Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions Directory.Packages.props
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,8 @@
<ItemGroup>
<PackageVersion Include="ArcForges.Build.Policy" Version="1.0.0-ci.20.1" />
<PackageVersion Include="ArcForges.Contracts.PublicApi" Version="1.0.0-ci.36.1" />
<PackageVersion Include="Avalonia.Desktop" Version="12.1.2" />
<PackageVersion Include="Avalonia.Themes.Fluent" Version="12.1.2" />
<PackageVersion Include="Avalonia.Desktop" Version="12.1.3" />
<PackageVersion Include="Avalonia.Themes.Fluent" Version="12.1.3" />
<PackageVersion Include="Grpc.Net.Client" Version="2.83.0" />
<PackageVersion Include="Grpc.Net.Client.Web" Version="2.83.0" />
<PackageVersion Include="Grpc.AspNetCore" Version="2.83.0" />
Expand Down
110 changes: 55 additions & 55 deletions eng/policy/dependency-policy.json

Large diffs are not rendered by default.

22 changes: 11 additions & 11 deletions eng/policy/dependency-review.json
Original file line number Diff line number Diff line change
Expand Up @@ -11,32 +11,32 @@
"frameworkMajorUpgrade": false,
"runtimePostureAssessment": "No framework version changes: existing desktop Native AOT and trim posture retained.",
"checks": {
"compilation": "Workflow-only update: github/codeql-action init/analyze 4.38.0 -> 4.38.1 (Dependabot actions group). Required Windows/Linux compilation runs unchanged in CI.",
"aot": "No project, package or publish input changed; existing Windows x64/ARM64 and Linux x64 AOT publication jobs are unchanged.",
"compatibility": "Patch release within CodeQL action v4 with the same inputs and outputs; no package versions, APIs or generated contracts changed.",
"licence": "GitHub-owned action pinned to the immutable commit 1c5b675653bb5c22dbe9b12b556ec555138e09fd of annotated tag v4.38.1; no distributed closure or notice changed.",
"security": "Immutable SHA pin retained; CodeQL and dependency-review gates stay required; no vulnerability-absence claim.",
"sbom": "No restore closure change; the portable dependencies.json SBOM is unaffected.",
"localRuntime": "Not run: CI-only workflow action update; no application runtime behavior changed.",
"performance": "Not applicable: no runtime dependency, executable behavior or performance-sensitive algorithm changed.",
"compilation": "Avalonia.Desktop and Avalonia.Themes.Fluent 12.1.2 -> 12.1.3 (Dependabot avalonia group) with the matching Avalonia 12.1.3 transitive set; required Windows/Linux compilation runs in CI.",
"aot": "Windows x64/ARM64 and Linux x64 Native AOT publication stays required in CI for this patch release within Avalonia 12.1.",
"compatibility": "Patch release within Avalonia 12.1; no framework-major change. SkiaSharp, HarfBuzzSharp and ANGLE native packages keep their admitted versions, so the existing native admission is unchanged.",
"licence": "Every new Avalonia 12.1.3 package declares SPDX MIT in its published nuspec; exact nuspec SHA-256 and upstream source commit are recorded; notices unchanged.",
"security": "Dependency-review, CodeQL and secret-scan gates stay required on the pull request head; no vulnerability-absence claim.",
"sbom": "The portable dependencies.json SBOM is generated in CI from actual restore assets; only the Avalonia versions change.",
"localRuntime": "Not run: desktop GUI/runtime checks are local opt-in and outside this dependency update; CI covers compilation and AOT publication only.",
"performance": "Not measured: Avalonia patch release; no performance-sensitive code or configuration changed in this repository.",
"migration": "Not applicable: no persistence format or storage dependency changed."
},
"inputs": {
".github/workflows/ci.yml": "48e4cb95953bd927f80522c61885b8d3f890eded4d33b0b08da3b0cc121c5b6f",
"Directory.Build.props": "9d567c843c8af63df502a0a1752767d183a1db2a7e52ebd2690c7edbbae008eb",
"Directory.Build.targets": "ff01198f816a04667ade99836d5b57e0fb78067972d2c852f2e8c1e8eea3f138",
"Directory.Packages.props": "ef826d5a6865882ae44e02c03a21e2d94e3146a2027a22bdbc6a558aac260321",
"Directory.Packages.props": "a3be569aa978aa50a56fff07fc4da3d762886ecdc2bff96fae05bec688e67366",
"NuGet.Config": "4b8c02e4d50d3cc41197afc609f592e5a1889c049fe39147564e2811c5d8e261",
"eng/ArcForges.Repository/ArcForges.Repository.csproj": "b8b811d878528c9fcff4e37fa4acd46ea5ce08221ff782183d201daffd010e33",
"eng/ArcForges.Repository/packages.lock.json": "3c1917c46723808336fbacfb5fd40d3c6ae7854ddd3b05ba03100cd759a569af",
"eng/policy/dependency-policy.json": "f35ff83423ddc7be767ef5ada65295e065c2b8c2b80665bdb029087c3615194f",
"eng/policy/dependency-policy.json": "1a56fa426618d39be5b4eb9538286d5b46eb35bf894cedc1363c2f492066910b",
"eng/policy/licence-boundary.json": "a742df60c4dfcad5f72da6b8312795d69b8d42894b0ef871eafb58732c4629be",
"eng/policy/reuse-policy.json": "efd435e1a5b41a6b1ff29e5b6472553616eb5bf88f710616e83549c86d24a788",
"global.json": "d533441ee720f55065ffdda4273cd815f53f534612cd5899bd4b9b41d0e3a630",
"src/ArcForges.ArcScope.Core/ArcForges.ArcScope.Core.csproj": "2338d20f00790d79a717e3ed74cfd79de26204d428eda618247558d84f776f3d",
"src/ArcForges.ArcScope.Core/packages.lock.json": "2d4085d38648181c42333b905a7d57bff5b5faee5a35e777c05f16cf2b3c6142",
"src/ArcForges.ArcScope/ArcForges.ArcScope.csproj": "5969080e16a982fbdf6d8eb887ec5fd8fc378824c0e9bf10e55503e851a5f188",
"src/ArcForges.ArcScope/packages.lock.json": "dc79f1c07fb844855eb1adb5be6ff3d3e988310fd3173f7f2235283b584b6a2b",
"src/ArcForges.ArcScope/packages.lock.json": "20dfcf44c15d55669e3f6f45bd95aa2049ab004c1b28afacb3c476a520c57499",
"tests/ArcForges.ArcScope.Tests/ArcForges.ArcScope.Tests.csproj": "9d411d5f46d36903fa34592abe0d5977b81b10b215519cc5c5cecc53320fea48",
"tests/ArcForges.ArcScope.Tests/packages.lock.json": "efd69fa9e197997dd8c0009599826055ca655c9922da4abd4865de7f02d15907",
"third-party/sources.json": "106696f712f9574d0e5521337c954bdb936ee3e30901a7aab1f2d569bed548f6"
Expand Down
2 changes: 1 addition & 1 deletion eng/provenance/NOTICE.txt
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ ArcForges source provenance notices

Generated from reviewed active records. Original licence files and dependency notices remain authoritative.

arcnotes-provenance-tools-r5
arcnotes-provenance-tools-r6
Source: https://github.com/ArcForges/ArcNotes @ b7358bd7b1dca0671cd51cf6d798d5c09911b198
Material licence: AGPL-3.0-only
Notice scope: source
Expand Down
43 changes: 22 additions & 21 deletions eng/provenance/files.json
Original file line number Diff line number Diff line change
Expand Up @@ -39,6 +39,7 @@
"eng/provenance/records/arcnotes-provenance-tools-r3.json",
"eng/provenance/records/arcnotes-provenance-tools-r4.json",
"eng/provenance/records/arcnotes-provenance-tools-r5.json",
"eng/provenance/records/arcnotes-provenance-tools-r6.json",
"eng/provenance/records/canonical-agpl-legal-r1.json",
"eng/provenance/records/contracts-apache-legal-r1.json",
"eng/provenance/records/upstream-avalonia-legal-r1.json",
Expand All @@ -65,10 +66,10 @@
"third-party/sources.json"
],
"reused": {
"eng/ArcForges.Repository/ProvenancePolicy.cs": "arcnotes-provenance-tools-r5",
