chore: Update workflows and add security information

Author: mf366-dev

.github/dependabot.yml

@@ -0,0 +1,32 @@
+version: 2
+
+updates:
+  # NuGet dependencies
+  - package-ecosystem: "nuget"
+    directories:
+      - "/src/*"
+      - "/tests/*"
+      - "/benchmarks"
+    exclude-paths:
+      - "/docs/*"
+    schedule:
+      interval: "cron"
+      cronjob: "0 7 * * WED"
+      timezone: "Europe/Lisbon"
+    open-pull-requests-limit: 12
+    target-branch: "dev"
+    rebase-strategy: "auto"
+    groups:
+      minor-and-patch:
+        update-types:
+          - "minor"
+          - "patch"
+      major:
+        update-types:
+          - "major"
+    assignees:
+      - "mf366-dev"
+    labels:
+      - "Dependencies"
+    commit-message:
+      prefix: "chore(deps.nuget):"

.github/workflows/docs.yml

@@ -4,7 +4,7 @@ on:
   push:
     branches:
       - main
-      - v*-dev
+      - docs
   pull_request:
   workflow_dispatch:
 

.github/workflows/release.yml

@@ -31,7 +31,7 @@ jobs:
           - os: macos-latest
             arch: arm64
             rid-os: osx
-            
+
     runs-on: ${{ matrix.os }}
     steps:
     - name: Checkout Code
@@ -59,7 +59,7 @@ jobs:
           -r ${{ matrix.rid-os }}-${{ matrix.arch }} \
           -o ./dist/cli-${{ matrix.rid-os }}-${{ matrix.arch }} \
           --self-contained true
-          
+
     - name: Upload Artifacts
       uses: actions/upload-artifact@v4
       with:
@@ -111,4 +111,4 @@ jobs:
       with:
         files: ./release-assets/*.tar.gz
       env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/test.yml

@@ -4,7 +4,7 @@ on:
   push:
     branches:
       - main
-      - v*-dev
+      - dev
   pull_request:
   workflow_dispatch:
 
@@ -32,4 +32,4 @@ jobs:
         run: dotnet build --configuration Release --no-restore
 
       - name: Test
-        run: dotnet test --configuration Release --no-build
+        run: dotnet test --configuration Release --no-build

SECURITY.md

@@ -0,0 +1,23 @@
+# Security Policy
+This guideline is to be followed in the occasion of a vulnerability being discovered.
+
+## Supported Versions
+The following table displays the versions of RSML 
+
+| Project     | Version              | Supported          |
+| -------     | -------------------- | ------------------ |
+| RSML        | 3.0.0-prerelease1    | :white_check_mark: |
+| RSML        | 2.1.0 _(unreleased)_ | :x:                |
+| RSML        | <= 2.0.x             | :x:                |
+| RSML.Sdk    | 3.0.0-prerelease1    | :white_check_mark: |
+| RSML.Native | 3.0.0-prerelease1    | :white_check_mark: |
+| RSML.Native | 2.1.0 _(unreleased)_ | :x:                |
+| RSML.Native | <= 2.0.x             | :x:                |
+| RSML.CLI    | 3.0.0-prerelease1    | :white_check_mark: |
+| RSML.CLI    | 2.1.0 _(unreleased)_ | :x:                |
+| RSML.CLI    | <= 2.0.x             | :x:                |
+
+## Reporting a Vulnerability
+Thanks for your interest in reporting a vulnerability. We treat vulnerabilities as urgent issues, with the utmost priority.
+
+To report a vulnerability in this repository, all you need to do is follow [this guide](https://docs.github.com/en/code-security/how-tos/report-and-fix-vulnerabilities/report-privately).

src/RSML.CLI/RSML.CLI.csproj

@@ -6,7 +6,7 @@
 		<Nullable>enable</Nullable>
 		<PublishAot>true</PublishAot>
 		<InvariantGlobalization>true</InvariantGlobalization>
-		<Version>2.0.0</Version>
+		<Version>3.0.0-prerelease1</Version>
 		<Title>Red Sea Markup Language CLI</Title>
 		<Authors>OceanApocalypseStudios</Authors>
 		<Description>The official RSML CLI.</Description>