Skip to content

deps: refresh the lock files for the four out-of-slnx projects - #168

Merged
ivanball merged 1 commit into
mainfrom
deps/refresh-out-of-slnx-lock-files
Jul 29, 2026
Merged

deps: refresh the lock files for the four out-of-slnx projects#168
ivanball merged 1 commit into
mainfrom
deps/refresh-out-of-slnx-lock-files

Conversation

@ivanball

Copy link
Copy Markdown
Owner

What

Regenerates packages.lock.json for the four projects that deliberately sit outside MMCA.Common.slnx:

Project Why it is outside the slnx
Source/Presentation/MMCA.Common.UI.Maui ADR-042, MAUI TFM, built and packed by its own windows job
Tests/Presentation/MMCA.Common.UI.E2E.Tests browser install, kept out so dotnet test --solution stays fast
Tests/Presentation/MMCA.Common.UI.Gallery E2E target app
Tests/Core/MMCA.Common.Infrastructure.Redis.Tests out-of-slnx test project

Why

dotnet restore <slnx> --force-evaluate only reaches projects listed in the solution, so these four never got refreshed when the analyzers were bumped in #162 and earlier. They had drifted to Meziantou.Analyzer 3.0.123/3.0.124 and SonarAnalyzer.CSharp 10.29.0.143774 while Directory.Packages.props pins 3.0.133 and 10.30.0.144632.

Changes are Meziantou.Analyzer -> 3.0.133, SonarAnalyzer.CSharp -> 10.30.0.144632, and Microsoft.IdentityModel.* transitives 8.19.2 -> 8.21.0.

Risk

None expected. CI restores without --locked-mode (ci.yml:85: "the props file is what actually pins their versions"), so these projects were already compiling against the current analyzers in CI. This only realigns the recorded lock state so the files stop misreporting.

The diff is exactly balanced at 165 insertions / 165 deletions: version records only, no packages added or removed.

Verification

  • All 30 lock files in the repo now agree with Directory.Packages.props; no in-slnx lock file moved.
  • dotnet build -c Release clean on all three non-MAUI projects.
  • MAUI is covered by its dedicated windows job in CI.

The solution-wide restore only reaches projects listed in MMCA.Common.slnx, so
the four that deliberately sit outside it kept stale "requested" versions after
the analyzer bumps in #162 and earlier:

- Source/Presentation/MMCA.Common.UI.Maui (ADR-042, its own windows job)
- Tests/Presentation/MMCA.Common.UI.E2E.Tests
- Tests/Presentation/MMCA.Common.UI.Gallery
- Tests/Core/MMCA.Common.Infrastructure.Redis.Tests

Meziantou.Analyzer 3.0.123/3.0.124 to 3.0.133, SonarAnalyzer.CSharp
10.29.0.143774 to 10.30.0.144632, and the Microsoft.IdentityModel transitives
8.19.2 to 8.21.0, all now matching Directory.Packages.props.

No behavior change. CI restores without --locked-mode (ci.yml:85), so these
projects were already compiling against the current analyzers; this only
realigns the recorded lock state. The three non-MAUI projects build clean in
Release locally, and MAUI is covered by its dedicated windows job.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@ivanball
ivanball merged commit cde9a2d into main Jul 29, 2026
13 checks passed
@ivanball
ivanball deleted the deps/refresh-out-of-slnx-lock-files branch July 29, 2026 13:05
@ivanball ivanball mentioned this pull request Jul 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant