Merge upstream shibayan/keyvault-acmebot (NET10, ARI, project restructure)

.github/dependabot.yml

@@ -6,7 +6,7 @@
 version: 2
 updates:
   - package-ecosystem: "nuget"
-    directory: "/"
+    directory: "/src"
     schedule:
       interval: "weekly"
     groups:

.github/workflows/build.yml

@@ -7,21 +7,21 @@ on:
     branches: [ master ]
 
 env:
-  DOTNET_VERSION: 8.0.x
-  BICEP_VERSION: 0.38.33
+  DOTNET_VERSION: 10.0.x
+  BICEP_VERSION: 0.40.2
 
 jobs:
   build:
     runs-on: ubuntu-latest
     permissions:
       contents: read
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       with:
         submodules: true
 
     - name: Use .NET ${{ env.DOTNET_VERSION }}
-      uses: actions/setup-dotnet@v5
+      uses: actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309 # v5.1.0
       with:
         dotnet-version: ${{ env.DOTNET_VERSION }}
 
@@ -31,10 +31,10 @@ jobs:
         az bicep install --version v${{ env.BICEP_VERSION }}
 
     - name: Build project
-      run: dotnet build -c Release
+      run: dotnet build -c Release ./src
 
     - name: Lint C# code
-      run: dotnet format --verify-no-changes --exclude ACMESharpCore --verbosity detailed --no-restore
+      run: dotnet format --verify-no-changes --exclude ./src/ACMESharpCore --verbosity detailed --no-restore ./src
 
     - name: Lint Bicep template
-      run: az bicep build -f azuredeploy.bicep && git diff --exit-code --quiet
+      run: az bicep build -f ./deploy/azuredeploy.bicep && git diff --exit-code --quiet

.github/workflows/codeql.yml

@@ -9,32 +9,9 @@ on:
     - cron: '18 17 * * 4'
 
 jobs:
-  detect-changes:
-    runs-on: ubuntu-latest
-    outputs:
-      languages: ${{ steps.set-matrix.outputs.languages }}
-    steps:
-    - uses: dorny/paths-filter@v3
-      if: github.event_name == 'pull_request'
-      id: filter
-      with:
-        filters: |
-          actions: ./.github/workflows/**/*.yml
-          csharp: ./**/*.cs
-    - name: Set scan languages
-      id: set-matrix
-      run: |
-        if [[ $GITHUB_EVENT_NAME = "pull_request" ]]; then
-          echo "languages=${{ toJson(steps.filter.outputs.changes) }}" >> $GITHUB_OUTPUT
-        else
-          echo "languages=[\"actions\",\"csharp\"]" >> $GITHUB_OUTPUT
-        fi
-
   analyze:
     name: Analyze (${{ matrix.language }})
-    if: ${{ needs.detect-changes.outputs.languages != '[]' && needs.detect-changes.outputs.languages != '' }}
     runs-on: ubuntu-latest
-    needs: [detect-changes]
     permissions:
       security-events: write
       packages: read
@@ -43,20 +20,24 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        language: ${{ fromJson(needs.detect-changes.outputs.languages) }}
+        include:
+        - language: actions
+          build-mode: none
+        - language: csharp
+          build-mode: autobuild
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v5
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       with:
         submodules: true
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v4
+      uses: github/codeql-action/init@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
       with:
         languages: ${{ matrix.language }}
-        build-mode: none
+        build-mode: ${{ matrix.build-mode }}
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4
+      uses: github/codeql-action/analyze@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/publish.yml

@@ -5,8 +5,8 @@ on:
     tags: [ v* ]
 
 env:
-  DOTNET_VERSION: 8.0.x
-  BICEP_VERSION: 0.37.4
+  DOTNET_VERSION: 10.0.x
+  BICEP_VERSION: 0.40.2
 
 jobs:
   publish:
@@ -17,12 +17,12 @@ jobs:
       version: ${{ steps.setup_version.outputs.version }}
       major_version: ${{ steps.setup_version.outputs.major_version }}
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       with:
         submodules: true
 
     - name: Use .NET ${{ env.DOTNET_VERSION }}
-      uses: actions/setup-dotnet@v5
+      uses: actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309 # v5.1.0
       with:
         dotnet-version: ${{ env.DOTNET_VERSION }}
 
@@ -34,13 +34,13 @@ jobs:
         echo "MAJOR_VERSION=${FULL_VERSION%%.*}" >> $GITHUB_OUTPUT
 
     - name: Publish Function app
-      run: dotnet publish -c Release -r win-x86 --no-self-contained -o ./dist -p:Version=${{ steps.setup_version.outputs.version }} KeyVault.Acmebot
+      run: dotnet publish -c Release -r linux-x64 --no-self-contained -o ./dist -p:Version=${{ steps.setup_version.outputs.version }} ./src/Acmebot
 
     - name: Zip Function app
-      run: 7z a -mx=9 latest.zip ./dist/*
+      run: 7z a -mx=9 latest.zip ./dist/* ./dist/.[^.]*
 
     - name: Upload artifacts
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
       with:
         name: dist
         path: |
@@ -56,7 +56,7 @@ jobs:
     environment: production
     steps:
     - name: Azure Login
-      uses: azure/login@v2
+      uses: azure/login@a457da9ea143d694b1b9c7c869ebb04ebe844ef5 # v2.3.0
       with:
         client-id: ${{ secrets.AZURE_CLIENT_ID }}
         tenant-id: ${{ secrets.AZURE_TENANT_ID }}
@@ -68,7 +68,7 @@ jobs:
         az bicep install --version v${{ env.BICEP_VERSION }}
 
     - name: Download artifacts
-      uses: actions/download-artifact@v5
+      uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
       with:
         name: dist
 

.gitmodules

@@ -1,3 +1,3 @@
-[submodule "ACMESharpCore"]
-	path = ACMESharpCore
+[submodule "src/ACMESharpCore"]
+	path = src/ACMESharpCore
 	url = https://github.com/shibayan/ACMESharpCore.git