Skip to content

Bump the nuget-deps group with 1 update - #460

Merged
ptr727-codegen[bot] merged 1 commit into
mainfrom
dependabot/nuget/main/nuget-deps-ea086d5229
Sep 3, 2026
Merged

Bump the nuget-deps group with 1 update#460
ptr727-codegen[bot] merged 1 commit into
mainfrom
dependabot/nuget/main/nuget-deps-ea086d5229

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.Testing.Extensions.CodeCoverage from 18.10.0 to 18.11.0.

Release notes

Sourced from Microsoft.Testing.Extensions.CodeCoverage's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Microsoft.Testing.Extensions.CodeCoverage from 18.10.0 to 18.11.0

---
updated-dependencies:
- dependency-name: Microsoft.Testing.Extensions.CodeCoverage
  dependency-version: 18.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Sep 3, 2026
@ptr727-codegen
ptr727-codegen Bot enabled auto-merge September 3, 2026 14:54
@codecov

codecov Bot commented Sep 3, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70.54%. Comparing base (f6465b3) to head (f0ab43b).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #460   +/-   ##
=======================================
  Coverage   70.54%   70.54%           
=======================================
  Files          13       13           
  Lines        1219     1219           
  Branches      111      111           
=======================================
  Hits          860      860           
  Misses        319      319           
  Partials       40       40           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@ptr727-codegen
ptr727-codegen Bot merged commit e549b87 into main Sep 3, 2026
17 checks passed
@dependabot
dependabot Bot deleted the dependabot/nuget/main/nuget-deps-ea086d5229 branch September 3, 2026 14:56
ptr727-codegen Bot pushed a commit to ptr727/LanguageTags that referenced this pull request Sep 4, 2026
Updated [ptr727.Utilities](https://github.com/ptr727/Utilities) from
4.1.4 to 4.1.6.

<details>
<summary>Release notes</summary>

_Sourced from [ptr727.Utilities's
releases](https://github.com/ptr727/Utilities/releases)._

## 4.1.6

## What's Changed
* Bump the nuget-deps group with 1 update by @​dependabot[bot] in
ptr727/Utilities#460


**Full Changelog**:
ptr727/Utilities@4.1.4...4.1.6

Commits viewable in [compare
view](ptr727/Utilities@4.1.4...4.1.6).
</details>

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ptr727.Utilities&package-manager=nuget&previous-version=4.1.4&new-version=4.1.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
ptr727 pushed a commit that referenced this pull request Sep 6, 2026
Updated
[Microsoft.Testing.Extensions.CodeCoverage](https://github.com/microsoft/codecoverage)
from 18.10.0 to 18.11.0.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.Testing.Extensions.CodeCoverage's
releases](https://github.com/microsoft/codecoverage/releases)._

No release notes found for this version range.

Commits viewable in [compare
view](https://github.com/microsoft/codecoverage/commits).
</details>

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Microsoft.Testing.Extensions.CodeCoverage&package-manager=nuget&previous-version=18.10.0&new-version=18.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>
@ptr727 ptr727 mentioned this pull request Sep 6, 2026
ptr727 pushed a commit that referenced this pull request Sep 6, 2026
Updated
[Microsoft.Testing.Extensions.CodeCoverage](https://github.com/microsoft/codecoverage)
from 18.10.0 to 18.11.0.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.Testing.Extensions.CodeCoverage's
releases](https://github.com/microsoft/codecoverage/releases)._

No release notes found for this version range.

Commits viewable in [compare
view](https://github.com/microsoft/codecoverage/commits).
</details>

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Microsoft.Testing.Extensions.CodeCoverage&package-manager=nuget&previous-version=18.10.0&new-version=18.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>
@ptr727 ptr727 mentioned this pull request Sep 6, 2026
ptr727 added a commit that referenced this pull request Sep 6, 2026
## Summary

Promotes `develop` to `main`:
[#463](#463) bumped the
`ptr727/ProjectTemplate` hub-hosted reusable workflow pins from 2.0.539
to 2.0.560 across
`test-pull-request.yml`, `publish-release.yml`, and
`merge-bot-pull-request.yml`. NuGet
packages, dotnet local tools, and third-party Actions were already at
their latest versions on
both branches, so no other change is carried.

`main` had not yet picked up this hub-pin bump on its own (its
independent dependabot bumps
since the last promotion,
[#460](https://github.com/ptr727/Utilities/pull/460)/[#462](https://github.com/ptr727/Utilities/pull/462),
covered nuget-deps/actions-deps groups only), so this promotion could
not fast-forward and used a
`promote/develop-to-main` branch to resolve the resulting three-file
merge conflict.

## Supersedes #464

[#464](#464) carried this same
promotion and was
auto-closed by GitHub when `main` was force-pushed during the
commit-signature remediation
described below: its timeline records `base_ref_force_pushed` and
`closed` at the same
timestamp. Its recorded head commit is no longer reachable from the
branch, so GitHub refuses to
reopen it, and this pull request replaces it. The promoted content is
unchanged.

## Every commit was re-signed

All history on `main`, `develop`, and this branch was rewritten to
restore commit signatures.
Background: an earlier identity rewrite (removing a stale
`pieter_viljoen@symantec.com` author
identity from 27 commits dating to 2018-2019) shifted the parent chain
of every descendant
commit, and `git filter-repo` drops the now-stale `gpgsig` field from
every commit it rewrites.
That silently left the entire mainline unsigned, which is what blocked
#464 under
`Commits must have verified signatures`.

The remediation re-signed all 884 commits with the maintainer's SSH key.
Because GitHub matches a
signing key against the **committer** identity, the committer on every
commit is now
`Pieter Viljoen <ptr727@users.noreply.github.com>`. Commit **authors**
are preserved unchanged,
including `dependabot[bot]`, `Copilot`, `github-actions[bot]`, and
`ptr727-codegen[bot]`, as are
the original author and committer dates.

## Verification

- This branch's tree is unchanged by the re-sign: the merge commit's
tree is `7b43593e`, which
equals `origin/develop^{tree}` exactly, so no content was lost or
introduced.
- Commit counts match pre-rewrite exactly: `main` 880, `develop` 807,
this branch 884.
- GitHub reports every commit as verified: 880/880 on `main`, 807/807 on
`develop`, and 884/884
  on this branch.
- This branch's tip is a clean two-parent merge of the current `main`
and `develop` tips.
- The content-level verification of the promoted change (clean-compile
chain with 0 warnings,
212/212 tests, `actionlint` clean, and the reusable-workflow interface
compatibility check
across the 2.0.539 to 2.0.560 pin bump) was performed on #464 against a
tree byte-identical to
  this one.

🤖 Generated with [Claude Code](https://claude.com/claude-code)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants