Skip to content

chore: update package versions for maintenance#42

Merged
guibranco merged 5 commits into
mainfrom
chore/bump-version
Jun 23, 2026
Merged

chore: update package versions for maintenance#42
guibranco merged 5 commits into
mainfrom
chore/bump-version

Conversation

@guibranco

@guibranco guibranco commented Jun 23, 2026

Copy link
Copy Markdown
Owner

📑 Description

Update various package versions in Directory.Packages.props to their latest releases. Includes upgrading Microsoft.EntityFrameworkCore, Microsoft.Extensions, and others to version 10.0.9 to address bug fixes and improvements. Also update Scalar.AspNetCore, MimeKit, HtmlAgilityPack, Polly, and Microsoft.NET.Test.Sdk for enhanced stability and performance. These changes ensure the project leverages the latest features and security updates provided by the packages.

✅ Checks

  • My pull request adheres to the code style of this project
  • My code requires changes to the documentation
  • I have updated the documentation as required
  • All the tests have passed

☢️ Does this introduce a breaking change?

  • Yes
  • No

Summary by Sourcery

Build:

  • Bump various NuGet package versions in Directory.Packages.props, including Microsoft.EntityFrameworkCore, Microsoft.Extensions, Scalar.AspNetCore, MimeKit, HtmlAgilityPack, Polly, and Microsoft.NET.Test.Sdk.

Summary by CodeRabbit

  • Chores
    • Updated Entity Framework Core packages to version 10.0.9
    • Updated ASP.NET Core and Microsoft.Extensions ecosystem packages to version 10.0.9
    • Updated Scalar API documentation tool to version 2.16.5
    • Updated email messaging, HTML parsing, and fault resilience libraries to latest stable versions
    • Updated testing SDK and ASP.NET Core testing framework dependencies

Update various package versions in Directory.Packages.props to their
latest releases. Includes upgrading Microsoft.EntityFrameworkCore,
Microsoft.Extensions, and others to version 10.0.9 to address bug fixes
and improvements. Also update Scalar.AspNetCore, MimeKit, HtmlAgilityPack,
Polly, and Microsoft.NET.Test.Sdk for enhanced stability and performance.
These changes ensure the project leverages the latest features and
security updates provided by the packages.
@sourcery-ai

sourcery-ai Bot commented Jun 23, 2026

Copy link
Copy Markdown
Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

This PR updates central package references in Directory.Packages.props to newer versions (notably Microsoft.EntityFrameworkCore, Microsoft.Extensions.* to 10.0.9 and several third‑party libraries) to pick up bug fixes, stability improvements, and security updates, without changing application code.

File-Level Changes

Change Details Files
Bump Microsoft.EntityFrameworkCore and related Microsoft.Extensions packages to 10.0.9.
  • Update Microsoft.EntityFrameworkCore package version to 10.0.9.
  • Align Microsoft.Extensions.* package versions (e.g., hosting, logging, configuration) to 10.0.9.
  • Ensure all affected Microsoft.* dependencies in the central props file reference the same updated version for consistency.
Directory.Packages.props
Upgrade key third-party libraries to newer stable releases for reliability and performance.
  • Update Scalar.AspNetCore to its latest stable version.
  • Update MimeKit and related email/ MIME handling packages to newer versions.
  • Update HtmlAgilityPack to a newer stable version for HTML parsing.
  • Update Polly to a newer stable version for resilience policies.
  • Update Microsoft.NET.Test.Sdk to a newer version to keep the test infrastructure current.
Directory.Packages.props

Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

@coderabbitai

coderabbitai Bot commented Jun 23, 2026

Copy link
Copy Markdown

Review Change Stack

Warning

Review limit reached

@guibranco, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 9 minutes and 27 seconds. Learn how PR review limits work.

Your organization has run out of usage credits. Purchase more credits in the billing tab to continue.

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based credits.

🚦 How do rate limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan refill rate.

For paid Pro and Pro+ PR reviews, CodeRabbit uses rolling per-developer review limits. Reviews become available again as older review attempts age out of the rolling limit window.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 1a3bc6eb-dbf3-42a4-8a22-3bf6228307c8

📥 Commits

Reviewing files that changed from the base of the PR and between 36d44a3 and d1f9e27.

📒 Files selected for processing (3)
  • Directory.Packages.props
  • src/DaftAlerts.Infrastructure/Parsing/DaftEmailParser.cs
  • tests/DaftAlerts.Api.Tests/Endpoints/PropertiesEndpointTests.cs

Walkthrough

Directory.Packages.props updates central NuGet version pins: EF Core and Microsoft.Extensions.* packages move from 10.0.8 to 10.0.9, Scalar.AspNetCore from 2.14.2 to 2.16.5, MimeKit from 4.15.1 to 4.17.0, HtmlAgilityPack from 1.11.72 to 1.12.4, Polly from 8.5.0 to 8.7.0, Microsoft.NET.Test.Sdk from 18.6.0 to 18.7.0, and Microsoft.AspNetCore.Mvc.Testing from 10.0.8 to 10.0.9.

Changes

Dependency Version Bumps

Layer / File(s) Summary
Version pin updates across all package groups
Directory.Packages.props
EF Core (Microsoft.EntityFrameworkCore, .Sqlite, .Design) and Microsoft.Extensions.* packages move from 10.0.8 to 10.0.9; Scalar.AspNetCore from 2.14.2 to 2.16.5; MimeKit from 4.15.1 to 4.17.0; HtmlAgilityPack from 1.11.72 to 1.12.4; Polly from 8.5.0 to 8.7.0; Microsoft.NET.Test.Sdk from 18.6.0 to 18.7.0; Microsoft.AspNetCore.Mvc.Testing from 10.0.8 to 10.0.9. Packages MailKit, Polly.Extensions.Http, AspNetCoreRateLimit, and Microsoft.EntityFrameworkCore.InMemory remain at their prior versions.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

🐇 Hop, hop, the versions leap,
From .8 to .9 in our sleep,
MimeKit soars to 4.17,
HtmlAgilityPack feels divine,
Polly bounces, tests align —
All our packages fresh and fine! 🌿

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately describes the main change: updating package versions in Directory.Packages.props for maintenance purposes, which is the core objective of this pull request.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/bump-version

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@socket-security

socket-security Bot commented Jun 23, 2026

Copy link
Copy Markdown

@sourcery-ai sourcery-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey - I've reviewed your changes and they look great!


Sourcery is free for open source - if you like our reviews please consider sharing them ✨
Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.

@guibranco guibranco enabled auto-merge (squash) June 23, 2026 12:51
@gstraccini gstraccini Bot added the ☑️ auto-merge Automatic merging of pull requests (gstraccini-bot) label Jun 23, 2026

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@Directory.Packages.props`:
- Line 24: The Microsoft.Extensions.DependencyInjection package in
Directory.Packages.props is at version 10.0.8 while all other
Microsoft.Extensions.* packages have been updated to 10.0.9. Locate the
PackageVersion entry for Microsoft.Extensions.DependencyInjection and update its
Version attribute from 10.0.8 to 10.0.9 to ensure consistency across all
Microsoft.Extensions.* packages and prevent potential assembly binding issues.
- Line 11: Update the Version attribute of the
Microsoft.EntityFrameworkCore.InMemory PackageVersion entry from 10.0.0 to
10.0.9 to align with the other EF Core packages in the file. This will ensure
version consistency across the EF Core family and prevent potential runtime
type-load exceptions or ABI mismatches that can occur with provider version
skew.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 69ef70b7-edae-464d-a45d-01201ac5f536

📥 Commits

Reviewing files that changed from the base of the PR and between 0622015 and 36d44a3.

📒 Files selected for processing (1)
  • Directory.Packages.props

Comment thread Directory.Packages.props Outdated
Comment thread Directory.Packages.props Outdated
Upgrade `Microsoft.Extensions.DependencyInjection` from version
10.0.8 to 10.0.9 for consistency with other Microsoft
packages. This ensures all related packages are aligned to
the same version, potentially reducing compatibility issues.
Update Microsoft.EntityFrameworkCore.InMemory package version from
10.0.0 to 10.0.9. This change ensures consistency with other
EntityFrameworkCore packages already using version 10.0.9, improving
reliability and enabling access to bug fixes and new features
introduced in the latest version.
Add a suppression for SQLitePCLRaw.lib.e_sqlite3 2.1.11 due to
CVE-2025-6965 (GHSA-2m69-gcr7-jv3q), which currently lacks a
patched NuGet version. This is a transitive dependency of
Microsoft.EntityFrameworkCore.Sqlite. The suppression allows us to
proceed until an upstream fix is available.
Refactor whitespace and formatting across several files to enhance
consistency and readability.

- Reformatted package version entries in Directory.Packages.props to
  have each attribute on a separate line, aligning with practice seen
  in other entries, improving readability.
- Replaced null strings with empty strings in several GetAttributeValue
  method calls in DaftEmailParser.cs, ensuring consistent handling of
  default values for attribute extraction.
- Reorganized multiline initialization in PropertiesEndpointTests.cs
  to improve readability by aligning parameter values and maintaining
  consistency with the rest of the codebase.

These changes improve overall code clarity, making maintenance and
future edits easier and more reliable without altering functionality.
@guibranco guibranco merged commit f769c73 into main Jun 23, 2026
16 checks passed
@guibranco guibranco deleted the chore/bump-version branch June 23, 2026 13:39
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

☑️ auto-merge Automatic merging of pull requests (gstraccini-bot)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant