fix(deps): Bump the dotnet group with 10 updates by dependabot[bot] · Pull Request #189 · AdCodicem/AdCodicem.ValueObjects

dependabot · 2026-10-18T19:32:27Z

Updated FluentValidation from 12.1.1 to 12.2.0.

Release notes

Sourced from FluentValidation's releases.

12.2.0

Release notes

Please read the upgrade guide if you are moving from 11.x to 12.x

Changes in 12.2.0

Add Lithuanian language (#2350)
Add Belarusian language (#2356)
Add GetParentChain() to PropertyChain (#2358)
Fix ArgumentNullException in TestValidationResult when a failure has a null PropertyName (#2362)
Reject an inverted range when the comparer returns a negative other than -1 in RangeValidator (#2370)
Change EnumValidator to work under native AOT (#2371)
Fix PropertyChain.IsChildChainOf for sibling chains that share a name prefix (#2372)
Fix PropertyPath is incorrect in .When() on RuleForEach (#2363)

Changes in 12.1.0

Add Tamil language (#2334)
Add Telugu language (#2333)
Fixes to Japanese translations (#2340)

Changes in 12.0.0

Drops support for netstandard2.0, netstandard2.1, .net 5, .net 6 and .net 7. Minimum supported platform is now .net 8.
Add support for dependent rules for custom rules (#2170)
Removes deprecated DI extensions
Removes deprecated transform methods (#2027)
Remove the ability to disable the root-model null check (#2069)
Use Zomp.SyncMethodGenerator to clean up internal sync/async code paths and increase performance (#2136)
Add Serbian (Cyrillic) language; rename existing Serbian to Serbian (Latin) (#2283)

Downloads

Binaries can be downloaded from nuget:

FluentValidation - Main package

Commits viewable in compare view.

Updated Microsoft.Testing.Extensions.CodeCoverage from 18.11.2 to 18.12.0.

Release notes

Sourced from Microsoft.Testing.Extensions.CodeCoverage's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Testing.Extensions.TrxReport from 2.4.1 to 2.5.1.

Release notes

Sourced from Microsoft.Testing.Extensions.TrxReport's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Testcontainers.Azurite from 4.15.0 to 4.16.0.

Release notes

Sourced from Testcontainers.Azurite's releases.

4.16.0

What's Changed

Huge thanks to everyone for your contributions and feedback 🧡.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #54051351.

🚀 Features

feat: Add common WithSsl builder API and support it in Azurite (#1788) @aleksandarMilev, @HofmeisterAn
feat: Add BuildKit support for image builds via sidecar container (#1761) @george-petrakis, @HofmeisterAn
feat(Elasticsearch): Add OTLP and certificate support (#1774) @HofmeisterAn

🐛 Bug Fixes

fix(PostgreSql): Support SSL with Alpine images and non-root users (#1790) @HofmeisterAn
fix: Do not pull base image with unresolved platform variable (#1787) @HofmeisterAn
fix(Kafka): Default to KRaft for Confluent Platform 8.x images (#1775) @arnelirobles, @HofmeisterAn
fix(Kafka): Drop the trailing comma from advertised listeners (#1772) @arnelirobles, @HofmeisterAn
fix: Prevent Docker ignore patterns from matching path prefixes (#1768) @Benziza, @HofmeisterAn

📖 Documentation

docs: Complete builder API tables and align heading casing (#1778) @HofmeisterAn
docs: Explain how builder configurations combine (#1770) @arnelirobles, @HofmeisterAn

🧹 Housekeeping

fix: Regenerate expired test certificates (#1786) @zcsizmadia
chore: Resolve Sonar findings (#1776) @HofmeisterAn
chore: Remove Minio module (#1769) @HofmeisterAn
chore: Publish NuGet packages with Trusted Publishing (OIDC) (#1763) @HofmeisterAn
feat: Prepare next release cycle (4.16.0) (#1762) @HofmeisterAn

📦 Dependency Updates

chore(deps): Bump the actions group with 5 updates (#1781) @dependabot[bot]

Commits viewable in compare view.

Updated Testcontainers.MongoDb from 4.15.0 to 4.16.0.

Release notes

Sourced from Testcontainers.MongoDb's releases.

