Bump the minor-and-patch group with 24 updates

.cursorrules

@@ -29,3 +29,6 @@
 - Make types internal and sealed by default unless otherwise specified
 - Prefer Guid for identifiers unless otherwise specified
 - Use `is null` checks instead of `== null`. The same goes for `is not null` and `!= null`.
+- Use `DateTimeOffset` for all date and time operations.
+- Use `TimeSpan` for all time duration operations.
+- Don't use the magic values. Use the constants instead. Place the constants in the `Domain.Constants` namespace.

.editorconfig

@@ -70,11 +70,20 @@ csharp_style_expression_bodied_lambdas = true:error
 csharp_style_expression_bodied_local_functions = true:error
 
 # S1186: Methods should not be empty
-dotnet_diagnostic.S1186.severity = warning
+dotnet_diagnostic.S1186.severity = suggestion
 
 # CA1303: Do not pass literals as localized parameters
 dotnet_diagnostic.CA1303.severity = none
 
+# IDE0161: Convert to file-scoped namespace
+dotnet_diagnostic.IDE0161.severity = none
+
+# CA1861: Avoid constant arrays as arguments
+dotnet_diagnostic.CA1861.severity = suggestion
+
+# IDE0053: Use expression body for lambda expression
+dotnet_diagnostic.IDE0053.severity = suggestion
+
 [*.{cs,vb}]
 dotnet_style_prefer_simplified_boolean_expressions = true:suggestion
 dotnet_style_prefer_simplified_interpolation = true:suggestion
@@ -89,7 +98,7 @@ dotnet_code_quality_unused_parameters = all:none
 #### C# Coding Conventions ####
 
 # Namespace preferences
-csharp_style_namespace_declarations= file_scoped:error
+csharp_style_namespace_declarations = file_scoped:none
 
 # var preferences
 csharp_style_var_elsewhere = false:warning
@@ -100,7 +109,7 @@ csharp_style_var_when_type_is_apparent = true:warning
 csharp_style_expression_bodied_accessors = true:error
 csharp_style_expression_bodied_constructors = false:silent
 csharp_style_expression_bodied_indexers = true:error
-csharp_style_expression_bodied_lambdas = true:error
+csharp_style_expression_bodied_lambdas = true:suggestion
 csharp_style_expression_bodied_local_functions = true:error
 csharp_style_expression_bodied_methods = false:silent
 csharp_style_expression_bodied_operators = true:error
@@ -417,3 +426,6 @@ dotnet_diagnostic.S6605.severity = none
 
 # S6781: JWT secret keys should not be disclosed
 dotnet_diagnostic.S6781.severity = none
+
+# Default severity for analyzer diagnostics with category 'Critical Code Smell'
+dotnet_analyzer_diagnostic.category-Critical Code Smell.severity = suggestion

.github/dependabot.yml

@@ -3,4 +3,20 @@ updates:
   - package-ecosystem: "nuget"
     directory: "/"
     schedule:
-      interval: "daily"
+      interval: "weekly"
+      day: "monday"
+
+    # Bỏ qua tất cả major version updates (breaking changes)
+    ignore:
+      - dependency-name: "*"
+        update-types: ["version-update:semver-major"]
+
+    # Gộp các updates nhỏ lại thành 1 PR
+    groups:
+      minor-and-patch:
+        update-types:
+          - "minor"
+          - "patch"
+
+    # Giới hạn số PR mở cùng lúc
+    open-pull-requests-limit: 5

.github/workflows/build.yml

@@ -64,3 +64,4 @@ jobs:
         with:
           name: published-app
           path: ./publish
+          retention-days: 2

