Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 14, 2026

Bumps dotnet-sdk from 10.0.101 to 10.0.102.

Release notes

Sourced from dotnet-sdk's releases.

.NET 10.0.2

Release

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [dotnet-sdk](https://github.com/dotnet/sdk) from 10.0.101 to 10.0.102.
- [Release notes](https://github.com/dotnet/sdk/releases)
- [Commits](dotnet/sdk@v10.0.101...v10.0.102)

---
updated-dependencies:
- dependency-name: dotnet-sdk
  dependency-version: 10.0.102
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .net code Type: Maintenance labels Jan 14, 2026
@valadas valadas added this to the 10.2.2 milestone Jan 14, 2026
@bdukes bdukes merged commit 8ceb145 into develop Jan 15, 2026
4 checks passed
@bdukes bdukes deleted the dependabot/dotnet_sdk/dotnet-sdk-10.0.102 branch January 15, 2026 01:20
@jeremy-farrance
Copy link
Contributor

Just instigating a quick rethink in case you haven't... I am probably missing some edge case you guys have experienced, but this seems unnecessary (for dependabot to do) since you are using rollForward.

I think you'd get the same result and allow dependabot to ignore this version bumping by setting the version to "10.0.100" and using (my preference) "rollForward": "latestFeature", or latestPatch (instead of latestMinor).

@mitchelsellers
Copy link
Contributor

We want to be explicit with the references to help clear security warnings etc.

@jeremy-farrance
Copy link
Contributor

Then you should turn off rollForward, no? "rollForward": "disable",

@mitchelsellers
Copy link
Contributor

Most likely wouldn't be a horrible idea to turn that off

@valadas
Copy link
Contributor

valadas commented Jan 18, 2026

I think it does not hurt to stay and can make it easier for local devs that may have recently setup and DNN is not yet using their latest they have.

@bdukes
Copy link
Contributor

bdukes commented Jan 19, 2026

One big reason is that we're using the version from global.json in Azure Pipelines to setup the right version of the tooling, and that task does not take rollForward into consideration.

@mitchelsellers
Copy link
Contributor

As always, thanks @bdukes for the reminder! This is what happens when I live in GitHub Actions forever, I forget the funny bits about ADO when it is no longer my day-to-day!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

.NET Pull requests that update .net code Type: Maintenance

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants