oproto
diff --git a/‎.github/INDEX.md‎
Lines changed: 2 additions & 2 deletions b/‎.github/INDEX.md‎
Lines changed: 2 additions & 2 deletions
diff --git a/‎.github/SETUP_COMPLETION_CHECKLIST.md‎
Lines changed: 1 addition & 1 deletion b/‎.github/SETUP_COMPLETION_CHECKLIST.md‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎.github/WORKFLOWS.md‎
Lines changed: 124 additions & 0 deletions b/‎.github/WORKFLOWS.md‎
Lines changed: 124 additions & 0 deletions
diff --git a/‎.github/dependabot.yml‎
Lines changed: 6 additions & 14 deletions b/‎.github/dependabot.yml‎
Lines changed: 6 additions & 14 deletions
diff --git a/‎.github/workflows/build.yml‎
Lines changed: 1 addition & 1 deletion b/‎.github/workflows/build.yml‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎.github/workflows/release.yml‎
Lines changed: 38 additions & 14 deletions b/‎.github/workflows/release.yml‎
Lines changed: 38 additions & 14 deletions
diff --git a/‎.github/workflows/test.yml‎
Lines changed: 14 additions & 7 deletions b/‎.github/workflows/test.yml‎
Lines changed: 14 additions & 7 deletions
diff --git a/‎.gitignore‎
Lines changed: 3 additions & 0 deletions b/‎.gitignore‎
Lines changed: 3 additions & 0 deletions
@@ -5,14 +5,14 @@ This directory contains all CI/CD workflows and configuration documentation for
 ## 📋 Quick Start
 
 **New to the CI/CD setup?** Start here:
-1. Read [README.md](./README.md) for an overview
+1. Read [WORKFLOWS.md](./WORKFLOWS.md) for an overview
 2. Review [SETUP_COMPLETION_CHECKLIST.md](./SETUP_COMPLETION_CHECKLIST.md) to see what's done
 3. Follow [BRANCH_PROTECTION_SETUP.md](./BRANCH_PROTECTION_SETUP.md) to complete manual setup
 
 ## 📚 Documentation Files
 
 ### Overview and Status
-- **[README.md](./README.md)** - Overview of all workflows and configuration
+- **[WORKFLOWS.md](./WORKFLOWS.md)** - Overview of all workflows and configuration
 - **[SETUP_COMPLETION_CHECKLIST.md](./SETUP_COMPLETION_CHECKLIST.md)** - Track setup progress and completion
 
 ### Manual Setup Required
 
@@ -162,7 +162,7 @@ git push origin v0.5.1-test.1
 
 - **Branch Protection Setup**: [BRANCH_PROTECTION_SETUP.md](./BRANCH_PROTECTION_SETUP.md)
 - **Manual Setup Overview**: [MANUAL_SETUP_REQUIRED.md](./MANUAL_SETUP_REQUIRED.md)
-- **Workflows Documentation**: [README.md](./README.md)
+- **Workflows Documentation**: [WORKFLOWS.md](./WORKFLOWS.md)
 - **GitHub Documentation**: https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches
 
 ## Troubleshooting
 
@@ -0,0 +1,124 @@
+# GitHub Workflows and Configuration
+
+This directory contains the CI/CD workflows and configuration for the Oproto.FluentDynamoDb project.
+
+## Workflows
+
+### Automated Workflows
+
+- **`build.yml`** - Build validation across multiple platforms (Linux, Windows, macOS)
+- **`test.yml`** - Unit and integration tests with code coverage
+- **`release.yml`** - Automated package building and GitHub release creation
+- **`pr-validation.yml`** - Comprehensive PR validation including changelog checks
+- **`failure-notification.yml`** - Automatic issue creation for workflow failures
+
+### Manual Configuration Required
+
+⚠️ **Branch Protection Rules** must be configured manually through GitHub's web interface.
+
+See [BRANCH_PROTECTION_SETUP.md](./BRANCH_PROTECTION_SETUP.md) for detailed setup instructions.
+
+Quick link: Navigate to **Settings → Branches** in your repository.
+
+## Setup Checklist
+
+- [x] Build workflow configured
+- [x] Test workflow configured
+- [x] Release workflow configured
+- [x] PR validation workflow configured
+- [x] Failure notification workflow configured
+- [ ] **Branch protection rules configured** (requires manual setup)
+- [ ] Dependabot configured (optional)
+- [ ] Status badges added to README (optional)
+
+## Documentation
+
+- [BRANCH_PROTECTION_SETUP.md](./BRANCH_PROTECTION_SETUP.md) - Step-by-step guide for configuring branch protection
+- [MANUAL_SETUP_REQUIRED.md](./MANUAL_SETUP_REQUIRED.md) - Overview of manual configuration steps
+
+## Workflow Triggers
+
+### Build Workflow
+- Push to `main` or `develop`
+- Pull requests to `main` or `develop`
+- Manual dispatch
+
+### Test Workflow
+- Push to `main` or `develop`
+- Pull requests to `main` or `develop`
+- Called by PR validation workflow
+- Manual dispatch
+
+### Release Workflow
+- Push of version tags matching `v*.*.*` (e.g., `v1.0.0`, `v1.2.3-beta.1`)
+
+### PR Validation Workflow
+- Pull request opened, synchronized, or reopened
+- Targets `main` or `develop`
+
+### Failure Notification Workflow
+- Any workflow failure on `main` or `develop` branches
+
+## Status Checks
+
+The following status checks are configured in the workflows:
+
+**Build:**
+- `build (ubuntu-latest)`
+- `build (windows-latest)`
+- `build (macos-latest)`
+
+**Unit Tests:**
+- `unit-tests (ubuntu-latest)`
+- `unit-tests (windows-latest)`
+- `unit-tests (macos-latest)`
+
+**Integration Tests:**
+- `integration-tests (ubuntu-latest)`
+- `integration-tests (windows-latest)`
+- `integration-tests (macos-latest)`
+
+**PR Validation:**
+- `validate-pr`
+
+These status check names must be added to branch protection rules for enforcement.
+
+## Release Process
+
+1. Update CHANGELOG.md with version changes
+2. Commit changelog updates
+3. Create and push version tag: `git tag v1.0.0 && git push origin v1.0.0`
+4. Release workflow automatically:
+   - Validates tag format
+   - Builds NuGet packages
+   - Creates GitHub Release
+   - Attaches packages to release
+5. Manually publish packages to NuGet.org (future: automate)
+
+## Troubleshooting
+
+### Workflows Not Running
+
+- Check that workflows are enabled in repository settings
+- Verify trigger conditions match your branch/tag names
+- Check workflow run history for errors
+
+### Status Checks Not Appearing
+
+- Workflows must run at least once before status checks appear
+- Create a test PR to trigger workflows
+- Wait for completion, then check branch protection settings
+
+### Test Failures
+
+- Review workflow logs for detailed error messages
+- Check DynamoDB Local logs for integration test failures
+- Verify all dependencies are properly installed
+
+## Support
+
+For issues with workflows or CI/CD setup:
+
+1. Check the troubleshooting sections in workflow documentation
+2. Review GitHub Actions logs for detailed error messages
+3. Create an issue in the repository with workflow run links
@@ -1,23 +1,14 @@
 version: 2
 updates:
-  # NuGet package ecosystem
+  # NuGet package ecosystem - DISABLED
+  # This is a library that uses version ranges to maintain compatibility with user environments.
+  # Dependabot's automatic updates would force minimum version bumps that reduce compatibility.
+  # Dependency updates are managed manually during release planning.
   - package-ecosystem: "nuget"
     directory: "/"
     schedule:
       interval: "weekly"
-      day: "monday"
-      time: "09:00"
-    open-pull-requests-limit: 10
-    labels:
-      - "dependencies"
-      - "nuget"
-    commit-message:
-      prefix: "chore"
-      include: "scope"
-    reviewers:
-      - "oproto/maintainers"
-    assignees:
-      - "oproto/maintainers"
+    open-pull-requests-limit: 0  # Disabled
 
   # GitHub Actions ecosystem
   - package-ecosystem: "github-actions"
@@ -26,6 +17,7 @@ updates:
       interval: "weekly"
       day: "monday"
       time: "09:00"
+    target-branch: "develop"  # Target develop branch for Git Flow workflow
     open-pull-requests-limit: 5
     labels:
       - "dependencies"
 
@@ -44,7 +44,7 @@ jobs:
         run: dotnet restore
 
       - name: Build solution
-        run: dotnet build --configuration Release --no-restore
+        run: dotnet build --configuration Release --no-restore /maxcpucount:1
 
       - name: Upload build artifacts
         uses: actions/upload-artifact@v5
 
@@ -116,10 +116,14 @@ jobs:
           VERSION="${{ needs.validate-tag.outputs.version }}"
           echo "Building with version: $VERSION"
           
+          # Build all projects with the same version
+          # This ensures ProjectReferences will use the correct version when packed
           dotnet build \
             --configuration Release \
             --no-restore \
+            /maxcpucount:1 \
             -p:Version=$VERSION \
+            -p:PackageVersion=$VERSION \
             -p:AssemblyVersion=$VERSION \
             -p:FileVersion=$VERSION \
             -p:InformationalVersion=$VERSION
@@ -130,55 +134,75 @@ jobs:
           echo "Packing version: $VERSION"
           
           # Pack all packable projects
+          # Don't use --no-build to ensure version is applied correctly
+          # ProjectReferences will automatically become PackageReferences with matching versions
           dotnet pack Oproto.FluentDynamoDb/Oproto.FluentDynamoDb.csproj \
             --configuration Release \
-            --no-build \
             --output ./packages \
-            -p:PackageVersion=$VERSION \
             -p:Version=$VERSION
           
           dotnet pack Oproto.FluentDynamoDb.BlobStorage.S3/Oproto.FluentDynamoDb.BlobStorage.S3.csproj \
             --configuration Release \
-            --no-build \
             --output ./packages \
-            -p:PackageVersion=$VERSION \
             -p:Version=$VERSION
           
           dotnet pack Oproto.FluentDynamoDb.Encryption.Kms/Oproto.FluentDynamoDb.Encryption.Kms.csproj \
             --configuration Release \
-            --no-build \
             --output ./packages \
-            -p:PackageVersion=$VERSION \
             -p:Version=$VERSION
           
           dotnet pack Oproto.FluentDynamoDb.FluentResults/Oproto.FluentDynamoDb.FluentResults.csproj \
             --configuration Release \
-            --no-build \
             --output ./packages \
-            -p:PackageVersion=$VERSION \
             -p:Version=$VERSION
           
           dotnet pack Oproto.FluentDynamoDb.Logging.Extensions/Oproto.FluentDynamoDb.Logging.Extensions.csproj \
             --configuration Release \
-            --no-build \
             --output ./packages \
-            -p:PackageVersion=$VERSION \
             -p:Version=$VERSION
           
           dotnet pack Oproto.FluentDynamoDb.NewtonsoftJson/Oproto.FluentDynamoDb.NewtonsoftJson.csproj \
             --configuration Release \
-            --no-build \
             --output ./packages \
-            -p:PackageVersion=$VERSION \
             -p:Version=$VERSION
           
           dotnet pack Oproto.FluentDynamoDb.SystemTextJson/Oproto.FluentDynamoDb.SystemTextJson.csproj \
             --configuration Release \
-            --no-build \
             --output ./packages \
-            -p:PackageVersion=$VERSION \
             -p:Version=$VERSION
       
+      - name: Validate package dependencies
+        run: |
+          VERSION="${{ needs.validate-tag.outputs.version }}"
+          echo "📦 Validating package dependencies for version: $VERSION"
+          
+          # Check packages with dependencies on Oproto.FluentDynamoDb
+          for pkg in BlobStorage.S3 Encryption.Kms FluentResults Logging.Extensions; do
+            PACKAGE_FILE="./packages/Oproto.FluentDynamoDb.${pkg}.${VERSION}.nupkg"
+            if [ -f "$PACKAGE_FILE" ]; then
+              echo "Checking $pkg package..."
+              unzip -q -o "$PACKAGE_FILE" -d "./temp-${pkg}"
+              
+              # Extract and check the nuspec file for dependency version
+              NUSPEC_FILE="./temp-${pkg}/Oproto.FluentDynamoDb.${pkg}.nuspec"
+              if [ -f "$NUSPEC_FILE" ] && grep -q "Oproto.FluentDynamoDb" "$NUSPEC_FILE"; then
+                DEP_VERSION=$(grep -A 1 'id="Oproto.FluentDynamoDb"' "$NUSPEC_FILE" | grep version | sed 's/.*version="\([^"]*\)".*/\1/' || echo "not-found")
+                echo "  Found dependency: Oproto.FluentDynamoDb version $DEP_VERSION"
+                
+                if [ "$DEP_VERSION" != "$VERSION" ] && [ "$DEP_VERSION" != "not-found" ]; then
+                  echo "  ❌ ERROR: Dependency version mismatch! Expected $VERSION but got $DEP_VERSION"
+                  exit 1
+                elif [ "$DEP_VERSION" = "$VERSION" ]; then
+                  echo "  ✅ Dependency version matches: $VERSION"
+                fi
+              fi
+              
+              rm -rf "./temp-${pkg}"
+            fi
+          done
+          
+          echo "✅ All package dependencies validated"
+      
       - name: Validate package contents
         run: |
           echo "📦 Validating package contents..."
 
@@ -54,7 +54,7 @@ jobs:
         run: dotnet restore
 
       - name: Build solution (if artifacts not available)
-        run: dotnet build --configuration Release --no-restore
+        run: dotnet build --configuration Release --no-restore /maxcpucount:1
 
       - name: Run Unit Tests with Coverage
         run: dotnet test --configuration Release --filter "Category=Unit" --logger "trx;LogFileName=unit-test-results.trx" --results-directory ./TestResults/Unit --collect:"XPlat Code Coverage" --settings coverlet.runsettings
@@ -108,7 +108,7 @@ jobs:
           echo "Downloading DynamoDB Local..."
           mkdir -p dynamodb-local
           cd dynamodb-local
-          wget -q https://s3.us-west-2.amazonaws.com/dynamodb-local/dynamodb_local_latest.tar.gz
+          wget -q https://d1ni2b6xgvw0s0.cloudfront.net/v2.x/dynamodb_local_latest.tar.gz
           tar -xzf dynamodb_local_latest.tar.gz
           rm dynamodb_local_latest.tar.gz
           ls -la
@@ -121,7 +121,7 @@ jobs:
           Write-Host "Downloading DynamoDB Local..."
           New-Item -ItemType Directory -Force -Path dynamodb-local
           Set-Location dynamodb-local
-          Invoke-WebRequest -Uri "https://s3.us-west-2.amazonaws.com/dynamodb-local/dynamodb_local_latest.tar.gz" -OutFile "dynamodb_local_latest.tar.gz"
+          Invoke-WebRequest -Uri "https://d1ni2b6xgvw0s0.cloudfront.net/v2.x/dynamodb_local_latest.tar.gz" -OutFile "dynamodb_local_latest.tar.gz"
           tar -xzf dynamodb_local_latest.tar.gz
           Remove-Item dynamodb_local_latest.tar.gz
           Get-ChildItem
@@ -157,10 +157,10 @@ jobs:
         run: dotnet restore
 
       - name: Build solution (if artifacts not available)
-        run: dotnet build --configuration Release --no-restore
+        run: dotnet build --configuration Release --no-restore /maxcpucount:1
 
       - name: Build integration test project explicitly
-        run: dotnet build Oproto.FluentDynamoDb.IntegrationTests/Oproto.FluentDynamoDb.IntegrationTests.csproj --configuration Release --no-restore
+        run: dotnet build Oproto.FluentDynamoDb.IntegrationTests/Oproto.FluentDynamoDb.IntegrationTests.csproj --configuration Release --no-restore /maxcpucount:1
 
       - name: Run Integration Tests with Coverage
         run: dotnet test Oproto.FluentDynamoDb.IntegrationTests/Oproto.FluentDynamoDb.IntegrationTests.csproj --configuration Release --no-build --logger "trx;LogFileName=integration-test-results.trx" --results-directory ./TestResults/Integration --verbosity normal --collect:"XPlat Code Coverage" --settings coverlet.runsettings
@@ -297,8 +297,14 @@ jobs:
         run: |
           mkdir -p ./coverage-report
           
+          # Check if coverage directory exists
+          if [ ! -d "./coverage" ]; then
+            echo "Coverage directory not found - no coverage artifacts were downloaded"
+            exit 0
+          fi
+          
           # Find all coverage files
-          COVERAGE_FILES=$(find ./coverage -name "coverage.cobertura.xml" -type f | tr '\n' ';')
+          COVERAGE_FILES=$(find ./coverage -name "coverage.cobertura.xml" -type f 2>/dev/null | tr '\n' ';')
           
           if [ ! -z "$COVERAGE_FILES" ]; then
             echo "Found coverage files, generating combined report..."
@@ -311,8 +317,9 @@ jobs:
             
             echo "Coverage report generated successfully"
           else
-            echo "No coverage files found"
+            echo "No coverage files found in ./coverage directory"
           fi
+        continue-on-error: true
 
       - name: Upload Combined Coverage Report
         if: always()
 
@@ -295,3 +295,6 @@ __pycache__/
 # OS files
 .DS_Store
 Thumbs.db
+
+# DynamoDB Local (downloaded by integration tests)
+dynamodb-local/