Skip to content

Bump AwesomeAssertions and 3 others - #546

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/CreateMatrixTests/main/nuget-deps-a08f3d1859
Closed

Bump AwesomeAssertions and 3 others#546
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/CreateMatrixTests/main/nuget-deps-a08f3d1859

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 20, 2026

Copy link
Copy Markdown
Contributor

Updated AwesomeAssertions from 9.5.0 to 9.6.0.

Release notes

Sourced from AwesomeAssertions's releases.

9.6.0

What's Changed

New features

Fixes

Documentation

Others

Dependencies

New Contributors

Commits viewable in compare view.

Updated xunit.analyzers from 1.27.0 to 2.0.0.

Release notes

Sourced from xunit.analyzers's releases.

2.0.0

Release notes: https://xunit.net/releases/analyzers/2.0.0

2.0.0-pre.60

Release notes: https://xunit.net/releases/analyzers/2.0.0-pre.60

2.0.0-pre.56

Release notes: https://xunit.net/releases/analyzers/2.0.0-pre.56

2.0.0-pre.51

Release notes: https://xunit.net/releases/analyzers/2.0.0-pre.51

2.0.0-pre.40

Release notes: https://xunit.net/releases/analyzers/2.0.0-pre.40

2.0.0-pre.9

Release notes: https://xunit.net/releases/analyzers/2.0.0-pre.9

Commits viewable in compare view.

Updated xunit.runner.visualstudio from 3.1.5 to 4.0.0.

Release notes

Sourced from xunit.runner.visualstudio's releases.

4.0.0

Release notes: https://xunit.net/releases/visualstudio/4.0.0

4.0.0-pre.5

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.5

4.0.0-pre.4

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.4

4.0.0-pre.3

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.3

Commits viewable in compare view.

Updated xunit.v3 from 3.2.2 to 4.0.0.

Release notes

Sourced from xunit.v3's releases.

No release notes found for this version range.

Commits viewable in compare view.

@dependabot dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Aug 20, 2026
Bumps AwesomeAssertions from 9.5.0 to 9.6.0
Bumps xunit.analyzers from 1.27.0 to 2.0.0
Bumps xunit.runner.visualstudio from 3.1.5 to 4.0.0
Bumps xunit.v3 from 3.2.2 to 4.0.0

---
updated-dependencies:
- dependency-name: AwesomeAssertions
  dependency-version: 9.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-deps
- dependency-name: xunit.analyzers
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-deps
- dependency-name: xunit.runner.visualstudio
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-deps
- dependency-name: xunit.v3
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the nuget-deps group with 4 updates Bump AwesomeAssertions and 3 others Aug 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/nuget/CreateMatrixTests/main/nuget-deps-a08f3d1859 branch from 6e05274 to 83325ba Compare August 21, 2026 16:14
ptr727 added a commit that referenced this pull request Aug 30, 2026
…packages

xunit.v3 4.0.0 drops the VSTest bridge, so `dotnet test --collect:"XPlat Code
Coverage"` fails outright on the .NET 10 SDK with "Testing with VSTest target is
no longer supported by Microsoft.Testing.Platform". That is what has been
blocking the nuget-deps bumps in #545 and #546, and it blocks every later bump
until the runner moves.

Follow WORKFLOW.md D1.6 as the hub settled it in ptr727/ProjectTemplate#1111,
which chose Microsoft.Testing.Extensions.CodeCoverage over coverlet:

- `global.json` opts into the `Microsoft.Testing.Platform` runner. It carries no
  `sdk` section, so SDK resolution and roll-forward are untouched.
- `xunit.runner.visualstudio` is dropped, the VSTest adapter having no role under
  native MTP.
- `coverlet.collector` becomes `Microsoft.Testing.Extensions.CodeCoverage`
  18.9.0, whose predecessor's VSTest data collector MTP ignores without failing.
  The floor is load-bearing rather than cautionary: below 18.1.0 the extension is
  built against Microsoft.Testing.Platform 1.x and throws a `TypeLoadException`
  against the 2.x platform xunit.v3 4.0.0 carries, running zero tests while still
  writing a well-formed Cobertura file that reports full coverage.
- The CI unit-test step becomes
  `dotnet test --coverage --coverage-output-format cobertura --results-directory ./coverage`,
  then prefixes each report to `coverage-<guid>.cobertura.xml`. Both halves are
  load-bearing and neither reds the job on its own: `--coverage-output` stays
  unset so a second test project could not overwrite the first, and the default
  `<guid>.cobertura.xml` that produces is a name codecov-cli's finder does not
  match, its patterns being `*coverage*.*` and an exact `cobertura.xml`.

Bundle the four package bumps the runner change unblocks: AwesomeAssertions
9.5.0 -> 9.6.0, xunit.analyzers 1.27.0 -> 2.0.0, xunit.v3 3.2.2 -> 4.0.0, and
`xunit.runner.visualstudio` removed rather than bumped to 4.0.0.

`.gitignore` gains the hub's coverage block. The output was untracked and
unignored, so a blanket `git add -A` after a local coverage run would have staged
it.

Verified against the real invocation, not the documented one: 21 tests ran and
passed (not the zero the version-floor trap produces), the extension resolved at
18.9.0 on Microsoft.Testing.Platform 2.3.3, the run wrote
`<guid>.cobertura.xml` and the prefix step renamed it as intended, both filename
shapes are ignored while nothing tracked is, and the build, CSharpier,
`dotnet format style --verify-no-changes`, editorconfig-checker, actionlint,
markdownlint and cspell gates are all clean.
ptr727 added a commit that referenced this pull request Aug 30, 2026
…packages (#553)

Unblocks the Dependabot nuget PRs (#545, #546) and every later nuget
bump.

**Replaces #549**, which GitHub closed automatically when its base
branch
`resync/eol-lf` was deleted on #547's merge. Same branch, same content,
same
review history on the closed PR. This one targets `develop` directly.

The branch carries a `-s ours` merge of `develop` recorded after #547
squashed.
That is lossless here and was verified before recording: `git diff
origin/develop
2efaeb2` is empty, so the squash reproduced this branch's own ancestor
exactly,
and that ancestor is reachable from this branch, so `develop` carries
nothing the
branch lacks. The diff against `develop` is the five files below and
nothing
else.

> Reworked after ptr727/ProjectTemplate#1111 merged. The first revision
used
> `coverlet.MTP`, which was the open recommendation at the time. The hub
has since
> settled WORKFLOW.md D1.6 on
`Microsoft.Testing.Extensions.CodeCoverage`, and this
> PR now follows that instead.

## The problem

`xunit.v3` 4.0.0 removed the VSTest bridge, so the CI unit-test step's
`dotnet test --collect:"XPlat Code Coverage"` now fails outright on the
.NET 10
SDK:

```text
error : Testing with VSTest target is no longer supported by Microsoft.Testing.Platform
on .NET 10 SDK and later. If you use dotnet test, you should opt-in to the new
dotnet test experience.
```

That is what #545 and #546 have been red on, and it blocks every later
bump until
the runner moves.

## The fix, per WORKFLOW.md D1.6

| Change | Why |
| --- | --- |
| `global.json` with `{"test":{"runner":"Microsoft.Testing.Platform"}}`
| opts into the native MTP runner. No `sdk` section, so SDK resolution
and roll-forward are untouched. |
| drop `xunit.runner.visualstudio` | the VSTest adapter MTP replaces |
| `coverlet.collector` -> `Microsoft.Testing.Extensions.CodeCoverage`
18.9.0 | coverlet's VSTest data collector is ignored under MTP without
failing |
| CI step -> `dotnet test --coverage --coverage-output-format cobertura
--results-directory ./coverage`, then prefix each report to
`coverage-<guid>.cobertura.xml` | matches the hub's `validate-task.yml`
byte for byte |

