Skip to content

Bump the nuget-dependencies group with 7 updates - #572

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/nuget-dependencies-d40373afb3
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/nuget-dependencies-d40373afb3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

Updated Konnektr.Npgsql.Age from 2.0.0 to 2.1.0.

Release notes

Sourced from Konnektr.Npgsql.Age's releases.

2.1.0

Fixes the empty column-definition list (as ( agtype) → 42601) that made scalar and partial-projection RETURN items unusable, plus AGE 1.8.0 test-matrix support.

The 42601 fix (pg-age-digitaltwins#​115)

CypherHelpers.GenerateAsPart builds the outer as ( ... ) list from a regex capture of the RETURN clause:

@"RETURN\s+(.+?)(?=\s*(?:RETURN|LIMIT|SKIP|ORDER|$))"

The terminator alternation had no word boundary, so a property whose name merely starts with a clause keyword ended the capture early:

Query Captured Generated SQL
RETURN t.returnPeriod AS period t. — stops at the return inside returnPeriod as ( agtype) → 42601
RETURN t { .returnPeriod } AS twin t { . as ( agtype) → 42601

The truncated name then sanitized to an empty string. This also affects .limit, .order and .skip, and is independent of ORDER BY/pagination.

Fixed by requiring the terminator to be whitespace-preceded and a whole word, routing x { .prop } projections through the map-literal path, and adding a guard so a blank column name can never be emitted. GenerateAsPart is shared by every CreateCypherCommand overload, so this covers the whole path.

Verified against a live AGE 1.7.0 cluster: the old SQL reproduces 42601 at the exact offset from the issue; the new SQL parses and executes, returning real values.

AGE 1.8.0 support

AGE 1.8.0 changed the order of operations for chained casts inside a Cypher expression: '...'::jsonb::agtype now returns an agtype string holding the raw JSON source instead of the parsed structure, so maps come back as a plain string and escapes like \u00A0/\/ are no longer decoded. The standalone cast is unaffected.

The three affected tests now assert the behaviour that actually applies for the detected AGE version, rather than being gated off on 1.8.0 — so 1.8.0 is genuinely covered.

Verification

  • Full suite against a real apache/age:release_PG18_1.8.0: 102 passed / 0 failed (was 111/3).
  • CI green on the full 12-image matrix (PG16/17/18 × apache/cnpg), including both 1.8.0 legs.
  • 80 unit tests covering the column-list logic, with no regressions.

Upgrading

No API changes — drop-in replacement for 2.0.0. If your queries read a scalar property or project a subset of properties, they now work:

MATCH (t:Twin) RETURN t.returnPeriod AS period        -- was 42601
MATCH (t:Twin) RETURN t { .returnPeriod } AS twin      -- was 42601

Commits viewable in compare view.

Updated Microsoft.Testing.Extensions.CodeCoverage from 18.11.2 to 18.12.0.

Release notes

Sourced from Microsoft.Testing.Extensions.CodeCoverage's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Testcontainers.Neo4j from 4.15.0 to 4.16.0.

Release notes

Sourced from Testcontainers.Neo4j's releases.

4.16.0

What's Changed

Huge thanks to everyone for your contributions and feedback 🧡.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​54051351.

🚀 Features

  • feat: Add common WithSsl builder API and support it in Azurite (#​1788) @​aleksandarMilev, @​HofmeisterAn
  • feat: Add BuildKit support for image builds via sidecar container (#​1761) @​george-petrakis, @​HofmeisterAn
  • feat(Elasticsearch): Add OTLP and certificate support (#​1774) @​HofmeisterAn

🐛 Bug Fixes

  • fix(PostgreSql): Support SSL with Alpine images and non-root users (#​1790) @​HofmeisterAn
  • fix: Do not pull base image with unresolved platform variable (#​1787) @​HofmeisterAn
  • fix(Kafka): Default to KRaft for Confluent Platform 8.x images (#​1775) @​arnelirobles, @​HofmeisterAn
  • fix(Kafka): Drop the trailing comma from advertised listeners (#​1772) @​arnelirobles, @​HofmeisterAn
  • fix: Prevent Docker ignore patterns from matching path prefixes (#​1768) @​Benziza, @​HofmeisterAn

📖 Documentation

  • docs: Complete builder API tables and align heading casing (#​1778) @​HofmeisterAn
  • docs: Explain how builder configurations combine (#​1770) @​arnelirobles, @​HofmeisterAn

🧹 Housekeeping

  • fix: Regenerate expired test certificates (#​1786) @​zcsizmadia
  • chore: Resolve Sonar findings (#​1776) @​HofmeisterAn
  • chore: Remove Minio module (#​1769) @​HofmeisterAn
  • chore: Publish NuGet packages with Trusted Publishing (OIDC) (#​1763) @​HofmeisterAn
  • feat: Prepare next release cycle (4.16.0) (#​1762) @​HofmeisterAn

📦 Dependency Updates

Commits viewable in compare view.

Updated Verify.XunitV3 from 33.1.5 to 33.3.3.

Release notes

Sourced from Verify.XunitV3's releases.

33.3.3

33.3.2

33.3.1

33.3.0

  • #​1951 Paged documents: source and derived targets

33.2.0

  • #​1943 Update NUnit to v5
  • #​1947 Show a text diff in the exception message for a text mismatch

Commits viewable in compare view.

Updated xunit.v3.assert from 4.0.1 to 4.0.2.

Release notes

Sourced from xunit.v3.assert's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated xunit.v3.extensibility.core from 4.0.1 to 4.0.2.

Release notes

Sourced from xunit.v3.extensibility.core's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated xunit.v3.mtp-v2 from 4.0.1 to 4.0.2.

Release notes

Sourced from xunit.v3.mtp-v2's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Konnektr.Npgsql.Age from 2.0.0 to 2.1.0
Bumps Microsoft.Testing.Extensions.CodeCoverage from 18.11.2 to 18.12.0
Bumps Testcontainers.Neo4j from 4.15.0 to 4.16.0
Bumps Verify.XunitV3 from 33.1.5 to 33.3.3
Bumps xunit.v3.assert from 4.0.1 to 4.0.2
Bumps xunit.v3.extensibility.core from 4.0.1 to 4.0.2
Bumps xunit.v3.mtp-v2 from 4.0.1 to 4.0.2

---
updated-dependencies:
- dependency-name: Konnektr.Npgsql.Age
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Testing.Extensions.CodeCoverage
  dependency-version: 18.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Testcontainers.Neo4j
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Verify.XunitV3
  dependency-version: 33.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: xunit.v3.assert
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: xunit.v3.extensibility.core
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: xunit.v3.mtp-v2
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team October 12, 2026 19:40
@dependabot dependabot Bot added the .NET Pull requests that update .NET code label Oct 12, 2026
@dependabot
dependabot Bot requested a review from savasp as a code owner October 12, 2026 19:40
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 12, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #574.

@dependabot dependabot Bot closed this Oct 19, 2026
@dependabot
dependabot Bot deleted the dependabot/nuget/nuget-dependencies-d40373afb3 branch October 19, 2026 06:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants