S⚠️ ◾ Automated Package Update by neilr81 · Pull Request #822 · microsoft/Omex

neilr81 · 2026-02-08T21:45:31Z

This PR was created automatically by the workflow run 21805918907.

This script updates NuGet package versions in the Directory.Packages.props file by querying the latest available versions and updating the Version attributes accordingly, while respecting the PreserveMajor attribute and pre-release version detection.

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Changed the trigger for package updates to a scheduled cron job.

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Initial plan * Gate PR creation on changes detection flag Co-authored-by: neilr81 <49037171+neilr81@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: neilr81 <49037171+neilr81@users.noreply.github.com>

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Removed GitHub CLI installation step from workflow.

Removed the 'powershell' label from the automated package update PR.

github-actions · 2026-02-08T21:45:49Z

PR Metrics

✔ Thanks for keeping your pull request small.
⚠️ Consider adding additional tests.

	Lines
Product Code	350
Test Code	-
Subtotal	350
Ignored Code	68
Total	418

Metrics computed by PR Metrics. Add it to your Azure DevOps and GitHub PRs!

Copilot

Pull request overview

Adds GitHub Actions automation to keep centrally-managed NuGet package versions up to date, plus updates MSTest package versions as part of the automated run.

Changes:

Updates MSTest package versions in Directory.Packages.props.
Adds a scheduled GitHub Actions workflow to run an update script and open a PR.
Introduces a PowerShell script to query latest package versions and update Directory.Packages.props for AutoUpdate groups.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 6 comments.

File	Description
Directory.Packages.props	Updates MSTest versions (and includes formatting/encoding churn from automated save).
.github/workflows/package-update.yml	Adds scheduled automation to run the updater script and open a PR.
.github/scripts/Update-NuGetPackageVersions.ps1	Implements the package-version update logic using `dotnet package search` and XML editing.

Copilot · 2026-02-08T21:49:40Z

+        $searchCmd = "dotnet package search `"$PackageId`" --exact-match --format json $prereleaseFlag $configSourceFlag"
+
+        if ($EnableVerboseLogging) {
+            Write-Host "  [VERBOSE] Executing: $searchCmd"
+        }


Avoid Invoke-Expression for running dotnet; it makes command construction brittle and can enable injection if the package id ever contains unexpected characters. Prefer invoking dotnet directly with an argument array (e.g., & dotnet package search ...) and capture stdout/stderr explicitly.

Copilot · 2026-02-08T21:49:41Z

+    if ($firstVersionObject.Version -eq $secondVersionObject.Version) {
+        if (-not $firstVersionObject.Suffix) { return $First }
+        if (-not $secondVersionObject.Suffix) { return $Second }
+        if ($firstVersionObject.Suffix -lt $secondVersionObject.Suffix) { return $Second }
+        return $First


Pre-release comparison uses lexicographic string ordering for the suffix (e.g., -rc.2 may compare greater than -rc.10), which can select the wrong “latest” version when base versions match. Consider parsing NuGet versions with System.Management.Automation.SemanticVersion (PowerShell 7) or NuGet.Versioning to compare prerelease identifiers numerically/semver-correctly.

Copilot · 2026-02-08T21:49:41Z

+if ($updateCount -gt 0) {
+    Write-Host "##[section]Saving $updateCount package updates to $propsFile"
+    $xml.Save($propsFile)
+    Write-Host "Successfully updated $updateCount packages"


Saving via XmlDocument.Save() appears to normalize formatting/encoding (e.g., BOM + self-closing tag spacing), producing large diffs unrelated to version changes. Consider updating only the Version attribute text in-place or saving with preserved encoding/formatting to minimize churn in automated PRs.

Copilot · 2026-02-08T21:49:41Z

+        Write-Host ("Searching for package: {0} {1}" -f $PackageId, ($MajorVersion ? ('(major version {0}.*)' -f $MajorVersion) : ''))
+
+        $output = Invoke-Expression $searchCmd 2>&1 | Out-String
+


dotnet package search --format json is parsed with ConvertFrom-Json, but the command output is captured with 2>&1, which can mix non-JSON stderr (warnings/progress) into stdout and break JSON parsing even when the command succeeds. Consider capturing stdout only for JSON parsing and handling stderr separately.

Copilot · 2026-02-08T21:49:41Z

+on:
+  schedule:
+    - cron: "0 6 * * 1"
+  pull_request:
+    branches: [ "main" ]


The workflow is configured to run on every pull_request targeting main, which can cause unnecessary runs (and potentially extra automated PRs) whenever any PR is opened/updated. Consider removing the pull_request trigger and using workflow_dispatch (manual) alongside schedule so updates are only generated intentionally.

Copilot · 2026-02-08T21:49:42Z

+        # Prefer NuGet-GitHub.Config (used on GitHub runners) when present, otherwise fall back to NuGet.config
+        $nugetGithubConfigPath = Join-Path $SourcesDirectory "NuGet-GitHub.Config"
+        $nugetConfigPath = Join-Path $SourcesDirectory "NuGet.config"
+        $configSourceFlag = ""
+        if (Test-Path $nugetGithubConfigPath) {


The script falls back to NuGet.config, but the repo config file is NuGet.Config (case-sensitive on non-Windows). Use the correct filename (or probe both casings) so local/Linux runs and container builds reliably pick up the intended feeds.

neilr81 and others added 30 commits February 7, 2026 14:08

Add GitHub Actions workflow for package updates

5a23446

Update script paths in package-update.yml

c0d9eb7

Apply suggestion from @Copilot

bfb26c8

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Update package-update workflow to use cron schedule

88eb82c

Changed the trigger for package updates to a scheduled cron job.

Update .github/scripts/Update-NuGetPackageVersions.ps1

671dd97

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Update .github/scripts/Update-NuGetPackageVersions.ps1

4b27d31

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Apply suggestion from @Copilot

8c3190a

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Apply suggestion from @Copilot

287fbe0

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Apply suggestion from @Copilot

c56db37

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Add pull_request_target trigger to workflow

1a02929

Apply suggestion from @Copilot

1cf02c9

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Update package-update.yml

331b09d

Update package-update.yml

07d2d47

Rename checkout step for clarity

0455764

Remove GitHub CLI installation from package-update.yml

1cbd892

Removed GitHub CLI installation step from workflow.

Update Update-NuGetPackageVersions.ps1

3e92781

Fix label assignment in package-update workflow

fc9b6c7

Remove 'powershell' label from package update PR

527230e

Removed the 'powershell' label from the automated package update PR.

Add label to automated package update PR

34493b9

Fix label formatting in package-update.yml

f2afff8

Add token input for create pull request action

f5431d8

Update GH_TOKEN to use secrets for PR creation

cd5081d

Update package-update.yml

852325b

Merge 852325b into 60e2378

40ba9dd

chore(automation): apply PowerShell updates

379cba4

Merge 379cba4 into 60e2378

55e1c51

Merge 55e1c51 into 60e2378

5d69300

Merge 5d69300 into 60e2378

6f35d1d

neilr81 added 11 commits February 8, 2026 21:31

Merge 6f35d1d into 60e2378

bbc97ca

Merge bbc97ca into 60e2378

6137e99

Merge 6137e99 into 60e2378

e4ab9fa

Merge e4ab9fa into 60e2378

929f317

Merge 929f317 into 60e2378

bb4f02f

Merge bb4f02f into 60e2378

9a99f0b

Merge 9a99f0b into 60e2378

92be031

Merge 92be031 into 60e2378

a821e33

Merge a821e33 into 60e2378

f897fe9

Merge f897fe9 into 60e2378

bf58d05

Merge bf58d05 into 60e2378

9dbe45f

neilr81 requested a review from a team as a code owner February 8, 2026 21:45

neilr81 added the automation Item has been created automatically. label Feb 8, 2026

Copilot AI review requested due to automatic review settings February 8, 2026 21:45

neilr81 self-assigned this Feb 8, 2026

github-actions Bot changed the title ~~Automated Package Update~~ S⚠️ ◾ Automated Package Update Feb 8, 2026

Copilot started reviewing on behalf of neilr81 February 8, 2026 21:46 View session

neilr81 closed this Feb 8, 2026

neilr81 deleted the automation/package-update-21805918907 branch February 8, 2026 21:47

Copilot AI reviewed Feb 8, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

S⚠️ ◾ Automated Package Update#822

S⚠️ ◾ Automated Package Update#822
neilr81 wants to merge 41 commits into
mainfrom
automation/package-update-21805918907

neilr81 commented Feb 8, 2026

Uh oh!

github-actions Bot commented Feb 8, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Feb 8, 2026

Uh oh!

Copilot AI Feb 8, 2026

Uh oh!

Copilot AI Feb 8, 2026

Uh oh!

Copilot AI Feb 8, 2026

Uh oh!

Copilot AI Feb 8, 2026

Uh oh!

Copilot AI Feb 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

		Write-Host ("Searching for package: {0} {1}" -f $PackageId, ($MajorVersion ? ('(major version {0}.*)' -f $MajorVersion) : ''))

		$output = Invoke-Expression $searchCmd 2>&1 \| Out-String

Conversation

neilr81 commented Feb 8, 2026

Uh oh!

github-actions Bot commented Feb 8, 2026

PR Metrics

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Feb 8, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 8, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 8, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 8, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 8, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 8, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants