Merge branch 'main' into dependabot/nuget/dotnet-dependencies-041891a2d4

Author: nficano

.github/workflows/codeql.yml

@@ -42,7 +42,7 @@ jobs:
 
       - name: Setup .NET (from global.json)
         if: steps.csharp_sources.outputs.present == 'true'
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5
         with:
           global-json-file: global.json
 

.github/workflows/test.yml

@@ -97,7 +97,7 @@ jobs:
       # under TestResults/<guid>/. Non-blocking so a Codecov outage cannot break CI.
       - name: Upload coverage to Codecov
         # codecov/codecov-action v6.0.1
-        uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
         with:
           fail_ci_if_error: false
           flags: unittests

tests/Arcp.IntegrationTests/LeaseExpiryTests.fs

@@ -54,8 +54,13 @@ let ``ValidateOpAsync after expires_at raises LEASE_EXPIRED`` () =
                         "indexer",
                         fun ctx ->
                             task {
-                                do! Task.Delay(150)
-                                do! ctx.ValidateOpAsync(Capabilities.FsRead, "/data/file", ctx.CancellationToken)
+                                // Poll until expires_at passes; the first post-expiry
+                                // call raises LEASE_EXPIRED and fails the job. Avoids
+                                // racing a fixed delay against the expiry window.
+                                while true do
+                                    do! ctx.ValidateOpAsync(Capabilities.FsRead, "/data/file", ctx.CancellationToken)
+                                    do! Task.Delay(25)
+
                                 return Json.serializeToElement<int> 0
                             }
                     ))
@@ -67,7 +72,9 @@ let ``ValidateOpAsync after expires_at raises LEASE_EXPIRED`` () =
                 LeaseConstraints =
                     Some
                         {
-                            ExpiresAt = DateTimeOffset.UtcNow.AddMilliseconds(50.0)
+                            // Far enough out that submit-time validation can't see an
+                            // already-expired lease on a slow CI runner.
+                            ExpiresAt = DateTimeOffset.UtcNow.AddSeconds(1.0)
                         }
             }