Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -56,9 +56,9 @@ See [LICENSE](LICENSE) for details.
<!-- BLOG_START -->
| Date | Title | Tags |
|------|-------|------|
| 2026-09-28 | [chore(deps): Take Dependabot's NuGet updates, with two restore fixes](docs/blogs/2026-09-28-pr-216-chore-deps-take-dependabot-s-nuget-updates-with-two-restore-fixes.md) | release,automation |
| 2026-09-28 | [ci: Withhold secrets from Dependabot-authored PRs, whoever runs them](docs/blogs/2026-09-28-pr-214-ci-withhold-secrets-from-dependabot-authored-prs-whoever-runs-them.md) | release,automation |
| 2026-09-28 | [ci: Run the test suite on Dependabot PRs, except credentialed E2E](docs/blogs/2026-09-28-pr-212-ci-run-the-test-suite-on-dependabot-prs-except-credentialed-e2e.md) | release,automation |
| 2026-09-28 | [chore(deps): Fix Dependabot config](docs/blogs/2026-09-28-pr-208-chore-deps-fix-dependabot-config.md) | release,automation |
| 2026-09-28 | [fix(ci): Merge as a user and handle UNSTABLE PRs in auto-merge](docs/blogs/2026-09-28-pr-205-fix-ci-merge-as-a-user-and-handle-unstable-prs-in-auto-merge.md) | release,automation |
| 2026-09-28 | [fix(ci): Arm auto-merge when a PR opens](docs/blogs/2026-09-28-pr-204-fix-ci-arm-auto-merge-when-a-pr-opens.md) | release,automation |
<!-- BLOG_END -->
2 changes: 1 addition & 1 deletion docs/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -56,9 +56,9 @@ See [LICENSE](LICENSE) for details.
<!-- BLOG_START -->
| Date | Title | Tags |
|------|-------|------|
| 2026-09-28 | [chore(deps): Take Dependabot's NuGet updates, with two restore fixes](docs/blogs/2026-09-28-pr-216-chore-deps-take-dependabot-s-nuget-updates-with-two-restore-fixes.md) | release,automation |
| 2026-09-28 | [ci: Withhold secrets from Dependabot-authored PRs, whoever runs them](docs/blogs/2026-09-28-pr-214-ci-withhold-secrets-from-dependabot-authored-prs-whoever-runs-them.md) | release,automation |
| 2026-09-28 | [ci: Run the test suite on Dependabot PRs, except credentialed E2E](docs/blogs/2026-09-28-pr-212-ci-run-the-test-suite-on-dependabot-prs-except-credentialed-e2e.md) | release,automation |
| 2026-09-28 | [chore(deps): Fix Dependabot config](docs/blogs/2026-09-28-pr-208-chore-deps-fix-dependabot-config.md) | release,automation |
| 2026-09-28 | [fix(ci): Merge as a user and handle UNSTABLE PRs in auto-merge](docs/blogs/2026-09-28-pr-205-fix-ci-merge-as-a-user-and-handle-unstable-prs-in-auto-merge.md) | release,automation |
| 2026-09-28 | [fix(ci): Arm auto-merge when a PR opens](docs/blogs/2026-09-28-pr-204-fix-ci-arm-auto-merge-when-a-pr-opens.md) | release,automation |
<!-- BLOG_END -->
Original file line number Diff line number Diff line change
@@ -0,0 +1,33 @@
---
post_title: "chore(deps): Take Dependabot's NuGet updates, with two restore fixes"
author1: mpaulosky
post_slug: "v0.0.37-pr-216"
microsoft_alias: n/a
featured_image: ""
categories:
- engineering
tags:
- release:v0.0.37
- automation
ai_note: "Generated by release automation using PR title/body"
summary: "Release notes seed for v0.0.37 from PR #216."
post_date: "2026-09-28"
---
## chore(deps): Take Dependabot's NuGet updates, with two restore fixes

- **Release tag:** `v0.0.37`
- **Source PR:** [#216](https://github.com/mpaulosky/IssueManager/pull/216)

### PR description

Replaces #211, Dependabot's grouped update of 32 NuGet packages, which failed restore and so failed every build and test job. This branch starts from that PR's branch and adds two fixes:

- **`Microsoft.OpenApi` 3.10.2 → 2.12.2.** `Microsoft.AspNetCore.OpenApi` 10.0.12 requires `Microsoft.OpenApi` `>= 2.12.0 && < 3.0.0` (NU1608). `main` had 2.7.5, so 2.12.2 is still an upgrade. `dependabot.yml` now skips major `Microsoft.OpenApi` updates until ASP.NET allows 3.x, so this bump won't come back every week.
- **`Microsoft.AspNetCore.Components.Web` 10.0.8 → 10.0.12.** `Radzen.Blazor` 11.4.1 needs `>= 10.0.12` (NU1109, downgrade). This brings it in line with the other ASP.NET 10.0.12 packages in the update.

I opened it from a separate branch rather than pushing to Dependabot's: Dependabot stops managing a branch once someone else commits to it.

Validation: `dotnet build` (Release) succeeds, and the pre-push hook ran every test project with 0 failures.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

1 change: 1 addition & 0 deletions docs/blogs/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,7 @@ This directory contains concise release-review posts for merged PR releases.

| Date | Title | Tags |
|------|-------|------|
| 2026-09-28 | [chore(deps): Take Dependabot's NuGet updates, with two restore fixes](2026-09-28-pr-216-chore-deps-take-dependabot-s-nuget-updates-with-two-restore-fixes.md) | release,automation |
| 2026-09-28 | [ci: Withhold secrets from Dependabot-authored PRs, whoever runs them](2026-09-28-pr-214-ci-withhold-secrets-from-dependabot-authored-prs-whoever-runs-them.md) | release,automation |
| 2026-09-28 | [ci: Run the test suite on Dependabot PRs, except credentialed E2E](2026-09-28-pr-212-ci-run-the-test-suite-on-dependabot-prs-except-credentialed-e2e.md) | release,automation |
| 2026-09-28 | [chore(deps): Fix Dependabot config](2026-09-28-pr-208-chore-deps-fix-dependabot-config.md) | release,automation |
Expand Down
8 changes: 4 additions & 4 deletions docs/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -225,6 +225,10 @@ <h2>Architecture</h2>
<h2>Blog Posts</h2>
<!-- BLOG_HTML_START -->
<ul class="blog-list">
<li>
<span class="mini-meta">2026-09-28</span>
<a href="blogs/2026-09-28-pr-216-chore-deps-take-dependabot-s-nuget-updates-with-two-restore-fixes.md">chore(deps): Take Dependabot&#x27;s NuGet updates, with two restore fixes</a>
</li>
<li>
<span class="mini-meta">2026-09-28</span>
<a href="blogs/2026-09-28-pr-214-ci-withhold-secrets-from-dependabot-authored-prs-whoever-runs-them.md">ci: Withhold secrets from Dependabot-authored PRs, whoever runs them</a>
Expand All @@ -241,10 +245,6 @@ <h2>Blog Posts</h2>
<span class="mini-meta">2026-09-28</span>
<a href="blogs/2026-09-28-pr-205-fix-ci-merge-as-a-user-and-handle-unstable-prs-in-auto-merge.md">fix(ci): Merge as a user and handle UNSTABLE PRs in auto-merge</a>
</li>
<li>
<span class="mini-meta">2026-09-28</span>
<a href="blogs/2026-09-28-pr-204-fix-ci-arm-auto-merge-when-a-pr-opens.md">fix(ci): Arm auto-merge when a PR opens</a>
</li>
</ul>
<!-- BLOG_HTML_END -->
<p class="muted">
Expand Down
Loading