Promote develop to main: Re-vendor the Carried Hub Files, With 21 Dependency Bumps

[ptr727]

Summary

Promotes develop to main, carrying 22 change(s) from develop:

• #96 Bump actions/setup-dotnet from 5.4.0 to 6.0.0 in the actions-deps group
• #99 Bump the actions-deps group with 2 updates
• #103 Bump docker/login-action from 4.4.0 to 4.5.0 in the actions-deps group
• #105 Bump docker/login-action from 4.5.0 to 4.5.1 in the actions-deps group
• #107 Bump docker/login-action from 4.5.1 to 4.5.2 in the actions-deps group
• #109 Bump docker/login-action from 4.5.2 to 4.6.0 in the actions-deps group
• #111 Re-vendor the carried hub files to the current canonical
• #112 Bump DavidAnson/markdownlint-cli2-action in the actions-deps group
• #114 Bump streetsidesoftware/cspell-action in the actions-deps group
• #116 Bump docker/setup-buildx-action in the actions-deps group
• #118 Bump softprops/action-gh-release in the actions-deps group
• #120 Bump docker/setup-qemu-action in the actions-deps group
• #122 Bump streetsidesoftware/cspell-action in the actions-deps group
• #124 Bump the actions-deps group with 3 updates
• #126 Remove Version Literals and SHAs From AGENTS.md
• #127 Carry the Current Fleet Instruction Set
• #128 Move the Repository to the Fleet LF Line-Ending Policy
• #129 Adopt the Hub Reusable Workflows and Retire repo-config
• #130 Restructure the README to the Fleet README Shape
• #131 Alphabetize the 3rd Party Tools and use the fleet GitHub Actions link
• #134 Bump the actions-deps group with 5 updates
• #135 Bump the actions-deps group with 5 updates

🤖 Generated with Claude Code

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 9c643b09-05f0-44fe-a1c2-308f2d30e357

📥 Commits

Reviewing files that changed from the base of the PR and between d41dc77 and 36e4367.

📒 Files selected for processing (79)

• .dockerignore
• .editorconfig
• .editorconfig-checker.json
• .gitattributes
• .github/copilot-instructions.md
• .github/dependabot.yml
• .github/skills/add-host-tool/SKILL.md
• .github/skills/agent-conduct/SKILL.md
• .github/skills/audit-a-repo/SKILL.md
• .github/skills/backlog-burndown/SKILL.md
• .github/skills/branching-and-release-model/SKILL.md
• .github/skills/branching-and-release-model/references/branch-protection-and-promotion.md
• .github/skills/branching-and-release-model/references/release-publish-mechanics.md
• .github/skills/carried-instruction-file-guard/SKILL.md
• .github/skills/check-this-repo/SKILL.md
• .github/skills/comment-and-doc-style/SKILL.md
• .github/skills/comment-and-doc-style/references/carried-doc-references.md
• .github/skills/comment-and-doc-style/references/line-endings.md
• .github/skills/comment-and-doc-style/references/markdown-links.md
• .github/skills/copilot-instructions-keeper/SKILL.md
• .github/skills/dotnet-codestyle/SKILL.md
• .github/skills/dotnet-codestyle/references/conventions.md
• .github/skills/dotnet-codestyle/references/project-config.md
• .github/skills/dotnet-codestyle/references/testing.md
• .github/skills/drive-pr/SKILL.md
• .github/skills/fleet-code-review/SKILL.md
• .github/skills/git-commit-conventions/SKILL.md
• .github/skills/git-commit-conventions/references/history-rewrite.md
• .github/skills/local-strict-review/SKILL.md
• .github/skills/merge-and-release/SKILL.md
• .github/skills/pr-review-conduct/SKILL.md
• .github/skills/python-codestyle/SKILL.md
• .github/skills/python-codestyle/references/code-style.md
• .github/skills/python-codestyle/references/profiles.md
• .github/skills/python-codestyle/references/testing.md
• .github/skills/repo-worktree/SKILL.md
• .github/skills/resync-a-repo/SKILL.md
• .github/skills/session-handoff/SKILL.md
• .github/skills/shell-codestyle/SKILL.md
• .github/skills/skill-lifecycle/SKILL.md
• .github/skills/standup-a-repo/SKILL.md
• .github/skills/unattended-handoff/SKILL.md
• .github/skills/upstream-contribution-workflow/SKILL.md
• .github/skills/workflow-ci-contract/SKILL.md
• .github/skills/workflow-ci-contract/references/architecture.md
• .github/skills/workflow-ci-contract/references/d-guarantees.md
• .github/skills/workflow-ci-contract/references/test-methodology.md
• .github/workflows/build-docker-task.yml
• .github/workflows/build-release-task.yml
• .github/workflows/get-version-task.yml
• .github/workflows/merge-bot-pull-request.yml
• .github/workflows/publish-docker-readme-task.yml
• .github/workflows/publish-release.yml
• .github/workflows/test-pull-request.yml
• .github/workflows/validate-task.yml
• .gitignore
• .markdownlint-cli2.jsonc
• .vscode/tasks.json
• AGENTS.md
• AUDIT.md
• CLAUDE.md
• CODESTYLE.md
• Docker/Dockerfile
• Docker/README.md
• GOVERNANCE.md
• HISTORY.md
• LICENSE
• OPERATIONS.md
• README.md
• VSCode-Server-DotNetCore.code-workspace
• WORKFLOW.md
• cspell.json
• host-tools.json
• repo-config/README.md
• repo-config/configure.sh
• repo-config/ruleset-develop.json
• repo-config/ruleset-main.json
• repo-config/settings.json
• version.json

 ___________________________________________________________________
< Your PR title says 'refactor'. My diff viewer says 'crime scene'. >
 -------------------------------------------------------------------
  \
   \   \
        \ /\
        ( )
      .( o ).

✨ Finishing Touches

📝 Generate docstrings

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[ptr727]

Superseded by #137, which resolves this PR's merge conflict on a branch off main, keeping develop's deletion of the retired task workflows.

[Copilot]

Copilot review overview

🔵 Needs a closer look

It is a high-impact develop→main promotion that migrates the entire release pipeline to externally-pinned hub workflows and re-normalizes line endings repository-wide, so final human sign-off is warranted before publishing to main.

Review effort: Balanced
Findings: None

What changed in this PR

This is a develop → main promotion PR that carries 22 accumulated changes into main. The substantive theme is a fleet re-vendor: the CI/CD workflows are converted from locally-carried task bodies into thin callers of the hub's (ptr727/ProjectTemplate) reusable workflows pinned at 2.0.718, the repository adopts an LF line-ending policy, carried hub instruction/skill/governance content is refreshed, new operational docs are added, and 21 Dependabot GitHub Actions bumps are folded in. Because this repo ships only a multi-arch Docker image (no application source), the changes center on the build/release pipeline, linting configuration, and documentation rather than product code.

Changes:

• Migrate test-pull-request.yml, publish-release.yml, and merge-bot-pull-request.yml to thin callers of hub reusable workflows; delete the local *-task.yml bodies and the repo-config/ settings-as-code directory.
• Adopt fleet conventions: LF line endings (.gitattributes), markdownlint MD033/MD024 tuning, editorconfig/cspell updates, new OPERATIONS.md, CLAUDE.md, host-tools.json stub, and re-vendored AGENTS/GOVERNANCE/CODESTYLE/WORKFLOW + .github/skills/**.
• Roll up 21 Dependabot action version bumps.

File	Description
.github/​workflows/​test-pull-request.yml	Thin caller of hub validate-task.yml + build-release-task.yml; retains ruleset-bound aggregator with always(). Caller inputs/secrets verified against hub contracts.
.github/​workflows/​publish-release.yml	Plan/validate/publish/readme jobs calling hub tasks; gating on plan.outputs.publish == 'true' and per-job permissions verified correct.
.github/​workflows/​merge-bot-pull-request.yml	Reduced to hub merge-bot-task.yml caller; both required CODEGEN_APP_* secrets supplied.
Deleted *-task.yml, repo-config/​*	Local task bodies and settings-as-code removed; no dangling references (remaining mentions are hub-pointing or historical).
Docker/​Dockerfile	Unchanged build logic; hub docker-prepare-default resolves ./Docker/Dockerfile, matching this layout.
OPERATIONS.md, CLAUDE.md, host-tools.json	New operational doc and carried stubs; consistent with actual workflow behavior.
.gitattributes, .markdownlint-cli2.jsonc, .editorconfig-checker.json, cspell.json	LF policy + lint config; internally consistent.
AGENTS/​GOVERNANCE/​CODESTYLE/​WORKFLOW.md, .github/​skills/​**	Re-vendored carried fleet content; verified free of version literals/SHAs; skills files are generated/carried (not eligible for inline comment).
HISTORY.md, README.md, version.json, dep bumps	Docs/version-floor/dependency updates.

I reviewed the substantive changed files and read the carried governance/skills content (which is generated from the hub and therefore not eligible for local inline comment). I found no concrete defect to flag: the workflow callers match the hub workflow_call input/secret contracts, the Docker build path resolves correctly, permissions are scoped to what each hub task writes, and the removed repo-config//task files leave no broken references.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.