From a0fb44c9a14c4f72965a150fa4e6b875760cc011 Mon Sep 17 00:00:00 2001
From: LordOfMyatar <lordofmyatar@gmail.com>
Date: Sat, 23 May 2026 19:50:27 -0700
Subject: [PATCH] [Radoub] chore: Bump 3 patch deps + expand dependabot
 coverage (#2170)

Consolidates safe patch bumps from open dependabot PRs:
- Microsoft.NET.Test.Sdk 18.4.0 -> 18.5.1 (#2170)
- CommunityToolkit.Mvvm 8.4.1 -> 8.4.2 (#2176)
- coverlet.collector 10.0.0 -> 10.0.1 (#2177)

Avalonia 11.3.13 -> 12.0.2 bumps (#2172, #2173, #2174, #2175) skipped:
too many breakages to absorb right now. dependabot.yml now ignores
Avalonia major bumps so these stop being re-proposed.

Also expands .github/dependabot.yml from 2 projects to 11, covering
every tool (Parley/Manifest/Quartermaster/Fence/Relique/Trebuchet) and
every shared library (Radoub.Formats/UI/Dictionary/TestUtilities/
IntegrationTests). Previously only Parley + Radoub.Formats were scanned.

Tests: dotnet build Radoub.sln OK (0 errors, 10 warnings, pre-existing)
       dotnet test Radoub.sln OK (4681 passed, 0 failed, 1 skipped)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .github/dependabot.yml   | 108 +++++++++++++++++++++++++++++++++++++--
 Directory.Packages.props |   6 +--
 2 files changed, 108 insertions(+), 6 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index adff7f20a..b88d7bebb 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,9 +1,14 @@
 # Dependabot configuration for Radoub toolset
 # https://docs.github.com/en/code-security/dependabot/dependabot-version-updates
+#
+# Central package management (Directory.Packages.props) is in use, but Dependabot
+# still walks each project directory to discover PackageReference items. One
+# update block per project keeps PRs scoped + labeled per tool.
 
 version: 2
 updates:
-  # NuGet packages for Parley
+  # ---- Tools ----
+
   - package-ecosystem: "nuget"
     directory: "/Parley"
     schedule:
@@ -11,8 +16,68 @@ updates:
     labels:
       - "dependencies"
       - "parley"
+    ignore:
+      # Avalonia 12.x has too many breaking changes for now — stay on 11.x.
+      - dependency-name: "Avalonia*"
+        update-types: ["version-update:semver-major"]
+
+  - package-ecosystem: "nuget"
+    directory: "/Manifest"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "dependencies"
+      - "manifest"
+    ignore:
+      - dependency-name: "Avalonia*"
+        update-types: ["version-update:semver-major"]
+
+  - package-ecosystem: "nuget"
+    directory: "/Quartermaster"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "dependencies"
+      - "quartermaster"
+    ignore:
+      - dependency-name: "Avalonia*"
+        update-types: ["version-update:semver-major"]
+
+  - package-ecosystem: "nuget"
+    directory: "/Fence"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "dependencies"
+      - "fence"
+    ignore:
+      - dependency-name: "Avalonia*"
+        update-types: ["version-update:semver-major"]
+
+  - package-ecosystem: "nuget"
+    directory: "/Relique"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "dependencies"
+      - "relique"
+    ignore:
+      - dependency-name: "Avalonia*"
+        update-types: ["version-update:semver-major"]
+
+  - package-ecosystem: "nuget"
+    directory: "/Trebuchet"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "dependencies"
+      - "trebuchet"
+    ignore:
+      - dependency-name: "Avalonia*"
+        update-types: ["version-update:semver-major"]
+
+  # ---- Shared libraries ----
 
-  # NuGet packages for Radoub.Formats shared library
   - package-ecosystem: "nuget"
     directory: "/Radoub.Formats"
     schedule:
@@ -21,7 +86,44 @@ updates:
       - "dependencies"
       - "radoub"
 
-  # GitHub Actions workflows
+  - package-ecosystem: "nuget"
+    directory: "/Radoub.UI"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "dependencies"
+      - "radoub"
+    ignore:
+      - dependency-name: "Avalonia*"
+        update-types: ["version-update:semver-major"]
+
+  - package-ecosystem: "nuget"
+    directory: "/Radoub.Dictionary"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "dependencies"
+      - "radoub"
+
+  - package-ecosystem: "nuget"
+    directory: "/Radoub.TestUtilities"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "dependencies"
+      - "radoub"
+
+  - package-ecosystem: "nuget"
+    directory: "/Radoub.IntegrationTests"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "dependencies"
+      - "radoub"
+      - "tests"
+
+  # ---- CI ----
+
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
diff --git a/Directory.Packages.props b/Directory.Packages.props
index 94f34afb8..aca399ea6 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -18,7 +18,7 @@
     <PackageVersion Include="SkiaSharp.NativeAssets.Linux" Version="3.119.2" />
 
     <!-- MVVM -->
-    <PackageVersion Include="CommunityToolkit.Mvvm" Version="8.4.1" />
+    <PackageVersion Include="CommunityToolkit.Mvvm" Version="8.4.2" />
 
     <!-- Serialization -->
     <PackageVersion Include="System.Text.Json" Version="10.0.5" />
@@ -48,11 +48,11 @@
 
     <!-- Testing -->
     <PackageVersion Include="Avalonia.Headless.XUnit" Version="11.3.13" />
-    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.4.0" />
+    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.5.1" />
     <PackageVersion Include="xunit" Version="2.9.3" />
     <PackageVersion Include="xunit.v3" Version="3.2.2" />
     <PackageVersion Include="xunit.runner.visualstudio" Version="3.1.5" />
-    <PackageVersion Include="coverlet.collector" Version="10.0.0" />
+    <PackageVersion Include="coverlet.collector" Version="10.0.1" />
 
     <!-- Integration Testing -->
     <PackageVersion Include="FlaUI.Core" Version="5.0.0" />