Skip to content

Add Dependabot support with auto run, automerge and manual run#87

Merged
darthsharp merged 6 commits intomainfrom
feature/adddependabotsupport
Mar 28, 2026
Merged

Add Dependabot support with auto run, automerge and manual run#87
darthsharp merged 6 commits intomainfrom
feature/adddependabotsupport

Conversation

@darthsharp
Copy link
Copy Markdown
Contributor

No description provided.

…props

- Added a new `Directory.Build.props` file at the root level for shared properties like `TargetFramework`, `Authors`, and `RepositoryUrl`.
- Updated project-specific `Directory.Build.props` files to import root-level settings.
- Removed duplicated MSBuild properties from individual project files.
… and simplify project files

- Added `Directory.Packages.props` to define centralized NuGet package versions.
- Updated project files to reference package versions from the central file, removing inline version specifications.
- Streamlined dependency management across source, sample, and test projects.
- Renamed `ManagePackageVersions` to `ManagePackageVersionsCentrally` in `Directory.Packages.props` for consistency with MSBuild's centralized package versioning feature.
…pdates

- Added `.github/dependabot.yml` to configure dependency update schedules and grouping for NuGet packages.
- Introduced `dependabot-auto-merge.yml` workflow for auto-merging safe updates based on defined conditions.
- Added `dependabot-manual.yml` workflow for manually triggering dependency scans and updates.
…ncies

- Introduced "other-dependencies" group to `.github/dependabot.yml` for handling any packages not covered by existing groups.
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds Dependabot support for NuGet (scheduled + manual trigger) and enables centralized dependency/version management so Dependabot can update versions in one place across the repo.

Changes:

  • Introduce Central Package Management via Directory.Packages.props and remove inline Version= attributes from PackageReferences.
  • Add repo-root Directory.Build.props and have source/, tests/, and samples/ import it to share common MSBuild properties.
  • Add Dependabot configuration and GitHub Actions workflows for manual runs and auto-merge policies.

Reviewed changes

Copilot reviewed 72 out of 72 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
tests/Directory.Build.props Import root Directory.Build.props and rely on shared properties.
tests/CreativeCoders.SysConsole.UnitTests/CreativeCoders.SysConsole.UnitTests.csproj Remove inline package versions (centralized).
tests/CreativeCoders.SysConsole.CliArguments.UnitTests/CreativeCoders.SysConsole.CliArguments.UnitTests.csproj Remove inline package versions (centralized).
tests/CreativeCoders.SysConsole.Cli.Parsing.UnitTests/CreativeCoders.SysConsole.Cli.Parsing.UnitTests.csproj Remove inline package versions (centralized).
tests/CreativeCoders.SysConsole.Cli.Actions.UnitTests/CreativeCoders.SysConsole.Cli.Actions.UnitTests.csproj Remove inline package versions (centralized).
tests/CreativeCoders.SysConsole.App.UnitTests/CreativeCoders.SysConsole.App.UnitTests.csproj Remove inline package versions (centralized).
tests/CreativeCoders.Scripting.UnitTests/CreativeCoders.Scripting.UnitTests.csproj Remove inline package versions (centralized).
tests/CreativeCoders.Reactive.UnitTests/CreativeCoders.Reactive.UnitTests.csproj Remove inline package versions (centralized).
tests/CreativeCoders.NukeBuild.Tests/CreativeCoders.NukeBuild.Tests.csproj Remove inline package versions (centralized).
tests/CreativeCoders.Net.UnitTests/CreativeCoders.Net.UnitTests.csproj Remove inline package versions (centralized).
tests/CreativeCoders.MiscTest.UnitTests/CreativeCoders.MiscTest.UnitTests.csproj Remove inline package versions (centralized).
tests/CreativeCoders.Messaging.UnitTests/CreativeCoders.Messaging.UnitTests.csproj Remove inline package versions (centralized).
tests/CreativeCoders.Localization.UnitTests/CreativeCoders.Localization.UnitTests.csproj Remove inline package versions (centralized).
tests/CreativeCoders.IO.UnitTests/CreativeCoders.IO.UnitTests.csproj Remove inline package versions (centralized).
tests/CreativeCoders.DependencyInjection.UnitTests/CreativeCoders.DependencyInjection.UnitTests.csproj Remove inline package versions (centralized).
tests/CreativeCoders.Data.NoSql.LiteDb.Tests/CreativeCoders.Data.NoSql.LiteDb.Tests.csproj Remove inline package versions (centralized).
tests/CreativeCoders.Core.UnitTests/CreativeCoders.Core.UnitTests.csproj Remove inline package versions (centralized).
tests/CreativeCoders.CodeCompilation.UnitTests/CreativeCoders.CodeCompilation.UnitTests.csproj Remove inline package versions (centralized).
tests/CreativeCoders.Cli.Tests/CreativeCoders.Cli.Tests.csproj Remove inline package versions (centralized).
tests/CreativeCoders.CakeBuild.Tests/CreativeCoders.CakeBuild.Tests.csproj Remove inline package versions (centralized).
tests/CreativeCoders.AspNetCore.Tests/CreativeCoders.AspNetCore.Tests.csproj Remove inline package versions (centralized).
tests/CreativeCoders.AspNetCore.Blazor.UnitTests/CreativeCoders.AspNetCore.Blazor.UnitTests.csproj Remove inline package versions (centralized).
source/UnitTests/CreativeCoders.UnitTests/CreativeCoders.UnitTests.csproj Remove inline package versions (centralized).
source/SysConsole/CreativeCoders.SysConsole.Core/CreativeCoders.SysConsole.Core.csproj Remove inline package versions (centralized).
source/SysConsole/CreativeCoders.SysConsole.Cli.Parsing/CreativeCoders.SysConsole.Cli.Parsing.csproj Remove inline package versions (centralized).
source/SysConsole/CreativeCoders.SysConsole.App/CreativeCoders.SysConsole.App.csproj Remove inline package versions (centralized).
source/Reactive/CreativeCoders.Reactive.Messaging/CreativeCoders.Reactive.Messaging.csproj Remove inline package versions (centralized).
source/Options/CreativeCoders.Options.Serializers/CreativeCoders.Options.Serializers.csproj Remove inline package versions (centralized).
source/Options/CreativeCoders.Options.Core/CreativeCoders.Options.Core.csproj Remove inline package versions (centralized).
source/Net/CreativeCoders.Net/CreativeCoders.Net.csproj Remove inline package versions (centralized).
source/Net/CreativeCoders.Net.WebApi/CreativeCoders.Net.WebApi.csproj Remove inline package versions (centralized).
source/Net/CreativeCoders.Net.JsonRpc/CreativeCoders.Net.JsonRpc.csproj Remove inline package versions (centralized).
source/Messaging/CreativeCoders.Messaging.Core/CreativeCoders.Messaging.Core.csproj Remove inline package versions (centralized).
source/Localization/CreativeCoders.Localization/CreativeCoders.Localization.csproj Remove inline package versions (centralized).
source/IO/CreativeCoders.IO.Ports/CreativeCoders.IO.Ports.csproj Remove inline package versions (centralized).
source/IO/CreativeCoders.IO.Archives/CreativeCoders.IO.Archives.csproj Remove inline package versions (centralized).
source/DynamicCode/CreativeCoders.DynamicCode.Proxying/CreativeCoders.DynamicCode.Proxying.csproj Remove inline package versions (centralized).
source/Directory.Build.props Import root Directory.Build.props and keep only IsPackable override.
source/DependencyInjection/CreativeCoders.DependencyInjection/CreativeCoders.DependencyInjection.csproj Remove inline package versions (centralized).
source/Data/CreativeCoders.Data.NoSql/CreativeCoders.Data.NoSql.csproj Remove inline package versions (centralized).
source/Data/CreativeCoders.Data.NoSql.LiteDb/CreativeCoders.Data.NoSql.LiteDb.csproj Remove inline package versions (centralized).
source/Data/CreativeCoders.Data.Nhibernate/CreativeCoders.Data.Nhibernate.csproj Remove inline package versions (centralized).
source/Data/CreativeCoders.Data.EfCore/CreativeCoders.Data.EfCore.csproj Remove inline package versions (centralized).
source/Data/CreativeCoders.Data.EfCore.SqlServer/CreativeCoders.Data.EfCore.SqlServer.csproj Remove inline package versions (centralized).
source/Daemon/CreativeCoders.Daemon/CreativeCoders.Daemon.csproj Remove inline package versions (centralized).
source/Daemon/CreativeCoders.Daemon.Windows/CreativeCoders.Daemon.Windows.csproj Remove inline package versions (centralized).
source/Daemon/CreativeCoders.Daemon.Linux/CreativeCoders.Daemon.Linux.csproj Remove inline package versions (centralized).
source/Core/CreativeCoders.Core/CreativeCoders.Core.csproj Remove inline package versions (centralized).
source/Configuration/CreativeCoders.Configuration/CreativeCoders.Configuration.csproj Remove inline package versions (centralized).
source/Config/CreativeCoders.Config/CreativeCoders.Config.csproj Remove inline package versions (centralized).
source/Config/CreativeCoders.Config.Sources/CreativeCoders.Config.Sources.csproj Remove inline package versions (centralized).
source/Config/CreativeCoders.Config.Base/CreativeCoders.Config.Base.csproj Remove inline package versions (centralized).
source/CodeCompilation/CreativeCoders.CodeCompilation.Roslyn/CreativeCoders.CodeCompilation.Roslyn.csproj Remove inline package versions (centralized).
source/Cli/CreativeCoders.Cli.Hosting/CreativeCoders.Cli.Hosting.csproj Remove inline package versions (centralized).
source/CakeBuild/CreativeCoders.CakeBuild/CreativeCoders.CakeBuild.csproj Remove inline package versions (centralized).
source/AspNetCore/CreativeCoders.AspNetCore/CreativeCoders.AspNetCore.csproj Remove inline package versions (centralized).
source/AspNetCore/CreativeCoders.AspNetCore.TokenAuthApi.Jwt/CreativeCoders.AspNetCore.TokenAuthApi.Jwt.csproj Remove inline package versions (centralized).
source/AspNetCore/CreativeCoders.AspNetCore.TokenAuth.Jwt/CreativeCoders.AspNetCore.TokenAuth.Jwt.csproj Remove inline package versions (centralized).
source/AspNetCore/CreativeCoders.AspNetCore.Blazor/CreativeCoders.AspNetCore.Blazor.csproj Remove inline package versions (centralized).
samples/WebApiSampleApp/WebApiSampleApp.csproj Remove inline package versions (centralized).
samples/ProcessUtilsSampleApp/ProcessUtilsSampleApp.csproj Remove inline package versions (centralized).
samples/NetSampleApp/NetSampleApp.csproj Remove inline package versions (centralized).
samples/Directory.Build.props Import root Directory.Build.props and rely on shared properties.
samples/CakeBuildSample/CakeBuildSample.csproj Remove inline package version for Cake.Frosting (centralized).
samples/BlazorWebAssemblySampleApp/BlazorWebAssemblySampleApp.csproj Remove inline package versions (centralized).
build/Build.csproj Remove explicit TargetFramework (inherit from root props).
Directory.Packages.props Add centralized package version definitions and enable CPM.
Directory.Build.props Add shared MSBuild properties for all projects (TFM, metadata, warnings).
Core.sln Add Directory.Build.props and Directory.Packages.props as solution items.
.github/workflows/dependabot-manual.yml Add manual workflow to list outdated packages and trigger Dependabot.
.github/workflows/dependabot-auto-merge.yml Add workflow to auto-enable auto-merge for Dependabot PRs based on update tier.
.github/dependabot.yml Add Dependabot configuration (weekly schedule + grouped updates + labels).

Comment thread .github/workflows/dependabot-manual.yml Outdated
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@sonarqubecloud
Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
1 Security Hotspot

See analysis details on SonarQube Cloud

@darthsharp darthsharp merged commit 56a39f7 into main Mar 28, 2026
8 of 9 checks passed
@darthsharp darthsharp deleted the feature/adddependabotsupport branch March 28, 2026 11:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants