Repository navigation
chore(deps): sync dependency batch #844–848 to main 2.x - #856
Merged
Merged
Conversation
Apply only TUnit 1.73.19, download-artifact 8.0.2, upload-artifact 7.0.2, and matched CodeQL init/analyze 4.38.3 pins. Preserve all 2.0.4 source, API, release metadata, fixtures, checks, security settings and constraints. This is not a merge of dev 3.0 and does not tag or publish packages.
SunSi12138
marked this pull request as ready for review
October 11, 2026 23:33
SunSi12138
pushed a commit
that referenced
this pull request
Oct 11, 2026
Integrate the five requested dependency upgrades through #844 after normal feature-branch merges of #845, #847 and the matched #846/#848 CodeQL pair. TUnit 1.72.16 -> 1.73.19; download-artifact 8.0.1 -> 8.0.2; upload-artifact 7.0.1 -> 7.0.2; CodeQL init/analyze 4.38.2 -> 4.38.3 together. Upstream pins independently verified. Final candidate a12fff8 passed all 13 workflows and all 33 check runs, including Fast, CodeQL, package smoke, allocation, padding security, mobile/wiring and performance evidence. Full tree audit proves exactly 20 dependency files / 82 substitutions; every other dev blob unchanged. No 2.x source/version/API/fixture changes imported, no gates relaxed, no tags or publication. A separate main-only #856 synchronizes these dependency deltas to frozen 2.0.4.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Scope
Synchronize only the requested #844–848 dependency updates after their complete batch is merged into dev through #844. This draft is prepared early to run independent main-based checks; do not merge before the dev batch completes.
2.x isolation
Single parent: main 85f5f87. Independent complete-tree review confirms exactly 20 modified files and 82 dependency substitutions (+82/-82). No additions/deletions, runtime source, public APIs, fixtures, release metadata, or 3.0 dev changes. VersionPrefix remains 2.0.4. Security permissions, triggers, commands, thresholds, and existing exact package constraints remain unchanged. No tag or package publication.
Validation
Run the unchanged main Release Gate, PR Fast, CodeQL and applicable workflow checks on final head 9dbc313. An isolated validation branch also checks out and verifies this exact commit and tree before executing all five TUnit consumers, including StreamLoadTest.Tests (not explicitly executed by existing gates) and IntegrationTests through its required direct-executable route.
Supplemental exact-source run: https://github.com/SunSi12138/SharpLink/actions/runs/38180563406
The supplemental workflow is validation-only and is not included in this PR.
Supplemental result
All five suites passed on the unchanged exact candidate in attempt 2: UnitTests 2,034; Generator.Tests 269; LoadTest.Tests 77; StreamLoadTest.Tests 21; IntegrationTests 453. Zero skips.
Attempt 1 is retained: IntegrationTests failed 1/453 in ClientStreamMoveNextAndDisposeFailuresShouldReleasePendingAndProducerState. Read-only diagnosis identified the existing EOF-before-enumerator-disposal terminal-outcome race. Historical run https://github.com/SunSi12138/SharpLink/actions/runs/38022581145/job/114126543142 reproduced clean success before disposal on two older revisions under TUnit 1.72.16; implicated source blobs are unchanged. Original #844's upgraded-TUnit main gate also passed that exact test. This dependency PR does not claim to fix the race or establish unchanged race frequency. No assertion, source, threshold, or gate was weakened.