Skip to content

ci: adopt Dapper 2.1.89 compatibility baseline - #291

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/nuget/dot-config/dotnet-minor-patch-84bd9ec88f
Closed

dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/nuget/dot-config/dotnet-minor-patch-84bd9ec88f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 28, 2026 •

Copy link
Copy Markdown
Contributor

Summary

  • adopts Dapper 2.1.89 as the minimum and latest validated stable baseline
  • publishes the lower-bound dependency range [2.1.89,3.0.0) for Core and Dommel
  • consolidates identical minimum/latest-stable CI lanes and verifies the Dapper version actually restored
  • keeps the forward compatibility canary and all existing security, API, packaging, provider and Native AOT gates
  • aligns certified SQLite 10.0.14 and Oracle 23.26.400 clients with the provider test project
  • strengthens contract validation for CI matrices, provider client versions, documentation and generated package metadata

This integrates the compatibility-governance corrections into the existing Dependabot dependency branch instead of creating an overlapping PR.

Refs #294

Validation

  • ./eng/test-compatibility-consistency.ps1
  • GitHub workflow JSON schema validation
  • actionlint 1.7.12 (verified release checksum)
  • dotnet restore ./Dapper.FluentMap.slnx
  • dotnet build ./Dapper.FluentMap.slnx --configuration Release --no-restore
  • dotnet test ./Dapper.FluentMap.slnx --configuration Release --no-build (639 total; 567 passed; 72 expected provider skips)
  • dotnet pack ./Dapper.FluentMap.slnx --configuration Release --no-build --output ./artifacts/packages
  • ./eng/validate-package-metadata.ps1 -PackageDirectory './artifacts/packages'
  • ./eng/validate-compatibility-consistency.ps1 -PackageDirectory './artifacts/packages'

Both Dapper.FluentMap and Dapper.FluentMap.Dommel packages declare Dapper [2.1.89,3.0.0) and remain .NETStandard2.0.

@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 28, 2026
@coderabbitai

coderabbitai Bot commented Oct 28, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot
dependabot Bot force-pushed the dependabot/nuget/dot-config/dotnet-minor-patch-84bd9ec88f branch 3 times, most recently from 73c0503 to d312971 Compare October 28, 2026 21:57
Bumps Dapper from 2.1.79 to 2.1.89
Bumps Microsoft.Bcl.AsyncInterfaces from 10.0.13 to 10.0.14
Bumps Microsoft.Data.Sqlite to 10.0.14
Bumps Microsoft.Data.Sqlite.Core from 10.0.13 to 10.0.14
Bumps Microsoft.Extensions.DependencyInjection to 6.0.2, 10.0.14
Bumps Microsoft.Extensions.DependencyInjection.Abstractions to 10.0.14
Bumps Oracle.ManagedDataAccess.Core from 23.26.301 to 23.26.400
Bumps rodrioliveira.adrguard from 1.6.0 to 1.9.0
Bumps System.Security.Cryptography.Pkcs from 10.0.13 to 10.0.14

---
updated-dependencies:
- dependency-name: Dapper
  dependency-version: 2.1.89
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Bcl.AsyncInterfaces
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Bcl.AsyncInterfaces
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Bcl.AsyncInterfaces
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Bcl.AsyncInterfaces
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Bcl.AsyncInterfaces
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Data.Sqlite.Core
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Oracle.ManagedDataAccess.Core
  dependency-version: 23.26.400
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: rodrioliveira.adrguard
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-patch
- dependency-name: System.Security.Cryptography.Pkcs
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@rodri-oliveira-dev rodri-oliveira-dev changed the title build: Bump Dapper and 8 others ci: adopt Dapper 2.1.89 compatibility baseline Oct 29, 2026
@github-actions

Copy link
Copy Markdown
Contributor

SonarQube Cloud success

The SonarQube Cloud Quality Gate passed for this PR.

Quality Gate status: OK

Metric Status Actual Threshold
new_reliability_rating OK 1 1
new_security_rating OK 1 1
new_maintainability_rating OK 1 1
new_duplicated_lines_density OK 0.0 3
new_security_hotspots_reviewed OK 100.0 100

@codecov

codecov Bot commented Oct 29, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@rodri-oliveira-dev

Copy link
Copy Markdown
Owner

Consolidado no PR #298, que preserva este baseline Dapper 2.1.89, incorpora toda a pilha dependente e reúne as labels. Nenhum commit deste trabalho foi descartado.

@dependabot @github

dependabot Bot commented on behalf of github Oct 29, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/nuget/dot-config/dotnet-minor-patch-84bd9ec88f branch October 29, 2026 08:00
rodri-oliveira-dev added a commit that referenced this pull request Oct 29, 2026
…ver-governance

Prepare FluentMap 3.6.1 and establish semantic versioning governance.

- Set Dapper 2.1.89 as the minimum supported version.
- Align DateOnly/TimeOnly conversions across runtime and generated materializers.
- Expand interoperability, provider compatibility and Native AOT tests.
- Synchronize versioning across all five NuGet packages.
- Add a semantic versioning skill and automated validation, preventing unauthorized major upgrades.
- Update compatibility, migration and release documentation in English and Portuguese.
- Consolidate PRs #291, #295, #296 and #297.

Refs #294.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant