chore: Bump the dotnet-minor-patch group with 3 updates - #121
Merged
layeredcraft-dependabot-automerge[bot] merged 1 commit intoSep 2, 2026
Merged
Conversation
Bumps Meziantou.Polyfill from 1.0.161 to 1.0.163 Bumps TUnit from 1.65.38 to 1.65.63 Bumps TUnit.Core from 1.65.38 to 1.65.63 --- updated-dependencies: - dependency-name: Meziantou.Polyfill dependency-version: 1.0.163 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch - dependency-name: TUnit dependency-version: 1.65.63 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch - dependency-name: TUnit.Core dependency-version: 1.65.63 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
![layeredcraft-dependabot-automerge[bot]](https://avatars.githubusercontent.com/u/1405469?s=60&v=4){kind=small}
layeredcraft-dependabot-automerge
Bot
merged commit Sep 2, 2026
26afa9e
into
main
7 of 12 checks passed
layeredcraft-dependabot-automerge
Bot
deleted the
dependabot/nuget/dotnet-minor-patch-cfaecb503c
branch
September 2, 2026 15:54
ncipollina
added a commit
that referenced
this pull request
Sep 2, 2026
…tch Directory.Packages.props Dependabot PR #121 (merged to main after this branch's last merge) bumped TUnit.Core/TUnit from 1.65.38 to 1.65.63 in Directory.Packages.props. This script hardcodes the expected packed-nuspec dependency range as a literal string per package, which dependabot has no way to know to update - main itself independently fails this same assertion as of #121, unrelated to PLAN-0057's own scope. Smallest correct fix: update the literal to match the now-current floor. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GMQEjFrUVGYkctE3ECfRuA
ncipollina
added a commit
that referenced
this pull request
Sep 2, 2026
* docs: pre-1.0 research gates for disposal, async composition, and MSTest; accept Compono.MSTest (ADR-0057) - RESEARCH-0015: disposal/ownership semantics — Outcome C, post-1.0 additive feature, no 1.0 API change required. - RESEARCH-0016: async composition viability — Outcome C, fully additive post-1.0 capability. - RESEARCH-0017: MSTest integration viability — Outcome A, add Compono.MSTest before 1.0 (includes VSTest/MTP discovery-execution spike findings and MSTest version-floor capability matrix). - ADR-0057: Compono.MSTest package design, Accepted — ITestDataSource-based [Compose] integration reusing CompositionRow/RowInvokerRegistry, no new composition engine. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> * feat(mstest): add Compono.MSTest package (ADR-0057) Adds the Compono.MSTest integration package: [TestMethod] + [Compose]/ [Compose<TProfile>]/[Compose<TProfile, TConfig>] as ITestDataSource attributes, [Shared] parameter sharing, and generator discovery support, matching Compono.XunitV3/Compono.TUnit's existing attribute family and semantics. Implementation evidence forced two ADR-0057 amendments: MSTest.TestFramework 3.x and 4.x ship under different, binary-incompatible assembly identities, so the supported floor is 4.0.0, not 3.0.0 (Amendment 1); and GetDisplayName is a discovery/listing-time MSTest hook, not visible during ordinary test execution under either MTP or the classic VSTest adapter (Amendment 2). A related Native AOT/trimming gap in Compono.XunitV3's own ConfigProfileBinder was found incidentally (ADR-0041 Amendment 4) and is tracked separately as #119, out of scope here. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GMQEjFrUVGYkctE3ECfRuA * ci(scripts): update inspect-packed-nupkgs.sh's TUnit.Core range to match Directory.Packages.props Dependabot PR #121 (merged to main after this branch's last merge) bumped TUnit.Core/TUnit from 1.65.38 to 1.65.63 in Directory.Packages.props. This script hardcodes the expected packed-nuspec dependency range as a literal string per package, which dependabot has no way to know to update - main itself independently fails this same assertion as of #121, unrelated to PLAN-0057's own scope. Smallest correct fix: update the literal to match the now-current floor. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GMQEjFrUVGYkctE3ECfRuA --------- Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
ncipollina
added a commit
that referenced
this pull request
Sep 2, 2026
…ackages.props (#122) (#125) inspect-packed-nupkgs.sh's assert_dependency_range hardcoded each expected third-party dependency range as a duplicate literal, separate from the Directory.Packages.props PackageVersion that already states the same policy. Dependabot updates the latter but not the former, so a correct package bump (e.g. PR #121's TUnit.Core update) failed validation until someone noticed and hand-edited the script (5cfe446). assert_dependency_range now looks up the expected range from Directory.Packages.props itself, evaluated via `dotnet msbuild -getItem` (SDK-native, no new CI dependency) and matched by dependency ID via jq. The validator still independently compares that authoritative value against the actually-packed .nuspec - only the duplicated literal is gone, not the check's strength. A missing Directory.Packages.props entry now fails with a distinct diagnostic instead of masquerading as a packed-range mismatch. Adds inspect-packed-nupkgs.tests.sh, a dependency-free regression suite proving both the pass and fail cases, including the exact "bump only the props file" scenario from issue #122, wired into package-validation.yaml. Amends ADR-0031 to record the drift and the fix. Closes #122 Claude-Session: https://claude.ai/code/session_01GMQEjFrUVGYkctE3ECfRuA Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated Meziantou.Polyfill from 1.0.161 to 1.0.163.
Release notes
Sourced from Meziantou.Polyfill's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated TUnit from 1.65.38 to 1.65.63.
Release notes
Sourced from TUnit's releases.
1.65.63
What's Changed
Other Changes
Dependencies
Full Changelog: thomhurst/TUnit@v1.65.51...v1.65.63
1.65.51
What's Changed
Other Changes
Dependencies
Full Changelog: thomhurst/TUnit@v1.65.38...v1.65.51
Commits viewable in compare view.
Updated TUnit.Core from 1.65.38 to 1.65.63.
Release notes
Sourced from TUnit.Core's releases.
1.65.63
What's Changed
Other Changes
Dependencies
Full Changelog: thomhurst/TUnit@v1.65.51...v1.65.63
1.65.51
What's Changed
Other Changes
Dependencies
Full Changelog: thomhurst/TUnit@v1.65.38...v1.65.51
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions