Skip to content

chore(deps): Bump xunit.runner.visualstudio from 2.8.2 to 4.0.0 - #171

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/tests/IncidentInsight.Tests/xunit.runner.visualstudio-4.0.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/tests/IncidentInsight.Tests/xunit.runner.visualstudio-4.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 18, 2026 •

Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 18, 2026
@vercel

vercel Bot commented Aug 18, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
incident-insight Error Error Aug 18, 2026 4:22pm
incident-insight-jjt5 Error Error Aug 18, 2026 4:22pm

---
updated-dependencies:
- dependency-name: xunit.runner.visualstudio
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Copy link
Copy Markdown
Owner

xunit.runner.visualstudio 4.0.0 への更新は #166(EF Core 9)マージ後の packages.lock.json と衝突するため、#165 / #167 と併せて #172 に集約・再検証しました(dotnet test 409 件成功)。本 PR はクローズします。


Generated by Claude Code

@izumacha izumacha closed this Aug 18, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 18, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/nuget/tests/IncidentInsight.Tests/xunit.runner.visualstudio-4.0.0 branch August 18, 2026 16:26
izumacha added a commit that referenced this pull request Aug 18, 2026
EF Core 9 更新(#166)後の main に残っていた dependabot 3 件を集約し、
併せて #166 で埋もれた Microsoft.Data.SqlClient の後退(5.1.7 → 5.1.6)を
直接依存の床値 5.1.7 で防ぐ。

集約した更新:
- Microsoft.AspNetCore.Identity.EntityFrameworkCore 8.0.29 → 8.0.30
- Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore 8.0.29 → 8.0.30
- Microsoft.AspNetCore.Mvc.Testing 8.0.29 → 8.0.30
- Microsoft.NET.Test.Sdk 17.14.1 → 18.9.0
- xunit.runner.visualstudio 2.8.2 → 4.0.0

セキュリティ修正:
- Microsoft.Data.SqlClient を直接依存として 5.1.7 でピン留め
  (EF Core 9 SqlServer が 5.1.6 を推移的にピンするため、
   オンプレ SQL Server 配備でサービシングパッチを黙って下げないよう)
- SNI.runtime も併せて 5.1.2 に復帰

対応 dependabot PR: #158 / #165 / #167 / #171(いずれも lock 衝突のため個別マージ不可)
CLAUDE.md §1: 実装との乖離解消(「EF Core 8」→「EF Core 9」)

検証: build-and-test / Docker image build & smoke test すべて成功、
`dotnet test` 409 件成功。`/code-review ultra` の指摘(SqlClient 後退)を反映済み。
`/security-review ultra`: 新規脆弱性なし(依存の servicing 更新のみ)。

This branch had an error being deployed

2 failed deployments
Preview – incident-insight — e57c939d Deployed Aug 18, 2026 by vercel[bot]
Preview – incident-insight-jjt5 — e57c939d Deployed Aug 18, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant