From c567b753b105ad7709085e58125718671cc50d2d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 21 Oct 2026 21:31:37 +0000 Subject: [PATCH 1/2] Bump JsonSchema.Net and 13 others Bumps JsonSchema.Net from 9.4.0 to 9.4.1 Bumps Microsoft.Agents.AI from 1.21.0 to 1.25.0 Bumps Microsoft.Extensions.AI from 10.10.0 to 10.11.0 Bumps Microsoft.PowerShell.SDK from 7.6.6 to 7.6.7 Bumps OpenTelemetry to 1.20.1 Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol to 1.20.1 Bumps OpenTelemetry.Extensions.Hosting to 1.20.1 Bumps OpenTelemetry.Instrumentation.AspNetCore to 1.20.1 Bumps OpenTelemetry.Instrumentation.Http from 1.19.0 to 1.20.1 Bumps OpenTelemetry.Instrumentation.Runtime from 1.19.0 to 1.20.1 Bumps Quartz from 4.3.0 to 4.6.0 Bumps Quartz.Extensions.Hosting from 4.3.0 to 4.6.0 Bumps Swashbuckle.AspNetCore from 10.2.3 to 10.3.1 Bumps System.Management.Automation from 7.6.6 to 7.6.7 --- updated-dependencies: - dependency-name: JsonSchema.Net dependency-version: 9.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: Microsoft.Agents.AI dependency-version: 1.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: Microsoft.Extensions.AI dependency-version: 10.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: Microsoft.PowerShell.SDK dependency-version: 7.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry.Instrumentation.Http dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry.Instrumentation.Runtime dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: Quartz dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: Quartz.Extensions.Hosting dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: Swashbuckle.AspNetCore dependency-version: 10.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: System.Management.Automation dependency-version: 7.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch ... Signed-off-by: dependabot[bot] --- Directory.Packages.props | 28 +++++++++---------- .../NodePilot.Ai.Tests.csproj | 4 +++ .../NodePilot.Cli.Tests.csproj | 4 +++ .../NodePilot.Mcp.Tests.csproj | 4 +++ 4 files changed, 26 insertions(+), 14 deletions(-) diff --git a/Directory.Packages.props b/Directory.Packages.props index fe409fae..db8e5d3d 100644 --- a/Directory.Packages.props +++ b/Directory.Packages.props @@ -72,12 +72,12 @@ - - + + - - + + @@ -117,12 +117,12 @@ prerelease suffix). --> - - - - - - + + + + + + @@ -130,7 +130,7 @@ - + diff --git a/tests/NodePilot.Ai.Tests/NodePilot.Ai.Tests.csproj b/tests/NodePilot.Ai.Tests/NodePilot.Ai.Tests.csproj index e38c1734..82f4117c 100644 --- a/tests/NodePilot.Ai.Tests/NodePilot.Ai.Tests.csproj +++ b/tests/NodePilot.Ai.Tests/NodePilot.Ai.Tests.csproj @@ -13,6 +13,10 @@ all + + + + runtime; build; native; contentfiles; analyzers; buildtransitive diff --git a/tests/NodePilot.Cli.Tests/NodePilot.Cli.Tests.csproj b/tests/NodePilot.Cli.Tests/NodePilot.Cli.Tests.csproj index ee4b9579..0203217d 100644 --- a/tests/NodePilot.Cli.Tests/NodePilot.Cli.Tests.csproj +++ b/tests/NodePilot.Cli.Tests/NodePilot.Cli.Tests.csproj @@ -13,6 +13,10 @@ all + + + + runtime; build; native; contentfiles; analyzers; buildtransitive diff --git a/tests/NodePilot.Mcp.Tests/NodePilot.Mcp.Tests.csproj b/tests/NodePilot.Mcp.Tests/NodePilot.Mcp.Tests.csproj index 694f5349..f9bf20b6 100644 --- a/tests/NodePilot.Mcp.Tests/NodePilot.Mcp.Tests.csproj +++ b/tests/NodePilot.Mcp.Tests/NodePilot.Mcp.Tests.csproj @@ -13,6 +13,10 @@ all + + + + runtime; build; native; contentfiles; analyzers; buildtransitive From de4a44096b16c02c8afbb4ae85986a654c5212b8 Mon Sep 17 00:00:00 2001 From: Sev7eNup <79143581+Sev7eNup@users.noreply.github.com> Date: Thu, 22 Oct 2026 08:55:46 +0200 Subject: [PATCH 2/2] fix: keep coordinated runtime dependency updates manual --- .github/dependabot.yml | 5 +++++ Directory.Packages.props | 12 ++++++------ tests/NodePilot.Ai.Tests/NodePilot.Ai.Tests.csproj | 4 ---- tests/NodePilot.Cli.Tests/NodePilot.Cli.Tests.csproj | 4 ---- tests/NodePilot.Mcp.Tests/NodePilot.Mcp.Tests.csproj | 4 ---- 5 files changed, 11 insertions(+), 18 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 66db9efb..c5aab1a7 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -45,6 +45,9 @@ updates: versions: [">0.55.0"] - dependency-name: "WireMock.Net" versions: [">=2.16.0"] + # Move the stable core and prerelease instrumentation/exporters together manually. + # OpenTelemetryVersionParityTests pins the exporter's exact core release. + - dependency-name: "OpenTelemetry*" groups: nuget-minor-patch: patterns: @@ -120,6 +123,8 @@ updates: open-pull-requests-limit: 1 # vitest moves as a family across all three roots; see the note on the nodepilot-ui block. ignore: + # Runtime updates also require verified embedded-Node metadata and contract pins. + - dependency-name: "electron" - dependency-name: "typescript" versions: [">=7.0.0"] - dependency-name: "vitest" diff --git a/Directory.Packages.props b/Directory.Packages.props index db8e5d3d..22036361 100644 --- a/Directory.Packages.props +++ b/Directory.Packages.props @@ -117,12 +117,12 @@ prerelease suffix). --> - - - - - - + + + + + + diff --git a/tests/NodePilot.Ai.Tests/NodePilot.Ai.Tests.csproj b/tests/NodePilot.Ai.Tests/NodePilot.Ai.Tests.csproj index 82f4117c..e38c1734 100644 --- a/tests/NodePilot.Ai.Tests/NodePilot.Ai.Tests.csproj +++ b/tests/NodePilot.Ai.Tests/NodePilot.Ai.Tests.csproj @@ -13,10 +13,6 @@ all - - - - runtime; build; native; contentfiles; analyzers; buildtransitive diff --git a/tests/NodePilot.Cli.Tests/NodePilot.Cli.Tests.csproj b/tests/NodePilot.Cli.Tests/NodePilot.Cli.Tests.csproj index 0203217d..ee4b9579 100644 --- a/tests/NodePilot.Cli.Tests/NodePilot.Cli.Tests.csproj +++ b/tests/NodePilot.Cli.Tests/NodePilot.Cli.Tests.csproj @@ -13,10 +13,6 @@ all - - - - runtime; build; native; contentfiles; analyzers; buildtransitive diff --git a/tests/NodePilot.Mcp.Tests/NodePilot.Mcp.Tests.csproj b/tests/NodePilot.Mcp.Tests/NodePilot.Mcp.Tests.csproj index f9bf20b6..694f5349 100644 --- a/tests/NodePilot.Mcp.Tests/NodePilot.Mcp.Tests.csproj +++ b/tests/NodePilot.Mcp.Tests/NodePilot.Mcp.Tests.csproj @@ -13,10 +13,6 @@ all - - - - runtime; build; native; contentfiles; analyzers; buildtransitive