Skip to content

deps: Bump bunit from 2.7.2 to 2.8.6 - #150

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/bunit-2.8.6
Closed

deps: Bump bunit from 2.7.2 to 2.8.6#150
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/bunit-2.8.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Updated bunit from 2.7.2 to 2.8.6.

Release notes

Sourced from bunit's releases.

2.8.6

Added

  • New overloads to WaitForHelpers to have async assertions and predicates. Reported by @​radmorecameron in #​1833. Fixed by @​linkdotnet.
  • AddAsset to BunitContext to seed the ResourceAssetCollection exposed via ComponentBase.Assets. Reported by LasseHerget in #​1846. Implemented by @​linkdotnet.

Commits viewable in compare view.

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---
updated-dependencies:
- dependency-name: bunit
  dependency-version: 2.8.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jul 28, 2026
@dependabot
dependabot Bot requested a review from ivanball as a code owner July 28, 2026 04:37
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Jul 28, 2026
ivanball added a commit that referenced this pull request Jul 28, 2026
Replaces six of the seven open Dependabot PRs with one, and adds the grouping
config so this stops recurring.

Bumps (#146, #148, #149, #150, #153, #154):
  actions/cache                             4        -> 6
  Azure.Monitor.OpenTelemetry.AspNetCore    1.5.0    -> 1.6.0
  AngleSharp                                1.5.2    -> 1.6.0
  bunit                                     2.7.2    -> 2.8.6
  SQLitePCLRaw.bundle_e_sqlite3             3.0.4    -> 3.0.5
  System.IdentityModel.Tokens.Jwt           8.19.2   -> 8.21.0

Built by applying the version lines to Directory.Packages.props and running ONE
dotnet restore --force-evaluate, rather than merging the six branches. Merging
them would have conflicted: they touch overlapping packages.lock.json files
(AngleSharp and bunit hit the same two), and every merge re-BEHINDs the rest
under "require branches to be up to date". Regenerating sidesteps that entirely.

NOT included: #147 (analyzers group). SonarAnalyzer 10.29 -> 10.30 ships two new
rules, S8969 and S8970, which fail this build with 41 errors across 11 files
under TreatWarningsAsErrors. Those are mechanical (remove a redundant
null-forgiving operator) but they are analyzer remediation, not a dependency
bump, and they belong in their own reviewable PR. #147 stays open.

dependabot.yml gains two groups. "testing" keeps bUnit and its AngleSharp
dependency in one PR instead of two that touch the same lock files.
"minor-and-patch" is a catch-all so ungrouped minor/patch updates arrive weekly
as one PR: this repo has 13 required checks including a MAUI windows build,
three browser a11y legs, a BenchmarkDotNet gate and a Testcontainers Redis tier,
so N separate dependency PRs cost N full re-runs. Majors stay ungrouped, since
those deserve their own read.

Full solution 2483/2483 green in Release, 0 warnings; 15 lock files regenerated.


Claude-Session: https://claude.ai/code/session_01RpWirEitGZ2AMEQhd7NCD9

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
@ivanball

Copy link
Copy Markdown
Owner

Superseded by #161, which landed this exact version bump. The bump was applied by editing Directory.Packages.props and regenerating all lock files in one pass rather than by merging this branch, so GitHub could not detect it as merged automatically. Verified: main already carries the target version.

@ivanball ivanball closed this Jul 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/nuget/bunit-2.8.6 branch July 28, 2026 14:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant