Skip to content

[pull] main from GitTools:main#281

Open
pull[bot] wants to merge 644 commits into
Familyfirst4:mainfrom
GitTools:main
Open

[pull] main from GitTools:main#281
pull[bot] wants to merge 644 commits into
Familyfirst4:mainfrom
GitTools:main

Conversation

@pull

@pull pull Bot commented Nov 2, 2025 •
edited
Loading

Copy link
Copy Markdown

See Commits and Changes for more details.

Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

@pull pull Bot locked and limited conversation to collaborators Nov 2, 2025
@pull pull Bot added ⤵️ pull merge-conflict Resolve conflicts manually labels Nov 2, 2025
@arturcic arturcic force-pushed the main branch 2 times, most recently from a6d0c32 to 5e7846e Compare December 14, 2025 14:54
@arturcic arturcic force-pushed the main branch 2 times, most recently from 1b17f42 to b3c6a61 Compare January 14, 2026 08:27
@arturcic arturcic force-pushed the main branch 2 times, most recently from 39298a9 to c1b5f1a Compare January 30, 2026 15:22
@arturcic arturcic force-pushed the main branch 19 times, most recently from 860c000 to 143e2a8 Compare March 18, 2026 00:18
mergify Bot and others added 3 commits July 2, 2026 13:47
@mergify
Merge pull request #5010 from robertcoltheart/bug/fix-bad-semver-labels
a4c2b3c 
fix: sanitize labels correctly when using enviornment variables
@arturcic @claude
chore(deps): consolidate Dependabot config and enable devcontainer fe…
7522d5a 
…ature updates (#5015)

* chore(deps): merge docker configs, add devcontainers ecosystem, group actions

- Merge the two docker ecosystem entries into one via directories list
- Add devcontainers ecosystem to update features in devcontainer.json
- Group additional github-actions vendors (docker, codeql, reviewdog, gittools)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* chore(devcontainer): add lock file so Dependabot can track features

Unpin feature tags and add devcontainer-lock.json with resolved
versions and digests, required for the devcontainers Dependabot ecosystem.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
@dependabot
(build deps): bump the codeql group across 1 directory with 3 updates (…
a1d7fec 
…#5016)

Bumps the codeql group with 3 updates in the /.github/workflows directory: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.36.2 to 4.36.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@8aad20d...54f647b)

Updates `github/codeql-action/analyze` from 4.36.2 to 4.36.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@8aad20d...54f647b)

Updates `github/codeql-action/upload-sarif` from 4.36.2 to 4.36.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@8aad20d...54f647b)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
dependabot Bot and others added 5 commits July 3, 2026 14:36
@dependabot @arturcic
(deps): Bump the microsoft group with 3 updates
64a1c8c 
Bumps Microsoft.CodeAnalysis.Analyzers from 5.3.0 to 5.6.0
Bumps Microsoft.CodeAnalysis.CSharp from 5.3.0 to 5.6.0
Bumps Microsoft.CodeAnalysis.PublicApiAnalyzers from 5.0.0-1.25277.114 to 5.6.0

---
updated-dependencies:
- dependency-name: Microsoft.CodeAnalysis.Analyzers
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
- dependency-name: Microsoft.CodeAnalysis.CSharp
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
- dependency-name: Microsoft.CodeAnalysis.CSharp
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
- dependency-name: Microsoft.CodeAnalysis.PublicApiAnalyzers
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
...

Signed-off-by: dependabot[bot] <support@github.com>
@arturcic
fix(deps): keep Microsoft.CodeAnalysis packages in lockstep via share…
2120ea0 
…d version property

Dependabot's partial bump of Microsoft.CodeAnalysis.CSharp to 5.6.0 left
Microsoft.CodeAnalysis.Common/VisualBasic (src) and
Microsoft.CodeAnalysis.CSharp.Workspaces (new-cli) pinned at 5.3.0,
causing NU1605 downgrade errors during restore. Introduce a single
MicrosoftCodeAnalysisVersion MSBuild property so these tightly-coupled
packages always move together, and fix the dependabot.yml group
ordering so the CodeAnalysis-specific group isn't shadowed by the
broader Microsoft.* group.
@mergify
Merge pull request #5020 from GitTools/dependabot/nuget/new-cli/micro…
7929c98 
…soft-1c1da6d8a1

(deps): Bump the microsoft group with 3 updates
@dependabot
(deps): Bump SharpYaml from 3.11.0 to 3.12.0
4911ae1 
---
updated-dependencies:
- dependency-name: SharpYaml
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@arturcic
ci(homebrew): fix syntax error in brew bump-formula-pr command
4f8ea5c 
Add a missing backslash to correctly continue the multi-line command in the Homebrew workflow.
mergify Bot and others added 20 commits July 3, 2026 15:03
@mergify
Merge pull request #5022 from GitTools/dependabot/nuget/src/SharpYaml…
91ab50b 
…-3.12.0

(deps): Bump SharpYaml from 3.11.0 to 3.12.0
@dependabot
(build deps): bump step-security/harden-runner in /.github/workflows
983907e 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.19.4 to 2.20.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@9af89fc...bf7454d)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@mergify
Merge pull request #5024 from GitTools/dependabot/github_actions/dot-…
20d6faf 
…github/workflows/step-security/harden-runner-2.20.0

(build deps): bump step-security/harden-runner from 2.19.4 to 2.20.0 in /.github/workflows
@robertcoltheart
fix: allow incorrect labels if placeholders are missing
6e9833f
@mergify
Merge pull request #5025 from robertcoltheart/bug/return-label-withou…
b924ea7 
…t-throwing

fix: allow incorrect labels if placeholders are missing
@arturcic
chore(devcontainer): remove redundant git feature
940988a 
Remove the git feature from the devcontainer configuration as it is already provided by the base image.
@dependabot
(build deps): bump the codeql group across 1 directory with 3 updates
d55930c 
Bumps the codeql group with 3 updates in the /.github/workflows directory: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.36.3 to 4.37.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@54f647b...99df26d)

Updates `github/codeql-action/analyze` from 4.36.3 to 4.37.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@54f647b...99df26d)

Updates `github/codeql-action/upload-sarif` from 4.36.3 to 4.37.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@54f647b...99df26d)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql
...

Signed-off-by: dependabot[bot] <support@github.com>
@arturcic
Merge pull request #5027 from GitTools/dependabot/github_actions/dot-…
555d0ee 
…github/workflows/codeql-7512263334

(build deps): bump the codeql group across 1 directory with 3 updates
@arturcic
docs(release): verify Homebrew fork before release
5f42a2a
@arturcic
docs(release): strengthen safety checks and streamline release workflow
26b8637 
Add local branch validation, consolidate readiness checks into a single confirmation step, and handle downstream no-op signals. Remove redundant SHA256 sections from release notes.
@dependabot
(build deps): bump actions/stale
af06156 
Bumps the actions group with 1 update in the /.github/workflows directory: [actions/stale](https://github.com/actions/stale).


Updates `actions/stale` from 10.3.0 to 10.4.0
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@eb5cf3a...1e223db)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@arturcic
Merge pull request #5030 from GitTools/dependabot/github_actions/dot-…
426b54f 
…github/workflows/actions-38afab4f4d

(build deps): bump actions/stale from 10.3.0 to 10.4.0 in /.github/workflows in the actions group across 1 directory
@dependabot
(deps): Bump SharpYaml from 3.12.0 to 3.13.0
6b4075d 
---
updated-dependencies:
- dependency-name: SharpYaml
  dependency-version: 3.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@mergify
Merge pull request #5046 from GitTools/dependabot/nuget/src/SharpYaml…
a8efc3f 
…-3.13.0

(deps): Bump SharpYaml from 3.12.0 to 3.13.0
@dependabot
(deps): Bump NSubstitute from 5.3.0 to 6.0.0
97ce552 
---
updated-dependencies:
- dependency-name: NSubstitute
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@mergify
Merge pull request #5052 from GitTools/dependabot/nuget/src/NSubstitu…
ede6fb4 
…te-6.0.0

(deps): Bump NSubstitute from 5.3.0 to 6.0.0
@dependabot
(deps): Bump the microsoft group with 1 update
e66afad 
Bumps System.IO.Abstractions from 22.1.1 to 22.2.0

---
updated-dependencies:
- dependency-name: System.IO.Abstractions
  dependency-version: 22.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
- dependency-name: System.IO.Abstractions
  dependency-version: 22.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
...

Signed-off-by: dependabot[bot] <support@github.com>
@mergify
Merge pull request #5061 from GitTools/dependabot/nuget/new-cli/micro…
a6718e0 
…soft-5c87809d62

(deps): Bump the microsoft group with 1 update
@dependabot
(deps): Bump the microsoft group with 1 update
04ddeed 
Bumps Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.0

---
updated-dependencies:
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
...

Signed-off-by: dependabot[bot] <support@github.com>
@mergify
Merge pull request #5064 from GitTools/dependabot/nuget/new-cli/micro…
6f6ad6d 
…soft-ad96945197

(deps): Bump the microsoft group with 1 update
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

⤵️ pull merge-conflict Resolve conflicts manually

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

7 participants

@arturcic @jnyrup @robertcoltheart @gittools-bot @asbjornu @step-security-bot @JDanRibeiro