Skip to content

chore(deps): bump WireMock.Net to 2.13.0, pin Scriban.Signed 7.2.5#92

Merged
blehnen merged 1 commit into
mainfrom
chore/wiremock-2.11
Jul 23, 2026
Merged

chore(deps): bump WireMock.Net to 2.13.0, pin Scriban.Signed 7.2.5#92
blehnen merged 1 commit into
mainfrom
chore/wiremock-2.11

Conversation

@blehnen

@blehnen blehnen commented Jul 23, 2026

Copy link
Copy Markdown
Owner

Summary

Supersedes #88 and #91. Aligns all 9 test projects to WireMock.Net 2.13.0 (Dependabot had bumped them piecemeal → version drift).

On a clean restore WireMock.Net 2.13.0 still resolves the transitive Scriban.Signed to a vulnerable 7.2.0 (GHSA-6q7j-xr26-3h2c / GHSA-q6rr-fm2g-g5x8) — verified by CI, which failed NU1902 when the pin was briefly removed. The tests/Directory.Build.props pin is therefore retained, raised from 7.2.1 to the patched 7.2.5 (≥ WireMock 2.13's floor, so no NU1605 downgrade).

Type of change

  • Build / CI / docs
  • Refactor / chore

Checklist

  • Build is green on Linux: dotnet build FrigateRelay.sln -c Release (0/0, forced restore)
  • Tests pass: bash .github/scripts/run-tests.sh (314 unit tests; integration skipped — needs Docker)

Notes for reviewer

9 .csproj bumped 2.10.0 → 2.13.0; Scriban pin 7.2.1 → 7.2.5. Verified via dotnet nuget why that Scriban resolves to the pinned 7.2.5 (not the transitive 7.2.0). A prior attempt to drop the pin entirely failed CI — WireMock 2.13's clean-restore transitive is still 7.2.0, so the pin stays.

Closes #88. Closes #91.

@coderabbitai

coderabbitai Bot commented Jul 23, 2026

Copy link
Copy Markdown

Review Change Stack

📝 Walkthrough

Walkthrough

WireMock.Net is upgraded from 2.10.0 to 2.11.0 in nine test project files. No public declarations or other project settings are changed.

Changes

WireMock.Net test dependency

Layer / File(s) Summary
Align test project references
tests/FrigateRelay.Host.Tests/..., tests/FrigateRelay.IntegrationTests..., tests/FrigateRelay.Plugins.*.Tests/...
All nine test projects update their WireMock.Net package reference from 2.10.0 to 2.11.0.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

Poem

A bunny hops through testland bright,
Nine mocks now wear a newer light.
From ten to eleven, neat and clean,
WireMock springs upon the scene! 🐇

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Title check ⚠️ Warning The title mentions Scriban pinning and WireMock.Net 2.13.0, but the diff only shows WireMock.Net 2.11.0 updates and no Scriban change. Rewrite the title to match the actual change, e.g. 'chore(deps): bump WireMock.Net to 2.11.0 across test projects'.
✅ Passed checks (4 passed)
Check name Status Explanation
Linked Issues check ✅ Passed The PR satisfies issue #88 by upgrading WireMock.Net from 2.10.0 to 2.11.0 across the test projects.
Out of Scope Changes check ✅ Passed The diff appears limited to WireMock.Net version bumps in test csproj files, with no unrelated changes.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description check ✅ Passed The description includes Summary, Type of change, Checklist, and Notes for reviewer, and explains the dependency bump and pinning rationale.
✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@codecov

codecov Bot commented Jul 23, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.50%. Comparing base (a5bbb4a) to head (cb89eb5).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main      #92   +/-   ##
=======================================
  Coverage   91.50%   91.50%           
=======================================
  Files          61       61           
  Lines        1860     1860           
  Branches      289      289           
=======================================
  Hits         1702     1702           
  Misses         82       82           
  Partials       76       76           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@blehnen
blehnen force-pushed the chore/wiremock-2.11 branch from 993b56e to 52633b1 Compare July 23, 2026 21:02
@blehnen blehnen changed the title chore(deps): bump WireMock.Net to 2.11.0 across all test projects chore(deps): bump WireMock.Net to 2.13.0 and drop the Scriban pin Jul 23, 2026
Supersedes #88 and #91. Aligns all 9 test projects to WireMock.Net 2.13.0
(Dependabot had bumped them piecemeal, causing version drift).

On a clean restore WireMock.Net 2.13.0 still resolves the transitive
Scriban.Signed to a vulnerable 7.2.0 (GHSA-6q7j-xr26-3h2c /
GHSA-q6rr-fm2g-g5x8), so the tests/Directory.Build.props pin is retained but
raised to the patched 7.2.5 (>= WireMock 2.13's floor, no NU1605 downgrade).

Build clean (0/0); 314 unit tests pass.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@blehnen
blehnen force-pushed the chore/wiremock-2.11 branch from 52633b1 to cb89eb5 Compare July 23, 2026 21:14
@blehnen blehnen changed the title chore(deps): bump WireMock.Net to 2.13.0 and drop the Scriban pin chore(deps): bump WireMock.Net to 2.13.0, pin Scriban.Signed 7.2.5 Jul 23, 2026
@sonarqubecloud

Copy link
Copy Markdown

@blehnen
blehnen merged commit 3a74dad into main Jul 23, 2026
14 checks passed
@blehnen
blehnen deleted the chore/wiremock-2.11 branch July 23, 2026 21:25
blehnen added a commit that referenced this pull request Jul 23, 2026
…94)

Completes the WireMock alignment: #92's squash landed the test projects at
2.11.0 (the commit message said 2.13.0) while the Scriban pin was already
raised to 7.2.5. This bumps all 9 test projects to 2.13.0 for real, matching
the pin. Supersedes the recurring Dependabot 2.13 bump.

The tests/Directory.Build.props pin (Scriban.Signed 7.2.5) already covers
2.13's floor. Verified with a forced restore: Scriban resolves to 7.2.5 (no
NU1902/NU1605), build 0/0, 314 unit tests pass.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant