Fix GitHub Actions NuGet publish: glob expansion, version number, PR pre-release versioning, and deterministic builds

[Copilot]

Two bugs prevented NuGet publishing from working after migrating to GitHub Actions: dotnet nuget push artifacts/*.nupkg failed on Windows because PowerShell doesn't expand globs for executables, and packages were always versioned 1.0.0 because no <Version> was set in the csproj (Azure Pipelines injected it via -p:Version=).

NLog.MailKit.csproj

• Replace <Version> with <VersionPrefix>6.0.5</VersionPrefix> — required so --version-suffix in the workflow actually appends (setting <Version> directly silently ignores the suffix flag)
• Add <FileVersion>$(VersionPrefix).0</FileVersion> — without this the SDK defaults FileVersion to AssemblyVersion (6.0.0.0); now 6.0.5.0
• Add <PublishRepositoryUrl>true</PublishRepositoryUrl> and <EmbedUntrackedSources>true</EmbedUntrackedSources> — enables SourceLink to map PDBs back to source
• Add <IncludeSymbols>true</IncludeSymbols> and <SymbolPackageFormat>snupkg</SymbolPackageFormat> — produces a .snupkg debug symbols package alongside the .nupkg
• Add <ContinuousIntegrationBuild Condition="'$(GITHUB_ACTIONS)' == 'true'">true</ContinuousIntegrationBuild> — sets Deterministic=true automatically in CI for reproducible builds (see DeterministicBuilds)

.github/workflows/build-and-test.yml (renamed from build.yml)

• Restore, build, and test only — runs on windows-latest and ubuntu-latest
• No NuGet permissions required

.github/workflows/nuget.yml (new)

• Glob fix: shell: bash on the push step so bash expands artifacts/*.nupkg
• PR pre-release versioning: "Determine version suffix" step — master produces no suffix (clean release); any other branch/PR cleans the ref name to alphanumeric+hyphens and passes it as --version-suffix, e.g. NLog.MailKit.6.0.5-pull-42-head.nupkg
• Pack step conditionally applies the suffix
• Upload artifact path set to artifacts/*pkg to capture both .nupkg and .snupkg
• Push step uses a single dotnet nuget push artifacts/*.nupkg — dotnet nuget push automatically pushes the matching .snupkg alongside each .nupkg
• id-token: write permission scoped only to this workflow where it is needed

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[304NotModified]

@copilot rename build to build-and-test.yml
move the Nuget pack stuff to nuget.yml

[Copilot]

@copilot rename build to build-and-test.yml
move the Nuget pack stuff to nuget.yml

Done in c178313. build.yml is renamed to build-and-test.yml (restore, build, test on windows + ubuntu only), and all NuGet steps (pack, upload artifact, login, push) are moved to a new nuget.yml (windows-latest only). The id-token: write permission is now scoped only to nuget.yml where it's needed.

[304NotModified]

@copilot the package isn't determenistic anymore and also missing debug symbols (snupkg needed for that). Also sourcelink is broken

We need also something like ContinuousIntegrationBuild=true, see https://github.com/clairernovotny/DeterministicBuilds

[Copilot]

@copilot the package isn't determenistic anymore and also missing debug symbols (snupkg needed for that). Also sourcelink is broken

We need also something like ContinuousIntegrati...

Done in 51ceed0. Changes to NLog.MailKit.csproj:

• <PublishRepositoryUrl>true</PublishRepositoryUrl> + <EmbedUntrackedSources>true</EmbedUntrackedSources> — activates SourceLink
• <IncludeSymbols>true</IncludeSymbols> + <SymbolPackageFormat>snupkg</SymbolPackageFormat> — produces .snupkg with debug symbols
• <ContinuousIntegrationBuild Condition="'$(GITHUB_ACTIONS)' == 'true'">true</ContinuousIntegrationBuild> — enables deterministic builds in CI (mirrors the DeterministicBuilds pattern)

nuget.yml updated to upload artifacts/*pkg (both .nupkg and .snupkg) and push both to NuGet.org.

[304NotModified]

@copilot I think dotnet nuget push automaticlly pushes snupkg? Or doesn't that work with this wildcard?

[Copilot]

@copilot I think dotnet nuget push automaticlly pushes snupkg? Or doesn't that work with this wildcard?

Yes — dotnet nuget push automatically looks for and pushes the matching .snupkg alongside each .nupkg it pushes (same directory, same base name). The explicit *.snupkg line was redundant. Removed it in 71a4485, keeping just the single dotnet nuget push artifacts/*.nupkg command.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud