icu.net 4.0.0

• .NETFramework 4.6.2

  • Microsoft.Extensions.DependencyModel (>= 10.0.9)
  • System.ValueTuple (>= 4.6.2)

• .NETStandard 2.0

  • Microsoft.Extensions.DependencyModel (>= 10.0.9)
  • System.ValueTuple (>= 4.6.2)

• net10.0

  • Microsoft.Extensions.DependencyModel (>= 10.0.9)
  • System.ValueTuple (>= 4.6.2)

• net10.0-android36.0

  • Microsoft.Extensions.DependencyModel (>= 10.0.9)
  • System.ValueTuple (>= 4.6.2)

• net8.0

  • Microsoft.Extensions.DependencyModel (>= 10.0.9)

Changes since version 3.0.2

Added:
- NuGet package now includes the XML documentation file, enabling IntelliSense summaries in Visual Studio.
- Added net10.0 target framework.
- Added an opt-in `net10.0-android` target framework. Enable it via the `IcuDotNetIncludeAndroid`
 MSBuild property and reference the `Icu4c.Android.Fw.Lib` package to provide the required ICU
 native libraries.

Changed:
- **BREAKING CHANGE:** Replaced the `net451` target framework with `net462`, matching the
 framework already used by current consumers (e.g. libpalaso, LibChorus) and remaining the
 nearest compatible target for others (FieldWorks, SayMore, HearThis). Any consumer targeting
 `net461` or lower will no longer resolve a compatible .NET Framework build of this package
 (falling back to the `netstandard2.0` build instead, if their tooling supports it). The
 `net461`-targeted test/tooling projects in this repo were bumped to `net462` to match.
- Upgraded `System.ValueTuple` from 4.5.0 to 4.6.2.
- Unified `Microsoft.Extensions.DependencyModel` on version 10.0.9 across all target frameworks:
 it now officially supports `net462`, so the old net451-era pin to 2.1.0 (and the accompanying
 `Newtonsoft.Json` override) is no longer needed.
- Removed the explicit `Microsoft.SourceLink.GitHub` `PackageReference`: verified that the .NET
 SDK (8.0+) now embeds correct `raw.githubusercontent.com` source link mappings for GitHub repos
 without it — confirmed by inspecting the packed `.snupkg` PDBs for all four target frameworks.
- Removed the `System.IO.FileSystem` / `System.IO.FileSystem.Primitives` 4.3.0 references from
 the test project: netstandard1.x-era facades, both deprecated on nuget.org, no longer needed
 now that the lowest test target is `net462`.
- Replaced the legacy TeamCity-oriented `build/icu-dotnet.proj` MSBuild file with plain `dotnet`
 CLI scripts (`build/TestBuild.sh`, `build/TestPack.sh`), matching what CI already runs. This
 build path had not been used by CI for a long time (CI now calls `dotnet build`/`test`/`pack`
 directly) and TeamCity itself was decommissioned for this project a while back. The scripts
 test each target framework explicitly and only run the `net462` tests on Windows (matching
 CI's platform gating, since .NET Framework tests can't run on macOS/Linux); `set -e` ensures
 a build or test failure stops the script instead of `dotnet pack` silently masking it.

Fixed:
- Fixed `RuleBasedCollator.GetSortKey` silently returning corrupted keys when called
 concurrently on one collator: each call now gets its own sort key buffer.
- Fixed `Transliterator.Transliterate` throwing `OverflowException` for characters that expand
 greatly during transliteration (e.g. U+FDFA ﷺ): the method now retries with a larger buffer
 on `BUFFER_OVERFLOW_ERROR` instead of immediately throwing.
- Fixed `Wrapper.ConfineIcuVersions` being ignored during library discovery: `CheckDirectoryForIcuBinaries`
 now filters candidates to the confined version range before selecting the highest match.

Removed:
- **BREAKING CHANGE:** Dropped the `net40` target framework. A GitHub code search across
 sillsdev's repos found no remaining consumers, and nothing in icu-dotnet's own test suite
 exercised it either, but any project still building against `net40` specifically will no
 longer find a compatible asset in this package.
- Removed dead `#if NET40` / `#if !NET40` conditional code (and the comments explaining it) from
 `NativeMethods.cs`, `NativeMethodsHelper.cs`, `NativeMethodsTests.cs`, `NativeMethodsHelperTests.cs`,
 `CharacterTests.cs`, and `LocaleTests.cs`, now that `net40` is no longer a target framework.
 Also updated remaining `net461`/`4.5.1`-specific comments to reflect the `net462` retarget.
- Removed `build/icu-dotnet.proj`, `build/NuGet.targets`, and `build/TestInstallerBuild.bat`
 (the latter was unrelated leftover cruft for building a different repository), along with the
 `SIL.BuildTasks` and `NUnit.Console` dependencies that only existed to support that build path.

Security:
- Upgraded `Microsoft.Extensions.DependencyModel` from 2.0.4 to 10.0.9 on non-.NET-Framework
 targets, eliminating the transitive dependency on `Newtonsoft.Json` 9.0.1 (high severity
 vulnerability).
- Upgraded `SIL.ReleaseTasks` to 4.0.0, which upgrades its own `SIL.Core` dependency to bring
 `Newtonsoft.Json` to 13.0.1 — past the vulnerability (GHSA-5crp-9r3c-p9vr) — and no longer
 exports any transitive dependencies publicly. This was never consumer-facing, since the
 reference to `SIL.ReleaseTasks` already uses `PrivateAssets="all"`.

See full changelog at https://github.com/sillsdev/icu-dotnet/blob/master/CHANGELOG.md.