Skip to content

Fix SonarCloud coverage report glob pattern and update devDependencies - #64

Merged
Malcolmnixon merged 2 commits into
mainfrom
fix/sonarcloud-opencover-glob-pattern
Aug 28, 2026
Merged

Malcolmnixon merged 2 commits into
mainfrom
fix/sonarcloud-opencover-glob-pattern

Conversation

@Malcolmnixon

Copy link
Copy Markdown
Member

This pull request updates dependencies and improves the configuration for code coverage reporting. The most important changes are summarized below:

Dependency Updates:

  • Updated @mermaid-js/mermaid-cli from version 11.12.0 to 11.16.0 in package.json to include the latest features and bug fixes.
  • Upgraded cspell from 9.7.0 to 10.1.1 and markdownlint-cli2 from 0.21.0 to 0.23.2 in package.json for improved spellchecking and markdown linting.

Build and Coverage Configuration:

  • Changed the sonar.cs.opencover.reportsPaths pattern in .github/workflows/build.yaml to **/coverage.opencover.*.xml for more accurate detection of coverage reports by SonarCloud.

Malcolm Nixon and others added 2 commits August 28, 2026 13:38
SonarCloud reports zero code coverage for this repo. This project uses
xunit.v3 4.0.0, which only runs under the Microsoft.Testing.Platform
(MTP) 'dotnet test' mode, so the test project correctly uses
coverlet.MTP (the VSTest-only coverlet.collector doesn't work under
MTP). However, coverlet.MTP names its output file
coverage.opencover.<numeric-session-id>.xml, whereas the workflow's
Sonar scanner argument used the glob **/*.opencover.xml, which only
matches filenames literally ending in "opencover.xml" - the
session-ID segment breaks that match, so the scanner silently found no
coverage report to ingest.

Verified locally: `dotnet test --coverlet --coverlet-output-format
opencover` (matching CI) produces files such as
coverage.opencover.280826173737221.xml, which the corrected glob
**/coverage.opencover.*.xml matches but the old glob did not. All 285
tests still pass.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Updates direct npm devDependencies to their latest published versions:
@mermaid-js/mermaid-cli 11.12.0 -> 11.16.0, cspell 9.7.0 -> 10.1.1,
markdownlint-cli2 0.21.0 -> 0.23.2 (mermaid-filter already at latest
1.4.7).

Remaining npm audit findings are transitive dependencies pulled in via
mermaid-cli/mermaid-filter's puppeteer dependency, with no fix
currently available upstream - out of scope per user request.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot AI lite review requested due to automatic review settings August 28, 2026 17:41

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request updates Node.js devDependencies used for documentation/lint tooling and adjusts the SonarCloud configuration in CI to improve OpenCover report discovery for coverage reporting.

Changes:

  • Bumped @mermaid-js/mermaid-cli, cspell, and markdownlint-cli2 versions in package.json.
  • Updated the SonarCloud OpenCover report glob in .github/workflows/build.yaml.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File Description
package.json Updates devDependency versions for docs/lint tooling.
.github/workflows/build.yaml Adjusts SonarCloud OpenCover report path glob used during CI scanning.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread .github/workflows/build.yaml
@Malcolmnixon
Malcolmnixon merged commit 27020e1 into main Aug 28, 2026
16 checks passed
@Malcolmnixon
Malcolmnixon deleted the fix/sonarcloud-opencover-glob-pattern branch August 28, 2026 17:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants