Skip to content

build: Bump the dotnet-minor-patch group with 3 updates - #281

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/dotnet-minor-patch-b553c08e33
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/dotnet-minor-patch-b553c08e33

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Updated Dapper from 2.1.79 to 2.1.89.

Release notes

Sourced from Dapper's releases.

2.1.89

What's Changed

New Contributors

Full Changelog: DapperLib/Dapper@2.1.86...2.1.89

2.1.86

What's Changed

Full Changelog: DapperLib/Dapper@2.1.79...2.1.86

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Data.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated rodrioliveira.adrguard from 1.6.0 to 1.8.0.

Release notes

Sourced from rodrioliveira.adrguard's releases.

1.8.0

ADR Guard v1.8.0 — MCP Integration, Visual Architecture Workflows & Governance

ADR Guard v1.8.0 marks a major step toward bringing architecture decision governance into developer workflows and AI-assisted engineering.

This release introduces the ADR Guard MCP Server in the repository, expands the VS Code integration with visual architecture workflows, and strengthens the shared .NET foundation — while preserving the CLI's existing commands, validation contracts, and deterministic behavior.

Highlights

Model Context Protocol (MCP) Server

ADR Guard now includes a standalone .NET 10 MCP server that exposes architecture decisions and governance capabilities to compatible AI agents.

Seven read-only tools are available:

MCP Tool | Capability -- | -- list_adrs | Discover Architecture Decision Records get_adr | Retrieve ADR content and metadata search_adrs | Search architectural decisions get_adr_relationships | Inspect dependencies and supersession validate_adrs | Execute deterministic ADR validation analyze_impact | Identify decisions affected by code changes verify_architecture | Evaluate architectural drift and evidence

The server uses stdio, structured contracts, bounded execution, repository isolation, and existing ADR Guard domain services. It does not duplicate validation logic or automatically modify architectural decisions.

Distribution: The MCP Server is versioned independently as 1.0.0. NuGet packaging, an official MCP Registry manifest, and a protected release workflow are included in the repository. Public MCP distribution requires its separate release process.

Expanded VS Code Architecture Workflows

The VS Code extension now includes the source implementation of additional CLI-backed visual workflows:

  • Architecture Impact Analysis: Explore affected decisions, related code changes, mapping coverage, and supporting evidence.

  • Architectural Drift: Inspect fitness rules, violations, passing results, and inconclusive evidence.

  • Diagnostic Baselines: Create and update baselines through explicit user actions.

  • Enriched ADR Catalog: Generate richer architecture decision indexes.

  • AI-Assisted Drafting: Preview proposed ADRs with explicit provider, model, and context selection.

  • Technical Review: Review existing ADRs and compare revisions using an explicit Git reference.

The extension also integrates with VS Code's MCP server provider API, allowing compatible agents to discover ADR Guard tools when the integration is enabled.

MCP remains optional and disabled by default. Traditional CLI-powered workflows continue to work independently.

Extension distribution: These enhancements are prepared for the independently versioned VS Code extension 1.1.0; their availability in the Marketplace depends on its separate publication.

CLI Integration and Compatibility

ADR Guard CLI 1.8.0 remains the authoritative engine for parsing, validation, generation, impact analysis, architectural drift, and governance policies.

The release preserves the established command set:

init · check · baseline · index · new · edit · draft · review · impact · drift

Existing capabilities remain supported, including canonical ADR validation, optional MADR 4.0, lifecycle and relationship policies, incremental checks, JSON/SARIF reports, diagnostic baselines, and advisory AI workflows.

The shared implementation is now reusable by the MCP server without changing the established CLI interface.

No intentional breaking changes to CLI commands, flags, report schemas, defaults, or exit-code semantics.

Security and Reliability

This release reinforces predictable and controlled architecture governance:

  • Repository-scoped MCP access with strict path and symlink validation.

  • Read-only MCP operations with bounded inputs, outputs, and execution.

  • Safer Git subprocess handling, preventing child processes from consuming MCP protocol input.

  • Explicit confirmation for file-changing workflows and external AI provider requests.

  • Workspace trust and isolation for VS Code integrations.

  • Continued human ownership of ADR lifecycle and architectural approval.

Impact analysis and AI-assisted reviews remain advisory. Inconclusive evidence is never silently treated as architectural compliance.

Release Automation and Quality

The repository now includes a dedicated MCP distribution pipeline, separate from the existing CLI and VS Code release workflows.

The MCP pipeline is designed for manually authorized publishing through NuGet.org, GitHub Releases, and the official MCP Registry, with OIDC authentication, package integrity verification, and cross-platform installation tests.

The implementation also adds automated coverage for MCP protocol negotiation, tool discovery, filesystem security, packaging, VS Code integration, and documentation consistency.

Installation

ADR Guard CLI 1.8.0 requires .NET 10.

For an existing global installation, once version 1.8.0 is available on NuGet.org:

dotnet tool update --global RodriOliveira.AdrGuard --version 1.8.0

For a new installation:

dotnet tool install --global RodriOliveira.AdrGuard --version 1.8.0

The CLI package is also attached to this GitHub Release as RodriOliveira.AdrGuard.1.8.0.nupkg.

