From b74d330f15cd2dcabc948380edd56a3a67e37d5b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 14 Aug 2026 04:15:58 +0000 Subject: [PATCH 1/3] chore(deps): Bump the nuget-minor-patch group with 2 updates Bumps dotnet-ef from 10.0.10 to 10.0.11 Bumps Microsoft.OpenApi from 2.11.0 to 2.12.0 --- updated-dependencies: - dependency-name: dotnet-ef dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: Microsoft.OpenApi dependency-version: 2.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch ... Signed-off-by: dependabot[bot] --- .config/dotnet-tools.json | 2 +- src/Cluckwork.Api/Cluckwork.Api.csproj | 2 +- src/Cluckwork.Api/packages.lock.json | 6 +++--- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.config/dotnet-tools.json b/.config/dotnet-tools.json index cce89d81e..6030b2494 100644 --- a/.config/dotnet-tools.json +++ b/.config/dotnet-tools.json @@ -3,7 +3,7 @@ "isRoot": true, "tools": { "dotnet-ef": { - "version": "10.0.10", + "version": "10.0.11", "commands": [ "dotnet-ef" ], diff --git a/src/Cluckwork.Api/Cluckwork.Api.csproj b/src/Cluckwork.Api/Cluckwork.Api.csproj index 483f41208..2ee4158f5 100644 --- a/src/Cluckwork.Api/Cluckwork.Api.csproj +++ b/src/Cluckwork.Api/Cluckwork.Api.csproj @@ -13,7 +13,7 @@ - + all diff --git a/src/Cluckwork.Api/packages.lock.json b/src/Cluckwork.Api/packages.lock.json index 6eb6800ca..feba9f522 100644 --- a/src/Cluckwork.Api/packages.lock.json +++ b/src/Cluckwork.Api/packages.lock.json @@ -45,9 +45,9 @@ }, "Microsoft.OpenApi": { "type": "Direct", - "requested": "[2.11.0, )", - "resolved": "2.11.0", - "contentHash": "/ignjfdeKT2SGLIR7QEv19KnI0rvoxRG/TYDOZdK9EsWLjKK9IK8i1Mo5NRm9PRV3i64DzlTqnIflWvoyfljLg==" + "requested": "[2.12.0, )", + "resolved": "2.12.0", + "contentHash": "0xB/be+f6qYOhvQPUrVsLrau+fkowYv6gt9RIkajMhwT7sZnqtcA797yW3bS5kgSje+AQW4xZgyLnW641YFioQ==" }, "OpenTelemetry.Exporter.OpenTelemetryProtocol": { "type": "Direct", From f3eef9edd53d7849b05f8c8e967c930fcf84847e Mon Sep 17 00:00:00 2001 From: Claude Date: Sun, 16 Aug 2026 07:00:47 +0000 Subject: [PATCH 2/3] chore(deps): regenerate downstream packages.lock.json for #528 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The dependabot-lockfix workflow (#203) exists to auto-heal exactly this — a Dependabot bump changing one project's lock while downstream projects' locks go stale — but its provenance gate requires the triggering actor to be dependabot[bot], so it can't fire on a manually-pushed rebase like this one. Ran the same restore it would have (dotnet restore --force-evaluate --configfile .github/nuget.lockfix.config) and committing the result directly instead. --- .../packages.lock.json | 40 +++++++++---------- .../packages.lock.json | 22 +++++----- .../Cluckwork.Domain.Tests/packages.lock.json | 22 +++++----- 3 files changed, 42 insertions(+), 42 deletions(-) diff --git a/tests/Cluckwork.Api.IntegrationTests/packages.lock.json b/tests/Cluckwork.Api.IntegrationTests/packages.lock.json index 579050cbf..acdf7b706 100644 --- a/tests/Cluckwork.Api.IntegrationTests/packages.lock.json +++ b/tests/Cluckwork.Api.IntegrationTests/packages.lock.json @@ -15,11 +15,11 @@ "Microsoft.NET.Test.Sdk": { "type": "Direct", "requested": "[18.*, )", - "resolved": "18.8.1", - "contentHash": "dknJL3/9Y3t4XuCBqnc0PevPxgLsUMmVhjwup/b1HNovA8zWcj3XsfIf7c6p05363DWcqL7X/YhDL9B+Zymv1w==", + "resolved": "18.9.0", + "contentHash": "xIzVXa/VpKXqDWzyC/5Hw8JbFY5u9k3Jc53CpcjBiOXvkQGio484LD9FNwOiGUSMDcYL3Rcw9sNgGi5WrswlPQ==", "dependencies": { - "Microsoft.CodeCoverage": "18.8.1", - "Microsoft.TestPlatform.TestHost": "18.8.1" + "Microsoft.CodeCoverage": "18.9.0", + "Microsoft.TestPlatform.TestHost": "18.9.0" } }, "SSH.NET": { @@ -34,10 +34,10 @@ "Testcontainers.PostgreSql": { "type": "Direct", "requested": "[4.*, )", - "resolved": "4.13.0", - "contentHash": "2ow4AE8drI9iA9Fr4ycAPusXPB1lJfQyyNONSMLE/XqLpm8VuNAh3pK38fOjkOWtTrnD03s4hAIdl4036Ik69A==", + "resolved": "4.14.0", + "contentHash": "OPHWR9oCW89yuNxJjUo8Xtwrk0bcOdzFOE2Ryo01GAf/3WEzD+0j0gmdKSxx5kBprCdlbXurBJyaV7nSLPyWKQ==", "dependencies": { - "Testcontainers": "4.13.0" + "Testcontainers": "4.14.0" } }, "xunit": { @@ -160,8 +160,8 @@ }, "Microsoft.CodeCoverage": { "type": "Transitive", - "resolved": "18.8.1", - "contentHash": "Eclse/ZZjr4lmWzZFNN9h/OluhKL+SK/QbUyKUewgX139aGeyMEO/DkMPwuFs2MixvanTnz6891rF8UHDg+W4Q==" + "resolved": "18.9.0", + "contentHash": "MtegCIKGuG0r/LCdIjoR1HgzCGIUBhR3aNdbtQpts5vMXQuqBDZ2Jsd2uFKoHFM2XrQV6ZrDf3F5oLi3SLTp8w==" }, "Microsoft.EntityFrameworkCore": { "type": "Transitive", @@ -244,20 +244,20 @@ }, "Microsoft.OpenApi": { "type": "Transitive", - "resolved": "2.11.0", - "contentHash": "/ignjfdeKT2SGLIR7QEv19KnI0rvoxRG/TYDOZdK9EsWLjKK9IK8i1Mo5NRm9PRV3i64DzlTqnIflWvoyfljLg==" + "resolved": "2.12.0", + "contentHash": "0xB/be+f6qYOhvQPUrVsLrau+fkowYv6gt9RIkajMhwT7sZnqtcA797yW3bS5kgSje+AQW4xZgyLnW641YFioQ==" }, "Microsoft.TestPlatform.ObjectModel": { "type": "Transitive", - "resolved": "18.8.1", - "contentHash": "qLbktNB1+b1XZLNJBTzaWVVJAd6PEzD7cgD406geMb6PcFZhp3EDNa1tctWx1+mtMU6MP/6ozVvFPC9vs2a9rw==" + "resolved": "18.9.0", + "contentHash": "Fz/qXC52VXXopzHj7v2reCKcCqSxkTDCkEDfkNAH0vni/7qK/KLMiEYtRmnUanxO2F2g2zZZ60qCpxF0AF7URA==" }, "Microsoft.TestPlatform.TestHost": { "type": "Transitive", - "resolved": "18.8.1", - "contentHash": "FaQHPDTUOcE+SFTjssNPfrub2lT9Zyon4J2W/KLHt/efLJACb1TCeWXyOgh0D/4Q1e4n+S3E6mOKud+9nLZlEA==", + "resolved": "18.9.0", + "contentHash": "Oq+Pma/J86aZL72t71bcESvDszDsTjUfl6PIsuDdPoKTHZfNMhKamCfLD5fKx51W/u0KozXtJo2/3fnt0sgPxg==", "dependencies": { - "Microsoft.TestPlatform.ObjectModel": "18.8.1" + "Microsoft.TestPlatform.ObjectModel": "18.9.0" } }, "Npgsql": { @@ -434,12 +434,12 @@ }, "Testcontainers": { "type": "Transitive", - "resolved": "4.13.0", - "contentHash": "j8vi9jPBNSwaraGGx8w+2gtZyWrlbKxdhiGMS3nektg+KiwjFWx9ghCjs57EoQfvI+IAbzti0oQJupQChwgMog==", + "resolved": "4.14.0", + "contentHash": "ojuBi91xcMsR6vnFuNsQDWU9tlZlrtmqy95VPNWVVnh24GiwFL/WMnVmb6bRv8LqovtnKPJN9cpmH1k02Z4ZoA==", "dependencies": { "Docker.DotNet.Enhanced": "4.3.3", "Docker.DotNet.Enhanced.X509": "4.3.3", - "SSH.NET": "2025.1.0", + "SSH.NET": "2026.0.0", "SharpZipLib": "1.4.2" } }, @@ -492,7 +492,7 @@ "FluentValidation": "[12.*, )", "Microsoft.AspNetCore.Authentication.JwtBearer": "[10.*, )", "Microsoft.AspNetCore.OpenApi": "[10.*, )", - "Microsoft.OpenApi": "[2.11.0, )", + "Microsoft.OpenApi": "[2.12.0, )", "OpenTelemetry.Exporter.OpenTelemetryProtocol": "[1.*, )", "OpenTelemetry.Extensions.Hosting": "[1.*, )", "OpenTelemetry.Instrumentation.AspNetCore": "[1.*, )", diff --git a/tests/Cluckwork.Application.Tests/packages.lock.json b/tests/Cluckwork.Application.Tests/packages.lock.json index 87265ac64..15ba351e6 100644 --- a/tests/Cluckwork.Application.Tests/packages.lock.json +++ b/tests/Cluckwork.Application.Tests/packages.lock.json @@ -5,11 +5,11 @@ "Microsoft.NET.Test.Sdk": { "type": "Direct", "requested": "[18.*, )", - "resolved": "18.8.1", - "contentHash": "dknJL3/9Y3t4XuCBqnc0PevPxgLsUMmVhjwup/b1HNovA8zWcj3XsfIf7c6p05363DWcqL7X/YhDL9B+Zymv1w==", + "resolved": "18.9.0", + "contentHash": "xIzVXa/VpKXqDWzyC/5Hw8JbFY5u9k3Jc53CpcjBiOXvkQGio484LD9FNwOiGUSMDcYL3Rcw9sNgGi5WrswlPQ==", "dependencies": { - "Microsoft.CodeCoverage": "18.8.1", - "Microsoft.TestPlatform.TestHost": "18.8.1" + "Microsoft.CodeCoverage": "18.9.0", + "Microsoft.TestPlatform.TestHost": "18.9.0" } }, "xunit": { @@ -36,8 +36,8 @@ }, "Microsoft.CodeCoverage": { "type": "Transitive", - "resolved": "18.8.1", - "contentHash": "Eclse/ZZjr4lmWzZFNN9h/OluhKL+SK/QbUyKUewgX139aGeyMEO/DkMPwuFs2MixvanTnz6891rF8UHDg+W4Q==" + "resolved": "18.9.0", + "contentHash": "MtegCIKGuG0r/LCdIjoR1HgzCGIUBhR3aNdbtQpts5vMXQuqBDZ2Jsd2uFKoHFM2XrQV6ZrDf3F5oLi3SLTp8w==" }, "Microsoft.Extensions.DependencyInjection.Abstractions": { "type": "Transitive", @@ -54,15 +54,15 @@ }, "Microsoft.TestPlatform.ObjectModel": { "type": "Transitive", - "resolved": "18.8.1", - "contentHash": "qLbktNB1+b1XZLNJBTzaWVVJAd6PEzD7cgD406geMb6PcFZhp3EDNa1tctWx1+mtMU6MP/6ozVvFPC9vs2a9rw==" + "resolved": "18.9.0", + "contentHash": "Fz/qXC52VXXopzHj7v2reCKcCqSxkTDCkEDfkNAH0vni/7qK/KLMiEYtRmnUanxO2F2g2zZZ60qCpxF0AF7URA==" }, "Microsoft.TestPlatform.TestHost": { "type": "Transitive", - "resolved": "18.8.1", - "contentHash": "FaQHPDTUOcE+SFTjssNPfrub2lT9Zyon4J2W/KLHt/efLJACb1TCeWXyOgh0D/4Q1e4n+S3E6mOKud+9nLZlEA==", + "resolved": "18.9.0", + "contentHash": "Oq+Pma/J86aZL72t71bcESvDszDsTjUfl6PIsuDdPoKTHZfNMhKamCfLD5fKx51W/u0KozXtJo2/3fnt0sgPxg==", "dependencies": { - "Microsoft.TestPlatform.ObjectModel": "18.8.1" + "Microsoft.TestPlatform.ObjectModel": "18.9.0" } }, "Riok.Mapperly": { diff --git a/tests/Cluckwork.Domain.Tests/packages.lock.json b/tests/Cluckwork.Domain.Tests/packages.lock.json index 763137460..4bc7e1c56 100644 --- a/tests/Cluckwork.Domain.Tests/packages.lock.json +++ b/tests/Cluckwork.Domain.Tests/packages.lock.json @@ -5,11 +5,11 @@ "Microsoft.NET.Test.Sdk": { "type": "Direct", "requested": "[18.*, )", - "resolved": "18.8.1", - "contentHash": "dknJL3/9Y3t4XuCBqnc0PevPxgLsUMmVhjwup/b1HNovA8zWcj3XsfIf7c6p05363DWcqL7X/YhDL9B+Zymv1w==", + "resolved": "18.9.0", + "contentHash": "xIzVXa/VpKXqDWzyC/5Hw8JbFY5u9k3Jc53CpcjBiOXvkQGio484LD9FNwOiGUSMDcYL3Rcw9sNgGi5WrswlPQ==", "dependencies": { - "Microsoft.CodeCoverage": "18.8.1", - "Microsoft.TestPlatform.TestHost": "18.8.1" + "Microsoft.CodeCoverage": "18.9.0", + "Microsoft.TestPlatform.TestHost": "18.9.0" } }, "xunit": { @@ -31,20 +31,20 @@ }, "Microsoft.CodeCoverage": { "type": "Transitive", - "resolved": "18.8.1", - "contentHash": "Eclse/ZZjr4lmWzZFNN9h/OluhKL+SK/QbUyKUewgX139aGeyMEO/DkMPwuFs2MixvanTnz6891rF8UHDg+W4Q==" + "resolved": "18.9.0", + "contentHash": "MtegCIKGuG0r/LCdIjoR1HgzCGIUBhR3aNdbtQpts5vMXQuqBDZ2Jsd2uFKoHFM2XrQV6ZrDf3F5oLi3SLTp8w==" }, "Microsoft.TestPlatform.ObjectModel": { "type": "Transitive", - "resolved": "18.8.1", - "contentHash": "qLbktNB1+b1XZLNJBTzaWVVJAd6PEzD7cgD406geMb6PcFZhp3EDNa1tctWx1+mtMU6MP/6ozVvFPC9vs2a9rw==" + "resolved": "18.9.0", + "contentHash": "Fz/qXC52VXXopzHj7v2reCKcCqSxkTDCkEDfkNAH0vni/7qK/KLMiEYtRmnUanxO2F2g2zZZ60qCpxF0AF7URA==" }, "Microsoft.TestPlatform.TestHost": { "type": "Transitive", - "resolved": "18.8.1", - "contentHash": "FaQHPDTUOcE+SFTjssNPfrub2lT9Zyon4J2W/KLHt/efLJACb1TCeWXyOgh0D/4Q1e4n+S3E6mOKud+9nLZlEA==", + "resolved": "18.9.0", + "contentHash": "Oq+Pma/J86aZL72t71bcESvDszDsTjUfl6PIsuDdPoKTHZfNMhKamCfLD5fKx51W/u0KozXtJo2/3fnt0sgPxg==", "dependencies": { - "Microsoft.TestPlatform.ObjectModel": "18.8.1" + "Microsoft.TestPlatform.ObjectModel": "18.9.0" } }, "xunit.abstractions": { From c064cbc8c44db6738927e9a8595ff5a43e5e73b3 Mon Sep 17 00:00:00 2001 From: Claude Date: Sun, 16 Aug 2026 07:03:14 +0000 Subject: [PATCH 3/3] fix(ci): update the --locked-mode drift-guard's Microsoft.OpenApi pin to 2.12.0 The guard's own perturbation-target check caught its own staleness exactly as designed ("drift-guard perturbation target not found"): it hardcoded 2.11.0 as the current pin and 2.10.0 as the simulated-stale version, but this PR bumps Microsoft.OpenApi to 2.12.0, so 2.11.0 no longer exists in Cluckwork.Api.csproj for the sed to find. Shifted both values forward by one release. --- .github/workflows/ci.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 31d4b55e1..e4fb4b4bc 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -288,11 +288,11 @@ jobs: work="$(mktemp -d)" git archive HEAD | tar -x -C "$work" cd "$work" - sed -i 's#