Skip to content

Bump System.CommandLine from 2.0.5 to 2.0.7#9

Merged
birdnamoo merged 1 commit into
mainfrom
dependabot/nuget/System.CommandLine-2.0.7
Apr 27, 2026
Merged

Bump System.CommandLine from 2.0.5 to 2.0.7#9
birdnamoo merged 1 commit into
mainfrom
dependabot/nuget/System.CommandLine-2.0.7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Updated System.CommandLine from 2.0.5 to 2.0.7.

Release notes

Sourced from System.CommandLine's releases.

No release notes found for this version range.

Commits viewable in compare view.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 27, 2026

Labels

The following labels could not be found: dependencies, nuget. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

birdnamoo added a commit that referenced this pull request Apr 27, 2026
The existing nuget-publish.yml only runs on Directory.Build.props changes,
which means routine pushes and Dependabot PRs received no build verification.
This adds a dedicated CI workflow that:

- Runs on push to main and PRs targeting main
- Skips release commits (Directory.Build.props) to avoid double-trigger with
  the publish workflow, which runs the same pipeline before pack/push
- Skips docs-only changes (markdown, docs/, claudedocs/, etc.)
- Restores, scans for vulnerable transitive packages, builds Release, runs tests
- 15-minute timeout and per-ref concurrency cancellation to keep runner usage
  bounded

This unblocks safe automatic verification of the currently-open Dependabot
PRs (#2-#9) once they are rebased or refreshed.
@birdnamoo
Copy link
Copy Markdown
Contributor

사전 분석

Type: Patch (2.0.5 → 2.0.7).

Risk: 🟢 Low. CLI library patch. We use only stable surface (System.CommandLine root namespace in FilePrepper.CLI/Program.cs); 2.x patch trail has had no API breaks.

Verification status: Predates ci.yml. Comment @dependabot rebase to run automated verification.

Recommended sequence: Same as #5 — hold for 0.6.1, then merge → 0.6.2.

@birdnamoo
Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/nuget/System.CommandLine-2.0.7 branch from e807287 to 5d8ef71 Compare April 27, 2026 07:14
@birdnamoo
Copy link
Copy Markdown
Contributor

@dependabot rebase

---
updated-dependencies:
- dependency-name: System.CommandLine
  dependency-version: 2.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/nuget/System.CommandLine-2.0.7 branch from 5d8ef71 to 05e7683 Compare April 27, 2026 07:21
@birdnamoo birdnamoo merged commit 0faf164 into main Apr 27, 2026
1 check passed
@birdnamoo birdnamoo deleted the dependabot/nuget/System.CommandLine-2.0.7 branch April 27, 2026 07:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant