Skip to content

deps: bump the nuget group (4 updates) + PublicApiAnalyzers 5.x migration#623

Merged
khaines merged 1 commit into
mainfrom
khaines/deps-nuget-group-bump
Jul 20, 2026
Merged

deps: bump the nuget group (4 updates) + PublicApiAnalyzers 5.x migration#623
khaines merged 1 commit into
mainfrom
khaines/deps-nuget-group-bump

Conversation

@khaines

@khaines khaines commented Jul 20, 2026

Copy link
Copy Markdown
Owner

Redo of dependabot #621 on current main — that PR was based on the pre-constraint-chain main (2362e3b, ~7 merges stale) and its dependabot-regenerated lock files were inconsistent with the projects, so CI failed on restore --locked-mode:

tests/DeltaSharp.Core.Tests: error NU1004: The project target frameworks are different than the lock file's target frameworks...

What this does

Applies the same 4 bumps on current main and regenerates all lock files consistently (dotnet restore --force-evaluate):

Package From To
Microsoft.CodeAnalysis.BannedApiAnalyzers 4.14.0 5.6.0
Microsoft.CodeAnalysis.PublicApiAnalyzers 4.14.0 5.6.0
Microsoft.Extensions.Logging.Abstractions 10.0.0 10.0.10
Microsoft.NET.Test.Sdk 18.7.0 18.8.1

Required code change (analyzer major bump)

PublicApiAnalyzers 5.x enforces the [Experimental] diagnostic-ID prefix in the public-API baseline. The lone experimental API DeltaSharpInfo.PreviewReleaseChannel (marked [Experimental(DS0001)]) must now be listed as [DS0001]static ...PreviewReleaseChannel.get -> string! in PublicAPI.Unshipped.txt — otherwise RS0016/RS0017 fail under -warnaserror. Dependabot cannot make this source change, which is the second reason its PR could never go green.

Validation

  • dotnet restore --locked-mode — clean (fixes the NU1004)
  • dotnet build -c Release -warnaserror — 0 warnings, 0 errors
  • Tests — Core 1063×2 (net8+net10), Engine 2929, Executor 278, Storage 1301 — all green
  • dotnet format --verify-no-changes — clean

Supersedes #621 (recommend closing it once this lands).

Signed-off-by: Ken Haines 1144092+khaines@users.noreply.github.com

…tion

Redo of dependabot #621 on current main. That PR was based on the pre-constraint-
chain main (@2362e3b, ~7 merges stale) and its dependabot-regenerated lock files
were inconsistent with the projects (NU1004 target-framework mismatch), so its CI
failed on restore --locked-mode.

Bumps (Directory.Packages.props + packages.lock.json regenerated via
dotnet restore --force-evaluate):
- Microsoft.CodeAnalysis.BannedApiAnalyzers   4.14.0 -> 5.6.0
- Microsoft.CodeAnalysis.PublicApiAnalyzers   4.14.0 -> 5.6.0
- Microsoft.Extensions.Logging.Abstractions   10.0.0 -> 10.0.10
- Microsoft.NET.Test.Sdk                       18.7.0 -> 18.8.1

PublicApiAnalyzers 5.x enforces the [Experimental] diagnostic-ID prefix in the
public-API baseline: the DS0001 experimental API
DeltaSharpInfo.PreviewReleaseChannel must be listed as
`[DS0001]static ...PreviewReleaseChannel.get -> string!` in PublicAPI.Unshipped.txt
(fixes RS0016/RS0017 under the new analyzer).

Validated: restore --locked-mode clean; build -warnaserror 0/0; tests green
(Core 1063x2, Engine 2929, Executor 278, Storage 1301); dotnet format clean.

Supersedes #621.

Signed-off-by: Ken Haines <1144092+khaines@users.noreply.github.com>
@khaines
khaines merged commit daa5bb2 into main Jul 20, 2026
15 checks passed
@khaines
khaines deleted the khaines/deps-nuget-group-bump branch July 20, 2026 16:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant