Skip to content

CONFIG: Update NuGet dependencies and modernise ADotNet build/PR workflows#211

Open
perirrs wants to merge 11 commits into
mainfrom
users/perirrs/config-changes
Open

CONFIG: Update NuGet dependencies and modernise ADotNet build/PR workflows#211
perirrs wants to merge 11 commits into
mainfrom
users/perirrs/config-changes

Conversation

@perirrs

@perirrs perirrs commented Jul 6, 2026

Copy link
Copy Markdown

Summary

Brings MeshClient up to the .NET 10 modernisation standard.

closes AB#29755

Dependency updates (CONFIG)

  • Microsoft.Extensions.DependencyInjection 10.0.8 -> 10.0.9
  • Microsoft.Extensions.Configuration 10.0.8 -> 10.0.9
  • Microsoft.Extensions.Configuration.Json 10.0.8 -> 10.0.9
  • Microsoft.Extensions.Configuration.Binder 10.0.8 -> 10.0.9
  • Microsoft.Extensions.Configuration.EnvironmentVariables 10.0.8 -> 10.0.9
  • Microsoft.Extensions.Hosting 10.0.8 -> 10.0.9
  • Microsoft.NET.Test.Sdk 18.5.1 -> 18.7.0
  • WireMock.Net 2.6.0 -> 2.11.0
  • ADotNet 4.3.0 -> 5.0.0
  • dependabot: add FluentAssertions ignore rule (locked at [7.2.2])

Workflow modernisation (CODE RUB)

  • ADotNet components -> latest (CheckoutTaskV5 / SetupDotNetTaskV5 / LabelJobV3 / TagJobV2 / PublishJobV4); build.yml now on Node-24 actions (checkout@v5, setup-dotnet@v5, github-script@v8)
  • prLinter.yml: added Set Author As PR Assignee; RequireIssueOrTask -> V2 (excludes dependabot[bot]); Label -> V3
  • Dropped the PR branch-filter from build.yml (kept the filter on prLinter, per Christo)

Validation

  • Build: 0 errors, 0 obsolete warnings
  • Tests: 310 pass (292 Unit + 8 Integration + 10 Acceptance)
  • Workflows regenerated from the Infrastructure project (idempotent, not hand-edited)

Note for reviewer

  • WireMock.Net 2.11.0 (latest) reduces the pre-existing Scriban.Signed vuln from High -> Moderate (test-only transitive, not shipped). Fully clearing it would require pinning the transitive (Rule CLIENTS: Mesh Client #9 sign-off) - left as-is for a decision.

Copilot AI review requested due to automatic review settings July 6, 2026 22:15
@github-actions github-actions Bot added the CONFIG label Jul 6, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates MeshClient to align with the project’s .NET 10 modernization standard by refreshing NuGet dependencies and regenerating/modernizing GitHub workflows via ADotNet v5.

Changes:

  • Bumped Microsoft.Extensions.* packages to 10.0.9, updated Microsoft.NET.Test.Sdk to 18.7.0, and updated test dependency WireMock.Net to 2.11.0.
  • Upgraded NEL.MESH.Infrastructure to ADotNet 5.0.0 and updated pipeline generation to newer ADotNet workflow components.
  • Modernized GitHub workflows (newer checkout/setup-dotnet/github-script actions; PR linter enhancements incl. assignee automation).

Reviewed changes

Copilot reviewed 11 out of 11 changed files in this pull request and generated 3 comments.

Show a summary per file
File Description
NEL.MESH/NEL.MESH.csproj Updates Microsoft.Extensions.DependencyInjection / Hosting to 10.0.9.
NEL.MESH.UI/NEL.MESH.UI.csproj Updates Microsoft.Extensions.Configuration* packages to 10.0.9.
NEL.MESH.Tests.Unit/NEL.MESH.Tests.Unit.csproj Updates test SDK + config packages to 10.0.9 / 18.7.0.
NEL.MESH.Tests.Integration/NEL.MESH.Tests.Integration.csproj Updates test SDK + config packages to 10.0.9 / 18.7.0.
NEL.MESH.Tests.Integration.Witness/NEL.MESH.Tests.Integration.Witness.csproj Updates test SDK + config packages to 10.0.9 / 18.7.0.
NEL.MESH.Tests.Acceptance/NEL.MESH.Tests.Acceptance.csproj Updates test SDK + config packages and bumps WireMock.Net to 2.11.0.
NEL.MESH.Infrastructure/Services/ScriptGenerationService.cs Updates ADotNet pipeline generation to newer task/job versions and PR linter jobs.
NEL.MESH.Infrastructure/NEL.MESH.Infrastructure.csproj Upgrades ADotNet from 4.3.0 to 5.0.0.
.github/workflows/prLinter.yml Updates actions versions, adds fork guards, and adds “Set Author As PR Assignee” job.
.github/workflows/build.yml Updates checkout / setup-dotnet actions to v5 and adjusts PR trigger filtering.
.github/dependabot.yml Adds FluentAssertions ignore rules.

Comment thread .github/dependabot.yml
Comment on lines +16 to +18
ignore:
- dependency-name: "FluentAssertions"
versions: ["8.x", "9.x", "10.x", "*"]
Comment on lines 86 to 89
permissions:
contents: read
issues: write
pull-requests: write
Comment on lines +171 to +174
permissions:
contents: read
issues: write
pull-requests: write
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants