ci.yml

# CI: build + test on every push to master and every PR targeting master.
#
# This workflow enables the `required_status_checks` rule on the master branch
# ruleset (rule references the `build-and-test` job context). Without this
# workflow existing and running, the rule would block ALL pushes to master
# because the required check would never report.
#
# All actions are pinned to commit SHAs per the repo-level
# `sha_pinning_required` enforcement. Trailing `# v4` comments preserve
# human-readable version context. Dependabot (`.github/dependabot.yml`,
# `package-ecosystem: github-actions`) PRs SHA bumps as upstream actions tag
# new versions.

name: CI

on:
  push:
    branches: [master]
  pull_request:
    branches: [master]

permissions:
  contents: read

jobs:
  build-and-test:
    runs-on: windows-latest
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3

      - uses: actions/setup-dotnet@9a946fdbd5fb07b82b2f5a4466058b876ab72bb2 # v5.3.0
        with:
          dotnet-version: 10.x

      - name: Restore
        run: dotnet restore ControlMenu.sln

      - name: Build
        run: dotnet build ControlMenu.sln -c Release --no-restore

      - name: Test
        run: dotnet test ControlMenu.sln -c Release --no-build --logger "trx;LogFileName=test-results.trx"

      - name: Upload test results
        if: always()
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: test-results
          path: '**/test-results.trx'