Skip to content

chore(deps): Bump the dotnet group with 5 updates - #1097

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/Generation/Converters/Argumentum.AssetConverter.Tests/dotnet-5d4cb23279
Closed

chore(deps): Bump the dotnet group with 5 updates#1097
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/Generation/Converters/Argumentum.AssetConverter.Tests/dotnet-5d4cb23279

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Updated Microsoft.NET.Test.Sdk from 18.8.1 to 18.9.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.9.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.8.0...v18.9.0

Commits viewable in compare view.

Updated OpenAI from 2.12.0 to 2.13.0.

Release notes

Sourced from OpenAI's releases.

2.13.0

See full changelog: https://github.com/openai/openai-dotnet/blob/OpenAI_2.13.0/CHANGELOG.md

Commits viewable in compare view.

Updated SixLabors.ImageSharp from 3.1.12 to 4.1.0.

Release notes

Sourced from SixLabors.ImageSharp's releases.

4.1.0

What's Changed

New Contributors

Full Changelog: SixLabors/ImageSharp@v4.0.0...v4.1.0

4.0.0

What's Changed

Commits viewable in compare view.

Updated System.Management from 10.0.10 to 10.0.11.

Release notes

Sourced from System.Management's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated xunit.runner.visualstudio from 3.1.5 to 4.0.0.

Release notes

Sourced from xunit.runner.visualstudio's releases.

4.0.0

Release notes: https://xunit.net/releases/visualstudio/4.0.0

4.0.0-pre.5

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.5

4.0.0-pre.4

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.4

4.0.0-pre.3

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.3

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): Bump the dotnet group with 5 updates
67d5330 
Bumps Microsoft.NET.Test.Sdk from 18.8.1 to 18.9.0
Bumps OpenAI from 2.12.0 to 2.13.0
Bumps SixLabors.ImageSharp from 3.1.12 to 4.1.0
Bumps System.Management from 10.0.10 to 10.0.11
Bumps xunit.runner.visualstudio from 3.1.5 to 4.0.0

---
updated-dependencies:
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: OpenAI
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: SixLabors.ImageSharp
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: System.Management
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: xunit.runner.visualstudio
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: xunit.runner.visualstudio
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file nuget NuGet / .NET dependency updates labels Aug 17, 2026
@jsboige jsboige mentioned this pull request Aug 22, 2026
Merged
@jsboige

jsboige commented Aug 22, 2026

Copy link
Copy Markdown
Contributor

⚠️ Agent myia-ai-01:Argumentum (coordinateur). Mesure + disposition, aucune décision owner ici.

Cette PR n'est pas un build cassé — c'est un piège de licence

En cherchant quelles PRs pouvaient rejoindre un merge de rattrapage, j'ai lu le log de build (Release) au lieu de son seul statut. Run 32002605172 :

SixLabors.ImageSharp.targets(28,5): error : No Six Labors license found.
  Set $(SixLaborsLicenseKey), set $(SixLaborsLicenseFile), or add a 'sixlabors.lic' file
SixLabors.ImageSharp.targets(28,5): error : Please obtain a license from https://sixlabors.com/pricing/

SixLabors.ImageSharp 4.1.0 refuse de compiler sans clé achetée. C'est la troisième instance de la classe AutoMapper (#588) / FluentAssertions (#949) : une dépendance qui bascule en commercial à un majeur — et la plus bruyante des trois, puisqu'elle casse la CI au lieu d'embarquer la ligne commerciale en silence. C'est d'ailleurs la seule qu'on ait trouvée en lisant un build rouge plutôt qu'un nuspec.

⛔ Ne pas lire ça comme « il suffit de réparer le build » : le rouge est la licence, et le correctif proposé en face est un achat.

Les 4 autres bumps sont sains et pris en otage

Le groupage est tout-ou-rien — la note d'en-tête de dependabot.yml le documente sur #941. Cette PR en empaquette cinq :

paquet bump verdict
SixLabors.ImageSharp 3.1.12 → 4.1.0 ⛔ licence commerciale
Microsoft.NET.Test.Sdk 18.8.1 → 18.9.0 sain
xunit.runner.visualstudio 3.1.5 → 4.0.0 sain (majeur, à tester)
OpenAI 2.12.0 → 2.13.0 sain
System.Management 10.0.10 → 10.0.11 sain

Aucun autre pin de licence n'est touché (ni AutoMapper, ni QuestPDF, ni Magick.NET) — je l'ai vérifié avant de conclure.

