID: ${{ secrets.ESI_CLIENT_ID }}
+      ESI_SECRET_KEY: ${{ secrets.ESI_SECRET_KEY }}
+      ESI_REFRESH_TOKEN: ${{ secrets.ESI_REFRESH_TOKEN }}
+    steps:
+      - uses: actions/checkout@v7
+
+      - uses: actions/setup-dotnet@v6
+        with:
+          dotnet-version: '8.0.x'
+
+      - name: Integration tests
+        shell: bash
+        run: >
+          dotnet test tests/ESI.NET.IntegrationTests/ESI.NET.IntegrationTests.csproj
+          --configuration Release --verbosity normal
+          --logger 'trx;LogFileName=integration.trx' --results-directory ./trx
+
+      - name: Upload test results
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: integration-trx
+          path: ./trx/*.trx
+          if-no-files-found: ignore

.github/workflows/probe.yml

@@ -0,0 +1,37 @@
+name: probe (live deserialize)
+
+# Fetches every reachable GET endpoint live and deserializes the real body into
+# the wrapper's model - the check the OpenAPI document can't give us, because ESI
+# barely declares nullability. Public endpoints always; authenticated endpoints
+# when the SSO secrets are present.
+#
+# workflow_dispatch only. It exchanges ESI_REFRESH_TOKEN, which EVE rotates, so a
+# run invalidates the stored token - re-mint with tools/MintToken afterwards (the
+# scheduled integration workflow needs a valid one). That is why this is not on a
+# schedule.
+
+on:
+  workflow_dispatch:
+
+concurrency:
+  group: probe-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  probe:
+    runs-on: ubuntu-latest
+    env:
+      ESI_USER_AGENT: 'ESI.NET probe (github.com/seraphx2/ESI.NET)'
+      ESI_CLIENT_ID: ${{ secrets.ESI_CLIENT_ID }}
+      ESI_SECRET_KEY: ${{ secrets.ESI_SECRET_KEY }}
+      ESI_REFRESH_TOKEN: ${{ secrets.ESI_REFRESH_TOKEN }}
+    steps:
+      - uses: actions/checkout@v7
+      - uses: actions/setup-dotnet@v6
+        with:
+          dotnet-version: '8.0.x'
+      - name: Probe
+        run: dotnet run --project tools/SpecCheck --configuration Release -- --probe --no-schema