chore(deps): bump WireMock.Net to 2.13.0, pin Scriban.Signed 7.2.5#92
Conversation
📝 WalkthroughWalkthroughWireMock.Net is upgraded from 2.10.0 to 2.11.0 in nine test project files. No public declarations or other project settings are changed. ChangesWireMock.Net test dependency
Estimated code review effort: 1 (Trivial) | ~2 minutes Possibly related PRs
Poem
🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
✨ Finishing Touches📝 Generate docstrings
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #92 +/- ##
=======================================
Coverage 91.50% 91.50%
=======================================
Files 61 61
Lines 1860 1860
Branches 289 289
=======================================
Hits 1702 1702
Misses 82 82
Partials 76 76 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
993b56e to
52633b1
Compare
Supersedes #88 and #91. Aligns all 9 test projects to WireMock.Net 2.13.0 (Dependabot had bumped them piecemeal, causing version drift). On a clean restore WireMock.Net 2.13.0 still resolves the transitive Scriban.Signed to a vulnerable 7.2.0 (GHSA-6q7j-xr26-3h2c / GHSA-q6rr-fm2g-g5x8), so the tests/Directory.Build.props pin is retained but raised to the patched 7.2.5 (>= WireMock 2.13's floor, no NU1605 downgrade). Build clean (0/0); 314 unit tests pass. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
52633b1 to
cb89eb5
Compare
|
…94) Completes the WireMock alignment: #92's squash landed the test projects at 2.11.0 (the commit message said 2.13.0) while the Scriban pin was already raised to 7.2.5. This bumps all 9 test projects to 2.13.0 for real, matching the pin. Supersedes the recurring Dependabot 2.13 bump. The tests/Directory.Build.props pin (Scriban.Signed 7.2.5) already covers 2.13's floor. Verified with a forced restore: Scriban resolves to 7.2.5 (no NU1902/NU1605), build 0/0, 314 unit tests pass. Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>



Summary
Supersedes #88 and #91. Aligns all 9 test projects to WireMock.Net 2.13.0 (Dependabot had bumped them piecemeal → version drift).
On a clean restore WireMock.Net 2.13.0 still resolves the transitive
Scriban.Signedto a vulnerable 7.2.0 (GHSA-6q7j-xr26-3h2c / GHSA-q6rr-fm2g-g5x8) — verified by CI, which failed NU1902 when the pin was briefly removed. Thetests/Directory.Build.propspin is therefore retained, raised from 7.2.1 to the patched 7.2.5 (≥ WireMock 2.13's floor, so no NU1605 downgrade).Type of change
Checklist
dotnet build FrigateRelay.sln -c Release(0/0, forced restore)bash .github/scripts/run-tests.sh(314 unit tests; integration skipped — needs Docker)Notes for reviewer
9
.csprojbumped 2.10.0 → 2.13.0; Scriban pin 7.2.1 → 7.2.5. Verified viadotnet nuget whythat Scriban resolves to the pinned 7.2.5 (not the transitive 7.2.0). A prior attempt to drop the pin entirely failed CI — WireMock 2.13's clean-restore transitive is still 7.2.0, so the pin stays.Closes #88. Closes #91.