Skip to content

Consolidate seven pending NuGet dependency updates - #135

Merged
kzu merged 4 commits into
mainfrom
copilot/bump-all-open-dependency-updates
Oct 12, 2026
Merged

kzu merged 4 commits into
mainfrom
copilot/bump-all-open-dependency-updates

Conversation

Copilot AI commented Oct 11, 2026 •

Copy link
Copy Markdown
Contributor

Updates all seven packages to the requested versions without downgrades or unrelated changes. Supersedes Dependabot PRs #124, #126, #127, and #133.

  • Azure Functions
    • SignalRService: 1.13.0 → 2.1.0
    • EventGrid extension: 3.3.0 → 3.5.0
    • ThisAssembly.Project: 1.3.1 → 2.1.2
  • Testing
    • Microsoft.NET.Test.Sdk: 17.9.0 → 17.13.0
    • xunit: 2.5.0 → 2.9.3
    • xunit.runner.visualstudio: 2.5.0 → 3.0.2
  • CLI
    • CliWrap: 3.6.6 → 3.10.2
  • Outstanding compatibility blocker
    • All 27 tests pass, but solution restore fails with NU1605: the Azure updates require Microsoft.Extensions.DependencyInjection >= 8.0.1, conflicting with the explicit 6.0.0 reference. Updating that additional package awaits approval.

Copilot AI assigned Copilot and kzu Oct 11, 2026
Copilot AI linked an issue Oct 11, 2026 that may be closed by this pull request
Co-authored-by: kzu <169707+kzu@users.noreply.github.com>
Copilot AI changed the title [WIP] Update all packages to target versions Consolidate seven pending NuGet dependency updates Oct 11, 2026
Copilot AI requested a review from kzu October 11, 2026 11:26
@kzu

kzu commented Oct 12, 2026

Copy link
Copy Markdown
Member

@copilot restore fails. Please bump the direct Microsoft.Extensions.DependencyInjection reference in src/FunctionApp to 8.0.1 or later (upward only, never downgrade) so restore succeeds. Version changes only; no product code or public API changes.

Co-authored-by: kzu <169707+kzu@users.noreply.github.com>

Copilot AI commented Oct 12, 2026

Copy link
Copy Markdown
Contributor Author

@copilot restore fails. Please bump the direct Microsoft.Extensions.DependencyInjection reference in src/FunctionApp to 8.0.1 or later (upward only, never downgrade) so restore succeeds. Version chang...

Fixed in 15cb7b0: bumped the direct Microsoft.Extensions.DependencyInjection reference from 6.0.0 to 8.0.1. Restore, Debug/Release builds, all 27 tests, and formatting checks pass. Only the package version changed; no product code or public API changes.

@kzu

kzu commented Oct 12, 2026

Copy link
Copy Markdown
Member

@copilot The build now fails with NuGetizer NG0012 duplicate pack files in src/EventGrid/EventGrid.csproj (the per-platform jq/jq.exe copies and System.Text.Encodings.Web.dll under tools/net6.0/any). Please add a small packing fix, like devlooped/dotnet-tor#123 did with a PreserveToolPackageSubdirectories target, so those files are deduplicated or keep their subdirectories. Keep changes limited to build/packaging. If the packing fix doesn't work, drop the bump that causes the duplicates and keep the rest. Never downgrade a package below main.

Co-authored-by: kzu <169707+kzu@users.noreply.github.com>

Copilot AI commented Oct 12, 2026

Copy link
Copy Markdown
Contributor Author

@copilot The build now fails with NuGetizer NG0012 duplicate pack files in src/EventGrid/EventGrid.csproj (the per-platform jq/jq.exe copies and System.Text.Encodings.Web.dll under tools/net6.0/any). ...

Fixed in 9013e36 with a project-local PreserveToolPackageSubdirectories target. CI-style packing and standalone pack now succeed; verified all five jq binaries and both encoding assemblies retain distinct package paths. All 27 tests and formatting checks pass. Changes are packaging-only, with all dependency bumps retained.

@kzu

kzu commented Oct 12, 2026

Copy link
Copy Markdown
Member

27 passed 27 passed

🧪 Details on Ubuntu 24.04.5 LTS

from retest v1.1.0 on .NET 10.0.12 with 💜 by @devlooped

@kzu
kzu marked this pull request as ready for review October 12, 2026 12:09
@kzu
kzu merged commit 6642e5b into main Oct 12, 2026
3 checks passed
@kzu
kzu deleted the copilot/bump-all-open-dependency-updates branch October 12, 2026 12:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Bump all open dependency updates together

2 participants