Skip to content

chore(deps): bump actions/setup-dotnet from 5 to 6 - #4248

Merged
iancooper merged 2 commits into
masterfrom
dependabot/github_actions/actions/setup-dotnet-6
Jul 27, 2026
Merged

chore(deps): bump actions/setup-dotnet from 5 to 6#4248
iancooper merged 2 commits into
masterfrom
dependabot/github_actions/actions/setup-dotnet-6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 19, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/setup-dotnet from 5 to 6.

Release notes

Sourced from actions/setup-dotnet's releases.

v6.0.0

What's Changed

New Contributors

Full Changelog: actions/setup-dotnet@v5...v6.0.0

v5.4.0

What's Changed

Enhancements

Documentation

Bug Fixes

Dependency Updates

New Contributors

Full Changelog: actions/setup-dotnet@v5...v5.4.0

v5.3.0

What's Changed

Enhancements

Dependency Updates

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/setup-dotnet](https://github.com/actions/setup-dotnet) from 5 to 6.
- [Release notes](https://github.com/actions/setup-dotnet/releases)
- [Commits](actions/setup-dotnet@v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-dotnet
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 19, 2026
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 19, 2026
@dependabot
dependabot Bot requested review from DevJonny and preardon as code owners July 19, 2026 16:02
@dependabot dependabot Bot added the github_actions Pull requests that update GitHub Actions code label Jul 19, 2026
@github-actions github-actions Bot added the Maintenance Build, CI, refactoring, testing infrastructure, and other chores label Jul 19, 2026
@claude

claude Bot commented Jul 20, 2026

Copy link
Copy Markdown

PR Review: bump actions/setup-dotnet v5 to v6

Summary: Straightforward Dependabot dependency bump. All 20+ actions/setup-dotnet@v5 references across ci.yml and codeql-analysis.yml are updated to @v6. No source code is touched, so the usual quality/bug/perf/security concerns do not apply here — the review reduces to: is the major-version bump safe?

What is good

  • Consistent and complete. grep confirms zero remaining @v5 references. Even the commented-out RocketMQ job block was updated, which keeps it accurate for whenever it is re-enabled.
  • No input changes required. The v6 breaking change is internal (migration to ESM + dependency upgrades per the v6.0.0 release notes: https://github.com/actions/setup-dotnet/releases); the dotnet-version: multiline input syntax used throughout is unchanged, so no config migration is needed.

Things to confirm before merge

  • This is a semver-major bump, so the real gate is green CI. v6 raises the action Node runtime (ESM migration) — GitHub-hosted ubuntu-latest runners support this, but it is worth watching the first run across the matrix (build, test, packaging, and the CodeQL job) to be sure no cached/older runner behavior surfaces.
  • Since this changes the toolchain-setup action used by essentially every job, a full CI pass is sufficient verification — no additional testing needed.

Minor (pre-existing, out of scope — not introduced here)

  • In codeql-analysis.yml the step is named "Setup dotnet 6.0.x" but installs 8.0.x. This predates the PR; flagging only for future cleanup, not as a blocker for this change.

Verdict: Safe to merge once CI is green. No code, style, or security concerns within the scope of this diff.

@iancooper
iancooper merged commit c4f386b into master Jul 27, 2026
28 of 29 checks passed
@iancooper
iancooper deleted the dependabot/github_actions/actions/setup-dotnet-6 branch July 27, 2026 09:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code Maintenance Build, CI, refactoring, testing infrastructure, and other chores

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant