Bump coverlet.msbuild from 6.0.4 to 10.0.0#474
Conversation
dependabot
Bot
added
.NET
🛡️ Jit Security Scan Results
✅ No security findings were detected in this PR
Security scan by Jit
|
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit ffe3c19. Configure here.
| <PackageVersion Include="BouncyCastle.Cryptography" Version="2.6.1" /> | ||
| <PackageVersion Include="coverlet.collector" Version="6.0.4" /> | ||
| <PackageVersion Include="coverlet.msbuild" Version="6.0.4" /> | ||
| <PackageVersion Include="coverlet.msbuild" Version="10.0.0" /> |
There was a problem hiding this comment.
Coverlet package version skew between msbuild and collector
Low Severity
coverlet.msbuild is bumped to 10.0.0 while coverlet.collector remains at 6.0.4. Both packages originate from the same coverlet-coverage/coverlet repository and share underlying components like coverlet.core. The test project references both packages, and this major-version skew (spanning three major versions apart) could cause conflicting transitive dependencies or inconsistent code coverage behavior. Before this change both packages were aligned at 6.0.4.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit ffe3c19. Configure here.
--- updated-dependencies: - dependency-name: coverlet.msbuild dependency-version: 10.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
Bot
force-pushed
the
dependabot/nuget/coverlet.msbuild-10.0.0
branch
from
ffe3c19 to
d8b9930
Compare
1 participant
Updated coverlet.msbuild from 6.0.4 to 10.0.0.
Release notes
Sourced from coverlet.msbuild's releases.
10.0.0
Improvements
--coverlet-file-prefixoption for unique report files #1869Fixed
Maintenance
Diff between 8.0.1 and 10.0.0
8.0.1
Fixed
Improvements
Diff between 8.0.0 and 8.0.1
8.0.0
Special Thanks: A huge thank you to @Bertk for driving the majority of the work in this release! 🎉
Fixed
Improvements
Diff between 6.0.4 and 8.0.0
Commits viewable in compare view.
Note
Low Risk
Test-only dependency bump; low risk aside from potential CI/coverage report behavior changes due to a major version upgrade.
Overview
Updates the centrally-managed NuGet dependency
coverlet.msbuildinDirectory.Packages.propsfrom6.0.4to10.0.0to pick up the latest coverage tooling fixes and improvements.Reviewed by Cursor Bugbot for commit d8b9930. Bugbot is set up for automated code reviews on this repo. Configure here.