Skip to content

Bump dependencies and clean up source warnings#277

Merged
erikdarlingdata merged 1 commit intodevfrom
chore/dep-bumps-and-warnings
Apr 25, 2026
Merged

Bump dependencies and clean up source warnings#277
erikdarlingdata merged 1 commit intodevfrom
chore/dep-bumps-and-warnings

Conversation

@erikdarlingdata
Copy link
Copy Markdown
Owner

Summary

  • Bumps Avalonia (11.3.12 → 11.3.14, DataGrid 11.3.13), ModelContextProtocol from 0.7-preview to 1.2.0 GA, the test SDK / xunit / coverlet line, and a handful of patch versions.
  • Closes 3 transitive vulnerabilities: Tmds.DBus.Protocol (GHSA-xrw6-gwf8-vvr9), System.Net.Http 4.3.0 (GHSA-7jgj-8wvc-jh57), System.Text.RegularExpressions 4.3.0 (GHSA-cmhx-cq75-c4mj).
  • Cleans up all non-AVLN source warnings: nullable derefs in PlanAnalyzer, obsolete DataGridRow.GetIndex(), unsafe ComboBoxItem cast in the QueryStore history dialog, CA1416 platform attributes on the Windows credential service, and a couple of unused using directives flagged by LSP.

Test plan

  • dotnet build PlanViewer.sln -c Debug --no-incremental — 0 errors, 0 source warnings (only pre-existing AVLN3001 axaml noise on dialogs)
  • dotnet test tests/PlanViewer.Core.Tests — 71/71 passing on the new SDK
  • dotnet list package --vulnerable --include-transitive — clean
  • Smoke-test the desktop app: open a plan, run a Query Store query, save/read a credential
  • Smoke-test the CLI: planview credential list (Windows path)

🤖 Generated with Claude Code

Dependencies:
- Avalonia 11.3.12 -> 11.3.14 (DataGrid 11.3.13)
- ModelContextProtocol + .AspNetCore 0.7.0-preview.1 -> 1.2.0 (GA)
- Microsoft.NET.Test.Sdk 17.8.0 -> 18.4.0
- xunit 2.5.3 -> 2.9.3, xunit.runner.visualstudio 2.5.3 -> 3.1.5, coverlet.collector 6.0.0 -> 10.0.0
- Meziantou.Framework.Win32.CredentialManager 1.7.17 -> 1.7.18
- ScottPlot 5.1.57 -> 5.1.58, SkiaSharp.NativeAssets.Linux 3.119.0 -> 3.119.2

Closes 3 transitive vulnerabilities: Tmds.DBus.Protocol (GHSA-xrw6-gwf8-vvr9),
System.Net.Http (GHSA-7jgj-8wvc-jh57), System.Text.RegularExpressions (GHSA-cmhx-cq75-c4mj).

Source warnings:
- PlanAnalyzer.cs: null-conditional on StatementText and PhysicalOp
- QueryStoreHistoryWindow.cs: pattern-match ComboBoxItem; replace obsolete DataGridRow.GetIndex with .Index
- WindowsCredentialService: [SupportedOSPlatform("windows5.1.2600")]
- CredentialServiceFactory: switch to OperatingSystem.IsWindows/IsMacOS; pragma at the cross-platform bridge
- CredentialCommand: explicit OperatingSystem.IsWindows guard + pragma

71/71 tests passing.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@erikdarlingdata erikdarlingdata merged commit f57fad8 into dev Apr 25, 2026
2 checks passed
@erikdarlingdata erikdarlingdata deleted the chore/dep-bumps-and-warnings branch April 25, 2026 23:25
@erikdarlingdata erikdarlingdata mentioned this pull request Apr 27, 2026
5 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant