Skip to content

chore(deps): integrate dependency batch #844–848 on dev - #844

Merged
SunSi12138 merged 86 commits into
devfrom
dependabot/nuget/testing-11cd3ed7e7
Oct 11, 2026
Merged

SunSi12138 merged 86 commits into
devfrom
dependabot/nuget/testing-11cd3ed7e7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 11, 2026 •

Copy link
Copy Markdown
Contributor

Dependency-only integration batch

Combines the requested Dependabot updates from #844–848 on the exact dev baseline, then a separate main-based PR will synchronize only these dependencies to 2.x.

The CodeQL pair must be tested together because individually mixed action versions fail configuration validation. Other original PRs will merge into this integration branch; this PR will enter dev only after the complete final candidate passes fresh CI.

No runtime source, public API, release version, fixtures, security settings, tags, or publishing changes. Main 2.0.4 is not merged into dev, and dev 3.0 will not be merged wholesale into main.

Upstream action tags and TUnit release provenance were independently checked.

dependabot Bot and others added 30 commits August 9, 2026 18:13
Bumps TUnit from 1.63.0 to 1.64.6

---
updated-dependencies:
- dependency-name: TUnit
  dependency-version: 1.64.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: testing
...

Signed-off-by: dependabot[bot] <support@github.com>
…bf2f9

Bump the testing group with 1 update
Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.37.4 to 4.37.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@f205ea1...5595cca)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…ub/codeql-action/init-4.37.6

Bump github/codeql-action from 4.37.4 to 4.37.6
Bumps Microsoft.Extensions.DependencyInjection from 10.0.10 to 10.0.11
Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.10 to 10.0.11
Bumps Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.10 to 10.0.11
Bumps Microsoft.Extensions.Hosting from 10.0.10 to 10.0.11
Bumps Microsoft.Extensions.Logging to 10.0.11
Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.10 to 10.0.11
Bumps Microsoft.Extensions.Logging.Console from 10.0.10 to 10.0.11

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-extensions
- dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-extensions
- dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-extensions
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-extensions
- dependency-name: Microsoft.Extensions.Logging
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-extensions
- dependency-name: Microsoft.Extensions.Logging
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: microsoft-extensions
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-extensions
- dependency-name: Microsoft.Extensions.Logging.Console
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-extensions
...

Signed-off-by: dependabot[bot] <support@github.com>
…e/microsoft-extensions-9b6f1c2dce

Bump Microsoft.Extensions.DependencyInjection and 6 others
Bumps TUnit from 1.64.6 to 1.65.68

---
updated-dependencies:
- dependency-name: TUnit
  dependency-version: 1.65.68
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: testing
...

Signed-off-by: dependabot[bot] <support@github.com>
…cc221a

Bump the testing group with 1 update
Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.37.6 to 4.37.9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@5595cca...cdf488f)

---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.37.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…hub/codeql-action/analyze-4.37.9

chore(deps): bump github/codeql-action/analyze from 4.37.6 to 4.37.9
Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.37.6 to 4.37.9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@5595cca...cdf488f)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…hub/codeql-action/init-4.37.9

chore(deps): bump github/codeql-action/init from 4.37.6 to 4.37.9
…febc3

Bump Microsoft.CodeAnalysis.CSharp from 5.6.0 to 5.9.0
Bumps Microsoft.CodeAnalysis.Analyzers from 5.6.0 to 5.9.0
Bumps Microsoft.CodeAnalysis.CSharp from 5.0.0 to 5.9.0

---
updated-dependencies:
- dependency-name: Microsoft.CodeAnalysis.Analyzers
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: roslyn
- dependency-name: Microsoft.CodeAnalysis.CSharp
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: roslyn
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps TUnit from 1.65.68 to 1.66.16

---
updated-dependencies:
- dependency-name: TUnit
  dependency-version: 1.66.16
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: testing
...

Signed-off-by: dependabot[bot] <support@github.com>
Introduce independent local lifecycle, readiness, and cluster state domains for single- and multi-cluster clients. Start hosted clients without blocking on remote availability, supervise initial connectivity recovery, preserve legacy explicit connection semantics, keep runtime Add/Replace candidates in the new child lifecycle, and prevent compatibility connection failures from tearing down an already-running coordinator.

Fixes #644
…adiness

Decouple client lifecycle from remote readiness
Replace public RunAsync with explicit StartAsync, WaitForShutdownAsync, and StopAsync ownership. Move accept/runtime supervision into SharpLinkServer, keep per-connection cleanup failures local including heartbeat-timeout cleanup, simplify Generic Host lifetime bridging, migrate repository callers, and document terminal failure semantics.

Fixes #646
…cycle"

This reverts commit 8183ac2, restoring the first-parent tree at 9ba50b9.
…cycle-readiness"

This reverts commit 9ba50b9, restoring the pre-accident main tree at 21ed74f.
…26-09-10

Revert accidental main merges from 2026-09-10
…e3670

Bump the roslyn group with 2 updates
…165df4

Bump the testing group with 1 update
SunSi12138 and others added 6 commits October 11, 2026 11:36
Promote the frozen 2.x release candidate through eb99fe8, 2.0.4 metadata, corrected generator fixture, progress-aware dispatch stress watchdog and deadline timer arm regression fix. No current 3.0 dev changes are included.

PR head dff2baa passed Release Gate 38136822737 (48 successful jobs, tag-only publish skipped), PR Fast, Package Smoke, CodeQL and padding evidence. Final main SHA still requires post-merge Release Gate, the explicitly approved reduced 2.0.4 performance matrix and unchanged strict sampler gate, plus ten-minute release soak and ABI churn before tagging/publishing.
Bumps TUnit from 1.72.16 to 1.73.19

---
updated-dependencies:
- dependency-name: TUnit
  dependency-version: 1.73.19
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: testing
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 11, 2026
dependabot Bot and others added 8 commits October 11, 2026 18:34
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 8.0.1 to 8.0.2.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@3e5f45b...9000827)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.38.2 to 4.38.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@2892aa5...24c5418)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.38.2 to 4.38.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@2892aa5...24c5418)

---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Use the exact dev f8ba891 tree plus only this PR's dependency pin update. Preserve the original Dependabot head in history; squash integration will carry only the dependency diff. No source, version, API, test fixture, gate or security-policy changes.
Use the exact dev f8ba891 tree plus only this PR's dependency pin update. Preserve the original Dependabot head in history; squash integration will carry only the dependency diff. No source, version, API, test fixture, gate or security-policy changes.
Use the exact dev f8ba891 tree plus only this PR's dependency pin update. Preserve the original Dependabot head in history; squash integration will carry only the dependency diff. No source, version, API, test fixture, gate or security-policy changes.
Use the exact dev f8ba891 tree plus only this PR's dependency pin update. Preserve the original Dependabot head in history; squash integration will carry only the dependency diff. No source, version, API, test fixture, gate or security-policy changes.
@SunSi12138
SunSi12138 changed the base branch from main to dev October 11, 2026 22:23
Combine only #846 and #848 pins, preserving exact dev source and all security scan settings. The original independent updates fail because CodeQL requires identical init/analyze versions. Merge this into #846 before the pair enters the complete #844 dependency batch.
@SunSi12138 SunSi12138 changed the title Bump the testing group with 1 update chore(deps): integrate dependency batch #844–848 on dev Oct 11, 2026
Merge #848 into #846 before either reaches dev. Exact paired candidate b54a61b passed CodeQL 38180414568 and PR Fast 38180414590. Preserve security settings and all dev source; the complete dependency batch will receive fresh final-head CI in #844.
Preserve the exact #844 dev-based TUnit candidate plus only this PR's dependency pins. Record the integration head as an ancestor so the PR diff contains no unrelated main/dev divergence. Full combined #844 receives fresh checks before dev merge.
Preserve the exact #844 dev-based TUnit candidate plus only this PR's dependency pins. Record the integration head as an ancestor so the PR diff contains no unrelated main/dev divergence. Full combined #844 receives fresh checks before dev merge.
Preserve the exact #844 dev-based TUnit candidate plus only this PR's matched CodeQL init/analyze pair. Record the integration head as an ancestor so the PR diff contains no unrelated main/dev divergence. Full combined #844 receives fresh checks before dev merge.
Exact head b36fc96 passed fresh PR Fast. Upstream versions and complete narrow dependency diff reviewed. This feature-branch merge assembles the requested dependency-only batch; final combined #844 must pass fresh required and security checks before protected dev is changed. Remaining ancillary intermediate runs do not constitute final batch validation.
Exact head 58bd800 passed fresh PR Fast. Upstream versions and complete narrow dependency diff reviewed. This feature-branch merge assembles the requested dependency-only batch; final combined #844 must pass fresh required and security checks before protected dev is changed. Remaining ancillary intermediate runs do not constitute final batch validation.
Exact head 377d9dd passed fresh PR Fast. Upstream versions and complete narrow dependency diff reviewed. This feature-branch merge assembles the requested dependency-only batch; final combined #844 must pass fresh required and security checks before protected dev is changed. Remaining ancillary intermediate runs do not constitute final batch validation.
@SunSi12138
SunSi12138 merged commit 1570831 into dev Oct 11, 2026
33 checks passed
@SunSi12138
SunSi12138 deleted the dependabot/nuget/testing-11cd3ed7e7 branch October 11, 2026 23:42
SunSi12138 added a commit that referenced this pull request Oct 11, 2026
Synchronize only the requested dependency batch after verified dev merge 1570831. Candidate 9dbc313 is a single-parent child of main 85f5f87, with precisely 20 files / 82 dependency substitutions. All 2.0.4 runtime, public API, fixtures and release metadata are byte-identical to main; no dev 3.0 or subsequent fix PR changes are included.

Required Release Gate 38180751880 passed 48 jobs (tag-only publication skipped), plus Fast, CodeQL, Package Smoke and Extended checks. Supplemental exact-source run38180563406 attempt2 passed all five TUnit suites: 2034 Unit,269 Generator,77 Load,21 StreamLoad,453 Integration; zero skips. Its first integration failure is retained as the independently documented pre-existing EOF/disposal race, not claimed fixed.

Separate non-blocking experimental iOS ARM64 mobile/wiring attempts timed out waiting for simulator output; the unchanged required Release Gate ARM64 lane passed. One isolated optional-job retry remains in progress. Existing continue-on-error behavior, all gates, security settings, thresholds and exact package constraints are unchanged. No tag or package publication.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant