From a242515a7dec6d077f0ea26a0fa7faa1b4f4fe69 Mon Sep 17 00:00:00 2001
From: Jason Rebelo Neves <igotinfected@gmail.com>
Date: Sun, 4 Oct 2026 00:27:29 +0200
Subject: [PATCH] :arrow_up: update SDK and build dependencies

---
 .github/workflows/build-and-test.yml     | 9 ++++++---
 .github/workflows/build-test-publish.yml | 8 +++++---
 .github/workflows/publish.yml            | 6 ++++--
 global.json                              | 2 +-
 src/Directory.Packages.props             | 8 ++++----
 5 files changed, 20 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/build-and-test.yml b/.github/workflows/build-and-test.yml
index 71e2130..de6bc6d 100644
--- a/.github/workflows/build-and-test.yml
+++ b/.github/workflows/build-and-test.yml
@@ -5,7 +5,6 @@ on:
   push:
     branches: [main]
   pull_request:
-    branches: [main]
 
 permissions: {}
 
@@ -13,19 +12,21 @@ jobs:
   changes:
     runs-on: ubuntu-latest
     permissions:
+      contents: read
       pull-requests: read
     outputs:
       changed: ${{ steps.filter.outputs.changed }}
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - name: 🔎 checking for changes
-        uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4
+        uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3
         id: filter
         with:
           filters: |
             changed:
+              - '.github/workflows/**'
               - 'src/generator/**'
               - 'src/netex/**'
               - 'src/siri/**'
@@ -38,5 +39,7 @@ jobs:
   build-and-test:
     needs: [changes]
     uses: ./.github/workflows/build-test-publish.yml
+    permissions:
+      contents: read
     with:
       should-run: ${{ needs.changes.outputs.changed }}
diff --git a/.github/workflows/build-test-publish.yml b/.github/workflows/build-test-publish.yml
index 57b59f7..0174da7 100644
--- a/.github/workflows/build-test-publish.yml
+++ b/.github/workflows/build-test-publish.yml
@@ -14,20 +14,22 @@ jobs:
   build-test-publish:
     if: inputs.should-run == 'true'
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0 # required for MinVer
           persist-credentials: false
 
       - name: setup .NET
-        uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5
+        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
         with:
           global-json-file: global.json
           cache: true
           cache-dependency-path: |
             src/Directory.Packages.props
-            packages/*.nupkg # TODO: remove once we move back to a stable xscgen package
+            packages/*.nupkg
 
       - name: build solution
         run: dotnet build Spillgebees.Transmodel.slnx --configuration Release
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 9fe9819..fa334d3 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -9,6 +9,8 @@ permissions: {}
 jobs:
   build-and-test:
     uses: ./.github/workflows/build-test-publish.yml
+    permissions:
+      contents: read
     with:
       should-package: true
 
@@ -18,12 +20,12 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           sparse-checkout: global.json
           persist-credentials: false
 
-      - uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5
+      - uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
         with:
           global-json-file: global.json
 
diff --git a/global.json b/global.json
index 883758b..53dda49 100644
--- a/global.json
+++ b/global.json
@@ -1,7 +1,7 @@
 {
   "sdk": {
     "rollForward": "feature",
-    "version": "10.0.203"
+    "version": "10.0.401"
   },
   "test": {
     "runner": "Microsoft.Testing.Platform"
diff --git a/src/Directory.Packages.props b/src/Directory.Packages.props
index 7913daa..5990bd2 100644
--- a/src/Directory.Packages.props
+++ b/src/Directory.Packages.props
@@ -4,16 +4,16 @@
   </PropertyGroup>
   <ItemGroup>
     <!-- Build tooling -->
-    <PackageVersion Include="DotNet.ReproducibleBuilds" Version="2.0.2" />
-    <PackageVersion Include="MinVer" Version="7.0.0" />
+    <PackageVersion Include="DotNet.ReproducibleBuilds" Version="2.0.5" />
+    <PackageVersion Include="MinVer" Version="8.0.0" />
 
     <!-- Generator dependencies -->
     <PackageVersion Include="XmlSchemaClassGenerator-beta" Version="99.0.14-local" />
     <PackageVersion Include="XmlSchemaClassGenerator.Analyzer" Version="99.0.14-local" />
-    <PackageVersion Include="System.CommandLine" Version="2.0.7" />
+    <PackageVersion Include="System.CommandLine" Version="2.0.12" />
 
     <!-- Test dependencies -->
-    <PackageVersion Include="TUnit" Version="1.65.38" />
+    <PackageVersion Include="TUnit" Version="1.72.16" />
     <PackageVersion Include="AwesomeAssertions" Version="9.6.0" />
   </ItemGroup>
 </Project>