"eng/ArcForges.Repository/Program.cs": "arcnotes-provenance-tools-r5",
"tests/ArcForges.ArcScope.Tests/ProvenancePolicyTests.cs": "arcnotes-provenance-tools-r5",
"tests/ArcForges.ArcScope.Tests/CandidateTests.cs": "arcnotes-provenance-tools-r5",
"eng/ArcForges.Repository/ProvenancePolicy.cs": "arcnotes-provenance-tools-r6",
"eng/ArcForges.Repository/Program.cs": "arcnotes-provenance-tools-r6",
"tests/ArcForges.ArcScope.Tests/ProvenancePolicyTests.cs": "arcnotes-provenance-tools-r6",
"tests/ArcForges.ArcScope.Tests/CandidateTests.cs": "arcnotes-provenance-tools-r6",
"LICENSE": "canonical-agpl-legal-r1",
"eng/third-party/LICENSE.Contracts.txt": "contracts-apache-legal-r1",
"third-party/Avalonia.LICENSE.txt": "upstream-avalonia-legal-r1",
Expand All @@ -77,23 +78,23 @@
"third-party/MicroCom.LICENSE.txt": "upstream-microcom-legal-r1",
"third-party/Protobuf.LICENSE.txt": "upstream-protobuf-legal-r1",
"third-party/Tmds.DBus.LICENSE.txt": "upstream-tmds-dbus-legal-r1",
"eng/ArcForges.Repository/IdentityEvidence.cs": "arcnotes-provenance-tools-r5",
"src/ArcForges.ArcScope.Core/BuildIdentity.cs": "arcnotes-provenance-tools-r5",
"tests/ArcForges.ArcScope.Tests/BuildIdentityTests.cs": "arcnotes-provenance-tools-r5",
"Directory.Build.targets": "arcnotes-provenance-tools-r5",
"Directory.Build.props": "arcnotes-provenance-tools-r5",
"Directory.Packages.props": "arcnotes-provenance-tools-r5",
"eng/ArcForges.Repository/ArcForges.Repository.csproj": "arcnotes-provenance-tools-r5",
"src/ArcForges.ArcScope/ArcForges.ArcScope.csproj": "arcnotes-provenance-tools-r5",
"src/ArcForges.ArcScope/Program.cs": "arcnotes-provenance-tools-r5",
"src/ArcForges.ArcScope/LiveSmoke.cs": "arcnotes-provenance-tools-r5",
".github/workflows/ci.yml": "arcnotes-provenance-tools-r5",
"eng/version-sources.json": "arcnotes-provenance-tools-r5",
"eng/ArcForges.Repository/DependencyPolicy.cs": "arcnotes-provenance-tools-r5",
"docs/dependency-policy.md": "arcnotes-provenance-tools-r5",
"eng/policy/dependency-policy.json": "arcnotes-provenance-tools-r5",
"tests/ArcForges.ArcScope.Tests/DependencyPolicyTests.cs": "arcnotes-provenance-tools-r5",
"eng/policy/dependency-review.json": "arcnotes-provenance-tools-r5"
"eng/ArcForges.Repository/IdentityEvidence.cs": "arcnotes-provenance-tools-r6",
"src/ArcForges.ArcScope.Core/BuildIdentity.cs": "arcnotes-provenance-tools-r6",
"tests/ArcForges.ArcScope.Tests/BuildIdentityTests.cs": "arcnotes-provenance-tools-r6",
"Directory.Build.targets": "arcnotes-provenance-tools-r6",
"Directory.Build.props": "arcnotes-provenance-tools-r6",
"Directory.Packages.props": "arcnotes-provenance-tools-r6",
"eng/ArcForges.Repository/ArcForges.Repository.csproj": "arcnotes-provenance-tools-r6",
"src/ArcForges.ArcScope/ArcForges.ArcScope.csproj": "arcnotes-provenance-tools-r6",
"src/ArcForges.ArcScope/Program.cs": "arcnotes-provenance-tools-r6",
"src/ArcForges.ArcScope/LiveSmoke.cs": "arcnotes-provenance-tools-r6",
".github/workflows/ci.yml": "arcnotes-provenance-tools-r6",
"eng/version-sources.json": "arcnotes-provenance-tools-r6",
"eng/ArcForges.Repository/DependencyPolicy.cs": "arcnotes-provenance-tools-r6",
"docs/dependency-policy.md": "arcnotes-provenance-tools-r6",
"eng/policy/dependency-policy.json": "arcnotes-provenance-tools-r6",
"tests/ArcForges.ArcScope.Tests/DependencyPolicyTests.cs": "arcnotes-provenance-tools-r6",
"eng/policy/dependency-review.json": "arcnotes-provenance-tools-r6"
},
"artifacts": []
}
Loading
Loading