[pull] main from erikdarlingdata:main

.editorconfig

@@ -0,0 +1,13 @@
+root = true
+
+[*.cs]
+
+# CA1873: Avoid potentially expensive logging
+#
+# This rule fires on any non-literal argument to a logging method (including
+# trivial field accesses like `_logger.LogInformation("X: {Path}", _path)`),
+# on the theory that the argument might be expensive to evaluate when the
+# level is disabled. In this codebase the cost is consistently negligible —
+# the proper fix is migrating to LoggerMessage source generators, which is
+# a larger separate effort. Until then, this rule is pure noise.
+dotnet_diagnostic.CA1873.severity = none

.github/workflows/build.yml

@@ -18,7 +18,7 @@ jobs:
     runs-on: windows-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Detect changed paths
         id: filter
@@ -44,15 +44,24 @@ jobs:
               - 'Installer.Tests/**'
               - 'install/**'
               - 'upgrades/**'
-
-      - name: Setup .NET 8.0
-        uses: actions/setup-dotnet@v4
+            # True when any non-documentation file changed. Documentation-only
+            # changes (e.g. a CHANGELOG or README edit) skip the build/test/
+            # publish steps below — there is nothing to compile. The job still
+            # runs so the required 'build' check reports a result.
+            code:
+              - '**'
+              - '!**/*.md'
+
+      - name: Setup .NET 10.0
+        if: steps.filter.outputs.code != 'false'
+        uses: actions/setup-dotnet@v5
         with:
-          dotnet-version: 8.0.x
+          dotnet-version: 10.0.x
           cache: true
           cache-dependency-path: '**/packages.lock.json'
 
       - name: Restore dependencies
+        if: steps.filter.outputs.code != 'false'
         run: |
           dotnet restore Dashboard/Dashboard.csproj --locked-mode
           dotnet restore Lite/PerformanceMonitorLite.csproj --locked-mode
@@ -61,12 +70,15 @@ jobs:
           dotnet restore Installer.Tests/Installer.Tests.csproj --locked-mode
 
       - name: Build Lite.Tests
+        if: steps.filter.outputs.code != 'false'
         run: dotnet build Lite.Tests/Lite.Tests.csproj -c Release --no-restore
 
       - name: Build Installer.Tests
+        if: steps.filter.outputs.code != 'false'
         run: dotnet build Installer.Tests/Installer.Tests.csproj -c Release --no-restore
 
       - name: Run Lite fast tests
+        if: steps.filter.outputs.code != 'false'
         run: dotnet test Lite.Tests/Lite.Tests.csproj -c Release --no-build --verbosity normal --filter "FullyQualifiedName!~AnomalyDetectorTests&FullyQualifiedName!~FactCollectorTests&FullyQualifiedName!~FactCollectorMiseryTests&FullyQualifiedName!~BaselineProviderTests&FullyQualifiedName!~InferenceEngineTests&FullyQualifiedName!~ScenarioTests&FullyQualifiedName!~AnalysisServiceTests"
 
       - name: Run Lite analysis-heavy tests
@@ -78,27 +90,31 @@ jobs:
         run: dotnet test Installer.Tests/Installer.Tests.csproj -c Release --no-build --verbosity normal --filter "FullyQualifiedName!~VersionDetectionTests&FullyQualifiedName!~IdempotencyTests&FullyQualifiedName!~AdversarialTests"
 
       - name: Get version
+        if: steps.filter.outputs.code != 'false'
         id: version
         shell: pwsh
         run: |
           $version = ([xml](Get-Content Dashboard/Dashboard.csproj)).Project.PropertyGroup.Version | Where-Object { $_ }
           echo "VERSION=$version" >> $env:GITHUB_OUTPUT
 
       - name: Publish Dashboard
+        if: steps.filter.outputs.code != 'false'
         run: dotnet publish Dashboard/Dashboard.csproj -c Release -o publish/Dashboard
 
       - name: Publish Dashboard (self-contained for Velopack)
         if: github.event_name == 'release'
         run: dotnet publish Dashboard/Dashboard.csproj -c Release -r win-x64 --self-contained -o publish/Dashboard-velopack
 
       - name: Publish Lite
+        if: steps.filter.outputs.code != 'false'
         run: dotnet publish Lite/PerformanceMonitorLite.csproj -c Release -o publish/Lite
 
       - name: Publish Lite (self-contained for Velopack)
         if: github.event_name == 'release'
         run: dotnet publish Lite/PerformanceMonitorLite.csproj -c Release -r win-x64 --self-contained -o publish/Lite-velopack
 
       - name: Publish CLI Installer
+        if: steps.filter.outputs.code != 'false'
         run: dotnet publish Installer/PerformanceMonitorInstaller.csproj -c Release
 
       - name: Package release artifacts
@@ -108,19 +124,21 @@ jobs:
           $version = "${{ steps.version.outputs.VERSION }}"
           New-Item -ItemType Directory -Force -Path releases
 
-          # Dashboard ZIP
+          # Dashboard ZIP — portable artifact for advanced/air-gapped users.
+          # The README points end users at Setup.exe (Velopack) because it sets up Start Menu
+          # shortcuts and Apps & Features registration; this ZIP is the explicit fallback.
           Compress-Archive -Path 'publish/Dashboard/*' -DestinationPath "releases/PerformanceMonitorDashboard-$version.zip" -Force
 
-          # Lite ZIP
+          # Lite ZIP — same rationale.
           Compress-Archive -Path 'publish/Lite/*' -DestinationPath "releases/PerformanceMonitorLite-$version.zip" -Force
 
-          # Installer ZIP (CLI + SQL scripts)
+          # Installer ZIP (CLI + SQL scripts) — still shipped for server-side install
           $instDir = 'publish/Installer'
           New-Item -ItemType Directory -Force -Path $instDir
           New-Item -ItemType Directory -Force -Path "$instDir/install"
           New-Item -ItemType Directory -Force -Path "$instDir/upgrades"
 
-          Copy-Item 'Installer/bin/Release/net8.0/win-x64/publish/PerformanceMonitorInstaller.exe' $instDir
+          Copy-Item 'Installer/bin/Release/net10.0/win-x64/publish/PerformanceMonitorInstaller.exe' $instDir
           Copy-Item 'install/*.sql' "$instDir/install/"
           if (Test-Path 'upgrades') { Copy-Item 'upgrades/*' "$instDir/upgrades/" -Recurse -ErrorAction SilentlyContinue }
           if (Test-Path 'README.md') { Copy-Item 'README.md' $instDir }
@@ -132,30 +150,30 @@ jobs:
       - name: Upload Dashboard for signing
         if: github.event_name == 'release'
         id: upload-dashboard
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: Dashboard-unsigned
           path: publish/Dashboard/
 
       - name: Upload Lite for signing
         if: github.event_name == 'release'
         id: upload-lite
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: Lite-unsigned
           path: publish/Lite/
 
       - name: Upload Installer for signing
         if: github.event_name == 'release'
         id: upload-installer
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: Installer-unsigned
           path: publish/Installer/
 
       - name: Sign Dashboard
         if: github.event_name == 'release'
-        uses: signpath/github-action-submit-signing-request@v1
+        uses: signpath/github-action-submit-signing-request@v2
         with:
           api-token: '${{ secrets.SIGNPATH_API_TOKEN }}'
           organization-id: '7969f8b6-d946-4a74-9bac-a55856d8b8e0'
@@ -168,7 +186,7 @@ jobs:
 
       - name: Sign Lite
         if: github.event_name == 'release'
-        uses: signpath/github-action-submit-signing-request@v1
+        uses: signpath/github-action-submit-signing-request@v2
         with:
           api-token: '${{ secrets.SIGNPATH_API_TOKEN }}'
           organization-id: '7969f8b6-d946-4a74-9bac-a55856d8b8e0'
@@ -181,7 +199,7 @@ jobs:
 
       - name: Sign Installer
         if: github.event_name == 'release'
-        uses: signpath/github-action-submit-signing-request@v1
+        uses: signpath/github-action-submit-signing-request@v2
         with:
           api-token: '${{ secrets.SIGNPATH_API_TOKEN }}'
           organization-id: '7969f8b6-d946-4a74-9bac-a55856d8b8e0'

.github/workflows/check-version-bump.yml

@@ -1,48 +1,70 @@
-name: Check version bump
-on:
-  pull_request:
-    branches: [main]
-
-jobs:
-  check-version:
-    if: github.head_ref == 'dev'
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Checkout PR branch
-        uses: actions/checkout@v4
-
-      - name: Get PR version
-        id: pr
-        shell: pwsh
-        run: |
-          $version = ([xml](Get-Content Dashboard/Dashboard.csproj)).Project.PropertyGroup.Version | Where-Object { $_ }
-          echo "VERSION=$version" >> $env:GITHUB_OUTPUT
-          Write-Host "PR version: $version"
-
-      - name: Checkout main
-        uses: actions/checkout@v4
-        with:
-          ref: main
-          path: main-branch
-
-      - name: Get main version
-        id: main
-        shell: pwsh
-        run: |
-          $version = ([xml](Get-Content main-branch/Dashboard/Dashboard.csproj)).Project.PropertyGroup.Version | Where-Object { $_ }
-          echo "VERSION=$version" >> $env:GITHUB_OUTPUT
-          Write-Host "Main version: $version"
-
-      - name: Compare versions
-        env:
-          PR_VERSION: ${{ steps.pr.outputs.VERSION }}
-          MAIN_VERSION: ${{ steps.main.outputs.VERSION }}
-        run: |
-          echo "Main version: $MAIN_VERSION"
-          echo "PR version:   $PR_VERSION"
-          if [ "$PR_VERSION" == "$MAIN_VERSION" ]; then
-            echo "::error::Version in Dashboard.csproj ($PR_VERSION) has not changed from main. Bump the version before merging to main."
-            exit 1
-          fi
-          echo "✅ Version bumped: $MAIN_VERSION → $PR_VERSION"
+name: Check version bump
+on:
+  pull_request:
+    branches: [main]
+
+jobs:
+  check-version:
+    if: github.head_ref == 'dev'
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout PR branch
+        uses: actions/checkout@v5
+
+      # Documentation-only PRs (e.g. a CHANGELOG correction) do not bump the
+      # version. The workflow still runs so the required check reports a result
+      # — using paths-ignore would skip the run entirely and leave the check
+      # stuck pending. Instead, the version comparison below is gated on whether
+      # any non-*.md file changed.
+      - name: Detect non-documentation changes
+        id: changes
+        uses: dorny/paths-filter@v3
+        with:
+          filters: |
+            code:
+              - '**'
+              - '!**/*.md'
+
+      - name: Get PR version
+        if: steps.changes.outputs.code == 'true'
+        id: pr
+        shell: pwsh
+        run: |
+          $version = ([xml](Get-Content Dashboard/Dashboard.csproj)).Project.PropertyGroup.Version | Where-Object { $_ }
+          echo "VERSION=$version" >> $env:GITHUB_OUTPUT
+          Write-Host "PR version: $version"
+
+      - name: Checkout main
+        if: steps.changes.outputs.code == 'true'
+        uses: actions/checkout@v5
+        with:
+          ref: main
+          path: main-branch
+
+      - name: Get main version
+        if: steps.changes.outputs.code == 'true'
+        id: main
+        shell: pwsh
+        run: |
+          $version = ([xml](Get-Content main-branch/Dashboard/Dashboard.csproj)).Project.PropertyGroup.Version | Where-Object { $_ }
+          echo "VERSION=$version" >> $env:GITHUB_OUTPUT
+          Write-Host "Main version: $version"
+
+      - name: Compare versions
+        if: steps.changes.outputs.code == 'true'
+        env:
+          PR_VERSION: ${{ steps.pr.outputs.VERSION }}
+          MAIN_VERSION: ${{ steps.main.outputs.VERSION }}
+        run: |
+          echo "Main version: $MAIN_VERSION"
+          echo "PR version:   $PR_VERSION"
+          if [ "$PR_VERSION" == "$MAIN_VERSION" ]; then
+            echo "::error::Version in Dashboard.csproj ($PR_VERSION) has not changed from main. Bump the version before merging to main."
+            exit 1
+          fi
+          echo "✅ Version bumped: $MAIN_VERSION → $PR_VERSION"
+
+      - name: Skip notice
+        if: steps.changes.outputs.code != 'true'
+        run: echo "Only documentation (*.md) files changed — version bump check skipped."

.github/workflows/nightly.yml

@@ -15,7 +15,7 @@ jobs:
     outputs:
       has_changes: ${{ steps.check.outputs.has_changes }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           ref: dev
           fetch-depth: 0
@@ -38,14 +38,14 @@ jobs:
     runs-on: windows-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           ref: dev
 
-      - name: Setup .NET 8.0
-        uses: actions/setup-dotnet@v4
+      - name: Setup .NET 10.0
+        uses: actions/setup-dotnet@v5
         with:
-          dotnet-version: 8.0.x
+          dotnet-version: 10.0.x
           cache: true
           cache-dependency-path: '**/packages.lock.json'
 
@@ -92,7 +92,7 @@ jobs:
           New-Item -ItemType Directory -Force -Path "$instDir/install"
           New-Item -ItemType Directory -Force -Path "$instDir/upgrades"
 
-          Copy-Item 'Installer/bin/Release/net8.0/win-x64/publish/PerformanceMonitorInstaller.exe' $instDir
+          Copy-Item 'Installer/bin/Release/net10.0/win-x64/publish/PerformanceMonitorInstaller.exe' $instDir
           Copy-Item 'install/*.sql' "$instDir/install/"
           if (Test-Path 'install/templates') { Copy-Item 'install/templates' "$instDir/install/templates" -Recurse -ErrorAction SilentlyContinue }
           if (Test-Path 'upgrades') { Copy-Item 'upgrades/*' "$instDir/upgrades/" -Recurse -ErrorAction SilentlyContinue }

.github/workflows/sql-validation.yml

@@ -41,7 +41,7 @@ jobs:
           --health-retries 15
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Install sqlcmd
         run: |