The MCP Server and VS Code extension have separate installation and release lifecycles; neither is required for standalone CLI usage.

Documentation

The release includes expanded English and Brazilian Portuguese documentation, covering MCP tools and configuration, VS Code visual workflows, architectural analysis, security, compatibility, and release processes.


Full Changelog: v1.7.0...v1.8.0

Implementation: PR #​183 — MCP Server and VS Code Architecture Workflows

Architecture decisions remain human-owned. ADR Guard helps teams document, validate, understand, and evaluate those decisions across development tools and AI-assisted workflows.

# ADR Guard v1.8.0 — MCP Integration, Visual Architecture Workflows & Governance

ADR Guard v1.8.0 marks a major step toward bringing architecture decision governance into developer workflows and AI-assisted engineering.

This release introduces the ADR Guard MCP Server in the repository, expands the VS Code integration with visual architecture workflows, and strengthens the shared .NET foundation — while preserving the CLI's existing commands, validation contracts, and deterministic behavior.

Highlights

Model Context Protocol (MCP) Server

ADR Guard now includes a standalone .NET 10 MCP server that exposes architecture decisions and governance capabilities to compatible AI agents.

Seven read-only tools are available:

MCP Tool Capability
list_adrs Discover Architecture Decision Records
get_adr Retrieve ADR content and metadata
search_adrs Search architectural decisions
get_adr_relationships Inspect dependencies and supersession
validate_adrs Execute deterministic ADR validation
analyze_impact Identify decisions affected by code changes
verify_architecture Evaluate architectural drift and evidence

The server uses stdio, structured contracts, bounded execution, repository isolation, and existing ADR Guard domain services. It does not duplicate validation logic or automatically modify architectural decisions.

Distribution: The MCP Server is versioned independently as 1.0.0. NuGet packaging, an official MCP Registry manifest, and a protected release workflow are included in the repository. Public MCP distribution requires its separate release process.

Expanded VS Code Architecture Workflows

The VS Code extension now includes the source implementation of additional CLI-backed visual workflows:

  • Architecture Impact Analysis: Explore affected decisions, related code changes, mapping coverage, and supporting evidence.
  • Architectural Drift: Inspect fitness rules, violations, passing results, and inconclusive evidence.
  • Diagnostic Baselines: Create and update baselines through explicit user actions.
    ... (truncated)

1.7.0

ADR Guard v1.7.0 — Structured ADR Creation and Editing

ADR Guard 1.7.0 introduces structured creation and editing contracts for Architecture Decision Records (ADRs), providing the foundation for visual workflows in the VS Code extension.

This release extends the existing .NET CLI with versioned interfaces for creating and updating ADRs while preserving document integrity, backward compatibility, and the CLI's responsibility for validation and persistence.

What's New

Structured ADR Creation

The new adr-guard new <directory> --form contract enables visual clients to create ADRs through structured fields.

  • Support for Minimal and Extended ADR templates.
  • Template discovery and field definitions through versioned JSON contracts.
  • Side-effect-free Markdown previews before saving.
  • Atomic document creation with existing filename and identifier policies.
  • English and Brazilian Portuguese document generation.
  • Preservation of the traditional CLI workflow and custom-template support.

Structured ADR Editing

The new adr-guard edit <file> --form contract introduces safe, in-place editing of existing ADRs.

  • Support for canonical ADRs and MADR 4.0 documents.
  • Format-aware loading and validation.
  • Preservation of filenames, identifiers, unknown sections, and unchanged Markdown content.
  • SHA-256-based conflict detection to prevent overwriting externally modified documents.
  • Atomic persistence to protect document integrity.

VS Code Visual Workflow Integration

Versioned CLI contracts now support the visual management capabilities developed for the separately versioned VS Code extension.

These include:

  • An ADR list with search, status filters, sorting, and workspace selection.
  • Guided creation and editing forms with Markdown previews.
  • Configurable languages, templates, ADR directories, and validation preferences.
  • Navigation between listing, creation, editing, and settings screens.
  • Explicit save operations, dirty-state handling, and protection against unintended validation during Back or Cancel actions.
  • English and Brazilian Portuguese interfaces.

Important: This release publishes the CLI capabilities required by the visual workflows. The VS Code extension is versioned and published independently. Visual creation and editing require a compatible extension build and ADR Guard CLI 1.7.0 or newer.

Compatibility and Reliability

  • Existing CLI commands and arguments remain supported.
  • Canonical ADR validation remains the default; MADR 4.0 support stays opt-in.
  • Existing JSON, SARIF, review, impact analysis, and architectural drift contracts remain compatible.
  • Custom ADR templates continue to use the traditional creation workflow.
    ... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Dapper from 2.1.79 to 2.1.89
Bumps Microsoft.Data.Sqlite from 10.0.12 to 10.0.13
Bumps rodrioliveira.adrguard from 1.6.0 to 1.8.0

---
updated-dependencies:
- dependency-name: Dapper
  dependency-version: 2.1.89
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: rodrioliveira.adrguard
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 19, 2026
@coderabbitai

coderabbitai Bot commented Oct 19, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants