Skip to content

Update NuGet deps & enable OIDC auth in workflows - #200

Merged
marcominerva merged 1 commit into
masterfrom
develop
Sep 9, 2026
Merged

marcominerva merged 1 commit into
masterfrom
develop

Conversation

@marcominerva

Copy link
Copy Markdown
Owner

Updated Microsoft.AspNetCore.OpenApi, Swashbuckle.AspNetCore.* and SimpleAuthenticationTools.Abstractions to latest patch versions in all .csproj files. Replaced static NuGet API keys with OIDC-based authentication using NuGet/login@v1 in publish.yml and publish_swashbuckle.yml workflows, including id-token: write permission. Applied minor whitespace and formatting fixes in workflow files. No functional code changes outside dependency and CI/CD updates.

Updated Microsoft.AspNetCore.OpenApi, Swashbuckle.AspNetCore.* and SimpleAuthenticationTools.Abstractions to latest patch versions in all .csproj files.
Replaced static NuGet API keys with OIDC-based authentication using NuGet/login@v1 in publish.yml and publish_swashbuckle.yml workflows, including id-token: write permission.
Applied minor whitespace and formatting fixes in workflow files.
No functional code changes outside dependency and CI/CD updates.
Copilot AI lite review requested due to automatic review settings September 9, 2026 10:48
@marcominerva
marcominerva merged commit c71788b into master Sep 9, 2026
7 checks passed

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The changes are limited to patch dependency updates and a correctly configured OIDC-based NuGet publishing flow with no functional library code changes.

Pull request overview

Updates package dependencies and modernizes the NuGet publishing pipelines by switching from static API keys to OIDC-based trusted publishing, aligning the repo’s CI/CD with current NuGet.org security guidance while keeping runtime behavior unchanged.

Changes:

  • Bumped Microsoft.AspNetCore.OpenApi, Swashbuckle.AspNetCore.*, and SimpleAuthenticationTools.Abstractions to newer patch versions across library and sample projects.
  • Updated NuGet publish workflows to use NuGet/login@v1 (OIDC) with id-token: write, and publish using the temporary API key output.
  • Removed an unused using System.Xml.Linq; from the NET10_0_OR_GREATER compilation branch.
File summaries
File Description
src/SimpleAuthentication/SimpleAuthentication.csproj Patch-version bumps for OpenApi (net9/net10) and Abstractions dependency.
src/SimpleAuthentication/OpenApi/AuthenticationDocumentTransformer.cs Removes an unused System.Xml.Linq using in the NET10+ branch.
src/SimpleAuthentication.Swashbuckle/SimpleAuthentication.Swashbuckle.csproj Updates Abstractions and Swashbuckle SwaggerGen patch versions.
samples/MinimalApis/Net8JwtBearerSample/Net8JwtBearerSample.csproj Updates Swashbuckle.AspNetCore patch version.
samples/MinimalApis/JwtBearerSample/JwtBearerSample.csproj Updates OpenApi + SwaggerUI patch versions.
samples/MinimalApis/BasicAuthenticationSample/BasicAuthenticationSample.csproj Updates OpenApi + SwaggerUI patch versions.
samples/MinimalApis/ApiKeySample/ApiKeySample.csproj Updates OpenApi + SwaggerUI patch versions.
samples/Controllers/JwtBearerSample/JwtBearerSample.csproj Updates OpenApi + SwaggerUI patch versions.
samples/Controllers/BasicAuthenticationSample/BasicAuthenticationSample.csproj Updates OpenApi + SwaggerUI patch versions.
samples/Controllers/ApiKeySample/ApiKeySample.csproj Updates OpenApi + SwaggerUI patch versions.
.github/workflows/publish.yml Switches NuGet publish auth from static API key to OIDC (NuGet/login@v1) and adds id-token: write.
.github/workflows/publish_swashbuckle.yml Switches NuGet publish auth from static API key to OIDC (NuGet/login@v1) and adds id-token: write.
Review details
  • Files reviewed: 12/12 changed files
  • Comments generated: 0
  • Review effort level: Lite

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants