fix: publish stable release and deprecate betas on PR merge to main

[Copilot]

Merging a PR to main never published the stable NuGet packages or deprecated the accumulated *-beta.pr-* builds — leaving NuGet.org showing only prerelease versions with no stable counterpart.

The root cause: ci.yml's publish step was gated on pull_request events only. On push (post-merge), packages were packed with the correct stable version but silently discarded.

ci.yml

• deploy-stable job — new job, triggered on push to main after build-test-pack succeeds; uses environment: nuget-release to apply the same approval gate as the existing release workflow; iterates artifacts and skips any *-beta.pr-* filenames before pushing stable packages to NuGet.org; fails fast with exit 1 when NUGET_API_KEY is absent so maintainers notice immediately if the release did not happen
• "Deprecate beta packages" — step within deploy-stable, invokes NuGetMaintenance deprecate-betas to mark all prior CI prereleases as deprecated
• Explicit permissions: contents: read on the new job

NuGetMaintenance/Program.cs

• Added deprecate-betas command: queries NuGet for each package ID, deprecates all -beta.pr- versions with the prerelease-testing message — no release version argument needed, avoiding the complexity of per-package version resolution (packages have independent versions, e.g. analyticsLibrary.Excel is at 3.0.1 while others are at 2.0.0)

NuGetGalleryDeprecationApi.cs / SendDeprecationAsync

• Made alternatePackageId/alternatePackageVersion nullable — only included in the deprecation request body when provided; enables the beta-only path to omit the alternate version hint
• Added pair validation: both fields must be provided together or both omitted; passing only one throws ArgumentException
• Three new tests cover the valid both-null case and both mixed-field invalid cases

deploy-stable:
  environment: nuget-release
  permissions:
    contents: read
  steps:
    - name: Publish stable packages
      run: |
        if [ -z "$NUGET_API_KEY" ]; then exit 1; fi
        for pkg in ./artifacts/*.nupkg; do
          if [[ "$pkg" == *"-beta.pr-"* ]]; then continue; fi
          dotnet nuget push "$pkg" --api-key "$NUGET_API_KEY" ...
        done
    - name: Deprecate beta packages
      run: dotnet run ... -- deprecate-betas

[Copilot]

Pull request overview

This PR updates CI release automation so merges to main publish stable NuGet packages and deprecate PR beta packages.

Changes:

• Adds push-to-main stable package publishing in CI.
• Adds a deprecate-betas maintenance command.
• Allows NuGet deprecation requests to omit alternate package metadata.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 3 comments.

File	Description
.github/workflows/ci.yml	Adds stable publish and beta deprecation steps for push events.
tools/analyticsLibrary.NuGetMaintenance/Program.cs	Adds command dispatch and beta-only deprecation flow.
src/analyticsLibrary.ReleaseTooling/NuGetGalleryDeprecationApi.cs	Makes alternate package fields optional in deprecation requests.

Comments suppressed due to low confidence (1)

src/analyticsLibrary.ReleaseTooling/NuGetGalleryDeprecationApi.cs:56

• The new nullable alternate-package path is not covered by the existing ReleaseTooling tests, which only exercise the case where both alternate fields are present. Add a test that passes null alternate values and asserts the form body omits both fields so the beta-deprecation request shape is protected from regressions.

        if (!string.IsNullOrEmpty(alternatePackageId))
        {
            pairs.Add(new KeyValuePair<string, string>("alternatePackageId", alternatePackageId));
        }

        if (!string.IsNullOrEmpty(alternatePackageVersion))
        {
            pairs.Add(new KeyValuePair<string, string>("alternatePackageVersion", alternatePackageVersion));

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[hpractv]

@copilot apply changes based on the comments in this thread

[Copilot]

@copilot apply changes based on the comments in this thread

Applied all three changes in commit 35c1d96:

1. Ungated deployment: Removed the stable publish and beta-deprecation steps from build-test-pack and moved them to a new deploy-stable job with environment: nuget-release, matching the protection level of the release workflow.

2. Fail-fast on missing key: The stable publish step now exits 1 when NUGET_API_KEY is absent, preventing a silent success.

3. Alternate-field pair validation: CreateDeprecationRequest now throws ArgumentException when only one of alternatePackageId/alternatePackageVersion is provided. Three new tests cover the valid both-null case and both mixed-field invalid cases.