V10.5.5/service update

[gimlichael]

This pull request updates dependencies across multiple packages to their latest compatible versions and makes several improvements to the CI/CD pipeline configuration. The main changes include dependency upgrades for all supported target frameworks, enhancements to deployment job conditions, and updates to permissions and secrets in the CI workflow.

Dependency Upgrades:

• All PackageReleaseNotes.txt files for the Cuemon packages have been updated to version 10.5.5, noting that dependencies are now upgraded to the latest compatible versions for all supported target frameworks (TFMs). This affects core, ASP.NET Core, authentication, data, diagnostics, and various extension packages. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13]

CI/CD Pipeline Improvements:

• The deployment job condition in .github/workflows/ci-pipeline.yml is now more robust, ensuring deployments only proceed if all required jobs succeed and preventing optional skipped jobs from blocking deployment.

Other Changes:

• The NGINX_VERSION argument in .docfx/Dockerfile.docfx was updated to use version 1.31-alpine instead of 1.31.1-alpine for improved compatibility.

[greptile-apps]

Greptile Summary

This PR is a v10.5.5 service update that bumps 45+ NuGet dependencies to their latest patch versions, tightens CI/CD deployment conditions, and adds NET9-specific string-processing fast paths to Cuemon.Kernel.

• Dependency upgrades: All Directory.Packages.props entries are advanced one patch (e.g., 10.0.9 → 10.0.10, 9.0.17 → 9.0.18), covering Microsoft.Extensions., Microsoft.Data., and internal Codebelt.* tooling packages.
• CI/CD changes: The deploy job condition now uses always() and explicit per-job result == 'success' guards instead of a bare github.event_name != 'pull_request' check; repository write permission is downgraded from contents: write to contents: read; and the Dockerfile NGINX tag is relaxed from 1.31.1-alpine to the floating 1.31-alpine.
• Core library improvements: Condition.cs gains a bitmap-based HasDifferenceCore for NET9+, replaces LINQ Any/All/Except with explicit loops for IsBinaryDigits, IsWhiteSpace, and IsHex, and switches IsEnum from Enum.Parse inside a try-catch to Enum.TryParse; Validator.cs extracts repeated validation boilerplate into ContainsInterfaceCore / ContainsTypeCore helpers and refactors ContainsAny with span-based fast paths for NET9+.

Confidence Score: 5/5

Safe to merge — changes are routine dependency upgrades, CI condition hardening, and well-tested performance optimisations with no altered public API contracts.

All source-level changes in Condition.cs and Validator.cs are demonstrably equivalent rewrites: the Enum.TryParse substitution is verified by a legacy-equivalence matrix test, the LINQ-to-loop transformations preserve identical exit conditions, and the HasDifferenceCore bitmap path is guarded behind a compile-time NET9_0_OR_GREATER preprocessor symbol. The CI permission reduction (contents: write → read) is correct for a NuGet-only deploy job. Dependency upgrades are patch-level with no API surface changes.

No files require special attention. The CI pipeline condition change is the most structurally significant edit but is logically sound given that run-privileged-jobs is only false for fork pull requests, which are already excluded from deployment by the github.event_name != 'pull_request' guard.

Important Files Changed

Filename	Overview
.github/workflows/ci-pipeline.yml	Deploy job condition rewritten with always() and per-job success guards; contents permission reduced to read; a commented rationale is present but slightly misleading (references macOS skips, not the external-service jobs that are actually gated)
src/Cuemon.Kernel/Condition.cs	NET9+ bitmap fast-path for HasDifference, Enum.TryParse substitution for Enum.Parse, and LINQ-to-loop rewrites for IsBinaryDigits/IsWhiteSpace/IsHex; all appear behaviorally equivalent to the replaced code and are thoroughly tested
src/Cuemon.Kernel/Validator.cs	ThrowIfContainsInterface / ThrowIfNotContainsInterface / ThrowIfContainsType families refactored to share ContainsInterfaceCore / ContainsTypeCore helpers; ContainsAny gains span-based NET9 fast-path; behavior is preserved including null/non-interface validation
Directory.Packages.props	Routine patch-version bumps across Microsoft.Extensions., Microsoft.Data., Codebelt.Extensions.*, and BenchmarkDotNet tooling; no structural changes
test/Cuemon.Kernel.Tests/ConditionTest.cs	Comprehensive matrix tests for IsEnum (legacy equivalence, negative/unsigned/flags/overflow cases), HasDifference (null-as-empty, deduplication order, subset semantics) — coverage for all changed Condition methods
.docfx/Dockerfile.docfx	NGINX tag relaxed from pinned 1.31.1-alpine to floating 1.31-alpine; intentional per PR description but reduces build reproducibility
tuning/Cuemon.Kernel.Benchmarks/ValidatorCoreBenchmark.cs	New BenchmarkDotNet harness for all Validator throw-if methods; clean setup with no issues

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[push / workflow_dispatch] --> B[init]
    B --> C[build]
    B --> D[prepare_test]
    C --> E[pack]
    C --> F[test_linux]
    C --> G[test_windows]
    C --> H[test_mac\noptional]
    F & G & H --> I[test_qualitygate]
    I --> J[sonarcloud\nrun-privileged-jobs=true]
    I --> K[codecov\nrun-privileged-jobs=true]
    I --> L[codeql\nrun-privileged-jobs=true]
    C & E & I & J & K & L --> M{deploy condition\nalways + all == success\n+ not pull_request}
    M -->|all success| N[deploy → NuGet push]
    M -->|any skipped/failed| O[deploy skipped]

    style H fill:#ffe4b5
    style J fill:#d4edda
    style K fill:#d4edda
    style L fill:#d4edda
    style N fill:#c3e6cb
    style O fill:#f8d7da

Loading

%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
flowchart TD
    A[push / workflow_dispatch] --> B[init]
    B --> C[build]
    B --> D[prepare_test]
    C --> E[pack]
    C --> F[test_linux]
    C --> G[test_windows]
    C --> H[test_mac\noptional]
    F & G & H --> I[test_qualitygate]
    I --> J[sonarcloud\nrun-privileged-jobs=true]
    I --> K[codecov\nrun-privileged-jobs=true]
    I --> L[codeql\nrun-privileged-jobs=true]
    C & E & I & J & K & L --> M{deploy condition\nalways + all == success\n+ not pull_request}
    M -->|all success| N[deploy → NuGet push]
    M -->|any skipped/failed| O[deploy skipped]

    style H fill:#ffe4b5
    style J fill:#d4edda
    style K fill:#d4edda
    style L fill:#d4edda
    style N fill:#c3e6cb
    style O fill:#f8d7da

Loading

_{Reviews (5): Last reviewed commit: "✨ add tests for hasDifference with non-A..." | Re-trigger Greptile}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.21%. Comparing base (c99288b) to head (ea6aea2).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #167      +/-   ##
==========================================
+ Coverage   94.19%   94.21%   +0.01%     
==========================================
  Files         602      602              
  Lines       19186    19283      +97     
  Branches     2009     2032      +23     
==========================================
+ Hits        18073    18167      +94     
- Misses       1049     1052       +3     
  Partials       64       64              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.