Bump the dotnet-dependencies group with 4 updates by dependabot[bot] · Pull Request #266 · Chris-Wolfgang/ETL-SqlBulkCopy

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Meziantou.Analyzer from 3.0.147 to 3.0.151 Bumps Verify.Xunit from 27.0.0 to 31.12.5 Bumps Wolfgang.Etl.TestKit from 0.10.0 to 0.14.0 Bumps Wolfgang.Etl.TestKit.Xunit from 0.10.0 to 0.14.0 --- updated-dependencies: - dependency-name: Meziantou.Analyzer dependency-version: 3.0.151 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-dependencies - dependency-name: Verify.Xunit dependency-version: 31.12.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dotnet-dependencies - dependency-name: Wolfgang.Etl.TestKit dependency-version: 0.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-dependencies - dependency-name: Wolfgang.Etl.TestKit.Xunit dependency-version: 0.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-08-13T01:10:46Z

PR benchmark delta

Benchmark	Base mean	HEAD mean	Δ mean	Base alloc	HEAD alloc	Δ alloc
Compiled_Reference	0.7 ns	0.7 ns	+5.5%	0 B	0 B	—
Compiled_Value_Boxed	15.6 ns	15.0 ns	-3.7%	24 B	24 B	+0.0%
Reflection_Reference	10.5 ns	8.1 ns	-22.4%	0 B	0 B	—
Reflection_Value_Boxed	13.7 ns	13.3 ns	-2.6%	24 B	24 B	+0.0%
FullSpan_FastPath(Size: 10000)	2.7 ns	2.7 ns	-0.6%	0 B	0 B	—
PartialSlice_Copy(Size: 10000)	11.56 µs	11.08 µs	-4.1%	39.09 KB	39.09 KB	+0.0%

Job: Short (~5% variance). Filter: *PropertyGetter*|*SliceList* — DB-free micro-benchmarks. Gate mode: informational; see #106 for threshold-gate follow-up.

Chris-Wolfgang · 2026-08-13T01:38:14Z

Closing for now — deferring this group to the next release cycle. Recording the diagnosis so it isn't lost when Dependabot recreates the branch.

The failures are not a restore problem

Three test failures, uniform across linux-x64 / linux-arm64 / macos-arm64 / windows-x64 and Stage 1. Of the four bumps, only Wolfgang.Etl.TestKit / TestKit.Xunit 0.10.0 → 0.14.0 is implicated; Meziantou 3.0.147 → 3.0.151 and Verify.Xunit 27.0.0 → 31.12.5 look clean (the Verify snapshot tests passed).

1. The manual-timer contract seam changed (2 failures)

System.InvalidOperationException : The progress timer has not started.
Begin the run (start enumeration / invoke the loader) before calling Tick().
   at Wolfgang.Etl.TestKit.ManualProgressTimerCore.Tick()
   at Wolfgang.Etl.TestKit.Xunit.LoaderBaseContractTests`3.LoadAsync_with_progress_..._Async()

This repo still implements the old seam — CreateSutWithTimer(IProgressTimer) with a locally-defined ManualProgressTimer (SqlBulkCopyLoaderContractTests.cs:42). TestKit 0.14 introduced ManualProgressTimerCore + WithManualProgressTimer, driving the base's internal timer-core seam, and demoted CreateSutWithTimer from abstract to virtual (throwing). The old override is therefore no longer called, and the contract base ticks a timer that was never started.

Fix is the per-repo TestKit 0.14 adoption: migrate the contract test to WithManualProgressTimer and drop the local ManualProgressTimer + override. Part of the fleet adoption umbrella covering Json / DbClient / FixedWidth / Xml / Csv / SqlBulkCopy / Transformers.

2. A real product bug in the loader (1 failure)

LoadAsync_with_a_pre_cancelled_token_reads_nothing_Async
Assert.Equal() Failure: Values differ
Expected: 0
Actual:   1

This one is not a harness issue. Handed an already-cancelled CancellationToken, SqlBulkCopyLoader<T> reads one item from the source before observing cancellation; the contract requires it to read none. The new contract base is correctly catching a defect in shipped code — v0.6.0 has this behaviour.

There's prior evidence of it: the abandoned feat/bump-abstractions-0.20-testkit-0.13 branch carried a "honour pre-cancelled token" commit and was closed unmerged with #202.

Why deferred rather than fixed here

Fixing #2 changes the behaviour of shipped code, which belongs in a release cycle (next cycle's vNext) rather than landing on main inside a dependency-bump PR immediately after the v0.6.0 release. And #1 is a test-harness migration, not a version bump.

⚠️ Dependabot will recreate this group on its next weekly run and it will fail the same way, since no ignore was added for the TestKit packages. Either add one when the adoption work is scheduled, or expect to re-close it.

dependabot · 2026-08-13T01:38:17Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

Chris-Wolfgang · 2026-08-13T01:50:57Z

Filed the shipped-code defect from this PR as #267 so it has a durable tracker: SqlBulkCopyLoader<T> reads one item before observing an already-cancelled token.

The other half — adopting the TestKit 0.14 ManualProgressTimerCore / WithManualProgressTimer seam — is still untracked and will need scheduling before this group can go green.

dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 13, 2026

dependabot Bot requested a review from Chris-Wolfgang as a code owner August 13, 2026 01:06

dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 13, 2026

Merge branch 'main' into dependabot/nuget/dotnet-dependencies-0ef28a68d7

fe60ba1

Chris-Wolfgang closed this Aug 13, 2026

dependabot Bot deleted the dependabot/nuget/dotnet-dependencies-0ef28a68d7 branch August 13, 2026 01:38

Chris-Wolfgang mentioned this pull request Aug 13, 2026

SqlBulkCopyLoader<T> reads one item before observing an already-cancelled token #267

Closed

5 tasks

Navigation Menu

Bump the dotnet-dependencies group with 4 updates - #266

Bump the dotnet-dependencies group with 4 updates#266
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/nuget/dotnet-dependencies-0ef28a68d7

dependabot Bot commented on behalf of github Aug 13, 2026

Uh oh!

github-actions Bot commented Aug 13, 2026 •

edited

Loading

Uh oh!

Chris-Wolfgang commented Aug 13, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 13, 2026

Uh oh!

Chris-Wolfgang commented Aug 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Aug 13, 2026

3.0.151

What's Changed

3.0.150

What's Changed

3.0.149

What's Changed

3.0.148

What's Changed

31.12.5

31.12.3

31.10.0

0.14.0

What's Changed

0.13.0

0.12.0

0.11.0

What's Changed

0.10.1

What's Changed

0.14.0

What's Changed

0.13.0

0.12.0

0.11.0

What's Changed

0.10.1

What's Changed

Uh oh!

github-actions Bot commented Aug 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR benchmark delta

Uh oh!

Chris-Wolfgang commented Aug 13, 2026

The failures are not a restore problem

1. The manual-timer contract seam changed (2 failures)

2. A real product bug in the loader (1 failure)

Why deferred rather than fixed here

Uh oh!

dependabot Bot commented on behalf of github Aug 13, 2026

Uh oh!

Chris-Wolfgang commented Aug 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

github-actions Bot commented Aug 13, 2026 •

edited

Loading