Bump the microsoft-platform group with 3 updates - #31
Closed
dependabot[bot] wants to merge 1 commit into
Closed
Conversation
Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Http from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.9 to 10.0.10 --- updated-dependencies: - dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-platform - dependency-name: Microsoft.Extensions.Http dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-platform - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-platform - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-platform - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-platform - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-platform ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
nxships
added a commit
that referenced
this pull request
Aug 3, 2026
… bump (#32) Same change as NexusKit#33, for the same reason. Dependabot scopes NuGet updates per project directory, so a grouped bump can land in some csprojs and miss others. That is what happened to the microsoft-platform group (#31): four projects moved to 10.0.10 while NexusKit.Modules.ExternalData stayed on 10.0.9, which fails the build with NU1605 once anything pulls the newer version transitively. Central package management removes the failure mode rather than patching this instance of it: every version now lives in Directory.Packages.props and the csprojs carry bare PackageReference items, so a group bump is atomic by construction. Two knock-on fixes: - Dalamud.NET.Sdk hardcodes versions on the PackageReferences it injects, which CPM rejects with NU1008. Directory.Build.targets strips that metadata - it has to be .targets, since Sdk.props is evaluated before Directory.Build.props. That file also chains to a Directory.Build.targets above the clone if one exists, so the local multi-repo workspace's PackageReference to ProjectReference swap keeps applying. - CPM with two unmapped package sources raises NU1507, and restore warnings are errors here. nuget.config now maps sources explicitly: NexusKit.* from GitHub Packages, everything else from nuget.org. The NexusKit.* references keep their open-ended [0.4.0,) ranges. Supersedes #31; Microsoft.* land on 10.0.10 across all six projects.
Contributor
|
Superseded by #32: package versions are now centrally managed in Directory.Packages.props, and Microsoft.* are on 10.0.10 across all projects. The split bump this PR produced (ExternalData left on 10.0.9) is what made it fail. |
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
nxships
deleted the
dependabot/nuget/External/NexusKit.Modules.FfxivCollect/microsoft-platform-663f2f4915
branch
August 3, 2026 15:29
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.9 to 10.0.10.
Release notes
Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.Http from 10.0.9 to 10.0.10.
Release notes
Sourced from Microsoft.Extensions.Http's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.Logging.Abstractions from 10.0.9 to 10.0.10.
Release notes
Sourced from Microsoft.Extensions.Logging.Abstractions's releases.
No release notes found for this version range.
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions