chore: Update CI and NuGet publishing

- Switch NuGet publishing to OIDC trusted publishing (publish.yml)
- Remove broken NuGet push from ci.yml (env var was on wrong step)
- Add osx-arm64 build target
- Drop EOL targets (netcoreapp3.1, net6.0), add net9.0 and net10.0
- Remove deprecated TrimMode property

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: stevehansen

.github/workflows/ci.yml

@@ -9,17 +9,20 @@ jobs:
     name: Release
     strategy:
       matrix:
-        kind: ['linux', 'windows', 'macOS']
+        kind: ['linux', 'windows', 'macOS-x64', 'macOS-arm64']
         include:
           - kind: linux
             os: ubuntu-latest
             target: linux-x64
           - kind: windows
             os: windows-latest
             target: win-x64
-          - kind: macOS
+          - kind: macOS-x64
             os: macos-latest
             target: osx-x64
+          - kind: macOS-arm64
+            os: macos-latest
+            target: osx-arm64
     runs-on: ${{ matrix.os }}
 
     steps:
@@ -44,10 +47,6 @@ jobs:
           # Pack files
           if [ "${{ matrix.target }}" == "win-x64" ]; then
             7z a -tzip "${release_name}.zip" "./${release_name}/*"
-
-            dotnet pack --configuration ReleaseLibrary --output .
-
-            dotnet nuget push SqlInliner.$tag.nupkg --api-key $NUGET_TOKEN
           else
             tar czvf "${release_name}.tar.gz" "$release_name"
           fi
@@ -61,4 +60,3 @@ jobs:
           files: "SqlInliner-*"
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NUGET_TOKEN: ${{ secrets.NUGET }}

.github/workflows/publish.yml

@@ -0,0 +1,33 @@
+name: Publish to NuGet
+
+on:
+  push:
+    tags:
+      - '[0-9]+.[0-9]+.[0-9]+'
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write  # Required for OIDC trusted publishing
+      contents: read
+
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v5
+        with:
+          dotnet-version: '8.0.x'
+
+      - name: Pack
+        run: dotnet pack src/SqlInliner/SqlInliner.csproj -c Release --output ./nupkg
+
+      - name: NuGet login (OIDC)
+        uses: nuget/login@v1
+        id: login
+        with:
+          user: ${{ vars.NUGET_USER }}
+
+      - name: Publish to NuGet
+        run: dotnet nuget push ./nupkg/*.nupkg --api-key ${{ steps.login.outputs.NUGET_API_KEY }} --source https://api.nuget.org/v3/index.json

src/SqlInliner/SqlInliner.csproj

@@ -24,12 +24,11 @@
     <PublishSingleFile>True</PublishSingleFile>
     <PublishReadyToRun>True</PublishReadyToRun>
     <PublishTrimmed>True</PublishTrimmed>
-    <TrimMode>Link</TrimMode>
   </PropertyGroup>
 
   <PropertyGroup Condition="'$(Configuration)' == 'ReleaseLibrary'">
     <OutputType>Library</OutputType>
-    <TargetFrameworks>net472;netstandard2.0;netcoreapp3.1;net6.0;net8.0</TargetFrameworks>
+    <TargetFrameworks>net472;netstandard2.0;net8.0;net9.0;net10.0</TargetFrameworks>
     <GenerateDocumentationFile>true</GenerateDocumentationFile>
   </PropertyGroup>