4.16.0

What's Changed

Huge thanks to everyone for your contributions and feedback 🧡.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #54051351.

🚀 Features

feat: Add common WithSsl builder API and support it in Azurite (#1788) @aleksandarMilev, @HofmeisterAn
feat: Add BuildKit support for image builds via sidecar container (#1761) @george-petrakis, @HofmeisterAn
feat(Elasticsearch): Add OTLP and certificate support (#1774) @HofmeisterAn

🐛 Bug Fixes

fix(PostgreSql): Support SSL with Alpine images and non-root users (#1790) @HofmeisterAn
fix: Do not pull base image with unresolved platform variable (#1787) @HofmeisterAn
fix(Kafka): Default to KRaft for Confluent Platform 8.x images (#1775) @arnelirobles, @HofmeisterAn
fix(Kafka): Drop the trailing comma from advertised listeners (#1772) @arnelirobles, @HofmeisterAn
fix: Prevent Docker ignore patterns from matching path prefixes (#1768) @Benziza, @HofmeisterAn

📖 Documentation

docs: Complete builder API tables and align heading casing (#1778) @HofmeisterAn
docs: Explain how builder configurations combine (#1770) @arnelirobles, @HofmeisterAn

🧹 Housekeeping

fix: Regenerate expired test certificates (#1786) @zcsizmadia
chore: Resolve Sonar findings (#1776) @HofmeisterAn
chore: Remove Minio module (#1769) @HofmeisterAn
chore: Publish NuGet packages with Trusted Publishing (OIDC) (#1763) @HofmeisterAn
feat: Prepare next release cycle (4.16.0) (#1762) @HofmeisterAn

📦 Dependency Updates

chore(deps): Bump the actions group with 5 updates (#1781) @dependabot[bot]

Commits viewable in compare view.

Updated Testcontainers.MsSql from 4.15.0 to 4.16.0.

Release notes

Sourced from Testcontainers.MsSql's releases.

4.16.0

What's Changed

Huge thanks to everyone for your contributions and feedback 🧡.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #54051351.

🚀 Features

feat: Add common WithSsl builder API and support it in Azurite (#1788) @aleksandarMilev, @HofmeisterAn
feat: Add BuildKit support for image builds via sidecar container (#1761) @george-petrakis, @HofmeisterAn
feat(Elasticsearch): Add OTLP and certificate support (#1774) @HofmeisterAn

🐛 Bug Fixes

fix(PostgreSql): Support SSL with Alpine images and non-root users (#1790) @HofmeisterAn
fix: Do not pull base image with unresolved platform variable (#1787) @HofmeisterAn
fix(Kafka): Default to KRaft for Confluent Platform 8.x images (#1775) @arnelirobles, @HofmeisterAn
fix(Kafka): Drop the trailing comma from advertised listeners (#1772) @arnelirobles, @HofmeisterAn
fix: Prevent Docker ignore patterns from matching path prefixes (#1768) @Benziza, @HofmeisterAn

📖 Documentation

docs: Complete builder API tables and align heading casing (#1778) @HofmeisterAn
docs: Explain how builder configurations combine (#1770) @arnelirobles, @HofmeisterAn

🧹 Housekeeping

fix: Regenerate expired test certificates (#1786) @zcsizmadia
chore: Resolve Sonar findings (#1776) @HofmeisterAn
chore: Remove Minio module (#1769) @HofmeisterAn
chore: Publish NuGet packages with Trusted Publishing (OIDC) (#1763) @HofmeisterAn
feat: Prepare next release cycle (4.16.0) (#1762) @HofmeisterAn

📦 Dependency Updates

chore(deps): Bump the actions group with 5 updates (#1781) @dependabot[bot]

Commits viewable in compare view.

Updated Testcontainers.PostgreSql from 4.15.0 to 4.16.0.

Release notes

Sourced from Testcontainers.PostgreSql's releases.

4.16.0

What's Changed

Huge thanks to everyone for your contributions and feedback 🧡.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #54051351.

🚀 Features

feat: Add common WithSsl builder API and support it in Azurite (#1788) @aleksandarMilev, @HofmeisterAn
feat: Add BuildKit support for image builds via sidecar container (#1761) @george-petrakis, @HofmeisterAn
feat(Elasticsearch): Add OTLP and certificate support (#1774) @HofmeisterAn

🐛 Bug Fixes

fix(PostgreSql): Support SSL with Alpine images and non-root users (#1790) @HofmeisterAn
fix: Do not pull base image with unresolved platform variable (#1787) @HofmeisterAn
fix(Kafka): Default to KRaft for Confluent Platform 8.x images (#1775) @arnelirobles, @HofmeisterAn
fix(Kafka): Drop the trailing comma from advertised listeners (#1772) @arnelirobles, @HofmeisterAn
fix: Prevent Docker ignore patterns from matching path prefixes (#1768) @Benziza, @HofmeisterAn

📖 Documentation

docs: Complete builder API tables and align heading casing (#1778) @HofmeisterAn
docs: Explain how builder configurations combine (#1770) @arnelirobles, @HofmeisterAn

🧹 Housekeeping

fix: Regenerate expired test certificates (#1786) @zcsizmadia
chore: Resolve Sonar findings (#1776) @HofmeisterAn
chore: Remove Minio module (#1769) @HofmeisterAn
chore: Publish NuGet packages with Trusted Publishing (OIDC) (#1763) @HofmeisterAn
feat: Prepare next release cycle (4.16.0) (#1762) @HofmeisterAn

📦 Dependency Updates

chore(deps): Bump the actions group with 5 updates (#1781) @dependabot[bot]

Commits viewable in compare view.

Updated xunit.runner.visualstudio from 4.0.0 to 4.0.1.

Release notes

Sourced from xunit.runner.visualstudio's releases.

4.0.1

Release notes: https://xunit.net/releases/visualstudio/4.0.1

Commits viewable in compare view.

Updated xunit.v3.assert from 4.0.1 to 4.0.2.

Release notes

Sourced from xunit.v3.assert's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated xunit.v3.extensibility.core from 4.0.1 to 4.0.2.

Release notes

Sourced from xunit.v3.extensibility.core's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps FluentValidation from 12.1.1 to 12.2.0 Bumps Microsoft.Testing.Extensions.CodeCoverage from 18.11.2 to 18.12.0 Bumps Microsoft.Testing.Extensions.TrxReport from 2.4.1 to 2.5.1 Bumps Testcontainers.Azurite from 4.15.0 to 4.16.0 Bumps Testcontainers.MongoDb from 4.15.0 to 4.16.0 Bumps Testcontainers.MsSql from 4.15.0 to 4.16.0 Bumps Testcontainers.PostgreSql from 4.15.0 to 4.16.0 Bumps xunit.runner.visualstudio from 4.0.0 to 4.0.1 Bumps xunit.v3.assert from 4.0.1 to 4.0.2 Bumps xunit.v3.extensibility.core from 4.0.1 to 4.0.2 --- updated-dependencies: - dependency-name: FluentValidation dependency-version: 12.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet - dependency-name: Microsoft.Testing.Extensions.CodeCoverage dependency-version: 18.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet - dependency-name: Microsoft.Testing.Extensions.TrxReport dependency-version: 2.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet - dependency-name: Testcontainers.Azurite dependency-version: 4.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet - dependency-name: Testcontainers.MongoDb dependency-version: 4.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet - dependency-name: Testcontainers.MsSql dependency-version: 4.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet - dependency-name: Testcontainers.PostgreSql dependency-version: 4.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet - dependency-name: xunit.runner.visualstudio dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet - dependency-name: xunit.v3.assert dependency-version: 4.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet - dependency-name: xunit.v3.extensibility.core dependency-version: 4.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet ... Signed-off-by: dependabot[bot] <support@github.com>

AdCodicem · 2026-10-19T19:56:22Z

Closing in favour of #192. This group moved xunit.v3.assert and xunit.v3.extensibility.core to 4.0.2 but left the xunit.v3 metapackage on 4.0.1, whose xunit.v3.mtp-v2 requires xunit.v3.assert = 4.0.1, so the restore fails with NU1608. #192 moves the whole family (the compatibility island included) and takes FluentValidation 12.2.0 in a commit of its own; the other updates of this group are already on main through #177. #191 gives the xunit family a Dependabot group of its own.

Generated by Claude Code

dependabot · 2026-10-19T19:56:26Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

The xunit.v3 packages require one another at exactly one version: xunit.v3.mtp-v2 4.0.1 asks for xunit.v3.assert = 4.0.1. Dependabot's grouped #189 moved xunit.v3.assert and xunit.v3.extensibility.core to 4.0.2 but left the xunit.v3 metapackage on 4.0.1, so the restore failed with NU1608. This moves the whole family, xunit.v3 too, and the compatibility island's own xunit.v3 pin, which the contract kit's 4.0.2 floor would otherwise conflict with. xunit.v3.assert and xunit.v3.extensibility.core ship as the contract kit's dependencies, hence fix(deps). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0164hf4jJ3KsP3tyC3Uoa55L

The minor Dependabot proposed in #189, beside the xunit family that kept that pull request from restoring. FluentValidation ships as the FluentValidation package's dependency, hence fix(deps). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0164hf4jJ3KsP3tyC3Uoa55L

…'s minors, and group the families pinned together Dependabot ignored the semver-major updates of the frameworks only, so 23 of the 44 dependencies .github/shipped-dependencies lists opened their next major as a fix(deps)! pull request: a bump, where the repository's rule is that a new major is supported by a decision, a floor or a target framework. Every shipped dependency's major is now ignored, test-only packages of the same families moving with them (xunit.v3*, protobuf-net*, Microsoft.Azure.Functions.Worker*, ModelContextProtocol*). Microsoft.CodeAnalysis.CSharp* ignores its minors too: its major.minor is the oldest compiler that loads the generator, since an analyzer referencing a later Microsoft.CodeAnalysis fails with CS9057, so a minor raises it as a major does. #190 (4.14.0 -> 5.9.0) contradicts the root CLAUDE.md's "never raise it to follow a dependency" and fails NU1107 in CodeFixes and NU1608 in GeneratorTests. xunit.v3*, Microsoft.CodeAnalysis*, HotChocolate* and ModelContextProtocol* require one another at exactly one version, so a partial bump fails the restore (#189: xunit.v3.assert 4.0.2 against xunit.v3.mtp-v2 4.0.1, NU1608). Each family now updates in a pull request of its own, ahead of the dotnet group, so that a red family holds back no other update. A group does not make Dependabot update every member; docs/maintaining.md says what to do when one is left behind, and to check the shipped dependencies for a new major before each stable release, since Dependabot no longer proposes them. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0164hf4jJ3KsP3tyC3Uoa55L

dependabot Bot requested a review from AdCodicem as a code owner October 18, 2026 19:32

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 18, 2026

github-actions Bot changed the title ~~chore(deps): Bump the dotnet group with 10 updates~~ fix(deps): Bump the dotnet group with 10 updates Oct 18, 2026

github-actions Bot enabled auto-merge (squash) October 18, 2026 19:32

This was referenced Oct 19, 2026

Hold back shipped majors in Dependabot, cancel superseded CI runs, and accept two release trains with a targeted CI #191

Open

fix(deps): take the xunit.v3 family at 4.0.2 and FluentValidation 12.2.0, in place of #189 #192

Merged

AdCodicem closed this Oct 19, 2026

auto-merge was automatically disabled October 19, 2026 19:56
Pull request was closed

dependabot Bot deleted the dependabot/nuget/dotnet-5e53940a16 branch October 19, 2026 19:56

Navigation Menu

Repository navigation

fix(deps): Bump the dotnet group with 10 updates - #189

fix(deps): Bump the dotnet group with 10 updates#189
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dotnet-5e53940a16

dependabot Bot commented on behalf of github Oct 18, 2026

Uh oh!

AdCodicem commented Oct 19, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 18, 2026

12.2.0

Release notes

Changes in 12.2.0

Changes in 12.1.0

Changes in 12.0.0

Downloads

4.16.0

What's Changed

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

📦 Dependency Updates

4.16.0

What's Changed

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

📦 Dependency Updates

4.16.0

What's Changed

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

📦 Dependency Updates

4.16.0

What's Changed

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

📦 Dependency Updates

4.0.1

Uh oh!

AdCodicem commented Oct 19, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant