Skip to content

chore: consolidate dependency and CodeQL updates - #555

Merged
savasp-agent[bot] merged 3 commits into
mainfrom
codex/merge-dependabot-552-554
Aug 27, 2026
Merged

chore: consolidate dependency and CodeQL updates#555
savasp-agent[bot] merged 3 commits into
mainfrom
codex/merge-dependabot-552-554

Conversation

@savasp-agent

@savasp-agent savasp-agent Bot commented Aug 27, 2026

Copy link
Copy Markdown
Contributor

Summary

This PR consolidates the changes from the two open Dependabot PRs:

The combined branch is based on the latest main and contains no product or public API changes. It supersedes #552 and #554.

Verification

  • Debug build: passed with 0 warnings and 0 errors.
  • Repository automation tests: passed (hooks 12/12, release 49/49, validation inventory, docs deployment policy, and test-runner self-tests).
  • Fast lane: 2,526 tests passed.
  • Full provider lane: 3,869 tests passed with Neo4j and Apache AGE; only declared capability skips.
  • Release build and format verification: passed.
  • CI-shaped Release full lane with coverage and TRX reporting: 3,869 tests passed.
  • Package validation: passed for the 9-package inventory and 15 assemblies.
  • Documentation build, source/example validation, and HTMLProofer: passed.
  • Local CodeQL Actions, C#, and Ruby analysis: passed with zero SARIF findings.
  • Push pre-flight gate: passed.

Hosted checks will run on this consolidated PR.

dependabot Bot and others added 3 commits August 27, 2026 11:06
@dependabot @savasp-agent
Bump the github-actions group with 2 updates
245b2a6 
Bumps the github-actions group with 2 updates: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.37.6 to 4.37.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@5595cca...ff2f1c6)

Updates `github/codeql-action/analyze` from 4.37.6 to 4.37.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@5595cca...ff2f1c6)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.37.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @savasp-agent
Bump the nuget-dependencies group with 10 updates
5a15591 
Bumps Microsoft.CodeAnalysis.Analyzers from 5.6.0 to 5.9.0
Bumps Microsoft.CodeAnalysis.CSharp from 5.6.0 to 5.9.0
Bumps Microsoft.CodeAnalysis.CSharp.Workspaces from 5.6.0 to 5.9.0
Bumps Microsoft.Extensions.Logging from 10.0.10 to 10.0.11
Bumps Microsoft.Extensions.Logging.Console from 10.0.10 to 10.0.11
Bumps Microsoft.SourceLink.GitHub from 10.0.301 to 10.0.400
Bumps Microsoft.Testing.Extensions.CodeCoverage from 18.9.0 to 18.10.0
Bumps xunit.v3.assert from 3.2.2 to 4.0.0
Bumps xunit.v3.extensibility.core from 3.2.2 to 4.0.0
Bumps xunit.v3.mtp-v2 from 3.2.2 to 4.0.0

---
updated-dependencies:
- dependency-name: Microsoft.CodeAnalysis.Analyzers
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.CodeAnalysis.CSharp
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.CodeAnalysis.CSharp.Workspaces
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Extensions.Logging
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Extensions.Logging.Console
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.SourceLink.GitHub
  dependency-version: 10.0.400
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Testing.Extensions.CodeCoverage
  dependency-version: 18.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: xunit.v3.assert
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: xunit.v3.extensibility.core
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: xunit.v3.mtp-v2
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@savasp-agent
chore: harden dependency update validation
163a437
@savasp-agent
savasp-agent Bot requested review from a team and savasp August 27, 2026 18:22
@savasp-agent
savasp-agent Bot requested a review from savasp as a code owner August 27, 2026 18:22
@savasp-agent
savasp-agent Bot enabled auto-merge August 27, 2026 18:22
@savasp-agent
savasp-agent Bot added this pull request to the merge queue Aug 27, 2026
This was referenced Aug 27, 2026
Closed
Closed
Merged via the queue into main with commit 8f1e886 Aug 27, 2026
15 checks passed
@savasp-agent
savasp-agent Bot deleted the codex/merge-dependabot-552-554 branch August 27, 2026 18:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@savasp savasp Awaiting requested review from savasp savasp is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@savasp