Bump the dependencies group with 7 updates #1607
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the dependencies group with 7 updates: | Package | From | To | | --- | --- | --- | | [BouncyCastle.Cryptography](https://github.com/bcgit/bc-csharp) | `2.5.0` | `2.5.1` | | [Microsoft.NETFramework.ReferenceAssemblies](https://github.com/Microsoft/dotnet) | `1.0.3` | `1.0.3` | | [Meziantou.Analyzer](https://github.com/meziantou/Meziantou.Analyzer) | `2.0.186` | `2.0.188` | | [Microsoft.Extensions.Logging.Abstractions](https://github.com/dotnet/runtime) | `6.0.0` | `6.0.4` | | [SonarAnalyzer.CSharp](https://github.com/SonarSource/sonar-dotnet) | `10.6.0.109712` | `10.7.0.110445` | | [Microsoft.Extensions.Logging.Console](https://github.com/dotnet/runtime) | `9.0.1` | `9.0.2` | | [MSTest.TestFramework](https://github.com/microsoft/testfx) | `3.7.3` | `3.8.2` | Updates `BouncyCastle.Cryptography` from 2.5.0 to 2.5.1 - [Commits](bcgit/bc-csharp@release-2.5.0...release-2.5.1) Updates `Microsoft.NETFramework.ReferenceAssemblies` from 1.0.3 to 1.0.3 - [Commits](https://github.com/Microsoft/dotnet/commits) Updates `Meziantou.Analyzer` from 2.0.186 to 2.0.188 - [Release notes](https://github.com/meziantou/Meziantou.Analyzer/releases) - [Commits](meziantou/Meziantou.Analyzer@2.0.186...2.0.188) Updates `Microsoft.NETFramework.ReferenceAssemblies` from 1.0.3 to 1.0.3 - [Commits](https://github.com/Microsoft/dotnet/commits) Updates `Microsoft.Extensions.Logging.Abstractions` from 6.0.0 to 6.0.4 - [Release notes](https://github.com/dotnet/runtime/releases) - [Commits](dotnet/runtime@v6.0.0...v6.0.4) Updates `Microsoft.NETFramework.ReferenceAssemblies` from 1.0.3 to 1.0.3 - [Commits](https://github.com/Microsoft/dotnet/commits) Updates `Microsoft.NETFramework.ReferenceAssemblies` from 1.0.3 to 1.0.3 - [Commits](https://github.com/Microsoft/dotnet/commits) Updates `SonarAnalyzer.CSharp` from 10.6.0.109712 to 10.7.0.110445 - [Release notes](https://github.com/SonarSource/sonar-dotnet/releases) - [Commits](SonarSource/sonar-dotnet@10.6.0.109712...10.7.0.110445) Updates `Microsoft.Extensions.Logging.Console` from 9.0.1 to 9.0.2 - [Release notes](https://github.com/dotnet/runtime/releases) - [Commits](dotnet/runtime@v9.0.1...v9.0.2) Updates `MSTest.TestFramework` from 3.7.3 to 3.8.2 - [Release notes](https://github.com/microsoft/testfx/releases) - [Changelog](https://github.com/microsoft/testfx/blob/main/docs/Changelog.md) - [Commits](microsoft/testfx@v3.7.3...v3.8.2) Updates `Microsoft.NETFramework.ReferenceAssemblies` from 1.0.3 to 1.0.3 - [Commits](https://github.com/Microsoft/dotnet/commits) --- updated-dependencies: - dependency-name: BouncyCastle.Cryptography dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.NETFramework.ReferenceAssemblies dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Meziantou.Analyzer dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.NETFramework.ReferenceAssemblies dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.NETFramework.ReferenceAssemblies dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.NETFramework.ReferenceAssemblies dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: SonarAnalyzer.CSharp dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: Microsoft.Extensions.Logging.Console dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: MSTest.TestFramework dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: Microsoft.NETFramework.ReferenceAssemblies dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
requested review from
drieseng,
WojciechNagorski and
Rob-Hague
as code owners
dependabot
bot
added
.NET
|
Note sure what's happening here. Looking at the PR description, the ignore rules seem to work, but the ignored packages are still updated in the commit. There are multiple issues about this, but I don't see a clear solution. Looking at the dependabot logs might help, but it seems like these are only visible to maintainers. Maybe this is caused by the grouping somehow (I'm personally not a fan of grouping everything together anyway since an issue with one package will block all others). |
|
Attached the logs, I see a few errors on the test projects from Nerdbank.GitVersioning but not sure if relevant. I prefer to have things grouped so that it's basically just a low-frequency reminder to do something. I don't like the PR spam or seeing commit histories full of dependabot BTW Microsoft.Logging.Abstractions 8.0.3 does not pull in DiagnosticSource like 8.0.2 did. Seems like a mistake: dotnet/runtime#110401. So we could go to 8.0.3, only problem is that it takes in Microsoft.Extensions.DependencyInjection.Abstractions (>= 8.0.2) which takes in Microsoft.Bcl.AsyncInterfaces (>= 8.0.0) so we would have to revisit darkoperator/Posh-SSH#558 (comment) again |
fair enough.
I think it's fine to leave it at 6.0.0, it just contains interfaces. We could even use something older for that matter. The only reason I used 6.0.0 in #1509 was because it's the first version to support the |
|
@Rob-Hague looks like the actual issue for darkoperator/Posh-SSH#558 (comment) was fixed in PowerShell itself: PowerShell/PowerShell#21415 , so we might get away with updating if we ever need to. We still couldn't use anything newer than whatever PowerShell ships, but they seem to keep it up-to-date now: https://github.com/PowerShell/PowerShell/blob/33ed509ca493f004a0832a2af50b0ef5f9220eea/src/Microsoft.PowerShell.SDK/Microsoft.PowerShell.SDK.csproj#L19 |
Bumps the dependencies group with 7 updates:
2.5.02.5.11.0.31.0.32.0.1862.0.1886.0.06.0.410.6.0.10971210.7.0.1104459.0.19.0.23.7.33.8.2Updates
BouncyCastle.Cryptographyfrom 2.5.0 to 2.5.1Commits
71250c8Patch #1 for 2.5Updates
Microsoft.NETFramework.ReferenceAssembliesfrom 1.0.3 to 1.0.3Commits
Updates
Meziantou.Analyzerfrom 2.0.186 to 2.0.188Release notes
Sourced from Meziantou.Analyzer's releases.
Commits
0ad62c6MA0002 skips IImmutableSet<string> (#787)7e57a0bFix MA0048 in case when first type is not first node (#785)Updates
Microsoft.NETFramework.ReferenceAssembliesfrom 1.0.3 to 1.0.3Commits
Updates
Microsoft.Extensions.Logging.Abstractionsfrom 6.0.0 to 6.0.4Release notes
Sourced from Microsoft.Extensions.Logging.Abstractions's releases.
Commits
be98e88Merged PR 21497: [release/6.0] MSRC 68590 - newlines in domain literals1cb7505Merge in 'release/6.0' changes2eb4efb[release/6.0] Update dependencies from dotnet/emsdk dotnet/arcade (#66144)4fa64a1Merge in 'release/6.0' changes323bf2d[release/6.0] update expected exception for cases when all requested TLS vers...76a717cImprove SSL platform detection (#64923) (#65054)7a7c54bMerge in 'release/6.0' changesd0c82a3[release/6.0] improve SslStream tests on misconfigured systems (#65024)8d7b562Merge in 'release/6.0' changes19b5f15[release/6.0] Fix catching of generic exception in crossgened shared generic ...Updates
Microsoft.NETFramework.ReferenceAssembliesfrom 1.0.3 to 1.0.3Commits
Updates
Microsoft.NETFramework.ReferenceAssembliesfrom 1.0.3 to 1.0.3Commits
Updates
SonarAnalyzer.CSharpfrom 10.6.0.109712 to 10.7.0.110445Release notes
Sourced from SonarAnalyzer.CSharp's releases.
Commits
033f8a4NET-1040 Update RSPEC before 10.7 released9a8fd0NET-1151 Repro FP S362688381f2NET-1047 Update nuget install scripts to account for single analyzer dllef12213NET-1137 Repro FP S11214dceed1NET-1140 Add UT for issue with same start and end location77b933aNET-504 Clean up RuleDefinition UTs5697628NET-1058 Move plugin properties to root pom.xml0172dbcNET-1059 Move organization and scm to private/pom.xml and pom.xml96b07b3NET-1043 Extract remaining Helper extensions from SonarAnalyzer.Core856f2f5NET-1042 Extract semantic Helper extensions from SonarAnalyzer.CoreUpdates
Microsoft.Extensions.Logging.Consolefrom 9.0.1 to 9.0.2Release notes
Sourced from Microsoft.Extensions.Logging.Console's releases.
... (truncated)
Commits
80aa709Merge commit '692a3b6a9827fa10c51ce2a16b26b51ecca7b430'692a3b6Merged PR 45621: Update DIA to 17.12.0-beta1.24603.5 (#111428)74b5c68Merge commit '6a86517f3a838ba210cdf94b2d6d38125e1906a2'6a86517[release/9.0] Support generic fields in PersistedAssemblyBuilder (#111467)be62441Merge commit '63cb882afa85ee0160999ab1c0b727e866a29aef'63cb882Since we bumped the NDK in https://github.com/dotnet/dotnet-buildtools-prereq...cbcec76Merge pull request #111422 from carlossanlop/release/9.0-stagingf8e3b98Merge commit 'c8acea22626efab11c13778c028975acdc34678f' into internal-merge-9...5994663Merge commit '63b7284d0567c99a56ebefb0c426e04ff81db4ad'63b7284Merge pull request #111378 from carlossanlop/release/9.0-stagingUpdates
MSTest.TestFrameworkfrom 3.7.3 to 3.8.2Release notes
Sourced from MSTest.TestFramework's releases.
Changelog
Sourced from MSTest.TestFramework's changelog.
... (truncated)
Commits
88f8ce4[rel/3.8] Fix ClassCleanup not called when the first test in class is ignored...8026b02[rel/3.8] Handle if RootNamespace contains invalid identifier characters (#5069)1945ea7[rel/3.8] Localized file check-in by OneLocBuild Task: Build definition ID 12...360c709Bump patch version for 3.8 (#5061)ac22a6d[rel/3.8] Fix serialization of exceptions by BinaryFormatter in .NET Framewor...51d51a8[rel/3.8] Fix breaking change with telemetry (#5050)cc1c3cd[rel/3.8] Follow-up to ignore fix (#5043)193598b[rel/3.8] Revert _IncludeGenerateAutoRegisteredExtensionsIntoCompilation targ...91715f4[rel/3.8] Useglobal::prefix for generated code (#5033)efd5256[rel/3.8] Set packages README correctly (#5030)Updates
Microsoft.NETFramework.ReferenceAssembliesfrom 1.0.3 to 1.0.3Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions