Skip to content

Bump dependencies from open Dependabot PRs - #178

Open
thefipster wants to merge 1 commit into
mainfrom
deps/combined-2026-10-26
Open

thefipster wants to merge 1 commit into
mainfrom
deps/combined-2026-10-26

Conversation

@thefipster

Copy link
Copy Markdown
Owner

Combines the open Dependabot PRs #162, #168, #169, #170, #172, #173, #174, #175, #176 and #177. Most of them fail CI on their own:

  • NU1605: Microsoft.Extensions.* and EF Core reference each other at the same patch, so bumping one package to 10.0.13 is reported as a downgrade of the others.
  • CodeQL: codeql-action/init and analyze must run at the same version.
  • ASPIRE010: Aspire 13.6 warns when the AppHost has no CLI bundle, and -warnaserror turns that into an error. The warning is suppressed in the AppHost; nothing here uses bundle-only features. The AppHost SDK moves to 13.6.4 along with the packages.

dependabot.yml gets groups for Microsoft.Extensions*, Aspire* and github/codeql-action*, so these arrive as single PRs from now on.

Locally: both solutions build with -warnaserror and the unit tests pass. The Testcontainers integration tests need Docker, so CI covers them.

Supersedes #162 #168 #169 #170 #172 #173 #174 #175 #176 #177.

🤖 Generated with Claude Code

Combines #162, #168-#170, #172-#177 into one change. Split up, most of them
cannot build: the Microsoft.Extensions and EF Core packages reference each
other at the same patch (NU1605 downgrade), and codeql-action init and
analyze refuse to run at different versions.

- Microsoft.Extensions.*, EF Core, Mvc.Testing 10.0.11 -> 10.0.13
- Aspire hosting packages and AppHost SDK 13.4.6 -> 13.6.4; suppress the
  new ASPIRE010 warning (no CLI bundle), which -warnaserror fails on
- MudBlazor 9.11.0, test packages from the testing group
- github/codeql-action init/analyze 4.39.1
- Dependabot groups for Microsoft.Extensions, Aspire and codeql-action so
  these arrive together from now on

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant