Merge branch 'master' into dependabot/nuget/build/Polly.Core-8.6.6

Author: thiagoluga

.github/workflows/ci.yml

@@ -24,17 +24,17 @@ jobs:
       DOTNET_SKIP_FIRST_TIME_EXPERIENCE: true
       NUGET_PACKAGES: ${{ github.workspace }}/.nuget/packages
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Setup .NET (8 + 9)
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5
         with:
           dotnet-version: |
             8.0.x
             9.0.x
 
       - name: Cache NuGet packages
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ${{ github.workspace }}/.nuget/packages
           key: ${{ runner.os }}-nuget-${{ hashFiles('**/Directory.Packages.props') }}

.github/workflows/codeql.yml

@@ -28,17 +28,17 @@ jobs:
       DOTNET_NOLOGO: true
       DOTNET_CLI_TELEMETRY_OPTOUT: true
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Setup .NET (8 + 9)
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5
         with:
           dotnet-version: |
             8.0.x
             9.0.x
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: csharp
           queries: security-and-quality
@@ -47,6 +47,6 @@ jobs:
         run: dotnet build NeoReports.sln --configuration Release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4
         with:
           category: "/language:csharp"

.github/workflows/sonar.yml

@@ -17,53 +17,40 @@ jobs:
   analyze:
     name: SonarCloud
     runs-on: ubuntu-latest
-    # Skip until the SONAR_TOKEN secret is configured (e.g. on forks). Once you
-    # add the secret in repo settings, the job runs automatically.
-    if: ${{ github.repository == 'thiagoluga/NeoReports' }}
+    # The whole job is skipped (neutral, never red) until SonarCloud is fully set up.
+    # To activate: import the project on sonarcloud.io, add the SONAR_TOKEN secret,
+    # then set the repository variable SONAR_ENABLED to "true"
+    # (gh variable set SONAR_ENABLED --body true).
+    if: ${{ vars.SONAR_ENABLED == 'true' && github.repository == 'thiagoluga/NeoReports' }}
     env:
       DOTNET_NOLOGO: true
       DOTNET_CLI_TELEMETRY_OPTOUT: true
       SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
     steps:
-      - name: Guard — require SONAR_TOKEN
-        id: guard
-        run: |
-          if [ -z "${SONAR_TOKEN}" ]; then
-            echo "SONAR_TOKEN not set — skipping SonarCloud analysis."
-            echo "enabled=false" >> "$GITHUB_OUTPUT"
-          else
-            echo "enabled=true" >> "$GITHUB_OUTPUT"
-          fi
-
-      - uses: actions/checkout@v4
-        if: steps.guard.outputs.enabled == 'true'
+      - uses: actions/checkout@v6
         with:
           # Full history gives Sonar accurate new-code / blame information.
           fetch-depth: 0
 
       - name: Setup .NET (8 + 9)
-        if: steps.guard.outputs.enabled == 'true'
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5
         with:
           dotnet-version: |
             8.0.x
             9.0.x
 
       - name: Setup Java (required by the Sonar scanner)
-        if: steps.guard.outputs.enabled == 'true'
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: "17"
 
       - name: Install Sonar + coverage tools
-        if: steps.guard.outputs.enabled == 'true'
         run: |
           dotnet tool install --global dotnet-sonarscanner
           dotnet tool install --global dotnet-coverage
 
       - name: Build, test (with coverage) and analyze
-        if: steps.guard.outputs.enabled == 'true'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |

build/Directory.Packages.props

@@ -16,7 +16,7 @@
 
     <!-- Sources / Formats / Destinations -->
     <PackageVersion Include="Microsoft.Data.SqlClient" Version="5.2.2" />
-    <PackageVersion Include="ClosedXML" Version="0.104.2" />
+    <PackageVersion Include="ClosedXML" Version="0.105.0" />
     <PackageVersion Include="AWSSDK.S3" Version="3.7.405.6" />
 
     <!-- Jobs -->