chore(deps): Bump FluentAssertions from 6.12.0 to 8.8.0 by dependabot[bot] · Pull Request #11 · petitan/IronBase

Fixed formatting error when checking nullable DateTimeOffset with BeWithin(...).Before(...) - #2312
BeEquivalentTo will now find and can map subject properties that are implemented through an explicitly-implemented interface - #2152
Fixed that the because and becauseArgs were not passed down the equivalency tree - #2318
BeEquivalentTo can again compare a non-generic IDictionary with a generic one - #2358
Fixed that the FormattingOptions were not respected in inner AssertionScope - #2329
Capitalize true and false in failure messages and make them formattable to a custom BooleanFormatter - #2390, #2393
Improved the failure message for NotBeOfType when wrapped in an AssertionScope and the subject is null - #2399
Improved the failure message for BeWritable/BeReadable when wrapped in an AssertionScope and the subject is read-only/write-only - #2399
Improved the failure message for ThrowExactly[Async] when wrapped in an AssertionScope and no exception is thrown - #2398
Improved the failure message for [Not]HaveExplicitProperty when wrapped in an AssertionScope and not implementing the interface - #2403
Improved the failure message for [Not]HaveExplicitMethod when wrapped in an AssertionScope and not implementing the interface - #2403
Changed BeEquivalentTo to exclude private protected members from the comparison - #2417
Fixed using BeEquivalentTo on an empty ArraySegment - #2445, #2511
BeEquivalentTo with a custom comparer can now handle null values - #2489
Ensured that nested calls to AssertionScope(context) create a chained context - #2607
One overload of the AssertionScope constructor would not create an actual scope associated with the thread - #2607
Fixed ThrowWithinAsync not respecting OperationCanceledException - #2614
Fixed using BeEquivalentTo with an IEqualityComparer targeting nullable types - #2648

Full Changelog: fluentassertions/fluentassertions@6.12.0...6.12.1

Commits viewable in compare view.

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

--- updated-dependencies: - dependency-name: FluentAssertions dependency-version: 8.8.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-11-26T21:37:38Z

Labels

The following labels could not be found: dependencies, dotnet. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

CRITICAL: - BUG #1: Transaction commit/rollback now uses write lock (was read lock - race condition) - BUG #2: max_operations=0 now uses default limit (was unlimited - DoS vulnerability) - BUG #3: switch_database acquires write lock before existence check (TOCTOU fix) - BUG #4: API key serialization uses ? instead of unwrap (was panic risk) HIGH: - BUG #5: Script versioning uses optimistic locking with version check (race condition fix) - BUG #6: API key cache logs errors instead of silent ignore - BUG #7: Script delete checks for dependent scripts before deletion - BUG #8: TLS key file read once into memory, no double-open - BUG #9: Collection flags update uses write lock (was read lock) MEDIUM: - BUG #10: Projection validation checks values before truncating cast - BUG #12: Script name validation added (same rules as collection names) - BUG #13: Directory creation failures logged instead of silent ignore - BUG #14: All unwrap/expect calls replaced with proper error handling NOT A BUG: - BUG #11: parking_lot::Mutex doesn't poison (verified) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

BUG #1: Signal handler panic - .expect() replaced with graceful error handling BUG #2: Error response body read - unwrap_or_default() replaced with proper error handling BUG #3: JSON serialization - .ok() replaced with serialize_response() helper BUG #4: stdout write errors - detect broken pipe and exit gracefully BUG #5: DoS via unbounded batch - add MAX_BATCH_SIZE limit (1000) BUG #6: DoS via response size - add MAX_RESPONSE_SIZE limit (10MB) BUG #7: SSRF via URL parsing - use url crate for proper URL construction BUG #8: Insecure TLS mode - add prominent warning banner BUG #9: Notification errors silent - log notification forward errors BUG #10: Health check sleep overflow - cap backoff to MAX_HEALTH_BACKOFF_MS BUG #11: Empty batch allowed - reject per JSON-RPC 2.0 spec BUG #12: Missing jsonrpc validation - validate "2.0" version field 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Bug fixes for timeout/cancellation not being enforced in several code paths: ## Critical fixes (BUG #3, #4, #11) - filter_doc_ids_by_query: Now checks deadline BEFORE expensive regex matching - collect_doc_ids_for_logical_operator: Propagates cancel_flag/deadline to all branches (And/Or/Nor) - distinct_with_ctx: Was ignoring ctx parameter, now properly extracts and passes deadline ## Medium severity fixes (BUG #1, #2, #5) - FAST PATH: Added deadline check before returning cached/fast results - collect_doc_ids_from_plan: Added cancel_flag/deadline parameters - find_with_index: Added ctx parameters for future support ## ACID Safety Write operations (insert/update/delete) explicitly pass None for deadline to preserve atomicity - only READ operations can be interrupted. ## Documentation - Added deadline propagation docs to QueryExecutionContext - Added timeout behavior docs to filter_doc_ids_by_query Propagation chain: collect_doc_ids_with_options → collect_doc_ids_from_plan → collect_doc_ids_for_logical_operator → filter_doc_ids_by_query → scan_documents_with_early_termination 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

chore(deps): Bump FluentAssertions from 6.12.0 to 8.8.0

14a71ee

--- updated-dependencies: - dependency-name: FluentAssertions dependency-version: 8.8.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot requested a review from petitan as a code owner November 26, 2025 21:37

petitan mentioned this pull request Feb 11, 2026

rag_document_import: overlap parameter ignored in text mode #32

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): Bump FluentAssertions from 6.12.0 to 8.8.0#11

chore(deps): Bump FluentAssertions from 6.12.0 to 8.8.0#11
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/nuget/IronBase.NET/src/IronBase.Tests/FluentAssertions-8.8.0

dependabot bot commented on behalf of github Nov 26, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Nov 26, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Nov 26, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

8.8.0

What's Changed

New features

Improvements

Documentation

Others

8.7.1

What's Changed

Others

8.7.0

What's Changed

New features

Others

8.6.0

What's Changed

Improvements

Others

New Contributors

8.5.0

What's Changed

New features

Fixes

Others

8.4.0

What's Changed

Improvements

Others

New Contributors

8.3.0

What's Changed

Improvements

Others

8.2.0

What's Changed

Improvements

Fixes

Others

8.1.1

What's Changed

Fixes

8.1.0

What's Changed

Improvements

Fixes

Documentation

Others

New Contributors

8.0.1

What's Changed

Improvements

Others

8.0.0

What's Changed

License change

Breaking Changes

New features

Improvements

8.0.0-rc.2

What's Changed

Fixes

Others

8.0.0-rc.1

What's Changed

Breaking Changes

Fixes

Documentation

Others

8.0.0-alpha.1

What's Changed

Others

7.2.0

What's Changed

Improvements

Fixes

Others

7.1.0

What's Changed

dependabot bot commented on behalf of github Nov 26, 2025 •

edited

Loading