Skip to content

REF-78 Stop Dependabot updating NUnit and the IntegrationTest packages - #97

Merged
thomasnymand merged 1 commit into
mainfrom
feature/REF-78-dependabot-ignores
Oct 26, 2026
Merged

thomasnymand merged 1 commit into
mainfrom
feature/REF-78-dependabot-ignores

Conversation

@thomasnymand

Copy link
Copy Markdown
Collaborator

Follow-up to #86 after Dependabot's first run.

  • NUnit: ignored entirely (was: major versions only). Bump the minor-and-patch group with 6 updates #91 updated NUnit 2.6.4 → 2.7.1 by adding a PackageReference to dk.nita.test.saml20, which uses packages.config. That switches the project's package format, the NUnit.2.6.4 hint path no longer resolves (MSB3245), and the tests compile against 2.7.1 by accident while CI runs the 2.6.4 console runner.
  • IntegrationTest-only packages: ignored (Selenium.*, xunit*, Microsoft.NET.Test.Sdk, coverlet.collector). IntegrationTest is a manual Selenium suite against the running demo that CI doesn't run; Bump Selenium.WebDriver from 3.141.0 to 4.51.0 #94 (Selenium 4) breaks the build. If the suite is revived, update Selenium and ChromeDriver together by hand.

After this is merged, #91–#95 are closed; Dependabot then opens the minor-and-patch group again with only log4net 3.3.0 → 3.5.0.

Dependabot updated NUnit in the packages.config test project by adding a
PackageReference, which mixes the two package formats and breaks the
2.6.4 reference that the CI console runner matches. The Selenium, xunit,
test SDK and coverlet packages are used only by IntegrationTest, a
manual suite that CI doesn't run.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant