Skip to content

[Radoub] Sprint: Dependabot patch bumps + dependabot.yml coverage (#2170)#2187

Merged
LordOfMyatar merged 1 commit into
mainfrom
radoub/dependabot-sprint-2170
May 24, 2026
Merged

[Radoub] Sprint: Dependabot patch bumps + dependabot.yml coverage (#2170)#2187
LordOfMyatar merged 1 commit into
mainfrom
radoub/dependabot-sprint-2170

Conversation

@LordOfMyatar
Copy link
Copy Markdown
Owner

Summary

Consolidates open dependabot PRs into a single sprint branch and fixes long-standing dependabot.yml coverage gap.

Dependency bumps applied

Package From To Risk Source PR
Microsoft.NET.Test.Sdk 18.4.0 18.5.1 Low (patch) #2170
CommunityToolkit.Mvvm 8.4.1 8.4.2 Low (patch) #2176
coverlet.collector 10.0.0 10.0.1 Low (patch) #2177

Dependency bumps skipped

Avalonia 11.3.13 -> 12.0.2 (#2172, #2173, #2174, #2175) — too many breaking changes to absorb right now. .github/dependabot.yml now ignores Avalonia* major bumps so these stop being re-proposed every week. When/if we tackle the Avalonia 12 migration it will be its own dedicated sprint.

dependabot.yml coverage fix

Previous config scanned only 2 of 11 projects (Parley + Radoub.Formats). Now scans every tool and shared library:

Tools (with Avalonia* major-version ignore):

  • Parley, Manifest, Quartermaster, Fence, Relique, Trebuchet

Shared libraries:

  • Radoub.Formats, Radoub.UI (with Avalonia ignore), Radoub.Dictionary, Radoub.TestUtilities, Radoub.IntegrationTests

GitHub Actions block unchanged.

Test Results

  • Build: 0 errors, 10 warnings (all pre-existing xUnit1051 nags in Trebuchet.Tests/ErfImportServiceTests.cs)
  • Unit tests: 4681 passed, 0 failed, 1 skipped across 9 test projects
  • Integration tests (FlaUI): not run (per repo policy — UI test suite requires explicit user opt-in)

Checklist


🤖 Generated with Claude Code

Consolidates safe patch bumps from open dependabot PRs:
- Microsoft.NET.Test.Sdk 18.4.0 -> 18.5.1 (#2170)
- CommunityToolkit.Mvvm 8.4.1 -> 8.4.2 (#2176)
- coverlet.collector 10.0.0 -> 10.0.1 (#2177)

Avalonia 11.3.13 -> 12.0.2 bumps (#2172, #2173, #2174, #2175) skipped:
too many breakages to absorb right now. dependabot.yml now ignores
Avalonia major bumps so these stop being re-proposed.

Also expands .github/dependabot.yml from 2 projects to 11, covering
every tool (Parley/Manifest/Quartermaster/Fence/Relique/Trebuchet) and
every shared library (Radoub.Formats/UI/Dictionary/TestUtilities/
IntegrationTests). Previously only Parley + Radoub.Formats were scanned.

Tests: dotnet build Radoub.sln OK (0 errors, 10 warnings, pre-existing)
       dotnet test Radoub.sln OK (4681 passed, 0 failed, 1 skipped)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@LordOfMyatar
Copy link
Copy Markdown
Owner Author

FlaUI Integration Test Results

Ran full FlaUI suite per user request:

Passed!  - Failed: 0, Passed: 75, Skipped: 17, Total: 92, Duration: 7m 36s
  • 0 failures
  • 17 skipped — all pre-existing skips in Fence (StatusBar, ValueChange) and Quartermaster (Spells/Stats/Classes panels), unrelated to this PR
  • No regressions from the patch bumps

@LordOfMyatar LordOfMyatar marked this pull request as ready for review May 24, 2026 03:16
@LordOfMyatar LordOfMyatar merged commit 8cb07ad into main May 24, 2026
5 checks passed
@LordOfMyatar LordOfMyatar deleted the radoub/dependabot-sprint-2170 branch May 24, 2026 03:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant