Skip to content

Dependency updates: merge as soon as build passes, one NUnit version, fast-uri security fix (version 0.4.6) - #52

Merged
EaZyCheaZ merged 2 commits into
devfrom
p1-dependency-updates-retry
Oct 25, 2026
Merged

EaZyCheaZ merged 2 commits into
devfrom
p1-dependency-updates-retry

Conversation

@EaZyCheaZ

Copy link
Copy Markdown
Contributor

Task 4f follow-up.

  • Merge right after build. The update workflow now also runs when a build it started finishes (workflow_run on Build, dispatched runs only). If that build passed it merges the update straight away and moves on to the next one; if it failed it holds the update and moves on. Before, the next step waited for the hourly run, which GitHub hadn't fired once in the hour since it was added.
  • One NUnit version. NUnit was set in src/Directory.Build.props (for every test project) and in Requestarr.Test.Common. Dependabot only updates the second, so Backend packages: Bump the backend group with 12 updates #49 failed with a package downgrade. It now comes only from Requestarr.Test.Common, which every test project that uses it references.
  • fast-uri 3.1.9 in yarn.lock (build tooling only, nothing shipped), which fixes Dependabot alerts 10 to 13. Dependabot hadn't opened its own security PR.
  • Docs: docs/development.md#dependency-updates updated.

Version 0.4.6, heading only (nothing a user or admin sees).

Tests: solution build 0 warnings; Common 682 passed, 0 failed, 14 skipped; Core 1,023 passed, 0 failed, 3 skipped; update script self-test 17 of 17.

@EaZyCheaZ
EaZyCheaZ merged commit 4178601 into dev Oct 25, 2026
23 checks passed
@EaZyCheaZ
EaZyCheaZ deleted the p1-dependency-updates-retry branch October 25, 2026 09:38
@EaZyCheaZ EaZyCheaZ added the security Fixes a published security problem label Oct 25, 2026
@EaZyCheaZ EaZyCheaZ mentioned this pull request Oct 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security Fixes a published security problem

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant