⬆️ bump dependencies

[gimlichael]

This pull request includes several updates to package references and test environments. The most important changes include modifications to the Directory.Build.props and Directory.Packages.props files, as well as updates to the testenvironments.json file.

Package Reference Updates:

• Directory.Build.props: Updated the xunit.runner.visualstudio package reference to include PrivateAssets and IncludeAssets attributes for better asset management.
• Directory.Packages.props: Updated versions for several packages, including Cuemon.Extensions.IO, Codebelt.Extensions.Xunit.App, and Microsoft.NET.Test.Sdk. [1] [2]

Test Environment Updates:

• testenvironments.json: Updated the WSL distribution to Ubuntu-24.04 and the Docker image to gimlichael/ubuntu-testrunner:net8.0.407-9.0.202 for the test environments.

Summary by CodeRabbit

• Chores

  • Updated internal dependency configurations to enhance stability and compatibility.
  • Improved CI/CD workflows by adopting reusable workflow templates and refining permissions.

• Tests

  • Refined test environment settings by upgrading the Ubuntu distribution and Docker image for more reliable testing.

• Documentation

  • Expanded project README with additional details on domain-driven design features and optional capabilities.
  • Added release notes entry for the latest package dependency updates.

[coderabbitai]

Walkthrough

The changes modify the project’s configuration files. In the properties files, the package reference for xunit.runner.visualstudio is updated in two ways: additional attributes are added in Directory.Build.props, and version numbers are incremented in Directory.Packages.props for several packages. The testing environment settings in testenvironments.json are updated to newer Ubuntu and Docker image versions. The GitHub Actions workflow file is refactored to use reusable workflows with updated permissions. The .codecov/codecov.yml file is removed. The package release notes and README files are expanded with new version and documentation details. A new changelog entry for version 0.4.2 is added.

Changes

File(s)	Summary of Changes
Directory.Build.props	Updated the PackageReference for xunit.runner.visualstudio to include <PrivateAssets>all</PrivateAssets> and <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>.
Directory.Packages.props	Upgraded package versions: - Cuemon.Extensions.IO 9.0.1 → 9.0.4 - Codebelt.Extensions.Xunit.App 9.0.1 → 10.0.0 - Microsoft.NET.Test.Sdk 17.12.0 → 17.13.0 - Savvyio.Domain, Savvyio.Extensions.Newtonsoft.Json, Savvyio.Extensions.Text.Json 4.0.1 → 4.0.2 - xunit.runner.visualstudio 3.0.1 → 3.0.2
testenvironments.json	Updated testing configurations: - WSL distribution changed from "Ubuntu-22.04" to "Ubuntu-24.04". - Docker image tag updated from "gimlichael/ubuntu-testrunner:net8.0.405-9.0.102" to "gimlichael/ubuntu-testrunner:net8.0.408-9.0.203".
.codecov/codecov.yml	Removed the file that contained a Codecov configuration to ignore coverage data from files/directories matching "test".
.github/workflows/pipelines.yml	Refactored workflow to add top-level permissions with contents: read. Replaced explicit job steps with reusable workflow calls: - sonarcloud renamed to call-sonarcloud using external workflow with inputs and inherited secrets. - codecov renamed to call-codecov using external workflow. - codeql renamed to call-codeql with explicit permissions.security-events: write. - deploy renamed to call-nuget with contents: write and packages: write permissions. Removed detailed step definitions in favor of reusable workflows.
.nuget/Codebelt.SharedKernel/PackageReleaseNotes.txt	Added version 0.4.2 release notes documenting dependency updates for .NET 8 and .NET 9 target frameworks.
.nuget/Codebelt.SharedKernel/README.md	Added a new section describing the Savvyio.Domain package, its DDD abstractions, and references to the Savvy I/O GitHub repository and website, including optional features like CQRS and Event Sourcing.
CHANGELOG.md	Added a new changelog entry for version 0.4.2 dated 2025-04-19 describing the release as a service update focused on package dependencies.
README.md	Extended the Savvy I/O project description to mention optional features such as CQRS and Event Sourcing and added a reference to the project website.

Poem

I'm a bouncy bunny with a note so clear,
Hopping through props with updates so dear.
Attributes and versions all change in tune,
Like carrots served under a sky of blue.
I nibble through configs with a joyful cheer 🥕✨.
A rabbit's song for a project renewed!

---

📜 Recent review details

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Free

📥 Commits

Reviewing files that changed from the base of the PR and between 4362c5f and 2efbfe4.

📒 Files selected for processing (9)

• .codecov/codecov.yml (0 hunks)
• .github/workflows/pipelines.yml (2 hunks)
• .nuget/Codebelt.SharedKernel/PackageReleaseNotes.txt (1 hunks)
• .nuget/Codebelt.SharedKernel/README.md (1 hunks)
• CHANGELOG.md (1 hunks)
• Directory.Build.props (1 hunks)
• Directory.Packages.props (1 hunks)
• README.md (1 hunks)
• testenvironments.json (1 hunks)

💤 Files with no reviewable changes (1)

• .codecov/codecov.yml

---

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>, please review it.
  • Generate unit testing code for this file.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
  • @coderabbitai generate unit testing code for this file.
  • @coderabbitai modularize this function.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
  • @coderabbitai read src/utils.ts and generate unit testing code.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
  • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

• @coderabbitai pause to pause the reviews on a PR.
• @coderabbitai resume to resume the paused reviews.
• @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
• @coderabbitai full review to do a full review from scratch and review all the files again.
• @coderabbitai summary to regenerate the summary of the PR.
• @coderabbitai resolve resolve all the CodeRabbit review comments.
• @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
• @coderabbitai help to get help.

Other keywords and placeholders

• Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
• Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
• Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

• You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
• Please see the configuration documentation for more information.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 88.50%. Comparing base (4362c5f) to head (2efbfe4).
Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main      #12   +/-   ##
=======================================
  Coverage   88.50%   88.50%           
=======================================
  Files          11       11           
  Lines         200      200           
  Branches        8        8           
=======================================
  Hits          177      177           
  Misses         23       23           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud