From d464f1bc64ae00bc6e5a223e369c0920e199d94e Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 15 Jul 2026 19:30:24 +0000 Subject: [PATCH 1/4] Configure dependabot to only update minor versions of MSBuild/Roslyn packages Co-authored-by: AndriySvyryd <6539701+AndriySvyryd@users.noreply.github.com> --- .github/dependabot.yml | 44 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 44 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 398a2946096..0448ba938fa 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -15,6 +15,17 @@ updates: labels: - "area-infrastructure" ignore: + # Only update to the latest minor version, never major or patch + - dependency-name: "Microsoft.Build.Locator" + update-types: ["version-update:semver-major", "version-update:semver-patch"] + - dependency-name: "Microsoft.CodeAnalysis.Workspaces.MSBuild" + update-types: ["version-update:semver-major", "version-update:semver-patch"] + - dependency-name: "Microsoft.Build.Framework" + update-types: ["version-update:semver-major", "version-update:semver-patch"] + - dependency-name: "Microsoft.Build.Utilities.Core" + update-types: ["version-update:semver-major", "version-update:semver-patch"] + - dependency-name: "Microsoft.CodeAnalysis.CSharp.Workspaces" + update-types: ["version-update:semver-major", "version-update:semver-patch"] # Packages managed by Maestro dependency flow (eng/Version.Details.props) - dependency-name: "Microsoft.DotNet.Arcade.Sdk" - dependency-name: "Microsoft.DotNet.Build.Tasks.Templating" @@ -51,6 +62,17 @@ updates: # Only update to the latest minor or patch version, never major - dependency-name: "*" update-types: ["version-update:semver-major"] + # Only update to the latest minor version, never major or patch + - dependency-name: "Microsoft.Build.Locator" + update-types: ["version-update:semver-major", "version-update:semver-patch"] + - dependency-name: "Microsoft.CodeAnalysis.Workspaces.MSBuild" + update-types: ["version-update:semver-major", "version-update:semver-patch"] + - dependency-name: "Microsoft.Build.Framework" + update-types: ["version-update:semver-major", "version-update:semver-patch"] + - dependency-name: "Microsoft.Build.Utilities.Core" + update-types: ["version-update:semver-major", "version-update:semver-patch"] + - dependency-name: "Microsoft.CodeAnalysis.CSharp.Workspaces" + update-types: ["version-update:semver-major", "version-update:semver-patch"] # Packages managed by Maestro dependency flow (eng/Version.Details.props) - dependency-name: "Microsoft.DotNet.Arcade.Sdk" - dependency-name: "Microsoft.DotNet.Build.Tasks.Templating" @@ -87,6 +109,17 @@ updates: # Only update to the latest minor or patch version, never major - dependency-name: "*" update-types: ["version-update:semver-major"] + # Only update to the latest minor version, never major or patch + - dependency-name: "Microsoft.Build.Locator" + update-types: ["version-update:semver-major", "version-update:semver-patch"] + - dependency-name: "Microsoft.CodeAnalysis.Workspaces.MSBuild" + update-types: ["version-update:semver-major", "version-update:semver-patch"] + - dependency-name: "Microsoft.Build.Framework" + update-types: ["version-update:semver-major", "version-update:semver-patch"] + - dependency-name: "Microsoft.Build.Utilities.Core" + update-types: ["version-update:semver-major", "version-update:semver-patch"] + - dependency-name: "Microsoft.CodeAnalysis.CSharp.Workspaces" + update-types: ["version-update:semver-major", "version-update:semver-patch"] # Packages managed by Maestro dependency flow (eng/Version.Details.props) - dependency-name: "Microsoft.DotNet.Arcade.Sdk" - dependency-name: "Microsoft.DotNet.Build.Tasks.Templating" @@ -123,6 +156,17 @@ updates: # Only update to the latest minor or patch version, never major - dependency-name: "*" update-types: ["version-update:semver-major"] + # Only update to the latest minor version, never major or patch + - dependency-name: "Microsoft.Build.Locator" + update-types: ["version-update:semver-major", "version-update:semver-patch"] + - dependency-name: "Microsoft.CodeAnalysis.Workspaces.MSBuild" + update-types: ["version-update:semver-major", "version-update:semver-patch"] + - dependency-name: "Microsoft.Build.Framework" + update-types: ["version-update:semver-major", "version-update:semver-patch"] + - dependency-name: "Microsoft.Build.Utilities.Core" + update-types: ["version-update:semver-major", "version-update:semver-patch"] + - dependency-name: "Microsoft.CodeAnalysis.CSharp.Workspaces" + update-types: ["version-update:semver-major", "version-update:semver-patch"] # Packages managed by Maestro dependency flow (eng/Version.Details.props) - dependency-name: "Microsoft.DotNet.Arcade.Sdk" - dependency-name: "Microsoft.DotNet.Build.Tasks.Templating" From 3a906add31b52b0d41ad75411d0191a908f57135 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 15 Jul 2026 20:10:30 +0000 Subject: [PATCH 2/4] Change MSBuild/Roslyn packages to ignore major and minor versions (allow patch only) Co-authored-by: AndriySvyryd <6539701+AndriySvyryd@users.noreply.github.com> --- .github/dependabot.yml | 48 +++++++++++++++++++++--------------------- 1 file changed, 24 insertions(+), 24 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 0448ba938fa..38f833002f2 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -15,17 +15,17 @@ updates: labels: - "area-infrastructure" ignore: - # Only update to the latest minor version, never major or patch + # Only update to the latest patch version, never major or minor - dependency-name: "Microsoft.Build.Locator" - update-types: ["version-update:semver-major", "version-update:semver-patch"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.CodeAnalysis.Workspaces.MSBuild" - update-types: ["version-update:semver-major", "version-update:semver-patch"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.Build.Framework" - update-types: ["version-update:semver-major", "version-update:semver-patch"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.Build.Utilities.Core" - update-types: ["version-update:semver-major", "version-update:semver-patch"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.CodeAnalysis.CSharp.Workspaces" - update-types: ["version-update:semver-major", "version-update:semver-patch"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] # Packages managed by Maestro dependency flow (eng/Version.Details.props) - dependency-name: "Microsoft.DotNet.Arcade.Sdk" - dependency-name: "Microsoft.DotNet.Build.Tasks.Templating" @@ -62,17 +62,17 @@ updates: # Only update to the latest minor or patch version, never major - dependency-name: "*" update-types: ["version-update:semver-major"] - # Only update to the latest minor version, never major or patch + # Only update to the latest patch version, never major or minor - dependency-name: "Microsoft.Build.Locator" - update-types: ["version-update:semver-major", "version-update:semver-patch"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.CodeAnalysis.Workspaces.MSBuild" - update-types: ["version-update:semver-major", "version-update:semver-patch"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.Build.Framework" - update-types: ["version-update:semver-major", "version-update:semver-patch"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.Build.Utilities.Core" - update-types: ["version-update:semver-major", "version-update:semver-patch"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.CodeAnalysis.CSharp.Workspaces" - update-types: ["version-update:semver-major", "version-update:semver-patch"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] # Packages managed by Maestro dependency flow (eng/Version.Details.props) - dependency-name: "Microsoft.DotNet.Arcade.Sdk" - dependency-name: "Microsoft.DotNet.Build.Tasks.Templating" @@ -109,17 +109,17 @@ updates: # Only update to the latest minor or patch version, never major - dependency-name: "*" update-types: ["version-update:semver-major"] - # Only update to the latest minor version, never major or patch + # Only update to the latest patch version, never major or minor - dependency-name: "Microsoft.Build.Locator" - update-types: ["version-update:semver-major", "version-update:semver-patch"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.CodeAnalysis.Workspaces.MSBuild" - update-types: ["version-update:semver-major", "version-update:semver-patch"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.Build.Framework" - update-types: ["version-update:semver-major", "version-update:semver-patch"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.Build.Utilities.Core" - update-types: ["version-update:semver-major", "version-update:semver-patch"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.CodeAnalysis.CSharp.Workspaces" - update-types: ["version-update:semver-major", "version-update:semver-patch"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] # Packages managed by Maestro dependency flow (eng/Version.Details.props) - dependency-name: "Microsoft.DotNet.Arcade.Sdk" - dependency-name: "Microsoft.DotNet.Build.Tasks.Templating" @@ -156,17 +156,17 @@ updates: # Only update to the latest minor or patch version, never major - dependency-name: "*" update-types: ["version-update:semver-major"] - # Only update to the latest minor version, never major or patch + # Only update to the latest patch version, never major or minor - dependency-name: "Microsoft.Build.Locator" - update-types: ["version-update:semver-major", "version-update:semver-patch"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.CodeAnalysis.Workspaces.MSBuild" - update-types: ["version-update:semver-major", "version-update:semver-patch"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.Build.Framework" - update-types: ["version-update:semver-major", "version-update:semver-patch"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.Build.Utilities.Core" - update-types: ["version-update:semver-major", "version-update:semver-patch"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.CodeAnalysis.CSharp.Workspaces" - update-types: ["version-update:semver-major", "version-update:semver-patch"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] # Packages managed by Maestro dependency flow (eng/Version.Details.props) - dependency-name: "Microsoft.DotNet.Arcade.Sdk" - dependency-name: "Microsoft.DotNet.Build.Tasks.Templating" From eb46d3b20a5e10a6fa674235aa4084872efdfcfb Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 15 Jul 2026 20:19:13 +0000 Subject: [PATCH 3/4] Sort MSBuild/Roslyn package ignore entries alphabetically Co-authored-by: AndriySvyryd <6539701+AndriySvyryd@users.noreply.github.com> --- .github/dependabot.yml | 32 ++++++++++++++++---------------- 1 file changed, 16 insertions(+), 16 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 38f833002f2..c0df5b75e42 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -16,16 +16,16 @@ updates: - "area-infrastructure" ignore: # Only update to the latest patch version, never major or minor - - dependency-name: "Microsoft.Build.Locator" - update-types: ["version-update:semver-major", "version-update:semver-minor"] - - dependency-name: "Microsoft.CodeAnalysis.Workspaces.MSBuild" - update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.Build.Framework" update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "Microsoft.Build.Locator" + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.Build.Utilities.Core" update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.CodeAnalysis.CSharp.Workspaces" update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "Microsoft.CodeAnalysis.Workspaces.MSBuild" + update-types: ["version-update:semver-major", "version-update:semver-minor"] # Packages managed by Maestro dependency flow (eng/Version.Details.props) - dependency-name: "Microsoft.DotNet.Arcade.Sdk" - dependency-name: "Microsoft.DotNet.Build.Tasks.Templating" @@ -63,16 +63,16 @@ updates: - dependency-name: "*" update-types: ["version-update:semver-major"] # Only update to the latest patch version, never major or minor - - dependency-name: "Microsoft.Build.Locator" - update-types: ["version-update:semver-major", "version-update:semver-minor"] - - dependency-name: "Microsoft.CodeAnalysis.Workspaces.MSBuild" - update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.Build.Framework" update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "Microsoft.Build.Locator" + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.Build.Utilities.Core" update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.CodeAnalysis.CSharp.Workspaces" update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "Microsoft.CodeAnalysis.Workspaces.MSBuild" + update-types: ["version-update:semver-major", "version-update:semver-minor"] # Packages managed by Maestro dependency flow (eng/Version.Details.props) - dependency-name: "Microsoft.DotNet.Arcade.Sdk" - dependency-name: "Microsoft.DotNet.Build.Tasks.Templating" @@ -110,16 +110,16 @@ updates: - dependency-name: "*" update-types: ["version-update:semver-major"] # Only update to the latest patch version, never major or minor - - dependency-name: "Microsoft.Build.Locator" - update-types: ["version-update:semver-major", "version-update:semver-minor"] - - dependency-name: "Microsoft.CodeAnalysis.Workspaces.MSBuild" - update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.Build.Framework" update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "Microsoft.Build.Locator" + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.Build.Utilities.Core" update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.CodeAnalysis.CSharp.Workspaces" update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "Microsoft.CodeAnalysis.Workspaces.MSBuild" + update-types: ["version-update:semver-major", "version-update:semver-minor"] # Packages managed by Maestro dependency flow (eng/Version.Details.props) - dependency-name: "Microsoft.DotNet.Arcade.Sdk" - dependency-name: "Microsoft.DotNet.Build.Tasks.Templating" @@ -157,16 +157,16 @@ updates: - dependency-name: "*" update-types: ["version-update:semver-major"] # Only update to the latest patch version, never major or minor - - dependency-name: "Microsoft.Build.Locator" - update-types: ["version-update:semver-major", "version-update:semver-minor"] - - dependency-name: "Microsoft.CodeAnalysis.Workspaces.MSBuild" - update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.Build.Framework" update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "Microsoft.Build.Locator" + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.Build.Utilities.Core" update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.CodeAnalysis.CSharp.Workspaces" update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "Microsoft.CodeAnalysis.Workspaces.MSBuild" + update-types: ["version-update:semver-major", "version-update:semver-minor"] # Packages managed by Maestro dependency flow (eng/Version.Details.props) - dependency-name: "Microsoft.DotNet.Arcade.Sdk" - dependency-name: "Microsoft.DotNet.Build.Tasks.Templating" From a63bbc44c36ac685e05dc71ebd742f5788b2052b Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 15 Jul 2026 21:01:59 +0000 Subject: [PATCH 4/4] Add SQLitePCLRaw and Microsoft.Data.SqlClient to dependabot patch-only restrictions Co-authored-by: AndriySvyryd <6539701+AndriySvyryd@users.noreply.github.com> --- .github/dependabot.yml | 38 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 38 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index c0df5b75e42..1cfada34915 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -26,6 +26,14 @@ updates: update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.CodeAnalysis.Workspaces.MSBuild" update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "SQLitePCLRaw.bundle_e_sqlite3" + update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "SQLitePCLRaw.bundle_sqlite3" + update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "SQLitePCLRaw.core" + update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "SQLitePCLRaw.provider.sqlite3" + update-types: ["version-update:semver-major", "version-update:semver-minor"] # Packages managed by Maestro dependency flow (eng/Version.Details.props) - dependency-name: "Microsoft.DotNet.Arcade.Sdk" - dependency-name: "Microsoft.DotNet.Build.Tasks.Templating" @@ -73,6 +81,16 @@ updates: update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.CodeAnalysis.Workspaces.MSBuild" update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "Microsoft.Data.SqlClient" + update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "SQLitePCLRaw.bundle_e_sqlite3" + update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "SQLitePCLRaw.bundle_sqlite3" + update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "SQLitePCLRaw.core" + update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "SQLitePCLRaw.provider.sqlite3" + update-types: ["version-update:semver-major", "version-update:semver-minor"] # Packages managed by Maestro dependency flow (eng/Version.Details.props) - dependency-name: "Microsoft.DotNet.Arcade.Sdk" - dependency-name: "Microsoft.DotNet.Build.Tasks.Templating" @@ -120,6 +138,16 @@ updates: update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.CodeAnalysis.Workspaces.MSBuild" update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "Microsoft.Data.SqlClient" + update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "SQLitePCLRaw.bundle_e_sqlite3" + update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "SQLitePCLRaw.bundle_sqlite3" + update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "SQLitePCLRaw.core" + update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "SQLitePCLRaw.provider.sqlite3" + update-types: ["version-update:semver-major", "version-update:semver-minor"] # Packages managed by Maestro dependency flow (eng/Version.Details.props) - dependency-name: "Microsoft.DotNet.Arcade.Sdk" - dependency-name: "Microsoft.DotNet.Build.Tasks.Templating" @@ -167,6 +195,16 @@ updates: update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: "Microsoft.CodeAnalysis.Workspaces.MSBuild" update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "Microsoft.Data.SqlClient" + update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "SQLitePCLRaw.bundle_e_sqlite3" + update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "SQLitePCLRaw.bundle_sqlite3" + update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "SQLitePCLRaw.core" + update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "SQLitePCLRaw.provider.sqlite3" + update-types: ["version-update:semver-major", "version-update:semver-minor"] # Packages managed by Maestro dependency flow (eng/Version.Details.props) - dependency-name: "Microsoft.DotNet.Arcade.Sdk" - dependency-name: "Microsoft.DotNet.Build.Tasks.Templating"