Skip to content

Prevent Dependabot from updating dependencies that require > .NET 10 - #137

Merged
dorssel merged 1 commit into
mainfrom
fix_dependabot
Oct 17, 2026
Merged

dorssel merged 1 commit into
mainfrom
fix_dependabot

Conversation

@dorssel

@dorssel dorssel commented Oct 17, 2026

Copy link
Copy Markdown
Owner

No description provided.

@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

@dorssel
dorssel requested a lite review from Copilot October 17, 2026 07:43
@codecov

codecov Bot commented Oct 17, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (2077b22) to head (db5536e).
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff            @@
##              main      #137   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            2         2           
  Lines           37        37           
  Branches         3         3           
=========================================
  Hits            37        37           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

Copilot AI previously approved these changes Oct 17, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approved

The change is focused and has no unresolved review issues.

No open issues 🎉

What changed in this PR

Prevents Dependabot from proposing Microsoft.Build.Utilities.Core versions requiring .NET 11 while the project targets .NET 10.

Changes:

  • Ignores package versions >= 18.10.0.
File Description
.github/​dependabot.yml Adds the version exclusion rule.

Review effort: Lite

@github-actions

github-actions Bot commented Oct 17, 2026 •

Copy link
Copy Markdown
Contributor

✅MegaLinter analysis: Success

Descriptor Linter Files Fixed Errors Max errors Warnings Elapsed time
✅ ACTION actionlint 6 0 0 0.05s
✅ ACTION zizmor 6 0 0 1.92s
✅ EDITORCONFIG editorconfig-checker 46 0 0 0.07s
✅ JSON jsonlint 2 0 0 0.15s
✅ JSON prettier 2 0 0 0.5s
✅ JSON v8r 2 0 0 2.46s
✅ MARKDOWN markdownlint 2 0 0 0.59s
✅ MARKDOWN markdown-table-formatter 2 0 0 0.21s
✅ REPOSITORY betterleaks yes no no 0.73s
✅ REPOSITORY checkov yes no no 14.92s
✅ REPOSITORY git_diff yes no no 0.01s
✅ REPOSITORY grype yes no no 72.54s
✅ REPOSITORY osv-scanner yes no no 0.44s
✅ REPOSITORY secretlint yes no no 0.76s
✅ REPOSITORY syft yes no no 1.96s
✅ REPOSITORY trivy-sbom yes no no 0.32s
✅ REPOSITORY trufflehog yes no no 3.23s
✅ XML xmllint 14 0 0 0.09s
✅ YAML prettier 11 0 0 0.53s
✅ YAML v8r 11 0 0 8.69s
✅ YAML yamllint 11 0 0 0.49s

See detailed reports in MegaLinter artifacts

MegaLinter is provided by OX Security
Show us your support by starring ⭐ the repository

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approved

No unresolved review issues were identified.

No open issues 🎉

Review effort: Lite

@dorssel
dorssel merged commit e0a0db8 into main Oct 17, 2026
11 checks passed
@dorssel
dorssel deleted the fix_dependabot branch October 17, 2026 07:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants