chore(deps): bump package and GitHub Actions versions#225
Merged
Conversation
- Microsoft.Bcl.AsyncInterfaces 10.0.9 -> 10.0.10 - Microsoft.Extensions.DependencyInjection 10.0.9 -> 10.0.10 - GitVersion.MsBuild 6.7.0 -> 6.8.2 - actions/setup-dotnet v5 -> v6 - actions/dependency-review-action v4 -> v5 Microsoft.Extensions.DependencyInjection 10.0.10 requires Microsoft.Bcl.AsyncInterfaces >= 10.0.10 transitively, so these two must be bumped together to avoid an NU1109 package downgrade error under Central Package Management (this is why dependabot PRs #223 and #222 individually failed CI). NSubstitute 5.3.0 -> 6.0.0 (PR #221) is intentionally excluded: 6.0.0 enables nullable annotations on Substitute.For/ForPartsOf/Arg.Is that regressed support for legitimate null constructor arguments/matches, tracked upstream as nsubstitute/NSubstitute#978 and #973 with an unmerged, contested fix (#976). Revisit once that lands.
roryprimrose
enabled auto-merge (squash)
July 20, 2026 01:33
Summary - Code CoverageSummary
CoverageNeovolve.Streamline - 89.4%
Neovolve.Streamline.NSubstitute - 100%
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Consolidates the currently-open dependabot dependency PRs, applied and verified locally.
Included
Microsoft.Bcl.AsyncInterfaces10.0.9 → 10.0.10 (Bump Microsoft.Bcl.AsyncInterfaces from 10.0.9 to 10.0.10 #222)Microsoft.Extensions.DependencyInjection10.0.9 → 10.0.10 (Bump Microsoft.Extensions.DependencyInjection from 10.0.9 to 10.0.10 #223)GitVersion.MsBuild6.7.0 → 6.8.2 (Bump GitVersion.MsBuild from 6.7.0 to 6.8.2 #220)actions/setup-dotnetv5 → v6 (Bump actions/setup-dotnet from 5 to 6 #224)actions/dependency-review-actionv4 → v5 (Bump actions/dependency-review-action from 4 to 5 #218)Why #222 and #223 were combined
Microsoft.Extensions.DependencyInjection10.0.10 has a transitive dependency requiringMicrosoft.Bcl.AsyncInterfaces >= 10.0.10. With Central Package Management (CentralPackageTransitivePinningEnabled), bumping only one of these two centrally-pinned versions produces anNU1109package downgrade error at restore. That's why dependabot's #223 and #222 each failed CI individually — they need to land together, which is confirmed by a clean localdotnet restore/build/testhere.Excluded: NSubstitute 5.3.0 → 6.0.0 (#221)
Left out intentionally. NSubstitute 6.0.0 enabled nullable reference annotations on
Substitute.For/ForPartsOf/Arg.Is, which regressed support for legitimatenullconstructor arguments and matchers. This is an acknowledged upstream bug (not a deliberate breaking change): nsubstitute/NSubstitute#978, related #973, with an unmerged/contested fix in #976. Upgrading now would also risk breaking consumers' own NSubstitute-based test code if they upgrade in lockstep. Revisit once a fixed NSubstitute version ships.Verification
dotnet build Neovolve.Streamline.slnx— 0 warnings, 0 errorsdotnet test Neovolve.Streamline.slnx— 161/161 passed (net472, net8.0, net9.0, net10.0)