Disposition

PR #1134 ajoute SixLabors.ImageSharp à la liste ignore nuget (semver-major seulement — les patchs 3.1.x continuent de passer), avec la preuve ci-dessus citée dans le fichier.

⇒ Cette PR sera fermée une fois #1134 mergée, et dependabot régénérera le groupe sans ImageSharp lundi. Les quatre bumps sains redeviendront alors jugeables sur leurs mérites. Fermer avant #1134 les ferait revenir attelés au même paquet bloquant.

🤖 Coordinator ai-01

jsboige added a commit that referenced this pull request Aug 22, 2026
@jsboige @claude
chore(deps): pin SixLabors.ImageSharp to 3.x — 4.x refuses to build w…
1ce47e5 
…ithout a purchased licence (#1134)

#1097 is not a broken build. It is the third instance of the AutoMapper (#588) /
FluentAssertions (#949) class: a dependency that flips to commercial at a major.

MEASURED on #1097, run 32002605172, `build (Release)`:

  SixLabors.ImageSharp.targets(28,5): error : No Six Labors license found.
    Set $(SixLaborsLicenseKey), set $(SixLaborsLicenseFile), or add a 'sixlabors.lic'
  SixLabors.ImageSharp.targets(28,5): error : Please obtain a license from
    https://sixlabors.com/pricing/

This one is the loudest of the three — it reds CI rather than silently shipping a
commercial line — which is why it surfaced from a failing build instead of a nuspec
audit. The red IS the licence; the fix on offer is a purchase.

Scope of the pin:
- semver-major only; 3.1.x patches keep flowing.
- Consumers are test/tooling-only (VisualTests, Tools/PdfPreviewExtractor) and ship
  in no binary — irrelevant here, because the gate fires at BUILD time, so a
  test-only reference is enough to red the pipeline.
- SixLabors.ImageSharp.Drawing 2.1.7 rides the same regime but has no major proposed;
  no speculative pin added.

Why the entry is needed even though #1097 is already red: grouping is all-or-nothing
(header note, #941). #1097 bundled five bumps and ImageSharp held the other four
hostage for five days — Microsoft.NET.Test.Sdk 18.9.0, xunit.runner.visualstudio
4.0.0, OpenAI 2.13.0, System.Management 10.0.11. Ignoring ImageSharp at the source
lets dependabot regenerate the group without it so those four can be judged on merit.

YAML re-parsed after the edit: 29 update blocks, one nuget block, 9 ignore entries.

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 22, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer being updated by Dependabot, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 22, 2026
@dependabot
dependabot Bot deleted the dependabot/nuget/Generation/Converters/Argumentum.AssetConverter.Tests/dotnet-5d4cb23279 branch August 22, 2026 19:23
@jsboige

jsboige commented Aug 22, 2026

Copy link
Copy Markdown
Contributor

Fermée automatiquement par dependabot dès le merge de #1134 — la règle ignore a mordu comme prévu, sans intervention. Pour la trace :

Cette PR n'était pas un build à réparer. SixLabors.ImageSharp 4.1.0 exige une licence payante pour compiler (Please obtain a license from sixlabors.com/pricing) — le rouge était la licence. ⛔ Ne pas la rouvrir sur ce motif.

Les 4 bumps sains qu'elle retenait en otage (Microsoft.NET.Test.Sdk 18.9.0, xunit.runner.visualstudio 4.0.0, OpenAI 2.13.0, System.Management 10.0.11) reviendront dans un groupe amputé au prochain passage hebdomadaire. Le majeur de xunit.runner.visualstudio mérite alors un test réel, pas un merge groupé.

🤖 Coordinator ai-01

@myia-ai-01 myia-ai-01 mentioned this pull request Aug 22, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file nuget NuGet / .NET dependency updates

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jsboige