.github/workflows/deploy-gcloud.yml

@@ -0,0 +1,163 @@
+name: Deploy to Google Cloud Artifact Registry
+
+on:
+  push:
+    branches:
+      - main
+      - develop
+    paths:
+      - 'src/**'
+      - 'appsettings*.json'
+      - 'Dockerfile'
+      - 'docker-compose.yml'
+      - '.github/workflows/deploy-gcloud.yml'
+  pull_request:
+    branches:
+      - main
+    paths:
+      - 'src/**'
+      - 'appsettings*.json'
+      - 'Dockerfile'
+      - 'docker-compose.yml'
+  workflow_dispatch:
+    inputs:
+      version_tag:
+        description: 'Custom version tag (optional, will use SHA if empty)'
+        required: false
+        type: string
+
+env:
+  PROJECT_ID: lucky-union-472503-c7
+  REGION: asia-southeast1
+  REPOSITORY: backendnetcore
+  IMAGE_NAME: webapi
+  SERVICE_NAME: legal-assistant-api
+  PORT: 10000
+  TIMEOUT: 600
+  SERVICE_ACCOUNT: be-storage-uploader@lucky-union-472503-c7.iam.gserviceaccount.com
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Generate version tag
+        id: version
+        run: |
+          if [ "${{ github.event_name }}" == "workflow_dispatch" ] && [ -n "${{ inputs.version_tag }}" ]; then
+            VERSION="${{ inputs.version_tag }}"
+          elif [ "${{ github.ref_type }}" == "tag" ]; then
+            VERSION="${{ github.ref_name }}"
+          else
+            # Use date + short SHA for immutable versioning
+            VERSION="$(date +%Y%m%d)-${GITHUB_SHA::7}"
+          fi
+          echo "VERSION=${VERSION}" >> $GITHUB_OUTPUT
+          echo "Generated version: ${VERSION}"
+
+      - name: Authenticate to Google Cloud
+        uses: google-github-actions/auth@v2
+        with:
+          credentials_json: ${{ secrets.GCP_SA_KEY }}
+
+      - name: Set up Cloud SDK
+        uses: google-github-actions/setup-gcloud@v2
+
+      - name: Configure Docker for Artifact Registry
+        run: |
+          gcloud auth configure-docker ${{ env.REGION }}-docker.pkg.dev --quiet
+
+      - name: Build Docker image
+        run: |
+          docker build -t ${{ env.IMAGE_NAME }}:latest -f src/Web.Api/Dockerfile .
+
+      - name: Tag Docker image
+        if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
+        run: |
+          REMOTE_IMAGE="${{ env.REGION }}-docker.pkg.dev/${{ env.PROJECT_ID }}/${{ env.REPOSITORY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}"
+          REMOTE_IMAGE_LATEST="${{ env.REGION }}-docker.pkg.dev/${{ env.PROJECT_ID }}/${{ env.REPOSITORY }}/${{ env.IMAGE_NAME }}:latest"
+
+          docker tag ${{ env.IMAGE_NAME }}:latest ${REMOTE_IMAGE}
+          docker tag ${{ env.IMAGE_NAME }}:latest ${REMOTE_IMAGE_LATEST}
+
+          echo "REMOTE_IMAGE=${REMOTE_IMAGE}" >> $GITHUB_ENV
+          echo "REMOTE_IMAGE_LATEST=${REMOTE_IMAGE_LATEST}" >> $GITHUB_ENV
+
+      - name: Push Docker image to Artifact Registry
+        if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
+        run: |
+          docker push ${{ env.REMOTE_IMAGE }}
+          docker push ${{ env.REMOTE_IMAGE_LATEST }}
+
+      - name: Deploy to Cloud Run (Production)
+        if: github.ref == 'refs/heads/main' && github.event_name == 'push'
+        run: |
+          gcloud run deploy ${{ env.SERVICE_NAME }} \
+            --image ${{ env.REMOTE_IMAGE }} \
+            --platform managed \
+            --region ${{ env.REGION }} \
+            --allow-unauthenticated \
+            --memory 4Gi \
+            --cpu 2 \
+            --max-instances 10 \
+            --min-instances 0 \
+            --timeout ${{ env.TIMEOUT }} \
+            --service-account ${{ env.SERVICE_ACCOUNT }} \
+            --set-env-vars "ASPNETCORE_ENVIRONMENT=Production,ASPNETCORE_URLS=http://+:10000" \
+            --quiet
+
+      - name: Deploy to Cloud Run (Staging)
+        if: github.ref == 'refs/heads/develop' && github.event_name == 'push'
+        run: |
+          gcloud run deploy ${{ env.SERVICE_NAME }}-staging \
+            --image ${{ env.REMOTE_IMAGE }} \
+            --platform managed \
+            --region ${{ env.REGION }} \
+            --allow-unauthenticated \
+            --memory 4Gi \
+            --cpu 2 \
+            --max-instances 5 \
+            --min-instances 0 \
+            --timeout ${{ env.TIMEOUT }} \
+            --service-account ${{ env.SERVICE_ACCOUNT }} \
+            --set-env-vars "ASPNETCORE_ENVIRONMENT=Staging,ASPNETCORE_URLS=http://+:10000" \
+            --quiet
+
+      - name: Output deployment info
+        run: |
+          echo "=== Deployment Complete ==="
+          echo "Version: ${{ steps.version.outputs.VERSION }}"
+          echo "Image: ${{ env.REMOTE_IMAGE }}"
+          echo ""
+          if [ "${{ github.ref }}" == "refs/heads/main" ]; then
+            SERVICE_URL=$(gcloud run services describe ${{ env.SERVICE_NAME }} --region ${{ env.REGION }} --format 'value(status.url)')
+            echo "Production URL: ${SERVICE_URL}"
+          elif [ "${{ github.ref }}" == "refs/heads/develop" ]; then
+            SERVICE_URL=$(gcloud run services describe ${{ env.SERVICE_NAME }}-staging --region ${{ env.REGION }} --format 'value(status.url)')
+            echo "Staging URL: ${SERVICE_URL}"
+          fi
+
+      - name: Create deployment summary
+        run: |
+          echo "## Deployment Summary 🚀" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "- **Version**: \`${{ steps.version.outputs.VERSION }}\`" >> $GITHUB_STEP_SUMMARY
+          echo "- **Image**: \`${{ env.REMOTE_IMAGE }}\`" >> $GITHUB_STEP_SUMMARY
+          echo "- **Branch**: \`${{ github.ref_name }}\`" >> $GITHUB_STEP_SUMMARY
+          echo "- **Commit**: \`${GITHUB_SHA::7}\`" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          if [ "${{ github.ref }}" == "refs/heads/main" ]; then
+            echo "- **Environment**: Production" >> $GITHUB_STEP_SUMMARY
+          elif [ "${{ github.ref }}" == "refs/heads/develop" ]; then
+            echo "- **Environment**: Staging" >> $GITHUB_STEP_SUMMARY
+          else
+            echo "- **Environment**: Image built only (no deployment)" >> $GITHUB_STEP_SUMMARY
+          fi

.gitignore

@@ -398,3 +398,7 @@ FodyWeavers.xsd
 *.sln.iml
 
 .containers/
+
+.vscode/settings.json
+ci-cd-github-key.json
+be-service-account.json

.vscode/launch.json

@@ -0,0 +1,53 @@
+{
+    "version": "0.2.0",
+    "configurations": [
+        {
+            "name": ".NET Core Launch (web)",
+            "type": "coreclr",
+            "request": "launch",
+            "preLaunchTask": "build",
+            "program": "${workspaceFolder}/src/Web.Api/bin/Debug/net8.0/Web.Api.dll",
+            "args": [],
+            "cwd": "${workspaceFolder}/src/Web.Api",
+            "stopAtEntry": false,
+            "serverReadyAction": {
+                "action": "openExternally",
+                "pattern": "\\bNow listening on:\\s+(https?://\\S+)",
+                "uriFormat": "%s/swagger"
+            },
+            "env": {
+                "ASPNETCORE_ENVIRONMENT": "Development",
+                "ASPNETCORE_URLS": "http://localhost:10000"
+            },
+            "sourceFileMap": {
+                "/Views": "${workspaceFolder}/Views"
+            }
+        },
+        {
+            "name": ".NET Core Attach",
+            "type": "coreclr",
+            "request": "attach"
+        },
+        {
+            "name": "netcoredbg",
+            "type": "coreclr",
+            "request": "launch",
+            "preLaunchTask": "build",
+            "program": "${workspaceFolder}/src/Web.Api/bin/Debug/net8.0/Web.Api.dll",
+            "args": [],
+            "cwd": "${workspaceFolder}/src/Web.Api",
+            "pipeTransport": {
+                "pipeCwd": "${workspaceFolder}",
+                "pipeProgram": "powershell.exe",
+                "pipeArgs": ["-c"],
+                "debuggerPath": "D:\\PackageCache\\netcoredbg\\netcoredbg.exe",
+                "debuggerArgs": ["--interpreter=vscode"],
+                "quoteArgs": true
+            },
+            "env": {
+                "ASPNETCORE_ENVIRONMENT": "Development",
+                "ASPNETCORE_URLS": "http://localhost:10000"
+            }
+        }
+    ]
+}

.vscode/tasks.json

@@ -0,0 +1,81 @@
+{
+    "version": "2.0.0",
+    "tasks": [
+        {
+            "label": "build",
+            "command": "dotnet",
+            "type": "process",
+            "args": [
+                "build",
+                "${workspaceFolder}/src/Web.Api/Web.Api.csproj",
+                "/property:GenerateFullPaths=true",
+                "/consoleloggerparameters:NoSummary;ForceNoAlign"
+            ],
+            "problemMatcher": "$msCompile",
+            "group": {
+                "kind": "build",
+                "isDefault": true
+            }
+        },
+        {
+            "label": "publish",
+            "command": "dotnet",
+            "type": "process",
+            "args": [
+                "publish",
+                "${workspaceFolder}/src/Web.Api/Web.Api.csproj",
+                "/property:GenerateFullPaths=true",
+                "/consoleloggerparameters:NoSummary;ForceNoAlign"
+            ],
+            "problemMatcher": "$msCompile"
+        },
+        {
+            "label": "watch",
+            "command": "dotnet",
+            "type": "process",
+            "args": [
+                "watch",
+                "run",
+                "--project",
+                "${workspaceFolder}/src/Web.Api/Web.Api.csproj"
+            ],
+            "problemMatcher": "$msCompile",
+            "isBackground": true
+        },
+        {
+            "label": "clean",
+            "command": "dotnet",
+            "type": "process",
+            "args": [
+                "clean",
+                "${workspaceFolder}/src/Web.Api/Web.Api.csproj",
+                "/property:GenerateFullPaths=true",
+                "/consoleloggerparameters:NoSummary;ForceNoAlign"
+            ],
+            "problemMatcher": "$msCompile"
+        },
+        {
+            "label": "restore",
+            "command": "dotnet",
+            "type": "process",
+            "args": [
+                "restore",
+                "${workspaceFolder}/LegalAssistant.AppService.sln"
+            ],
+            "problemMatcher": "$msCompile"
+        },
+        {
+            "label": "build-solution",
+            "command": "dotnet",
+            "type": "process",
+            "args": [
+                "build",
+                "${workspaceFolder}/LegalAssistant.AppService.sln",
+                "/property:GenerateFullPaths=true",
+                "/consoleloggerparameters:NoSummary;ForceNoAlign"
+            ],
+            "problemMatcher": "$msCompile",
+            "group": "build"
+        }
+    ]
+}