Skip to content

chore(deps): bump dotnet group (exclude AWS SDK v4 major)#173

Merged
rlorenzo merged 1 commit intomainfrom
chore/dotnet-deps-bump
May 4, 2026
Merged

chore(deps): bump dotnet group (exclude AWS SDK v4 major)#173
rlorenzo merged 1 commit intomainfrom
chore/dotnet-deps-bump

Conversation

@rlorenzo
Copy link
Copy Markdown
Contributor

@rlorenzo rlorenzo commented May 4, 2026

Summary

  • Re-roll of the original Dependabot dotnet group bump (PR Bump the dotnet group with 22 updates #170, branch since deleted) with the AWS SDK v4 major upgrades excluded.
  • Includes the 20 routine .NET 10 servicing patches (10.0.6 → 10.0.7), tooling minors, and analyzer updates.
  • AWS SDK v4 migration is deferred to a focused PR — it has documented breaking changes (nullable value types, collections default to null, IMDSv2-only, sync API removals) and Amazon.Extensions.Configuration.SystemsManager 6.2+ throws on duplicate parameter keys, which needs TEST validation against our two-path AddSystemsManager startup.

Packages held back vs. the original batch

Package Stays at Dependabot proposed
AWSSDK.Core 3.7.201.7 4.0.3.30
Amazon.Extensions.Configuration.SystemsManager 5.1.0 7.1.0

Summary by CodeRabbit

  • Chores
    • Updated core development dependencies including ASP.NET Core, Entity Framework Core, and code analysis tools to their latest stable versions.
    • Updated testing and code coverage tools to support improved development workflows.

AWS packages held back from the original Dependabot batch:
- AWSSDK.Core stays at 3.7.201.7 (proposed 4.0.3.30)
- Amazon.Extensions.Configuration.SystemsManager stays at 5.1.0
  (proposed 7.1.0)

AWS SDK v4 has breaking changes (nullable value types, collection
init defaults to null, IMDSv2-only, sync API removals) and
SystemsManager 6.2+ throws on duplicate parameter keys, which would
need TEST validation against our two-path AddSystemsManager startup.
Defer the AWS migration to a focused PR.
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented May 4, 2026

📝 Walkthrough

Walkthrough

NuGet and .NET tool dependencies were updated across the solution. dotnet-ef and microsoft.web.librarymanager.cli were bumped in global tool configuration. Test and web project dependencies were updated to newer patch and minor versions, including EF Core, ASP.NET Core, SonarAnalyzer, and related packages.

Changes

Dependency Updates

Layer / File(s) Summary
Tool Versions
.config/dotnet-tools.json
dotnet-ef bumped from 10.0.6 to 10.0.7; microsoft.web.librarymanager.cli bumped from 2.1.175 to 3.0.71.
Test Project Dependencies
test/Viper.test.csproj
EF Core and related Sqlite packages, Microsoft.Extensions.Logging, Microsoft.EntityFrameworkCore.SqlServer, and Microsoft.NET.Test.Sdk updated to 10.0.7/18.4.0. SonarAnalyzer.CSharp bumped to 10.24.0.138807. coverlet.collector upgraded from 8.0.1 to 10.0.0.
Web Project Dependencies
web/Viper.csproj
ASP.NET Core and EF Core packages updated to 10.0.7. SonarAnalyzer.CSharp bumped to 10.24.0.138807. NLog.MailKit updated from 6.1.1 to 6.1.3. Project structure and metadata remain unchanged.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately describes the main change: bumping .NET tool and NuGet package versions across the dotnet group while intentionally excluding AWS SDK v4 major upgrades.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/dotnet-deps-bump

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented May 4, 2026

Bundle Report

Changes will increase total bundle size by 19.75kB (0.92%) ⬆️. This is within the configured threshold ✅

Detailed changes
Bundle name Size Change
viper-frontend-esm 2.16MB 19.75kB (0.92%) ⬆️

Affected Assets, Files, and Routes:

view changes for bundle: viper-frontend-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
assets/vendor-*.js 256 bytes 271.57kB 0.09%
assets/ManageLinkCollections-*.js 8 bytes 57.7kB 0.01%
assets/TermManagement-*.js -6 bytes 53.58kB -0.01%
assets/CourseDetail-*.js -56 bytes 40.57kB -0.14%
assets/InstructorEdit-*.js -16 bytes 32.21kB -0.05%
assets/InstructorList-*.js -56 bytes 26.03kB -0.21%
assets/vue-*.js -16 bytes 24.98kB -0.06%
assets/effort-*.js 3.69kB 23.41kB 18.71% ⚠️
assets/MultiYearReport-*.js -56 bytes 18.58kB -0.3%
assets/MyAssessments-*.js 12.7kB 18.36kB 223.9% ⚠️
assets/AuditList-*.js -6 bytes 17.38kB -0.03%
assets/CourseList-*.js -56 bytes 15.94kB -0.35%
assets/runtime-*.esm-bundler-B55_r9pp.js (New) 12.44kB 12.44kB 100.0% 🚀
assets/ReportFilterForm-*.js -6 bytes 8.51kB -0.07%
assets/cts-*.css 6.96kB 7.42kB 1540.71% ⚠️
assets/TermSelection-*.js -56 bytes 6.39kB -0.87%
assets/ClinicalEffort-*.js -6 bytes 5.41kB -0.11%
assets/InstructorDetail-*.js -56 bytes 5.39kB -1.03%
assets/use-*.js (Deleted) -2.58kB 0 bytes -100.0% 🗑️
assets/ClinicalSchedulerHome-*.js -8 bytes 3.47kB -0.23%
assets/ScheduledCliWeeks-*.js -16 bytes 2.96kB -0.54%
assets/EffortHome-*.js -56 bytes 1.39kB -3.89%
assets/MyAssessments-*.css (New) 382 bytes 382 bytes 100.0% 🚀
assets/rolldown-*.js 9 bytes 86 bytes 11.69% ⚠️
assets/runtime-*.esm-bundler-CX6KhZx3.js (Deleted) -12.28kB 0 bytes -100.0% 🗑️
assets/term-*.js (Deleted) -1.36kB 0 bytes -100.0% 🗑️

@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented May 4, 2026

Codecov Report

❌ Patch coverage is 0.46203% with 8402 lines in your changes missing coverage. Please review.
✅ Project coverage is 30.42%. Comparing base (f5e245d) to head (b68a086).

Files with missing lines Patch % Lines
web/Classes/SQLContext/IDCardsContext.cs 0.00% 886 Missing ⚠️
web/Classes/SQLContext/EquipmentLoanContext.cs 0.00% 544 Missing ⚠️
web/Areas/Directory/Services/UserInfoService.cs 0.00% 494 Missing ⚠️
web/Classes/SQLContext/KeysContext.cs 0.00% 280 Missing ⚠️
web/Areas/Directory/Views/UserInfo.cshtml 0.00% 249 Missing ⚠️
web/Classes/HealthChecks/HealthCheckExtensions.cs 0.00% 205 Missing ⚠️
web/Models/PPS/VwUserinfoUser.cs 0.00% 149 Missing ⚠️
web/Areas/Jobs/Controllers/JobsController.cs 0.00% 140 Missing ⚠️
web/Models/PPS/PsJobV.cs 0.00% 125 Missing ⚠️
web/Models/PPS/JobDV.cs 0.00% 121 Missing ⚠️
... and 215 more
Additional details and impacted files
@@             Coverage Diff             @@
##             main     #173       +/-   ##
===========================================
- Coverage   43.40%   30.42%   -12.99%     
===========================================
  Files         863     1082      +219     
  Lines       50476    72156    +21680     
  Branches     4724     4971      +247     
===========================================
+ Hits        21909    21951       +42     
- Misses      28044    49677    +21633     
- Partials      523      528        +5     
Flag Coverage Δ
backend 30.02% <0.35%> (-13.47%) ⬇️
frontend 41.89% <69.23%> (+0.20%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Comment thread web/Areas/Jobs/Controllers/JobsController.cs Dismissed
Comment thread web/Areas/Jobs/JobClasses/RapsRoleViewUpdate.cs Outdated
Comment thread web/Areas/Jobs/Views/JobList.cshtml Outdated
Comment thread web/Areas/Directory/Services/UserInfoService.cs Outdated
Comment thread web/Areas/Directory/Services/UserInfoService.cs Outdated
Comment thread web/Areas/Directory/Services/UserInfoService.cs Outdated
Comment thread web/Areas/Directory/Services/UserInfoService.cs Outdated
Comment thread web/Areas/Directory/Services/UserInfoService.cs Outdated
Comment thread web/Areas/Directory/Controllers/UserInfoController.cs Outdated
Comment thread web/Areas/Directory/Services/UserInfoService.cs Outdated
@rlorenzo rlorenzo force-pushed the chore/dotnet-deps-bump branch from b68a086 to 960c3b8 Compare May 4, 2026 21:34
Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In @.config/dotnet-tools.json:
- Line 12: Update and verify the CI job that runs libman restore after bumping
microsoft.web.librarymanager.cli in .config/dotnet-tools.json (the "version":
"3.0.71" entry) by running the same libman restore command locally and in CI,
inspect CI logs for any errors, and if failures occur adjust the pipeline to
install the matching .NET tool manifest or pin the tool version (ensure dotnet
tool restore is executed before libman restore) or roll back the version;
specifically confirm the pipeline step that invokes libman restore runs after
dotnet tool restore and that the manifest includes
microsoft.web.librarymanager.cli 3.0.71.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: acd6cc78-0f7a-425e-8c37-90effc7ba2f7

📥 Commits

Reviewing files that changed from the base of the PR and between f5e245d and 960c3b8.

📒 Files selected for processing (3)
  • .config/dotnet-tools.json
  • test/Viper.test.csproj
  • web/Viper.csproj

Comment thread .config/dotnet-tools.json
@rlorenzo rlorenzo merged commit bfe8cfa into main May 4, 2026
12 checks passed
@rlorenzo rlorenzo deleted the chore/dotnet-deps-bump branch May 4, 2026 21:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants