chore(deps): update dependency polyfill to 10.1.1#5467
Conversation
There was a problem hiding this comment.
Code Review: chore(deps): update dependency polyfill to 10.1.0
This is a straightforward, automated Renovate Bot dependency bump of the Polyfill package from 10.0.0 to 10.1.0 — a minor version update.
Change Summary
The sole change is a single-line update in Directory.Packages.props (centralized package version management):
- <PackageVersion Include="Polyfill" Version="10.0.0" />
+ <PackageVersion Include="Polyfill" Version="10.1.0" />Assessment
No concerns. The change is safe and correct for the following reasons:
- Scope is minimal: A single-line version bump in the central
Directory.Packages.propsfile — no logic changes, no API surface changes. - Minor version:
10.0.0→10.1.0is a minor bump. Polyfill follows a strict additive policy for minor versions (new polyfill types/members added; nothing removed), so no breaking changes are expected. - Polyfill's role in TUnit is well-understood: The package provides backfill types (e.g.,
ModuleInitializerAttribute) for older TFMs. TUnit already has aMissingPolyfillAnalyzerto ensure consumers have it, andTUnit.Engine/PolyfillExtensions.csprovides a small local polyfill alongside it. A minor version bump will only ever expand the set of available APIs, not remove any. - Centralized version management: Because
ManagePackageVersionsCentrallyis enabled, this single entry controls the version for all referencing projects (34 files reference Polyfill across the repo). This is the correct and only place to make this change. - AOT / source-gen compatibility: Polyfill is a compile-time / source-generation package with no runtime assembly (it compiles polyfill types directly into the consuming assembly). A minor bump here poses no AOT risk.
- Auto-merge is configured: Renovate's automerge is enabled for this PR, which is appropriate for minor dependency updates of this kind.
Suggestions
None. This is a well-structured, low-risk dependency update that should be safe to merge.
Up to standards ✅🟢 Issues
|
| Metric | Results |
|---|---|
| Complexity | 0 |
TIP This summary will be updated as you push new changes. Give us feedback
191e9ae to
2dd59d1
Compare
There was a problem hiding this comment.
Code Review: chore(deps): update dependency polyfill to 10.1.1
This is a follow-up to my previous review (which assessed the bump to 10.1.0). The PR has since been updated by Renovate to target 10.1.1.
Change Summary
Single-line version bump in Directory.Packages.props:
- <PackageVersion Include="Polyfill" Version="10.0.0" />
+ <PackageVersion Include="Polyfill" Version="10.1.1" />Assessment
No concerns. My earlier analysis remains fully applicable:
- Patch bump on top of minor:
10.1.0→10.1.1is a patch release — strictly bug-fix territory, making this even lower risk than the previous10.1.0bump. - No breaking changes: Polyfill's patch releases only ship fixes to existing polyfill implementations, never API removals.
- Scope unchanged: Still a single-line edit to the centralized version file; all 34+ referencing projects pick up the change automatically via Central Package Management.
- AOT / source-gen safety: Polyfill is a compile-time package — patch bumps here carry no runtime or AOT risk.
Conclusion
Safe to merge. Automerge is appropriate for this class of update.
2dd59d1 to
0c35e16
Compare
There was a problem hiding this comment.
Code Review
This is a Renovate Bot dependency update bumping Polyfill from 10.0.0 to 10.1.1 (a minor version bump).
Change: Directory.Packages.props — single line version string update.
Assessment
Nothing to flag here. This is a straightforward, low-risk minor version bump of the Polyfill package:
- Minor version bump (
10.0.0→10.1.1) follows semver, so no breaking changes expected. - The Polyfill package provides source-level polyfills for newer .NET APIs — it has no runtime dependency and is compile-time only, so the blast radius of any regression is limited to build-time.
- The change is isolated to the central
Directory.Packages.propsversion catalog, which is the correct place for it (this repo uses CPM — Central Package Management). - Automerge is enabled on this PR, which is appropriate for this category of low-risk dependency update.
Verdict
Looks good. Safe to merge.
There was a problem hiding this comment.
Code Review
This is a Renovate Bot dependency update bumping Polyfill from 10.0.0 to 10.1.1 (a minor version bump).
Change: Directory.Packages.props — single line version string update.
Assessment
Nothing to flag here. This is a straightforward, low-risk minor version bump of the Polyfill package:
- Minor version bump (
10.0.0→10.1.1) follows semver, so no breaking changes expected. - The Polyfill package provides source-level polyfills for newer .NET APIs — it has no runtime dependency and is compile-time only, so the blast radius of any regression is limited to build-time.
- The change is isolated to the central
Directory.Packages.propsversion catalog, which is the correct place for it (this repo uses CPM — Central Package Management). - Automerge is enabled on this PR, which is appropriate for this category of low-risk dependency update.
Verdict
Looks good. Safe to merge.
Updated [TUnit](https://github.com/thomhurst/TUnit) from 1.30.0 to 1.30.8. <details> <summary>Release notes</summary> _Sourced from [TUnit's releases](https://github.com/thomhurst/TUnit/releases)._ ## 1.30.8 <!-- Release notes generated using configuration in .github/release.yml at v1.30.8 --> ## What's Changed ### Other Changes * feat(mocks): migrate to T.Mock() extension syntax by @thomhurst in thomhurst/TUnit#5472 * feat: split TUnit.AspNetCore into Core + meta package by @thomhurst in thomhurst/TUnit#5474 * feat: add async Member() overloads for Task-returning member selectors by @thomhurst in thomhurst/TUnit#5475 ### Dependencies * chore(deps): update aspire to 13.2.2 by @thomhurst in thomhurst/TUnit#5464 * chore(deps): update dependency polyfill to 10.1.1 by @thomhurst in thomhurst/TUnit#5468 * chore(deps): update dependency polyfill to 10.1.1 by @thomhurst in thomhurst/TUnit#5467 * chore(deps): update tunit to 1.30.0 by @thomhurst in thomhurst/TUnit#5469 * chore(deps): update dependency microsoft.playwright to 1.59.0 by @thomhurst in thomhurst/TUnit#5473 **Full Changelog**: thomhurst/TUnit@v1.30.0...v1.30.8 Commits viewable in [compare view](thomhurst/TUnit@v1.30.0...v1.30.8). </details> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This PR contains the following updates:
10.0.0→10.1.1Release Notes
SimonCropp/Polyfill (Polyfill)
v10.1.0Compare Source
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.