Skip to content

chore(deps): Dependabot groups and the pending dependency bumps - #7

Merged
LoganRupe merged 3 commits into
mainfrom
chore/deps/dependabot-groups
Oct 10, 2026
Merged

LoganRupe merged 3 commits into
mainfrom
chore/deps/dependabot-groups

Conversation

@LoganRupe

Copy link
Copy Markdown
Owner

What and why

Brings the Dependabot config in line with quomodo and applies the updates from #1, #2 and #3, which all closed when the history was rewritten.

  • Dependabot: one grouped PR for GitHub Actions. NuGet minor/patch grouped; Microsoft.Extensions.* in its own group because a partial bump fails with NU1605 (that is what Bump the nuget group with 4 updates #3 would have done: it only touched Shared). Windows App SDK majors and Windows SDK BuildTools minors are ignored; they move with the TargetFramework by hand.
  • Actions: checkout v7, setup-dotnet v6, upload-artifact v7, download-artifact v8.
  • NuGet: Microsoft.Extensions.Logging 10.0.12 (all projects), Microsoft.NET.Test.Sdk 18.10.1, xunit 2.9.3, xunit.runner.visualstudio 4.0.0 (4.0.1 is inside the 14-day cooldown).

Platforms

  • macOS: built and tested (CI)
  • Windows: built and tested (CI)
  • Linux: built and tested (CI)
  • Other platforms need the same change: no

Checklist

  • CHANGELOG.md updated under Unreleased (if user-visible): not user-visible
  • Signing, entitlements or identifiers changed? No.

Group all GitHub Actions bumps into one PR. Group NuGet minor/patch bumps, keep
Microsoft.Extensions.* in its own group so every project moves together (a
partial bump fails with NU1605), and ignore Windows App SDK majors and
Windows SDK BuildTools minors, which move with the TargetFramework by hand.
…o v7/v8

Supersedes Dependabot #1 and #2, which closed when the history was rewritten.
Microsoft.Extensions.Logging 10.0.0 -> 10.0.12 in every project,
Microsoft.NET.Test.Sdk 17.12.0 -> 18.10.1, xunit 2.9.2 -> 2.9.3,
xunit.runner.visualstudio 2.8.2 -> 4.0.0. Supersedes Dependabot #3, which only
bumped Logging in Shared and would have failed with NU1605.
@LoganRupe
LoganRupe merged commit 4e7a31c into main Oct 10, 2026
6 checks passed
@LoganRupe
LoganRupe deleted the chore/deps/dependabot-groups branch October 10, 2026 10:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant