Skip to content

chore(deps): update dependency polyfill to 9.9.0#878

Merged
rjmurillo merged 1 commit intomainfrom
renovate/polyfill-9.x
Feb 21, 2026
Merged

chore(deps): update dependency polyfill to 9.9.0#878
rjmurillo merged 1 commit intomainfrom
renovate/polyfill-9.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Jan 3, 2026

This PR contains the following updates:

Package Change Age Confidence
Polyfill 9.5.09.9.0 age confidence

Release Notes

SimonCropp/Polyfill (Polyfill)

v9.9.0

Compare Source

v9.8.1

Compare Source

v9.8.0

Compare Source

v9.7.7

Compare Source

  • #​461 fix TaskCompletionSource namespace

v9.7.6

Compare Source

  • #​458 Add warning for System.Memory version < 4.5.5
  • #​459 Add PolyfillNoWarnIncorrectVersion msbuild property

v9.7.5

Compare Source

v9.7.4

Compare Source

v9.7.3

Compare Source

v9.7.2

Compare Source

v9.7.1

Compare Source

v9.7.0

Compare Source

v9.6.0

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from rjmurillo as a code owner January 3, 2026 01:27
@renovate renovate bot enabled auto-merge (squash) January 3, 2026 01:27
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai bot commented Jan 3, 2026

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

  • 🔍 Trigger a full review

Comment @coderabbitai help to get the list of available commands and usage tips.

@deepsource-io
Copy link
Copy Markdown

deepsource-io bot commented Jan 3, 2026

DeepSource Code Review

DeepSource reviewed changes in the commit range 894313b...a1b07b5 on this pull request. Below is the summary for the review, and you can see the individual issues we found as review comments.

For detailed review results, please see the PR on DeepSource ↗

PR Report Card

Security × 0 issues Overall PR Quality   

Reliability × 0 issues
Complexity × 0 issues
Hygiene × 0 issues

Code Review Summary

Analyzer Status Summary Details
C# No new issues detected. Review ↗
How are these analyzer statuses calculated?

Administrators can configure which issue categories are reported and cause analysis to be marked as failed when detected. This helps prevent bad and insecure code from being introduced in the codebase. If you're an administrator, you can modify this in the repository's settings.

@codacy-production
Copy link
Copy Markdown

codacy-production bot commented Jan 3, 2026

Coverage summary from Codacy

See diff coverage on Codacy

Coverage variation Diff coverage
+0.00% (target: -1.00%) (target: 95.00%)
Coverage variation details
Coverable lines Covered lines Coverage
Common ancestor commit (894313b) 2056 1831 89.06%
Head commit (a1b07b5) 2056 (+0) 1831 (+0) 89.06% (+0.00%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details
Coverable lines Covered lines Diff coverage
Pull request (#878) 0 0 ∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

See your quality gate settings    Change summary preferences

@traycerai traycerai bot mentioned this pull request Jan 5, 2026
1 task
@renovate renovate bot changed the title chore(deps): update dependency polyfill to 9.6.0 chore(deps): update dependency polyfill to 9.7.0 Jan 10, 2026
@renovate renovate bot force-pushed the renovate/polyfill-9.x branch from 13c0c37 to 4eda3ce Compare January 10, 2026 05:22
@diffray diffray bot added the diffray-review-failed diffray review status: failed label Jan 10, 2026
@renovate renovate bot changed the title chore(deps): update dependency polyfill to 9.7.0 chore(deps): update dependency polyfill to 9.7.1 Jan 12, 2026
@renovate renovate bot force-pushed the renovate/polyfill-9.x branch from 4eda3ce to 7313a8b Compare January 12, 2026 12:54
@diffray diffray bot added diffray-review-started diffray review status: started and removed diffray-review-failed diffray review status: failed labels Jan 12, 2026
@diffray
Copy link
Copy Markdown

diffray bot commented Jan 12, 2026

Changes Summary

This PR updates the Polyfill NuGet package dependency from version 9.5.0 to 9.7.1. The Polyfill library provides backward compatibility features for newer C# language features in older target frameworks, which is critical for this Roslyn analyzer project targeting netstandard2.0.

Type: config

Components Affected: build-configuration, compiler-dependencies

Files Changed
File Summary Change Impact
...workspace/build/targets/compiler/Packages.props Updated Polyfill package version from 9.5.0 to 9.7.1 ✏️ 🟡
Architecture Impact
  • Dependencies: updated: Polyfill 9.5.0 -> 9.7.1

Risk Areas: Potential API changes or behavioral differences in Polyfill 9.7.1 that could affect analyzer compilation, New polyfills or removed polyfills might affect code that relies on specific backward compatibility features, Build and test pipeline should verify compatibility with the updated version

Suggestions
  • Verify all unit tests pass with the updated Polyfill version
  • Check if any new polyfills in 9.7.1 provide additional features that could benefit the codebase
  • Review the Polyfill changelog between 9.5.0 and 9.7.1 to understand what has changed
  • Ensure the analyzer builds successfully across all target environments

🔗 See progress

Full review in progress... | Powered by diffray

@diffray diffray bot added diffray-review-completed diffray review status: completed and removed diffray-review-started diffray review status: started labels Jan 12, 2026
@renovate renovate bot force-pushed the renovate/polyfill-9.x branch from 7313a8b to 133af80 Compare January 13, 2026 10:12
@renovate renovate bot changed the title chore(deps): update dependency polyfill to 9.7.1 chore(deps): update dependency polyfill to 9.7.2 Jan 13, 2026
@diffray diffray bot added diffray-review-started diffray review status: started and removed diffray-review-completed diffray review status: completed labels Jan 13, 2026
@diffray
Copy link
Copy Markdown

diffray bot commented Jan 13, 2026

Changes Summary

This PR updates the Polyfill NuGet package dependency from version 9.5.0 to 9.7.2 in the compiler build targets. This is an automated dependency update by Renovate that brings in minor version improvements to the Polyfill library used in this C# analyzer project.

Type: config

Components Affected: build-configuration, compiler-dependencies

Files Changed
File Summary Change Impact
...workspace/build/targets/compiler/Packages.props Updated Polyfill package version from 9.5.0 to 9.7.2 ✏️ 🟢
Architecture Impact
  • Dependencies: updated: Polyfill 9.5.0 → 9.7.2

Risk Areas: Compatibility with existing C# code using polyfills, Build process stability, Potential API changes in Polyfill library between minor versions

Suggestions
  • Verify that all build targets compile successfully with the new Polyfill version
  • Review Polyfill changelog between 9.5.0 and 9.7.2 for any behavior changes
  • Run full test suite to ensure no runtime compatibility issues

🔗 See progress

Full review in progress... | Powered by diffray

@diffray diffray bot added diffray-review-completed diffray review status: completed and removed diffray-review-started diffray review status: started labels Jan 13, 2026
@renovate renovate bot force-pushed the renovate/polyfill-9.x branch from 133af80 to 8b99245 Compare January 15, 2026 01:00
@renovate renovate bot changed the title chore(deps): update dependency polyfill to 9.7.2 chore(deps): update dependency polyfill to 9.7.3 Jan 15, 2026
@diffray diffray bot added the diffray-review-failed diffray review status: failed label Jan 15, 2026
@renovate renovate bot force-pushed the renovate/polyfill-9.x branch from 8b99245 to 45eea1a Compare January 21, 2026 05:13
@renovate renovate bot changed the title chore(deps): update dependency polyfill to 9.7.3 chore(deps): update dependency polyfill to 9.7.4 Jan 21, 2026
@renovate renovate bot changed the title chore(deps): update dependency polyfill to 9.7.4 chore(deps): update dependency polyfill to 9.7.5 Jan 22, 2026
@renovate renovate bot force-pushed the renovate/polyfill-9.x branch from 45eea1a to baeb67d Compare January 22, 2026 12:58
@diffray
Copy link
Copy Markdown

diffray bot commented Jan 22, 2026

Changes Summary

This PR updates the Polyfill NuGet package dependency from version 9.5.0 to 9.7.5. The change is an automated dependency update by Renovate bot that modifies the package version specification in the MSBuild props file used for compiler targets.

Type: config

Components Affected: build-configuration, dependencies

Files Changed
File Summary Change Impact
...workspace/build/targets/compiler/Packages.props Updated Polyfill package version from 9.5.0 to 9.7.5 ✏️ 🟢
Architecture Impact
  • Dependencies: updated: Polyfill 9.5.0 -> 9.7.5

Risk Areas: Potential behavioral changes or bug fixes in Polyfill library versions 9.5.1 through 9.7.5, Compatibility with existing code that may rely on specific polyfill behaviors from version 9.5.0

Suggestions
  • Review the Polyfill changelog/release notes for versions 9.5.1 through 9.7.5 to understand what changed
  • Run full test suite to ensure no regressions from the dependency update
  • Verify build succeeds with the updated dependency

🔗 See progress

Full review in progress... | Powered by diffray

@diffray diffray bot added diffray-review-completed diffray review status: completed and removed diffray-review-started diffray review status: started labels Jan 22, 2026
@renovate renovate bot force-pushed the renovate/polyfill-9.x branch from baeb67d to 8271778 Compare January 24, 2026 09:39
@renovate renovate bot changed the title chore(deps): update dependency polyfill to 9.7.5 chore(deps): update dependency polyfill to 9.7.6 Jan 24, 2026
@renovate renovate bot force-pushed the renovate/polyfill-9.x branch from 8271778 to 4020ff8 Compare January 28, 2026 13:56
@renovate renovate bot changed the title chore(deps): update dependency polyfill to 9.7.6 chore(deps): update dependency polyfill to 9.7.7 Jan 28, 2026
@renovate renovate bot changed the title chore(deps): update dependency polyfill to 9.7.7 chore(deps): update dependency polyfill to 9.8.0 Feb 1, 2026
@renovate renovate bot force-pushed the renovate/polyfill-9.x branch from 4020ff8 to 061be90 Compare February 1, 2026 01:58
@renovate renovate bot changed the title chore(deps): update dependency polyfill to 9.8.0 chore(deps): update dependency polyfill to 9.8.1 Feb 3, 2026
@renovate renovate bot force-pushed the renovate/polyfill-9.x branch from 061be90 to d973c4e Compare February 3, 2026 08:54
@renovate renovate bot changed the title chore(deps): update dependency polyfill to 9.8.1 chore(deps): update dependency polyfill to 9.9.0 Feb 15, 2026
@renovate renovate bot force-pushed the renovate/polyfill-9.x branch 11 times, most recently from 9ccadf8 to 51b992e Compare February 19, 2026 02:51
@renovate renovate bot force-pushed the renovate/polyfill-9.x branch from 51b992e to a1b07b5 Compare February 20, 2026 21:15
Copy link
Copy Markdown
Owner

@rjmurillo rjmurillo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Polyfill 9.5.0 to 9.9.0: patch update, compiler polyfills only. All CI checks pass. Safe to merge.

@rjmurillo rjmurillo merged commit 3e1908b into main Feb 21, 2026
32 of 35 checks passed
@rjmurillo rjmurillo deleted the renovate/polyfill-9.x branch February 21, 2026 01:27
rjmurillo added a commit that referenced this pull request Feb 21, 2026
…915)

## Summary

- Disable dependabot for NuGet, consolidate to renovate-only
- Consolidate 4 overlapping auto-approve/merge workflows into 1
- Update renovate.json with proper package grouping and exclusion rules
- Add `docs/dependency-management.md` documenting package categories and
upgrade policies

## Problem

Both dependabot and renovate created duplicate PRs for every NuGet
update. Dependabot NuGet PRs used "Bump X from A to B" titles that
failed the required "Validate PR title" check (conventional commits
required), so they could never auto-merge. Four overlapping
auto-approve/merge workflows competed with each other, one of which had
a broken step referencing a nonexistent step output
(`steps.cpr.outputs`).

## Changes

### Dependabot config (`.github/dependabot.yml`)
Removed the `nuget` ecosystem. Retained `github-actions` ecosystem
(dependabot's fetch-metadata action provides update-type classification
for major version gating).

### Workflow consolidation
Deleted 3 workflows, kept and expanded 1:
- **Deleted:** `auto-approve-and-merge-renovate.yml`,
`dependabot-auto-approve.yml`, `dependabot-auto-merge.yml`
- **Kept:** `dependabot-approve-and-auto-merge.yml` with separate jobs
for dependabot and renovate

### Renovate config (`renovate.json`)
- Added `ignoreDeps` for `Microsoft.CodeAnalysis.*` core packages (same
policy as former dependabot ignore list)
- Grouped `BenchmarkDotNet` + `Perfolizer` as `benchmark-tooling` with
`automerge: false` (coordinated updates required due to transitive
dependency constraints)
- Disabled `System.CommandLine` and `System.CommandLine.Rendering`
updates until PerfDiff rewrite (#914)

### Documentation
New `docs/dependency-management.md` covers:
- Package categories (shipped, build-time, test, benchmark, tools,
infrastructure)
- Upgrade policies per category
- The VersionOverride pattern for non-shipped projects
- Lessons from the CS8032/SCI incident (#850)

## Bot PR cleanup performed

| Action | PRs |
|--------|-----|
| Closed (dependabot duplicates) | #903, #902, #890, #880, #909 |
| Closed (superseded) | #877 (Meziantou 2.0.302, superseded by 3.x) |
| Closed (build failures) | #834 (BenchmarkDotNet), #832 (Perfolizer) |
| Closed (PerfDiff breakage) | #821 (dotnet monorepo) |
| Merged | #878, #882, #881, #879, #883, #884 |

## Validation

- `dotnet build /p:PedanticMode=true`: 0 warnings, 0 errors
- `dotnet format`: no changes needed
- Tests cannot run locally (machine has .NET 10 only, test TFM is
net8.0); CI will validate

## Test plan

- [ ] CI build passes
- [ ] All tests pass
- [ ] No new bot PRs from dependabot for NuGet packages
- [ ] Renovate correctly picks up future dependency updates
- [ ] Auto-approve/merge workflow fires for new renovate PRs

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **Chores**
* Consolidated dependency-update process: moved NuGet management to
Renovate, removed several automated auto-approve/auto-merge workflows
for bot PRs, and adjusted automerge/approval behavior and rules.
* Renovate configuration updated with new groups, ignore lists, and
automerge adjustments.

* **Documentation**
* Added a dependency management guide detailing categories, upgrade
policies, configuration patterns, and workflow recommendations.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

diffray-review-completed diffray review status: completed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant