chore(deps): update dependency polly to 8.7.0 by thomhurst · Pull Request #6214 · thomhurst/TUnit

thomhurst · 2026-06-10T17:14:35Z

This PR contains the following updates:

Package	Type	Update	Change
Polly	nuget	minor	`8.6.6` → `8.7.0`

Release Notes

App-vNext/Polly (Polly)

`v8.7.0`

Compare Source

Highlights

Adds caller cancellation token propagation in hedging and timeout strategies by @DaRosenberg in #3094
Telemetry refactoring by @martincostello in #2985

What's Changed

Update zizmor to 1.22.0 by @martincostello in #2955
Increase test timeout by @martincostello in #2956
Disable secrets-outside-env audit by @martincostello in #2969
Update zizmor to 1.23.1 by @martincostello in #2970
Update .NET NuGet packages by @martincostello in #2982
Add AGENTS.md by @martincostello in #2983
Fix typo in HTTP client integrations documentation by @alexravenna in #2984
Remove unused constant by @martincostello in #2986
Fix non-deterministic branch coverage in HedgingExecutionContext hedging delay tests by @Copilot in #2997
Bump GitHubActionsTestLogger to 3.0.2 by @martincostello in #3000
Bump actionlint to v1.7.12 by @martincostello in #3006
Bump sign by @martincostello in #3008
Move Public API baselines by @martincostello in #3016
Formatting tweaks by @martincostello in #3017
Formatting tweaks by @martincostello in #3018
Remove ZIZMOR_VERSION by @martincostello in #3025
Assert nullable has result by @martincostello in #3028
Update deprecated action input by @martincostello in #3035
Move dependabot to Friday by @martincostello in #3044
Fix tag comment by @martincostello in #3045
Fix dependabot group by @martincostello in #3047
Pin runner images by @martincostello in #3065
Bump Refit to 10.2.0 by @martincostello in #3096
Disable Azure deployments by @martincostello in #3105

New Contributors

@alexravenna made their first contribution in #2984
@DaRosenberg made their first contribution in #3094

Full Changelog: App-vNext/Polly@8.6.6...8.7.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

claude

PR Review: chore(deps): update dependency polly to 8.7.0

Summary

This is a Renovate-bot-generated automated dependency bump of Polly from 8.6.6 to 8.7.0, touching a single line in Directory.Packages.props. It is a minor (semver) release with no breaking changes.

What the PR Does

Updates the centralised NuGet version pin for Polly in Directory.Packages.props. Two projects consume this package:

TUnit.TestProject — uses Polly.CircuitBreaker.CircuitState as a test argument type to exercise the analyzer against an external enum; the actual Polly resilience pipeline is not exercised at all.
TUnit.Analyzers.Tests — references the Polly assembly to provide CircuitState as a MetadataReference in Roslyn analyzer test scaffolding.

Polly is not used in any production engine code — TUnit.Engine/Services/DiscoveryCircuitBreaker.cs is a custom, Polly-free implementation that merely borrows the "circuit breaker" naming pattern.

Issues Found

None. This is a minimal, low-risk change.

The diff is exactly one line: 8.6.6 → 8.7.0.
Polly 8.7.0 is a non-breaking minor release. The highlighted features (caller cancellation token propagation in hedging/timeout, telemetry refactoring) are in strategies that are not used at all in this repo.
The CircuitState enum used in test fixtures is part of Polly.CircuitBreaker and has not changed between these versions.
auto-merge is already enabled with squash strategy, which is appropriate for this class of update.

Suggested Improvements

No code changes are required or recommended. A few observations for awareness:

Polly usage is test-only, not production. If the intent is ever to use Polly for resilience logic in the engine (e.g., retry policies around flaky discovery I/O), the existing DiscoveryCircuitBreaker would need to be evaluated alongside it. For now, Polly is purely a test fixture dependency and that is fine.
Version pin scope. The version is pinned only in Directory.Packages.props (Central Package Management), which is correct — no individual .csproj overrides the version. This is the right pattern.
Changelogs worth noting (no action needed): Polly 8.7.0 adds cancellation token propagation in hedging/timeout strategies and refactors telemetry. Neither feature is exercised here, so there is zero functional impact on TUnit.

Overall Assessment

Approve and merge. Routine, fully automated minor dependency update confined to a single version string in the centralised package manifest. No breaking API changes in Polly 8.7.0 affect TUnit's usage. The auto-merge + squash configuration is appropriate and can be left to proceed automatically.

codacy-production · 2026-06-10T17:16:47Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity

Metric Results

Complexity 0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes.}

Updated [TUnit](https://github.com/thomhurst/TUnit) from 1.51.0 to 1.55.2. <details> <summary>Release notes</summary> _Sourced from [TUnit's releases](https://github.com/thomhurst/TUnit/releases)._ ## 1.55.2  ## What's Changed ### Other Changes * fix(aspire): publish TUnit.Aspire.Core package (#6246) by @thomhurst in thomhurst/TUnit#6247 ### Dependencies * chore(deps): update tunit to 1.55.0 by @thomhurst in thomhurst/TUnit#6245 **Full Changelog**: thomhurst/TUnit@v1.55.0...v1.55.2 ## 1.55.0  ## What's Changed ### Other Changes * feat(aspire): add TUnit.Aspire.Core without TUnit metapackage dependency (#5471) by @thomhurst in thomhurst/TUnit#6243 * fix(analyzers): scope TUnit0031 async-void rule to tests and hooks (#6190) by @thomhurst in thomhurst/TUnit#6244 ### Dependencies * chore(deps): update dependency streamjsonrpc to 2.25.28 by @thomhurst in thomhurst/TUnit#6232 * chore(deps): update tunit to 1.54.0 by @thomhurst in thomhurst/TUnit#6233 * chore(deps): bump joi from 17.13.3 to 17.13.4 in /docs by @dependabot[bot] in thomhurst/TUnit#6234 * chore(deps): update dependency polyfill to 10.9.0 by @thomhurst in thomhurst/TUnit#6238 * chore(deps): update _tunitpolyfillversion to 10.9.0 by @thomhurst in thomhurst/TUnit#6237 * chore(deps): update dependency polyfill to 10.10.0 by @thomhurst in thomhurst/TUnit#6242 * chore(deps): update _tunitpolyfillversion to 10.10.0 by @thomhurst in thomhurst/TUnit#6241 **Full Changelog**: thomhurst/TUnit@v1.54.0...v1.55.0 ## 1.54.0  ## What's Changed ### Other Changes * Generate collection-shape drill-in overloads (#6185) by @thomhurst in thomhurst/TUnit#6218 * feat(mocks): setup/verify on secondary interfaces of multi-type mocks by @thomhurst in thomhurst/TUnit#6230 * perf: reduce allocations in source-gen test building hot paths by @thomhurst in thomhurst/TUnit#6228 * perf: shrink generated TestEntry builder IL via shared TUnit.Core factory helpers by @thomhurst in thomhurst/TUnit#6231 ### Dependencies * chore(deps): update tunit to 1.53.0 by @thomhurst in thomhurst/TUnit#6199 * chore(deps): update verify to 31.19.1 by @thomhurst in thomhurst/TUnit#6200 * chore(deps): update dependency messagepack to 3.1.7 by @thomhurst in thomhurst/TUnit#6203 * chore(deps): update dependency fsharp.core to 10.1.301 by @thomhurst in thomhurst/TUnit#6202 * chore(deps): update dependency microsoft.entityframeworkcore to 10.0.9 by @thomhurst in thomhurst/TUnit#6205 * chore(deps): update dependency dotnet-sdk to v10.0.301 by @thomhurst in thomhurst/TUnit#6204 * chore(deps): update dependency microsoft.templateengine.authoring.cli to v10.0.301 by @thomhurst in thomhurst/TUnit#6206 * chore(deps): update dependency microsoft.templateengine.authoring.templateverifier to 10.0.301 by @thomhurst in thomhurst/TUnit#6207 * chore(deps): update microsoft.aspnetcore to 10.0.9 by @thomhurst in thomhurst/TUnit#6209 * chore(deps): update dependency system.commandline to 2.0.9 by @thomhurst in thomhurst/TUnit#6208 * chore(deps): update microsoft.extensions by @thomhurst in thomhurst/TUnit#6211 * chore(deps): update dependency dompurify to v3.4.9 by @thomhurst in thomhurst/TUnit#6213 * chore(deps): bump shell-quote from 1.8.3 to 1.8.4 in /docs by @dependabot[bot] in thomhurst/TUnit#6210 * chore(deps): update dependency polly to 8.7.0 by @thomhurst in thomhurst/TUnit#6214 * chore(deps): update dependency microsoft.net.stringtools to 18.7.1 by @thomhurst in thomhurst/TUnit#6215 * chore(deps): update microsoft.build to 18.7.1 by @thomhurst in thomhurst/TUnit#6216 * chore(deps): update opentelemetry to 1.16.0 by @thomhurst in thomhurst/TUnit#6217 * chore(deps): update dependency dompurify to v3.4.10 by @thomhurst in thomhurst/TUnit#6229 **Full Changelog**: thomhurst/TUnit@v1.53.0...v1.54.0 ## 1.53.0  ## What's Changed ### Other Changes * feat(assertions): return typed value from IsAssignableTo<T> (#6184) by @thomhurst in thomhurst/TUnit#6187 * fix: stop doubling backslashes in source-gen emitted FilePath (breaks HTML report source links) by @thomhurst in thomhurst/TUnit#6193 * feat(assertions): add ContainsKey().And.Value drill-in for dictionaries (#6185) by @thomhurst in thomhurst/TUnit#6188 * fix(tests): snapshot ExecutionLog under lock to fix parallel race by @thomhurst in thomhurst/TUnit#6194 * fix(engine): run lifecycle hooks before test class construction (#6192) by @thomhurst in thomhurst/TUnit#6195 * feat(assertions): inference-friendly pinned overload for covariant [AssertionExtension] with own generic (#5922) by @thomhurst in thomhurst/TUnit#6196 * feat: add DeferEnumeration to defer data-source expansion to runtime (#5833) by @thomhurst in thomhurst/TUnit#6197 ### Dependencies * chore(deps): update tunit to 1.51.0 by @thomhurst in thomhurst/TUnit#6186 * chore(deps): update microsoft.testing to 18.8.0 by @thomhurst in thomhurst/TUnit#6191 * chore(deps): update aspire to 13.4.3 by @thomhurst in thomhurst/TUnit#6198 **Full Changelog**: thomhurst/TUnit@v1.51.0...v1.53.0 Commits viewable in [compare view](thomhurst/TUnit@v1.51.0...v1.55.2). </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=TUnit&package-manager=nuget&previous-version=1.51.0&new-version=1.55.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Updated [TUnit.Core](https://github.com/thomhurst/TUnit) from 1.51.0 to 1.55.2. <details> <summary>Release notes</summary> _Sourced from [TUnit.Core's releases](https://github.com/thomhurst/TUnit/releases)._ ## 1.55.2  ## What's Changed ### Other Changes * fix(aspire): publish TUnit.Aspire.Core package (#6246) by @thomhurst in thomhurst/TUnit#6247 ### Dependencies * chore(deps): update tunit to 1.55.0 by @thomhurst in thomhurst/TUnit#6245 **Full Changelog**: thomhurst/TUnit@v1.55.0...v1.55.2 ## 1.55.0  ## What's Changed ### Other Changes * feat(aspire): add TUnit.Aspire.Core without TUnit metapackage dependency (#5471) by @thomhurst in thomhurst/TUnit#6243 * fix(analyzers): scope TUnit0031 async-void rule to tests and hooks (#6190) by @thomhurst in thomhurst/TUnit#6244 ### Dependencies * chore(deps): update dependency streamjsonrpc to 2.25.28 by @thomhurst in thomhurst/TUnit#6232 * chore(deps): update tunit to 1.54.0 by @thomhurst in thomhurst/TUnit#6233 * chore(deps): bump joi from 17.13.3 to 17.13.4 in /docs by @dependabot[bot] in thomhurst/TUnit#6234 * chore(deps): update dependency polyfill to 10.9.0 by @thomhurst in thomhurst/TUnit#6238 * chore(deps): update _tunitpolyfillversion to 10.9.0 by @thomhurst in thomhurst/TUnit#6237 * chore(deps): update dependency polyfill to 10.10.0 by @thomhurst in thomhurst/TUnit#6242 * chore(deps): update _tunitpolyfillversion to 10.10.0 by @thomhurst in thomhurst/TUnit#6241 **Full Changelog**: thomhurst/TUnit@v1.54.0...v1.55.0 ## 1.54.0  ## What's Changed ### Other Changes * Generate collection-shape drill-in overloads (#6185) by @thomhurst in thomhurst/TUnit#6218 * feat(mocks): setup/verify on secondary interfaces of multi-type mocks by @thomhurst in thomhurst/TUnit#6230 * perf: reduce allocations in source-gen test building hot paths by @thomhurst in thomhurst/TUnit#6228 * perf: shrink generated TestEntry builder IL via shared TUnit.Core factory helpers by @thomhurst in thomhurst/TUnit#6231 ### Dependencies * chore(deps): update tunit to 1.53.0 by @thomhurst in thomhurst/TUnit#6199 * chore(deps): update verify to 31.19.1 by @thomhurst in thomhurst/TUnit#6200 * chore(deps): update dependency messagepack to 3.1.7 by @thomhurst in thomhurst/TUnit#6203 * chore(deps): update dependency fsharp.core to 10.1.301 by @thomhurst in thomhurst/TUnit#6202 * chore(deps): update dependency microsoft.entityframeworkcore to 10.0.9 by @thomhurst in thomhurst/TUnit#6205 * chore(deps): update dependency dotnet-sdk to v10.0.301 by @thomhurst in thomhurst/TUnit#6204 * chore(deps): update dependency microsoft.templateengine.authoring.cli to v10.0.301 by @thomhurst in thomhurst/TUnit#6206 * chore(deps): update dependency microsoft.templateengine.authoring.templateverifier to 10.0.301 by @thomhurst in thomhurst/TUnit#6207 * chore(deps): update microsoft.aspnetcore to 10.0.9 by @thomhurst in thomhurst/TUnit#6209 * chore(deps): update dependency system.commandline to 2.0.9 by @thomhurst in thomhurst/TUnit#6208 * chore(deps): update microsoft.extensions by @thomhurst in thomhurst/TUnit#6211 * chore(deps): update dependency dompurify to v3.4.9 by @thomhurst in thomhurst/TUnit#6213 * chore(deps): bump shell-quote from 1.8.3 to 1.8.4 in /docs by @dependabot[bot] in thomhurst/TUnit#6210 * chore(deps): update dependency polly to 8.7.0 by @thomhurst in thomhurst/TUnit#6214 * chore(deps): update dependency microsoft.net.stringtools to 18.7.1 by @thomhurst in thomhurst/TUnit#6215 * chore(deps): update microsoft.build to 18.7.1 by @thomhurst in thomhurst/TUnit#6216 * chore(deps): update opentelemetry to 1.16.0 by @thomhurst in thomhurst/TUnit#6217 * chore(deps): update dependency dompurify to v3.4.10 by @thomhurst in thomhurst/TUnit#6229 **Full Changelog**: thomhurst/TUnit@v1.53.0...v1.54.0 ## 1.53.0  ## What's Changed ### Other Changes * feat(assertions): return typed value from IsAssignableTo<T> (#6184) by @thomhurst in thomhurst/TUnit#6187 * fix: stop doubling backslashes in source-gen emitted FilePath (breaks HTML report source links) by @thomhurst in thomhurst/TUnit#6193 * feat(assertions): add ContainsKey().And.Value drill-in for dictionaries (#6185) by @thomhurst in thomhurst/TUnit#6188 * fix(tests): snapshot ExecutionLog under lock to fix parallel race by @thomhurst in thomhurst/TUnit#6194 * fix(engine): run lifecycle hooks before test class construction (#6192) by @thomhurst in thomhurst/TUnit#6195 * feat(assertions): inference-friendly pinned overload for covariant [AssertionExtension] with own generic (#5922) by @thomhurst in thomhurst/TUnit#6196 * feat: add DeferEnumeration to defer data-source expansion to runtime (#5833) by @thomhurst in thomhurst/TUnit#6197 ### Dependencies * chore(deps): update tunit to 1.51.0 by @thomhurst in thomhurst/TUnit#6186 * chore(deps): update microsoft.testing to 18.8.0 by @thomhurst in thomhurst/TUnit#6191 * chore(deps): update aspire to 13.4.3 by @thomhurst in thomhurst/TUnit#6198 **Full Changelog**: thomhurst/TUnit@v1.51.0...v1.53.0 Commits viewable in [compare view](thomhurst/TUnit@v1.51.0...v1.55.2). </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=TUnit.Core&package-manager=nuget&previous-version=1.51.0&new-version=1.55.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore(deps): update dependency polly to 8.7.0

4afc3be

thomhurst added dependencies Pull requests that update a dependency file MINOR renovate-bot labels Jun 10, 2026

thomhurst enabled auto-merge (squash) June 10, 2026 17:14

thomhurst temporarily deployed to Pull Requests June 10, 2026 17:14 — with GitHub Actions Inactive

claude Bot approved these changes Jun 10, 2026

View reviewed changes

thomhurst merged commit 1b560c9 into main Jun 10, 2026
14 checks passed

thomhurst deleted the renovate/polly-8.x branch June 10, 2026 17:45

This was referenced Jun 15, 2026

Bump TUnit from 1.53.0 to 1.55.2 shouldly/shouldly#1236

Merged

Bump the nuget-dependencies group with 7 updates jamesshenry/Stanza.TerminalGui#9

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update dependency polly to 8.7.0#6214

chore(deps): update dependency polly to 8.7.0#6214
thomhurst merged 1 commit into
mainfrom
renovate/polly-8.x

thomhurst commented Jun 10, 2026

Uh oh!

claude Bot left a comment

Uh oh!

codacy-production Bot commented Jun 10, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

thomhurst commented Jun 10, 2026

Release Notes

v8.7.0

Highlights

What's Changed

New Contributors

Configuration

Uh oh!

claude Bot left a comment

Choose a reason for hiding this comment

PR Review: chore(deps): update dependency polly to 8.7.0

Summary

What the PR Does

Issues Found

Suggested Improvements

Overall Assessment

Uh oh!

codacy-production Bot commented Jun 10, 2026

Up to standards ✅

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

`v8.7.0`