Three details are load-bearing, and none of them reds the job on its
own:

- **The 18.9.0 floor.** Below 18.1.0 the extension is built against
Microsoft.Testing.Platform 1.x and throws `TypeLoadException` against
the 2.x
platform xunit.v3 4.0.0 carries. It then runs **zero tests** and still
writes a
  well-formed Cobertura file reporting full coverage.
- **`--coverage-output` stays unset.** Pinning one filename would give
every test
project in a solution the same path, and the last to finish would
overwrite the
  rest.
- **The prefix rename.** The default `<guid>.cobertura.xml` that the
unset flag
produces is a name codecov-cli's finder does not match (its patterns are
`*coverage*.*` and an exact `cobertura.xml`), so an unprefixed report
uploads
  nothing while the step still exits green.

Package bumps the runner change unblocks: AwesomeAssertions 9.5.0 ->
9.6.0,
xunit.analyzers 1.27.0 -> 2.0.0, xunit.v3 3.2.2 -> 4.0.0.
`Microsoft.NET.Test.Sdk` stays at 18.9.0 (already current).

`.gitignore` gains the hub's dotnet coverage block verbatim. The output
was
untracked and unignored, so a blanket `git add -A` after a local
coverage run
would have staged it.

## Verification

Against the real invocation, not the documented one:

- 21 tests **ran** and passed, which is the check that matters given the
  zero-test failure mode above.
- Resolved graph (from `obj/project.assets.json`, not the csproj text):
  `Microsoft.Testing.Extensions.CodeCoverage/18.9.0`,
`Microsoft.Testing.Platform/2.3.3`, `xunit.v3/4.0.0` with the `mtp-v2`
variants.
  No coverlet, no `xunit.runner.visualstudio`.
- The run wrote `bbfde807-....cobertura.xml` and the prefix step renamed
it to
`coverage-bbfde807-....cobertura.xml`, confirming the rename is
genuinely
  needed rather than defensive.
- `git check-ignore` covers both filename shapes;
  `git ls-files -z | xargs -0 git check-ignore -v` is empty.
- `validate-task.yml` is the only `dotnet test` caller;
`publish-release.yml` and
`test-pull-request.yml` both reach it via `uses:`, so the publish gate
and the
  PR gate move together. No `--collect` survives anywhere.
- Build, CSharpier, `dotnet format style --verify-no-changes`,
  editorconfig-checker, actionlint, markdownlint and cspell all clean.

**One thing worth knowing:** the reported coverage number moves, because
the
engine does. Line rate goes from 0.59 under coverlet to 0.26 here, with
lines-valid 1350 -> 3143, since this engine instruments more of the
graph. It
cannot gate anything: `codecov.yml` sets `informational: true` on both
project
and patch, and the only ruleset-required check is
`Check pull request workflow status job`.

## Notes

- Dependabot dual-targets `develop` and `main`, so #546 (the `main`
copy) stays
blocked until this reaches `main` via the promotion PR. `main`'s tree is
not
  broken in the meantime, it just cannot take the bump.
- The fleet audit flags this repo's local `validate-task.yml` as
`hub-only`.
Now that ptr727/ProjectTemplate#1111 has landed MTP support in the hub's
reusable workflow, that migration is unblocked, but it is a separate
interface
change covering five workflow files and belongs in its own PR rather
than here.


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Improvements**
* Improved automated test execution and code coverage reporting in
continuous integration.
* Coverage reports are now generated in a standardized format for more
reliable analysis.

* **Documentation**
* Added guidance for running tests locally and understanding coverage
validation.

* **Chores**
* Updated testing tools and configuration to use the modern test
platform.
* Added rules to keep generated test and coverage files out of source
control.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
@dependabot @github

dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 31, 2026
@dependabot
dependabot Bot deleted the dependabot/nuget/CreateMatrixTests/main/nuget-deps-a08f3d1859 branch August 31, 2026 01:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants