Bump the nuget-deps group with 13 updates by dependabot[bot] · Pull Request #81 · ptr727/PhotoCleaner

dependabot · 2026-08-21T10:58:56Z

Updated AwesomeAssertions from 9.5.0 to 9.6.0.

Release notes

Sourced from AwesomeAssertions's releases.

9.6.0 What's Changed

New Contributors

@aco-mreble made their first contribution in fix: upper and lower case issue AwesomeAssertions/AwesomeAssertions#591
... (truncated)

Commits viewable in compare view.

Updated CliWrap from 3.10.2 to 3.10.5.

Release notes

Sourced from CliWrap's releases.

3.10.5 What's Changed

Enhancements

Optimize SimplexStream by making it Memory-first by @Tyrrrz in Optimize SimplexStream by making it Memory-first Tyrrrz/CliWrap#343

Bugs

Fix deadlock in PipeTarget.Merge when a sub-target reads past end-of-stream by @Tyrrrz with @Copilot in Fix deadlock in PipeTarget.Merge when a sub-target reads past end-of-stream Tyrrrz/CliWrap#347

Full Changelog: Tyrrrz/CliWrap@3.10.4...3.10.5

3.10.4 What's Changed

Enhancements

Ensure that the process execution never outlives the method execution that spawned it by @Tyrrrz in Ensure that the process execution never outlives the method execution that spawned it Tyrrrz/CliWrap#342

Bugs

Enforce process ownership: guarantee process termination across all execution paths by @Tyrrrz with @Copilot in Enforce process ownership: guarantee process termination across all execution paths Tyrrrz/CliWrap#339

Full Changelog: Tyrrrz/CliWrap@3.10.3...3.10.4

3.10.3 What's Changed

Bugs

Fix a race condition inside PullEventStream by @kvpt in Fix a race condition inside PullEventStream Tyrrrz/CliWrap#337
Fix issues with runaway tasks and broken iterators by @Tyrrrz in Fix issues with runaway tasks and broken iterators Tyrrrz/CliWrap#338

New Contributors

@kvpt made their first contribution in Fix a race condition inside PullEventStream Tyrrrz/CliWrap#337

Full Changelog: Tyrrrz/CliWrap@3.10.2...3.10.3

Commits viewable in compare view.

Updated csharpier from 1.2.6 to 1.3.0.

Release notes

Sourced from csharpier's releases.

1.3.0

Breaking Changes

Change xml formatting to return error when it runs into syntax error so it is consistent with c# #1854

Previously CSharpier treated an invalid xml file as a warning instead of an error. This was inconsistent with how it treated c# files.
Invalid c# or xml files are not treated as errors.
The --compilation-errors-as-warnings argument has been renamed to --syntax-errors-as-warnings and can be used to return warnings instead of errors when encountering invalid files.

What's Changed

Feature: Configurable whitespace handling for xml #1790

CSharpier now supports two types of xml whitespace formatting strict or ignore.
By default all xml except xaml or axaml is treated as strict whitespace. See details

Feature: Move closing bracket for xml elements to the same line. #1598

With strict xml whitespace handling, csharpier now keeps the closing bracket for an element on the same line instead of breaking it to a new line.

<!-- input & expected output -->
<ElementWithAttributeAttribute="AttributeValue__________________"
>TextValue</ElementWithAttribute>
<!-- 1.2.6 -->
<ElementWithAttributeAttribute="AttributeValue__________________"
>TextValue</ElementWithAttribute
>

Feature: Support for csharpier-ignore with XML formatter #1788

CSharpier now supports csharpier-ignore in xml files. See details

Feature: Add MSBuild transitive and multi-target support #1833

CSharpier.MSBuild can now work as a transitive dependency.

Feature: allow checking formatting with cache #1830

The csharpier check command now supports a --use-cache option.

Feature: remove dependency on Microsoft.AspNetCore.App #1508

Previously CSharpier required that Microsoft.AspNetCore.App be installed. CSharpier has been modified to use an HttpListener when it is run using server to remove the need for this dependency.

Fix: csharpier-ignore comment removes linespaces before block #1867

CSharpier was removing blank lines before csharpier-ignore comments in some cases

// input and expected outputvarx=1;// csharpier-ignorevary=1;/// 1.2.6varx=1;// csharpier-ignorevary=1;
...(truncated)Commits viewable in[compareview](https://github.com/belav/csharpier/compare/1.2.6...1.3.0).</details>Updated[dotnet-outdated-tool](https://github.com/dotnet-outdated/dotnet-outdated) from 4.7.1 to 4.8.1.<details><summary>Release notes</summary>_Sourcedfrom[dotnet-outdated-tool's releases](https://github.com/dotnet-outdated/dotnet-outdated/releases)._
## 4.8.1
## What's Changed*Add `#:sdk` support for.NET file-based apps by @devlead in https://github.com/dotnet-outdated/dotnet-outdated/pull/755
## New Contributors
* @devlead made their first contribution in https://github.com/dotnet-outdated/dotnet-outdated/pull/755**Full Changelog**:https://github.com/dotnet-outdated/dotnet-outdated/compare/v4.8.0...v4.8.1
## 4.8.0
## What's Changed
* Add .NET file-based app support by @DamianEdwards in https://github.com/dotnet-outdated/dotnet-outdated/pull/752
## New Contributors
* @DamianEdwards made their first contribution in https://github.com/dotnet-outdated/dotnet-outdated/pull/752**Full Changelog**: https://github.com/dotnet-outdated/dotnet-outdated/compare/v4.7.2...v4.8.0
## 4.7.2
## What's Changed
* Fix MCP server crash: missing IVariableTrackingService DI registration by @Copilot in https://github.com/dotnet-outdated/dotnet-outdated/pull/729* Fix NullReferenceException when GetLockFile returns null(#740) by @tymarats in https://github.com/dotnet-outdated/dotnet-outdated/pull/741*Fix CI:pass short framework name to dotnet addpackage on upgrade by @slang25inhttps://github.com/dotnet-outdated/dotnet-outdated/pull/750
## New Contributors
* @tymarats made their first contributioninhttps://github.com/dotnet-outdated/dotnet-outdated/pull/741**Full Changelog**:https://github.com/dotnet-outdated/dotnet-outdated/compare/v4.7.1...v4.7.2Commits viewable in[compare view](https://github.com/dotnet-outdated/dotnet-outdated/compare/v4.7.1...v4.8.1).</details>
Updated [husky](https://github.com/alirezanet/husky.net) from 0.9.0 to 0.9.1.<details><summary>Release notes</summary>
_Sourced from[husky's releases](https://github.com/alirezanet/husky.net/releases)._
## 0.9.1
## What's Changed
* Fix install command race condition on first run with parallel MSBuild nodes by @MattKotsenas in https://github.com/alirezanet/Husky.Net/pull/168**Full Changelog**:https://github.com/alirezanet/Husky.Net/compare/v0.9.0...v0.9.1Commits viewable in[compare view](https://github.com/alirezanet/husky.net/compare/v0.9.0...v0.9.1).</details>
Updated [Microsoft.Data.Sqlite](https://github.com/dotnet/dotnet) from 10.0.10 to 10.0.11.<details><summary>Release notes</summary>
_Sourced from[Microsoft.Data.Sqlite's releases](https://github.com/dotnet/dotnet/releases)._
No release notes found forthis version range.
Commits viewable in[compare view](https://github.com/dotnet/dotnet/commits).</details>
Updated [Microsoft.Extensions.Logging.Abstractions](https://github.com/dotnet/dotnet) from 10.0.10 to 10.0.11.<details><summary>Release notes</summary>
_Sourced from[Microsoft.Extensions.Logging.Abstractions's releases](https://github.com/dotnet/dotnet/releases)._
No release notes found forthis version range.
Commits viewable in[compare view](https://github.com/dotnet/dotnet/commits).</details>
Updated [Microsoft.NET.Test.Sdk](https://github.com/microsoft/vstest) from 18.8.1 to 18.9.0.<details><summary>Release notes</summary>
_Sourced from[Microsoft.NET.Test.Sdk's releases](https://github.com/microsoft/vstest/releases)._
## 18.9.0
## What's Changed
* Fix tilde/exclamation characters corrupted in TerminalLogger test output by @nohwnd in https://github.com/microsoft/vstest/pull/16046* Make TranslationLayer Native AOT-compatible by @drewnoakes in https://github.com/microsoft/vstest/pull/16045* Guard GenerateProgramFile target against UseWinUI/UseUwpTools evaluation order by @nohwnd in https://github.com/microsoft/vstest/pull/16072* Add RequestingAssembly to AssemblyResolveEventArgs for binary compat by @nohwnd in https://github.com/microsoft/vstest/pull/16076* Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect from testhost.x86 and datacollector by @Evangelink in https://github.com/microsoft/vstest/pull/16082* Fix TRX attachment paths when LogFileName contains a subdirectory by @nohwnd in https://github.com/microsoft/vstest/pull/15791* Fix missing dumps for.NET Framework child processes in NetClientHangDumper by @nohwnd in https://github.com/microsoft/vstest/pull/16098* Fix data collection channels to use negotiated protocol version instead of V1 by @nohwnd in https://github.com/microsoft/vstest/pull/16096* Fix race condition in BlameCollector: skip hang dump when testhost hasn't launched yet by @nohwnd in https://github.com/microsoft/vstest/pull/16065* Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in auto-generated Program files by @nohwnd in https://github.com/microsoft/vstest/pull/16101* Include testhost process path in crash error messages by @nohwnd in https://github.com/microsoft/vstest/pull/16108* Fix DataDriven test results being double-counted in TRX logger totals by @nohwnd in https://github.com/microsoft/vstest/pull/15766* Fix datacollector crash visibility: replace Assert with throwable exceptions by @nohwnd in https://github.com/microsoft/vstest/pull/16048* Add TreatErrorMessagesAsWarnings parameter to TRX logger by @nohwnd in https://github.com/microsoft/vstest/pull/16106* Wait for testhost stderr to drain before reading its crash output by @nohwnd in https://github.com/microsoft/vstest/pull/16128* Handle runtimeconfig.dev.json without additionalProbingPaths by @tmat in https://github.com/microsoft/vstest/pull/16166* Suggest Microsoft.NET.Test.Sdk when a managed test project brings no testhost by @nohwnd in https://github.com/microsoft/vstest/pull/16169* Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1)when run via vstest.console.exe directly (#16151) by @azat-msft in https://github.com/microsoft/vstest/pull/16156* Preserve the real exception (type + stack trace) when a test run aborts in BaseRunTests by @nohwnd in https://github.com/microsoft/vstest/pull/16167
## New Contributors
* @drewnoakes made their first contribution in https://github.com/microsoft/vstest/pull/16045**Full Changelog**: https://github.com/microsoft/vstest/compare/v18.8.0...v18.9.0
Commits viewable in[compare view](https://github.com/microsoft/vstest/compare/v18.8.1...v18.9.0).</details>
Updated [SQLitePCLRaw.bundle_e_sqlite3](https://github.com/ericsink/SQLitePCL.raw) from 3.0.4 to 3.0.5.<details><summary>Release notes</summary>
_Sourced from[SQLitePCLRaw.bundle_e_sqlite3's releases](https://github.com/ericsink/SQLitePCL.raw/releases)._
## 3.0.5
Update the lib dependency for `SQLitePCLRaw.bundle_e_sqlite3` to package ID `SQLite` version 3.53.4.
Commits viewable in[compare view](https://github.com/ericsink/SQLitePCL.raw/compare/v3.0.4...v3.0.5).</details>
Updated [System.CommandLine](https://github.com/dotnet/dotnet) from 2.0.10 to 2.0.11.<details><summary>Release notes</summary>
_Sourced from[System.CommandLine's releases](https://github.com/dotnet/dotnet/releases)._
No release notes found forthis version range.
Commits viewable in[compare view](https://github.com/dotnet/dotnet/commits).</details>
Updated [xunit.analyzers](https://github.com/xunit/xunit.analyzers) from 1.27.0 to 2.0.0.<details><summary>Release notes</summary>
_Sourced from[xunit.analyzers's releases](https://github.com/xunit/xunit.analyzers/releases)._
## 2.0.0
Release notes: https://xunit.net/releases/analyzers/2.0.0
## 2.0.0-pre.60
Release notes: https://xunit.net/releases/analyzers/2.0.0-pre.60
## 2.0.0-pre.56
Release notes: https://xunit.net/releases/analyzers/2.0.0-pre.56
## 2.0.0-pre.51
Release notes: https://xunit.net/releases/analyzers/2.0.0-pre.51
## 2.0.0-pre.40
Release notes: https://xunit.net/releases/analyzers/2.0.0-pre.40
## 2.0.0-pre.9
Release notes: https://xunit.net/releases/analyzers/2.0.0-pre.9
Commits viewable in[compare view](https://github.com/xunit/xunit.analyzers/compare/1.27.0...2.0.0).</details>
Updated [xunit.runner.visualstudio](https://github.com/xunit/visualstudio.xunit) from 3.1.5 to 4.0.0.<details><summary>Release notes</summary>
_Sourced from[xunit.runner.visualstudio's releases](https://github.com/xunit/visualstudio.xunit/releases)._
## 4.0.0
Release notes: https://xunit.net/releases/visualstudio/4.0.0
## 4.0.0-pre.5
Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.5
## 4.0.0-pre.4
Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.4
## 4.0.0-pre.3
Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.3
Commits viewable in[compare view](https://github.com/xunit/visualstudio.xunit/compare/3.1.5...4.0.0).</details>
Updated [xunit.v3](https://github.com/xunit/xunit) from 3.2.2 to 4.0.0.<details><summary>Release notes</summary>
_Sourced from[xunit.v3's releases](https://github.com/xunit/xunit/releases)._
No release notes found forthis version range.
Commits viewable in[compare view](https://github.com/xunit/xunit/commits).</details>
Dependabot will resolve any conflicts withthis PR aslongas you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.[//]: # (dependabot-automerge-start)[//]: # (dependabot-automerge-end)---<details><summary>Dependabot commands and options</summary><br />
You can trigger Dependabot actions by commenting on this PR:- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name><ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions
</details>

Bumps AwesomeAssertions from 9.5.0 to 9.6.0 Bumps CliWrap from 3.10.2 to 3.10.5 Bumps csharpier from 1.2.6 to 1.3.0 Bumps dotnet-outdated-tool from 4.7.1 to 4.8.1 Bumps husky from 0.9.0 to 0.9.1 Bumps Microsoft.Data.Sqlite from 10.0.10 to 10.0.11 Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.10 to 10.0.11 Bumps Microsoft.NET.Test.Sdk from 18.8.1 to 18.9.0 Bumps SQLitePCLRaw.bundle_e_sqlite3 from 3.0.4 to 3.0.5 Bumps System.CommandLine from 2.0.10 to 2.0.11 Bumps xunit.analyzers from 1.27.0 to 2.0.0 Bumps xunit.runner.visualstudio from 3.1.5 to 4.0.0 Bumps xunit.v3 from 3.2.2 to 4.0.0 --- updated-dependencies: - dependency-name: AwesomeAssertions dependency-version: 9.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: CliWrap dependency-version: 3.10.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-deps - dependency-name: csharpier dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: dotnet-outdated-tool dependency-version: 4.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: husky dependency-version: 0.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-deps - dependency-name: Microsoft.Data.Sqlite dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-deps - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-deps - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: SQLitePCLRaw.bundle_e_sqlite3 dependency-version: 3.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-deps - dependency-name: System.CommandLine dependency-version: 2.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-deps - dependency-name: xunit.analyzers dependency-version: 2.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-deps - dependency-name: xunit.runner.visualstudio dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-deps - dependency-name: xunit.v3 dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-deps ... Signed-off-by: dependabot[bot] <support@github.com>

## Summary `catalog/snippets/configs/dependabot.yml`'s reference config grouped every package in an ecosystem into one catch-all PR (`patterns: ["*"]`), with no exclusion for the fleet's own lint/format toolchain packages. A formatter or linter version bump can change its own output or rule set and start flagging previously-compliant code the bump never touched, so bundling it into the catch-all group means one tool's self-bump can block an arbitrary number of unrelated, otherwise-mergeable dependency bumps together, indefinitely, with no obvious signal why. ## Evidence Investigated live via `#1055` ("Dependabot PRs stuck BLOCKED despite auto-merge enabled and all checks green"). That issue's premise doesn't hold — every affected PR checked has a real, currently-failing required check, so `mergeStateStatus: BLOCKED` is GitHub behaving correctly. One of the confirmed root causes is this hub template gap: - `ptr727/PhotoCleaner#81`-`#84`: a 13-update `nuget-deps` group bump included `csharpier` 1.2.6 -> 1.3.0. The new csharpier version reformats raw string literals differently, so `dotnet csharpier check .` now flags pre-existing, previously-compliant code (`PhotoCleaner/Database.cs`) that the bump never touched — holding the other 12 unrelated, harmless updates in the same PR hostage. Full findings (this repo and two others) posted as a comment on #1055. ## Change Add `exclude-patterns` to the `nuget-deps` and `pypi-deps` groups, naming the fleet-standard toolchain package names per `.agents/skills/dotnet-codestyle/SKILL.md` and `.agents/skills/python-codestyle/SKILL.md`: - `nuget-deps`: `csharpier`, `husky`, `dotnet-outdated-tool` - `pypi-deps`: `ruff`, `pyright`, `mypy` Each excluded package falls out of the catch-all group and gets its own individual PR instead, diagnosable and mergeable (or holdable) on its own. `actions-deps` is left unchanged — the third repo in #1055's report (ESPHome-Config) hit a different, already-tracked cause (`docs/eol-lf-rollout.md`), not a grouping/hostage problem. ## Verification - `python3 -c "import yaml; yaml.safe_load(open('catalog/snippets/configs/dependabot.yml'))"` — valid YAML. - `scripts/prose_lint.py` and `scripts/repo_gate.py` — both clean. - Pre-commit hooks ran clean on commit. 🤖 Generated with [Claude Code](https://claude.com/claude-code)  ## Summary by CodeRabbit * **Documentation** * Documented dependency update exclusions for .NET and Python tooling. * Clarified which development tools are excluded from automated update groups across main and develop branches.

…-deps-0ddaf3b6a4

Reformats Database.cs for CSharpier 1.3.0's raw string literal indentation rule, and sets IsTestingPlatformApplication to false on PhotoCleanerTests so dotnet test keeps running through the xunit.runner.visualstudio VSTest adapter. Microsoft.NET.Test.Sdk 18.9.0 and xunit.v3 4.0.0 turn that flag on by default, which the .NET 10 SDK now refuses under the classic dotnet test command this repo's CI relies on for --collect:"XPlat Code Coverage".

dependabotBot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 21, 2026

dependabotBot mentioned this pull request Aug 21, 2026
Bump the nuget-deps group with 12 updates #77
Closed

ptr727-codegenBot enabled auto-merge (squash) August 21, 2026 10:59

ptr727 mentioned this pull request Aug 28, 2026
Dependabot nuget-deps PRs stuck BLOCKED: csharpier self-bump breaks existing formatting #85
Open

Merge branch 'develop' into dependabot/nuget/dot-config/develop/nuget…
31db9e2
…-deps-0ddaf3b6a4

ptr727-codegenBot disabled auto-merge August 29, 2026 13:51

ptr727 added 2 commits August 29, 2026 07:26

Add a Runbook for a Red Dependabot PR to OPERATIONS.md
5099415

ptr727 merged commit b246e53 into developAug 29, 2026
17 checks passed

dependabotBot deleted the dependabot/nuget/dot-config/develop/nuget-deps-0ddaf3b6a4 branch August 29, 2026 14:39

ptr727 mentioned this pull request Aug 29, 2026
Promote develop to main #94
Merged

Navigation Menu

Bump the nuget-deps group with 13 updates - #81

Bump the nuget-deps group with 13 updates#81
ptr727 merged 4 commits into
developfrom
dependabot/nuget/dot-config/develop/nuget-deps-0ddaf3b6a4

dependabotBot commented on behalf of githubAug 21, 2026•
edited
Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabotBot commented on behalf of githubAug 21, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

9.6.0

What's Changed

New features

Fixes

Documentation

Others

Dependencies

New Contributors

3.10.5

What's Changed

Enhancements

Bugs

3.10.4

What's Changed

Enhancements

Bugs

3.10.3

What's Changed

Bugs

New Contributors

1.3.0

1.3.0

Breaking Changes

Change xml formatting to return error when it runs into syntax error so it is consistent with c# #​1854

What's Changed

Feature: Configurable whitespace handling for xml #​1790

Feature: Move closing bracket for xml elements to the same line. #​1598

Feature: Support for csharpier-ignore with XML formatter #​1788

Feature: Add MSBuild transitive and multi-target support #​1833

Feature: allow checking formatting with cache #​1830

Feature: remove dependency on Microsoft.AspNetCore.App #​1508

Fix: csharpier-ignore comment removes linespaces before block #​1867

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabotBot commented on behalf of githubAug 21, 2026•
edited
Loading

Change xml formatting to return error when it runs into syntax error so it is consistent with c# #1854

Feature: Configurable whitespace handling for xml #1790

Feature: Move closing bracket for xml elements to the same line. #1598

Feature: Support for csharpier-ignore with XML formatter #1788

Feature: Add MSBuild transitive and multi-target support #1833

Feature: allow checking formatting with cache #1830

Feature: remove dependency on Microsoft.AspNetCore.App #1508

Fix: csharpier-ignore comment removes linespaces before block #1867