Bump coverlet.msbuild from 6.0.4 to 10.0.0#474
Bump coverlet.msbuild from 6.0.4 to 10.0.0#474dependabot[bot] wants to merge 1 commit intomasterfrom
Conversation
--- updated-dependencies: - dependency-name: coverlet.msbuild dependency-version: 10.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
.NET
🛡️ Jit Security Scan Results
✅ No security findings were detected in this PR
Security scan by Jit
|
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit ffe3c19. Configure here.
| <PackageVersion Include="BouncyCastle.Cryptography" Version="2.6.1" /> | ||
| <PackageVersion Include="coverlet.collector" Version="6.0.4" /> | ||
| <PackageVersion Include="coverlet.msbuild" Version="6.0.4" /> | ||
| <PackageVersion Include="coverlet.msbuild" Version="10.0.0" /> |
There was a problem hiding this comment.
Coverlet package version skew between msbuild and collector
Low Severity
coverlet.msbuild is bumped to 10.0.0 while coverlet.collector remains at 6.0.4. Both packages originate from the same coverlet-coverage/coverlet repository and share underlying components like coverlet.core. The test project references both packages, and this major-version skew (spanning three major versions apart) could cause conflicting transitive dependencies or inconsistent code coverage behavior. Before this change both packages were aligned at 6.0.4.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit ffe3c19. Configure here.
Updated coverlet.msbuild from 6.0.4 to 10.0.0.
Release notes
Sourced from coverlet.msbuild's releases.
10.0.0
Improvements
--coverlet-file-prefixoption for unique report files #1869Fixed
Maintenance
Diff between 8.0.1 and 10.0.0
8.0.1
Fixed
Improvements
Diff between 8.0.0 and 8.0.1
8.0.0
Special Thanks: A huge thank you to @Bertk for driving the majority of the work in this release! 🎉
Fixed
Improvements
Diff between 6.0.4 and 8.0.0
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Note
Low Risk
Low risk dependency bump limited to test coverage tooling, with the main potential impact being changes/failures in CI coverage generation or reporting.
Overview
Updates the centrally-managed NuGet package version for
coverlet.msbuildfrom6.0.4to10.0.0inDirectory.Packages.props, upgrading the test coverage MSBuild integration across the repo.Reviewed by Cursor Bugbot for commit ffe3c19. Bugbot is set up for automated code reviews on this repo. Configure here.