Repository navigation
Bump coverlet.collector from 6.0.4 to 10.0.1 - #176
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
--- updated-dependencies: - dependency-name: coverlet.collector dependency-version: 10.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: ASSERTIVE Plan: Advanced Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Contributor
Author
|
Superseded by #197. |
Cadacious
added a commit
that referenced
this pull request
Oct 26, 2026
Consolidates Dependabot #175, #176 and #180, re-applied on current main. - #175 group: Microsoft.Extensions/ASP.NET Core/EF Core to 10.0.14 (aligned with SignalR.Client already at 10.0.14 on main), OpenTelemetry 1.18.0, OpenIddict 7.7.0, StackExchange.Redis 2.13.17, Aspire hosting 13.5.3, Azure SDKs, Graph, Spectre.Console 0.57.2, test tooling and others. - Held back: MassTransit stays 8.3.6 (v9 is commercially licensed); System.CommandLine stays 2.0.0-beta4 (2.0 stable is an API rewrite, ~340 call sites in Dhadgar.Cli; needs its own PR). - #176: coverlet.collector 10.0.1. - #180: MessagePack 3.1.12 (3.1.8 is itself inside GHSA-qhrr-8q5h-9q3h, patched at 3.1.9). Aspire only uses StreamJsonRpc's SystemTextJsonFormatter. - Aspire.AppHost.Sdk 13.1.0 -> 13.5.3 to match the hosting packages; ASPIRE010 kept as a message (we use package-delivered DCP, not the CLI bundle). - Spectre 0.57 adds ConfirmAsync: CA1849 fixed at 7 CLI confirm prompts. - Scalar 2.17 adds namespace Scalar.AspNetCore.Attributes: CA1724 fixed by renaming TracingConstants.Attributes to SpanAttributes. - Regenerated packages.lock.json files. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE
Cadacious
added a commit
that referenced
this pull request
Oct 26, 2026
* ci(deps): bump GitHub Actions and hold MassTransit at v8 - actions/github-script v7 -> v9.0.0, actions/checkout v4 -> v7.0.1 and actions/create-github-app-token v1 -> v3.3.0 in the gemini and pr-agent workflows, now pinned by SHA like the rest of the repo. - dorny/test-reporter v3.0.0 -> v3.2.0, Azure/static-web-apps-deploy to 1a947af. - Dependabot ignores MassTransit major versions: v9+ is commercially licensed. The OpenTransit switch is tracked in #195. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE * chore(deps): express 5, jose 6, dotenv 17 in BetterAuth Supersedes Dependabot #156 (express), #155 (jose) and #157 (dotenv). - express 4.22 -> 5.3: the Better Auth catch-all becomes /api/v1/betterauth/*splat (path-to-regexp v8 rejects a bare "*"). express.json() is no longer global; it runs only on the exchange route, as Better Auth's Express docs require the auth handler to see the raw body. The listen callback ignores the error argument that Express 5 now passes on bind failure. - jose 5.10 -> 6.2: importPKCS8 + SignJWT usage is unchanged. - dotenv 16.6 -> 17.4: loaded through src/env.js with quiet: true so the new "injected env" log line does not appear. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE * chore(deps): React 19 in Panel and ShoppingCart Bump react, react-dom, @types/react and @types/react-dom to 19.x in both apps (supersedes Dependabot #148, #149, #152, #164). No source changes were needed: neither app uses the global JSX namespace, argument-less useRef, ReactDOM.render, defaultProps, propTypes or string refs. @astrojs/react 6 accepts React 19. SharedAuth has no React dependency, so it is unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE * chore(deps): migrate Panel and ShoppingCart to Tailwind 4 Supersedes Dependabot #150 and #151. Started from `npx @tailwindcss/upgrade` (4.3.3), then reviewed and adjusted: - Build: tailwindcss 4.3.3 through @tailwindcss/vite in astro.config. postcss.config.mjs, tailwind.config.mjs and autoprefixer are gone (v4 handles vendor prefixes itself). The upgrade tool wired up @tailwindcss/postcss, which was swapped for the Vite plugin. - Theme: tailwind.config theme.extend moved into an @theme block in src/styles/global.css. backgroundSize.grid has no v4 theme namespace (the tool emitted a dead --background-size-grid, so bg-grid vanished from the build); restored as @Utility bg-grid. - Sources: `@import 'tailwindcss' source('..')` limits scanning to src/, matching v3's content glob, so the legacy .razor files and READMEs are not scanned. SharedAuth holds no class names, so it needs no @source. - Utility renames from the tool: rounded -> rounded-sm, backdrop-blur-sm -> backdrop-blur-xs, outline-none -> outline-hidden, flex-shrink-0 -> shrink-0, bg-gradient-to-* -> bg-linear-to-*, bg-[#0A0E17] -> bg-space-dark (same value). - Visual parity: kept the tool's v3 border-colour compatibility rule and added v4's documented button cursor:pointer rule. @layer components and utilities blocks became @Utility rules. - Drop tailwind.config.mjs from the csproj NpmBuild inputs and update the README and CLAUDE.md notes. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE * chore(deps): bump scope minor/patch group and drop @types/cytoscape stub Applies Dependabot #183: astro 7.4.2, cytoscape 3.34.4, @typescript-eslint 8.72, eslint-plugin-react-hooks 7.1.1, globals 17.13, autoprefixer 10.6.1, prettier 3.9.10. @types/cytoscape 3.31.0 is a deprecated stub (cytoscape ships its own index.d.ts), so remove it instead of bumping. Raise engines.node to >=22.23.4 to match astro 7.4.2's minimum. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE * chore(deps): bump scope to react 19 Applies Dependabot #159 (react, @types/react) and moves react-dom and @types/react-dom with it, since the pair must stay in lockstep. No source changes needed: tsc --noEmit is clean (no global JSX namespace, every useRef has an initial value, no removed APIs in use). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE * chore(deps): migrate scope to tailwind css 4 Applies Dependabot #160 (tailwindcss 3.4.19 -> 4.3.3) using the official @tailwindcss/upgrade tool, then reviewed and adjusted: - Run Tailwind through @tailwindcss/vite in astro.config; drop postcss.config.mjs, autoprefixer and @tailwindcss/postcss (v4 handles vendor prefixing itself). - Port tailwind.config.mjs (slate-950, Roboto sans, class dark mode) to @theme / @custom-variant in global.css and delete the config file. - Restrict source detection to src/ with source("../"), matching the old content glob. - Class renames from the tool: outline-none -> outline-hidden, backdrop-blur(-sm) -> backdrop-blur-sm(-xs), flex-shrink-0 -> shrink-0, bg-gradient-to-b -> bg-linear-to-b, arbitrary opacity/z-index to the bare-value forms. Computed values are unchanged. - Keep v3 visuals: gray-200 default border colour and cursor:pointer on buttons via @layer base; move element-level globals (select/option colours, a { text-decoration: none }, safe-area padding) into @layer base so utilities such as hover:underline and bg-black/30 on selects still win, as they did in v3. - Drop tailwind.config.mjs from the csproj build inputs; update README. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE * chore(deps): NuGet minor/patch group, coverlet 10, MessagePack 3 Consolidates Dependabot #175, #176 and #180, re-applied on current main. - #175 group: Microsoft.Extensions/ASP.NET Core/EF Core to 10.0.14 (aligned with SignalR.Client already at 10.0.14 on main), OpenTelemetry 1.18.0, OpenIddict 7.7.0, StackExchange.Redis 2.13.17, Aspire hosting 13.5.3, Azure SDKs, Graph, Spectre.Console 0.57.2, test tooling and others. - Held back: MassTransit stays 8.3.6 (v9 is commercially licensed); System.CommandLine stays 2.0.0-beta4 (2.0 stable is an API rewrite, ~340 call sites in Dhadgar.Cli; needs its own PR). - #176: coverlet.collector 10.0.1. - #180: MessagePack 3.1.12 (3.1.8 is itself inside GHSA-qhrr-8q5h-9q3h, patched at 3.1.9). Aspire only uses StreamJsonRpc's SystemTextJsonFormatter. - Aspire.AppHost.Sdk 13.1.0 -> 13.5.3 to match the hosting packages; ASPIRE010 kept as a message (we use package-delivered DCP, not the CLI bundle). - Spectre 0.57 adds ConfirmAsync: CA1849 fixed at 7 CLI confirm prompts. - Scalar 2.17 adds namespace Scalar.AspNetCore.Attributes: CA1724 fixed by renaming TracingConstants.Attributes to SpanAttributes. - Regenerated packages.lock.json files. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE * fix(deps): finish the Scope Tailwind 4 move and review fixes The Scope Tailwind 4 commit was missing its package, lockfile, Astro config, csproj and README changes, and still had tailwind.config.mjs. Restore them so Scope builds with @tailwindcss/vite. Also put the static-web-apps-deploy pin back to the v1 commit main uses, and update the BetterAuth README to express 5, jose 6 and dotenv 17. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE * ci(npm): fetch the newest Node 22 in the npm-ci action The runner caches Node 22.23.3, but Astro 7.4.2 needs >=22.23.4, so setup-node now checks for the latest 22.x instead of using the cache. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE * ci(codeql): run CodeQL nightly instead of on every PR CodeQL now runs on a nightly schedule against main (and by hand), not on pushes or pull requests, so its findings are triaged from the Security tab rather than blocking merges. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated coverlet.collector from 6.0.4 to 10.0.1.
Release notes
Sourced from coverlet.collector's releases.
10.0.1
Improvements
Fixed
Maintenance
Diff between 10.0.0 and 10.0.1
10.0.0
Improvements
--coverlet-file-prefixoption for unique report files #1869Fixed
Maintenance
Diff between 8.0.1 and 10.0.0
8.0.1
Fixed
Improvements
Diff between 8.0.0 and 8.0.1
8.0.0
Special Thanks: A huge thank you to @Bertk for driving the majority of the work in this release! 🎉
Fixed
Improvements
Diff between 6.0.4 and 8.0.0
Commits viewable in compare view.
You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)