From e0f8ea256557e8e47ef2789d661e88f7793819e9 Mon Sep 17 00:00:00 2001 From: Logan Rupe Date: Sat, 10 Oct 2026 21:50:18 +1100 Subject: [PATCH 1/3] chore(deps): group Dependabot updates like quomodo Group all GitHub Actions bumps into one PR. Group NuGet minor/patch bumps, keep Microsoft.Extensions.* in its own group so every project moves together (a partial bump fails with NU1605), and ignore Windows App SDK majors and Windows SDK BuildTools minors, which move with the TargetFramework by hand. --- .github/dependabot.yml | 18 +++++++++++++++++- 1 file changed, 17 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 96ff070..2d11315 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,9 +4,25 @@ updates: directory: / schedule: { interval: monthly } cooldown: { default-days: 14 } + groups: + actions: { patterns: ["*"] } - package-ecosystem: nuget directories: [/CursorFollowWin, /CursorFollowWin/Capture, /CursorFollowWin/Output, /CursorFollowWin/Shared, /CursorFollowWin/tests/CursorFollowWin.Tests] schedule: { interval: monthly } cooldown: { default-days: 14 } groups: - nuget: { patterns: ["*"] } + # Every project references Microsoft.Extensions.Logging; bumping it in some projects + # and not others fails the build with NU1605 (package downgrade). + logging: + patterns: ["Microsoft.Extensions.*"] + nuget: + patterns: ["*"] + update-types: [minor, patch] + ignore: + # Windows App SDK 2.x is a deliberate platform move, not a routine bump. + - dependency-name: Microsoft.WindowsAppSDK + update-types: [version-update:semver-major] + # BuildTools tracks the Windows SDK in the TargetFramework (10.0.26100); its "minor" is + # the SDK build number, so move it together with the TFM by hand. + - dependency-name: Microsoft.Windows.SDK.BuildTools + update-types: [version-update:semver-minor] From d018bd780d7e7edb33dad4a41239fe0c8504b3a5 Mon Sep 17 00:00:00 2001 From: Logan Rupe Date: Sat, 10 Oct 2026 21:50:18 +1100 Subject: [PATCH 2/3] ci(deps): bump checkout to v7, setup-dotnet to v6, artifact actions to v7/v8 Supersedes Dependabot #1 and #2, which closed when the history was rewritten. --- .github/workflows/ci.yml | 8 ++++---- .github/workflows/release.yml | 14 +++++++------- 2 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 4337c59..a165e03 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -16,7 +16,7 @@ jobs: macos: runs-on: macos-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Build and unit test working-directory: CursorFollowMac run: | @@ -26,8 +26,8 @@ jobs: windows: runs-on: windows-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-dotnet@v4 + - uses: actions/checkout@v7 + - uses: actions/setup-dotnet@v6 with: dotnet-version: 10.0.x - name: Build @@ -40,7 +40,7 @@ jobs: linux: runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install dependencies run: | sudo apt-get update diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 31647dd..643e078 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -36,7 +36,7 @@ jobs: macos: runs-on: macos-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: ref: ${{ env.TAG || github.ref }} @@ -65,7 +65,7 @@ jobs: - name: Build, sign, package, verify run: ./CursorFollowMac/scripts/package.sh - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 with: name: macos-dmg path: build/CursorFollowMac-*.dmg @@ -74,16 +74,16 @@ jobs: windows: runs-on: windows-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: ref: ${{ env.TAG || github.ref }} - - uses: actions/setup-dotnet@v4 + - uses: actions/setup-dotnet@v6 with: dotnet-version: 10.0.x - name: Build MSI (unsigned) shell: pwsh run: ./CursorFollowWin/scripts/package.ps1 -Rid win-x64 - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 with: name: windows-msi path: CursorFollowWin/installer/dist/*.msi @@ -96,10 +96,10 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: ref: ${{ env.TAG }} - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v8 with: path: dist merge-multiple: true From c032389147083599d44122117b51b1bd1677877e Mon Sep 17 00:00:00 2001 From: Logan Rupe Date: Sat, 10 Oct 2026 21:50:18 +1100 Subject: [PATCH 3/3] chore(win/deps): bump Microsoft.Extensions.Logging, test SDK and xunit Microsoft.Extensions.Logging 10.0.0 -> 10.0.12 in every project, Microsoft.NET.Test.Sdk 17.12.0 -> 18.10.1, xunit 2.9.2 -> 2.9.3, xunit.runner.visualstudio 2.8.2 -> 4.0.0. Supersedes Dependabot #3, which only bumped Logging in Shared and would have failed with NU1605. --- CursorFollowWin/Capture/CursorFollowWin.Capture.csproj | 2 +- CursorFollowWin/CursorFollowWin.csproj | 2 +- CursorFollowWin/Output/CursorFollowWin.Output.csproj | 2 +- CursorFollowWin/Shared/CursorFollowWin.Shared.csproj | 2 +- .../CursorFollowWin.Tests/CursorFollowWin.Tests.csproj | 6 +++--- 5 files changed, 7 insertions(+), 7 deletions(-) diff --git a/CursorFollowWin/Capture/CursorFollowWin.Capture.csproj b/CursorFollowWin/Capture/CursorFollowWin.Capture.csproj index 0799add..24d530d 100644 --- a/CursorFollowWin/Capture/CursorFollowWin.Capture.csproj +++ b/CursorFollowWin/Capture/CursorFollowWin.Capture.csproj @@ -25,7 +25,7 @@ - + diff --git a/CursorFollowWin/CursorFollowWin.csproj b/CursorFollowWin/CursorFollowWin.csproj index a7a4292..41847d3 100644 --- a/CursorFollowWin/CursorFollowWin.csproj +++ b/CursorFollowWin/CursorFollowWin.csproj @@ -89,7 +89,7 @@ - + diff --git a/CursorFollowWin/Output/CursorFollowWin.Output.csproj b/CursorFollowWin/Output/CursorFollowWin.Output.csproj index 4c684c1..7765fed 100644 --- a/CursorFollowWin/Output/CursorFollowWin.Output.csproj +++ b/CursorFollowWin/Output/CursorFollowWin.Output.csproj @@ -25,7 +25,7 @@ - + diff --git a/CursorFollowWin/Shared/CursorFollowWin.Shared.csproj b/CursorFollowWin/Shared/CursorFollowWin.Shared.csproj index 77d001b..7ddb8a6 100644 --- a/CursorFollowWin/Shared/CursorFollowWin.Shared.csproj +++ b/CursorFollowWin/Shared/CursorFollowWin.Shared.csproj @@ -7,6 +7,6 @@ - + diff --git a/CursorFollowWin/tests/CursorFollowWin.Tests/CursorFollowWin.Tests.csproj b/CursorFollowWin/tests/CursorFollowWin.Tests/CursorFollowWin.Tests.csproj index 2aa2a0e..9bf2bcf 100644 --- a/CursorFollowWin/tests/CursorFollowWin.Tests/CursorFollowWin.Tests.csproj +++ b/CursorFollowWin/tests/CursorFollowWin.Tests/CursorFollowWin.Tests.csproj @@ -9,9 +9,9 @@ - - - + + +