Repository navigation
chore(deps): bump the NuGet minor and patch group to .NET 10.0.13 - #218
Merged
Merged
Conversation
Same version bumps as dependabot #216, without the three direct PackageReferences it added to Collectify.PostgresMigrations: they already resolve to 10.0.13 as central transitive packages through Infrastructure. The lineage test now expects the running EF version in __EFMigrationsHistory instead of a hardcoded 10.0.11, since EF writes the runtime version there and every patch bump broke it.
This was referenced Oct 21, 2026
mforce
added a commit
that referenced
this pull request
Oct 26, 2026
Dependabot left the CentralTransitive entries for EntityFrameworkCore.Sqlite and Caching.StackExchangeRedis at 10.0.13, so locked restore failed with NU1004. It also added a direct Identity.EntityFrameworkCore reference to Collectify.PostgresMigrations that the project does not need; the package still resolves through Collectify.Infrastructure, as in #218.
mforce
added a commit
that referenced
this pull request
Oct 26, 2026
* chore(deps): Bump the nuget-minor-patch group with 10 updates Bumps Microsoft.AspNetCore.Identity.EntityFrameworkCore from 10.0.13 to 10.0.14 Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.13 to 10.0.14 Bumps Microsoft.Data.Sqlite from 10.0.13 to 10.0.14 Bumps Microsoft.EntityFrameworkCore.Design from 10.0.13 to 10.0.14 Bumps Microsoft.EntityFrameworkCore.Sqlite from 10.0.13 to 10.0.14 Bumps Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.13 to 10.0.14 Bumps Microsoft.Extensions.Hosting.Abstractions from 10.0.13 to 10.0.14 Bumps Microsoft.Extensions.Http from 10.0.13 to 10.0.14 Bumps Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.13 to 10.0.14 Bumps System.Security.Cryptography.Xml from 10.0.13 to 10.0.14 --- updated-dependencies: - dependency-name: Microsoft.AspNetCore.Identity.EntityFrameworkCore dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: Microsoft.Data.Sqlite dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: Microsoft.EntityFrameworkCore.Sqlite dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: Microsoft.Extensions.Caching.StackExchangeRedis dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: Microsoft.Extensions.Hosting.Abstractions dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: Microsoft.Extensions.Http dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: System.Security.Cryptography.Xml dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com> * fix(deps): regenerate NuGet lock files for 10.0.14 Dependabot left the CentralTransitive entries for EntityFrameworkCore.Sqlite and Caching.StackExchangeRedis at 10.0.13, so locked restore failed with NU1004. It also added a direct Identity.EntityFrameworkCore reference to Collectify.PostgresMigrations that the project does not need; the package still resolves through Collectify.Infrastructure, as in #218. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mforce <3101827+mforce@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Replaces #216 and #213. It makes the same version bumps, with two differences.
Changes
PackageReferences. Dependabot added direct references toMicrosoft.AspNetCore.Identity.EntityFrameworkCore,Microsoft.EntityFrameworkCore.SqliteandMicrosoft.Extensions.Caching.StackExchangeRedisinCollectify.PostgresMigrations.csproj. They are not needed. Without them, that project's lock file still resolves all three at 10.0.13 (CentralTransitive) throughCollectify.Infrastructure.PostgresMigrationLineageTests.cs:67expected"10.0.11"in__EFMigrationsHistory.ProductVersion. EF writes its own runtime version there, so every EF patch bump failed the test. That is why chore(deps): Bump coverlet.collector and 14 others #216's server check is red. The test now expectsProductInfo.GetVersion(). Line 45 keeps"10.0.11", because it checks the annotations in the designer files, and a version bump does not change those.Verification
dotnet test tests/Collectify.PostgresTests: 15 of 15 passed.dotnet test tests/Collectify.Tests: 783 of 783 passed.dotnet list package --vulnerable --include-transitive: no vulnerable packages.