Skip to content

Bump the nuget-dependencies group with 2 updates - #569

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/nuget-dependencies-53b2bbd73f
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/nuget-dependencies-53b2bbd73f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

Updated Konnektr.Npgsql.Age from 2.0.0 to 2.1.0.

Release notes

Sourced from Konnektr.Npgsql.Age's releases.

2.1.0

Fixes the empty column-definition list (as ( agtype) → 42601) that made scalar and partial-projection RETURN items unusable, plus AGE 1.8.0 test-matrix support.

The 42601 fix (pg-age-digitaltwins#​115)

CypherHelpers.GenerateAsPart builds the outer as ( ... ) list from a regex capture of the RETURN clause:

@"RETURN\s+(.+?)(?=\s*(?:RETURN|LIMIT|SKIP|ORDER|$))"

The terminator alternation had no word boundary, so a property whose name merely starts with a clause keyword ended the capture early:

Query Captured Generated SQL
RETURN t.returnPeriod AS period t. — stops at the return inside returnPeriod as ( agtype) → 42601
RETURN t { .returnPeriod } AS twin t { . as ( agtype) → 42601

The truncated name then sanitized to an empty string. This also affects .limit, .order and .skip, and is independent of ORDER BY/pagination.

Fixed by requiring the terminator to be whitespace-preceded and a whole word, routing x { .prop } projections through the map-literal path, and adding a guard so a blank column name can never be emitted. GenerateAsPart is shared by every CreateCypherCommand overload, so this covers the whole path.

Verified against a live AGE 1.7.0 cluster: the old SQL reproduces 42601 at the exact offset from the issue; the new SQL parses and executes, returning real values.

AGE 1.8.0 support

AGE 1.8.0 changed the order of operations for chained casts inside a Cypher expression: '...'::jsonb::agtype now returns an agtype string holding the raw JSON source instead of the parsed structure, so maps come back as a plain string and escapes like \u00A0/\/ are no longer decoded. The standalone cast is unaffected.

The three affected tests now assert the behaviour that actually applies for the detected AGE version, rather than being gated off on 1.8.0 — so 1.8.0 is genuinely covered.

Verification

  • Full suite against a real apache/age:release_PG18_1.8.0: 102 passed / 0 failed (was 111/3).
  • CI green on the full 12-image matrix (PG16/17/18 × apache/cnpg), including both 1.8.0 legs.
  • 80 unit tests covering the column-list logic, with no regressions.

Upgrading

No API changes — drop-in replacement for 2.0.0. If your queries read a scalar property or project a subset of properties, they now work:

MATCH (t:Twin) RETURN t.returnPeriod AS period        -- was 42601
MATCH (t:Twin) RETURN t { .returnPeriod } AS twin      -- was 42601

Commits viewable in compare view.

Updated Verify.XunitV3 from 33.1.5 to 33.3.0.

Release notes

Sourced from Verify.XunitV3's releases.

33.3.0

  • #​1951 Paged documents: source and derived targets

33.2.0

  • #​1943 Update NUnit to v5
  • #​1947 Show a text diff in the exception message for a text mismatch

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Konnektr.Npgsql.Age from 2.0.0 to 2.1.0
Bumps Verify.XunitV3 from 33.1.5 to 33.3.0

---
updated-dependencies:
- dependency-name: Konnektr.Npgsql.Age
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Verify.XunitV3
  dependency-version: 33.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 5, 2026
@dependabot
dependabot Bot requested a review from a team October 5, 2026 06:30
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 5, 2026
@dependabot
dependabot Bot requested a review from savasp as a code owner October 5, 2026 06:30
@dependabot dependabot Bot added the .NET Pull requests that update .NET code label Oct 5, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 12, 2026
@dependabot
dependabot Bot deleted the dependabot/nuget/nuget-dependencies-53b2bbd73f branch October 12, 2026 19:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants