Repository navigation
Bump the nuget-deps group with 2 updates - #577
Merged
ptr727-codegen[bot] merged 1 commit intoNov 9, 2026
Merged
Conversation
Bumps xunit.analyzers from 2.2.0 to 2.3.0 Bumps xunit.v3 from 4.0.2 to 4.0.3 --- updated-dependencies: - dependency-name: xunit.analyzers dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: xunit.v3 dependency-version: 4.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-deps ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
.NET
|
Important Review skippedBot user detected. To trigger a single review, invoke the
 |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #577 +/- ##
=======================================
Coverage 70.54% 70.54%
=======================================
Files 13 13
Lines 1219 1219
Branches 111 111
=======================================
Hits 860 860
Misses 319 319
Partials 40 40
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
ptr727
added a commit
that referenced
this pull request
Nov 9, 2026
## Summary Promotes the hub resync to `main`. It carries four feature pull requests, all merged into `develop` and resynced against hub `ptr727/ProjectTemplate` at `c175d557`: - #581 resyncs the instruction set: `AGENTS.md` and `GOVERNANCE.md` verbatim sections, `WORKFLOW.md`, and `CODESTYLE.md` with the repository's own .NET conventions kept. It also fixes the `OPERATIONS.md` prose gate command, which now runs through `uv`. - #578 re-vendors `.github/skills` and `.markdownlint-cli2.jsonc`. It adds `decision-triage` and prunes `unattended-handoff`. - #579 brings the publisher concurrency group onto D7.1 and gives the required aggregator its ruleset-bound name only on a `pull_request` run (D1.5). - #580 reconciles the intent-fidelity files: `AUDIT.md`, `.github/copilot-instructions.md`, `.editorconfig`, `.gitattributes`, and `cspell.json`. No shipped input changes, so this promotion publishes no package. Two independent reasons: - `git diff --name-only origin/main origin/develop` names none of the publisher's push paths (`Utilities/**`, `version.json`, `Directory.Build.props`, `Directory.Packages.props`). `Directory.Packages.props` appears in this pull request's three-dot file list only because `develop` (#576) and `main` (#577) took the same Dependabot bump independently, so the trees already match. A push event evaluates its path filter on the two-dot diff between the pushed `before` and `after` commits. - The pinned `publish-plan-task.yml` publishes a push to `main` only when the actor is `ptr727-codegen[bot]` or `dependabot[bot]`. A maintainer merging this promotion publishes nothing on any path. ## Audit `audit run 2026-11-09T16:56:11Z | hub c175d557 | branch override develop` reports 0 defect findings on `develop`, against the many verbatim, tree, interface, and concurrency findings on `main` before the resync. What remains is advisory: - `.editorconfig-checker.json` and `version.json` are date-only intent advisories. Their differences from the hub are this repository's own: the `.artifacts/` exclusion and the 4.1 version floor. - `.coderabbit.yaml`, `.pr_agent.toml`, and `.github/agent-policy.json` are flagged hub-only. They are rendered reviewer configs every repository carries, which ptr727/ProjectTemplate#3914 tracks declaring. - A branch note says both workflow files changed on `main` (Dependabot action bumps) and on `develop` since the merge base. A test merge of `develop` into `main` auto-merges cleanly, and its tree equals `develop`'s tree. ## Review coverage #579 and #580 met every Merge Gate item. #581 and #578 merged into `develop` with the maintainer's explicit authorization over item 2. Their Lite Copilot rounds left files out of their file tables, which sets the attested local pass aside (ptr727/ProjectTemplate#3955). Each carried an attested local strict-review pass over every changed file. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
This was referenced Nov 10, 2026
ptr727-codegen Bot
pushed a commit
to ptr727/LanguageTags
that referenced
this pull request
Nov 10, 2026
Updated [dotnet-outdated-tool](https://github.com/dotnet-outdated/dotnet-outdated) from 4.8.1 to 4.9.0. <details> <summary>Release notes</summary> _Sourced from [dotnet-outdated-tool's releases](https://github.com/dotnet-outdated/dotnet-outdated/releases)._ ## 4.9.0 ## What's Changed * Adopt MCP 2026-07-28 spec with legacy version negotiation by @slang25 in dotnet-outdated/dotnet-outdated#772 * Fix concurrent cache corruption during recursive file-based app upgrades by @DamianEdwards in dotnet-outdated/dotnet-outdated#788 * Fix: Parameter --maximum-version ignores exact version references by @chefarbeiter in dotnet-outdated/dotnet-outdated#671 * Show a friendly message instead of crashing when a solution has no projects by @DanielC000 in dotnet-outdated/dotnet-outdated#771 * Surface package-upgrade stdout so failures are diagnosable by @timabell in dotnet-outdated/dotnet-outdated#790 * Fix multiline central package version updates by @onuracar-dev in dotnet-outdated/dotnet-outdated#783 * Support versioned MSBuild project SDKs in project files by @thomhurst in dotnet-outdated/dotnet-outdated#793 * Preserve whitespace in Directory.Packages.props during upgrades by @symbiogenesis in dotnet-outdated/dotnet-outdated#803 * Treat package references injected by custom SDKs as auto-referenced by @thomhurst in dotnet-outdated/dotnet-outdated#795 * Preserve version ranges when upgrading packages by @GREsau in dotnet-outdated/dotnet-outdated#702 * Preserve MSBuild version variables across project and props files by @symbiogenesis in dotnet-outdated/dotnet-outdated#805 * Replace McMaster command-line parsing with System.CommandLine by @slang25 in dotnet-outdated/dotnet-outdated#808 * Bump version to 4.9.0 by @slang25 in dotnet-outdated/dotnet-outdated#806 ## New Contributors * @chefarbeiter made their first contribution in dotnet-outdated/dotnet-outdated#671 * @DanielC000 made their first contribution in dotnet-outdated/dotnet-outdated#771 * @timabell made their first contribution in dotnet-outdated/dotnet-outdated#790 * @onuracar-dev made their first contribution in dotnet-outdated/dotnet-outdated#783 * @thomhurst made their first contribution in dotnet-outdated/dotnet-outdated#793 * @GREsau made their first contribution in dotnet-outdated/dotnet-outdated#702 **Full Changelog**: dotnet-outdated/dotnet-outdated@v4.8.1...v4.9.0 Commits viewable in [compare view](dotnet-outdated/dotnet-outdated@v4.8.1...v4.9.0). </details> Updated [ptr727.Utilities](https://github.com/ptr727/Utilities) from 4.1.105 to 4.1.109. <details> <summary>Release notes</summary> _Sourced from [ptr727.Utilities's releases](https://github.com/ptr727/Utilities/releases)._ ## 4.1.109 ## What's Changed * Bump the actions-deps group with 4 updates by @dependabot[bot] in ptr727/Utilities#574 * Bump the nuget-deps group with 2 updates by @dependabot[bot] in ptr727/Utilities#576 * Resync the Instruction Set With the Hub by @ptr727 in ptr727/Utilities#581 * Resync the Skills Tree and Markdownlint Config With the Hub by @ptr727 in ptr727/Utilities#578 * Bring the Publisher Concurrency and Aggregator Name to the Workflow Contract by @ptr727 in ptr727/Utilities#579 * Reconcile the Intent-Fidelity Carried Files With the Hub by @ptr727 in ptr727/Utilities#580 * Promote the Hub Resync to Main by @ptr727 in ptr727/Utilities#582 **Full Changelog**: ptr727/Utilities@4.1.108...4.1.109 ## 4.1.108 ## What's Changed * Bump the actions-deps group with 4 updates by @dependabot[bot] in ptr727/Utilities#575 * Bump the nuget-deps group with 2 updates by @dependabot[bot] in ptr727/Utilities#577 **Full Changelog**: ptr727/Utilities@4.1.105...4.1.108 Commits viewable in [compare view](ptr727/Utilities@4.1.105...4.1.109). </details> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This was referenced Nov 10, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated xunit.analyzers from 2.2.0 to 2.3.0.
Release notes
Sourced from xunit.analyzers's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated xunit.v3 from 4.0.2 to 4.0.3.
Release notes
Sourced from xunit.v3's releases.
No release notes found for this version range.
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions