From a96a59d3ab2e44015c3a02c13d3a7880330eb01c Mon Sep 17 00:00:00 2001 From: Phil-NHS Date: Wed, 12 Mar 2025 14:35:16 +0000 Subject: [PATCH 1/8] adding dependabot --- .github/workflows/dependabot.yml | 32 ++++++++ .github/workflows/deploy-gh-pages.yml | 2 +- .../Properties/launchSettings.json | 82 +++++++++---------- 3 files changed, 74 insertions(+), 42 deletions(-) create mode 100644 .github/workflows/dependabot.yml diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml new file mode 100644 index 0000000..faf9724 --- /dev/null +++ b/.github/workflows/dependabot.yml @@ -0,0 +1,32 @@ +version: 2 +updates: + # Configuration for minor and patch updates + # NuGet packages (.NET projects) + - package-ecosystem: "nuget" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + target-branch: "Automatic_version_update_dependabot" + #ignore: + # - dependency-name: "*" + # update-types: ["version-update:semver-major"] + + # Enable automatic merging + automerge: true + automerge-types: ["minor", "patch", "pin", "digest"] + # Optional: Set version requirement for automerge + versioning-strategy: auto + + + # Configuration for major updates only + #- package-ecosystem: "nuget" + # directory: "/" + # schedule: + # interval: "weekly" + # open-pull-requests-limit: 5 + # target-branch: "Automatic_version_update_dependabot" + # ignore: + # - dependency-name: "*" + # update-types: ["version-update:semver-minor", "version-update:semver-patch"] + # versioning-strategy: auto diff --git a/.github/workflows/deploy-gh-pages.yml b/.github/workflows/deploy-gh-pages.yml index 656c8dc..89dcc12 100644 --- a/.github/workflows/deploy-gh-pages.yml +++ b/.github/workflows/deploy-gh-pages.yml @@ -24,7 +24,7 @@ jobs: # Add your tests here if needed - # - name: Test + # - name: Test qqqqTODO # run: dotnet test --no-build --verbosity normal - name: Publish client using client release .csproj logic diff --git a/TestHostPrerenderWASM/TestHostPrerenderWASM/Properties/launchSettings.json b/TestHostPrerenderWASM/TestHostPrerenderWASM/Properties/launchSettings.json index fca3148..2c3526d 100644 --- a/TestHostPrerenderWASM/TestHostPrerenderWASM/Properties/launchSettings.json +++ b/TestHostPrerenderWASM/TestHostPrerenderWASM/Properties/launchSettings.json @@ -1,41 +1,41 @@ -{ - "$schema": "http://json.schemastore.org/launchsettings.json", - "iisSettings": { - "windowsAuthentication": false, - "anonymousAuthentication": true, - "iisExpress": { - "applicationUrl": "http://localhost:6887", - "sslPort": 44384 - } - }, - "profiles": { - "http": { - "commandName": "Project", - "dotnetRunMessages": true, - "launchBrowser": true, - "inspectUri": "{wsProtocol}://{url.hostname}:{url.port}/_framework/debug/ws-proxy?browser={browserInspectUri}", - "applicationUrl": "http://localhost:5119", - "environmentVariables": { - "ASPNETCORE_ENVIRONMENT": "Development" - } - }, - "https": { - "commandName": "Project", - "dotnetRunMessages": true, - "launchBrowser": true, - "inspectUri": "{wsProtocol}://{url.hostname}:{url.port}/_framework/debug/ws-proxy?browser={browserInspectUri}", - "applicationUrl": "https://localhost:7141;http://localhost:5119", - "environmentVariables": { - "ASPNETCORE_ENVIRONMENT": "Development" - } - }, - "IIS Express": { - "commandName": "IISExpress", - "launchBrowser": true, - "inspectUri": "{wsProtocol}://{url.hostname}:{url.port}/_framework/debug/ws-proxy?browser={browserInspectUri}", - "environmentVariables": { - "ASPNETCORE_ENVIRONMENT": "Development" - } - } - } - } +{ + "profiles": { + "http": { + "commandName": "Project", + "launchBrowser": true, + "environmentVariables": { + "ASPNETCORE_ENVIRONMENT": "Development" + }, + "dotnetRunMessages": true, + "inspectUri": "{wsProtocol}://{url.hostname}:{url.port}/_framework/debug/ws-proxy?browser={browserInspectUri}", + "applicationUrl": "http://localhost:5119" + }, + "https": { + "commandName": "Project", + "launchBrowser": true, + "environmentVariables": { + "ASPNETCORE_ENVIRONMENT": "Development" + }, + "dotnetRunMessages": true, + "inspectUri": "{wsProtocol}://{url.hostname}:{url.port}/_framework/debug/ws-proxy?browser={browserInspectUri}", + "applicationUrl": "https://localhost:7141;http://localhost:5119" + }, + "IIS Express": { + "commandName": "IISExpress", + "launchBrowser": true, + "environmentVariables": { + "ASPNETCORE_ENVIRONMENT": "Development" + }, + "inspectUri": "{wsProtocol}://{url.hostname}:{url.port}/_framework/debug/ws-proxy?browser={browserInspectUri}" + } + }, + "$schema": "http://json.schemastore.org/launchsettings.json", + "iisSettings": { + "windowsAuthentication": false, + "anonymousAuthentication": true, + "iisExpress": { + "applicationUrl": "http://localhost:64776/", + "sslPort": 44344 + } + } +} \ No newline at end of file From 24eab472758bdada6d9f6c146cae0cc518ee6bc2 Mon Sep 17 00:00:00 2001 From: Phil-NHS Date: Wed, 12 Mar 2025 14:40:44 +0000 Subject: [PATCH 2/8] change dependabot location --- .github/{workflows => }/dependabot.yml | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename .github/{workflows => }/dependabot.yml (100%) diff --git a/.github/workflows/dependabot.yml b/.github/dependabot.yml similarity index 100% rename from .github/workflows/dependabot.yml rename to .github/dependabot.yml From 0e4d4fd45f2c04bdfe295565161a7fdd907f11a0 Mon Sep 17 00:00:00 2001 From: Phil <165780796+Phil-NHS@users.noreply.github.com> Date: Wed, 12 Mar 2025 14:54:59 +0000 Subject: [PATCH 3/8] Automatic version update dependabot (#5) * adding dependabot (#3) * tweak --- .github/workflows/dependabot.yml | 42 ++++++++++++++++++++++++++++++++ 1 file changed, 42 insertions(+) create mode 100644 .github/workflows/dependabot.yml diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml new file mode 100644 index 0000000..178cc5f --- /dev/null +++ b/.github/workflows/dependabot.yml @@ -0,0 +1,42 @@ +version: 2 +updates: + # Configuration for minor and patch updates + # NuGet packages (.NET projects) + - package-ecosystem: "nuget" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + target-branch: "Automatic_version_update_dependabot" + + automerge: + enable: true + allow: + - dependency-type: "all" + - update-type: "minor" + - update-type: "patch" + - update-type: "pin" + - update-type: "digest" + automerge-types: ["minor", "patch", "pin", "digest"] + # Optional: Set version requirement for automerge + versioning-strategy: auto + + + + + #ignore: + # - dependency-name: "*" + # update-types: ["version-update:semver-major"] + + # Enable automatic merging + # Configuration for major updates only + #- package-ecosystem: "nuget" + # directory: "/" + # schedule: + # interval: "weekly" + # open-pull-requests-limit: 5 + # target-branch: "Automatic_version_update_dependabot" + # ignore: + # - dependency-name: "*" + # update-types: ["version-update:semver-minor", "version-update:semver-patch"] + # versioning-strategy: auto From a8caaf189b8963f4848ab73de341191af0b071fb Mon Sep 17 00:00:00 2001 From: Phil-NHS Date: Wed, 12 Mar 2025 14:58:12 +0000 Subject: [PATCH 4/8] moving it --- .github/dependabot.yml | 17 ------------- .github/workflows/dependabot.yml | 42 -------------------------------- 2 files changed, 59 deletions(-) delete mode 100644 .github/workflows/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml index faf9724..8f42f0a 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -8,25 +8,8 @@ updates: interval: "weekly" open-pull-requests-limit: 10 target-branch: "Automatic_version_update_dependabot" - #ignore: - # - dependency-name: "*" - # update-types: ["version-update:semver-major"] - - # Enable automatic merging automerge: true automerge-types: ["minor", "patch", "pin", "digest"] # Optional: Set version requirement for automerge versioning-strategy: auto - - # Configuration for major updates only - #- package-ecosystem: "nuget" - # directory: "/" - # schedule: - # interval: "weekly" - # open-pull-requests-limit: 5 - # target-branch: "Automatic_version_update_dependabot" - # ignore: - # - dependency-name: "*" - # update-types: ["version-update:semver-minor", "version-update:semver-patch"] - # versioning-strategy: auto diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml deleted file mode 100644 index 178cc5f..0000000 --- a/.github/workflows/dependabot.yml +++ /dev/null @@ -1,42 +0,0 @@ -version: 2 -updates: - # Configuration for minor and patch updates - # NuGet packages (.NET projects) - - package-ecosystem: "nuget" - directory: "/" - schedule: - interval: "weekly" - open-pull-requests-limit: 10 - target-branch: "Automatic_version_update_dependabot" - - automerge: - enable: true - allow: - - dependency-type: "all" - - update-type: "minor" - - update-type: "patch" - - update-type: "pin" - - update-type: "digest" - automerge-types: ["minor", "patch", "pin", "digest"] - # Optional: Set version requirement for automerge - versioning-strategy: auto - - - - - #ignore: - # - dependency-name: "*" - # update-types: ["version-update:semver-major"] - - # Enable automatic merging - # Configuration for major updates only - #- package-ecosystem: "nuget" - # directory: "/" - # schedule: - # interval: "weekly" - # open-pull-requests-limit: 5 - # target-branch: "Automatic_version_update_dependabot" - # ignore: - # - dependency-name: "*" - # update-types: ["version-update:semver-minor", "version-update:semver-patch"] - # versioning-strategy: auto From 9aabc09ecef1f9719a38be0aaf3f569e89145411 Mon Sep 17 00:00:00 2001 From: Phil-NHS Date: Wed, 12 Mar 2025 15:04:15 +0000 Subject: [PATCH 5/8] vulnerable major verson --- PlaywrightXUnitGoesHere/PlaywrightBUnitGoesHere.csproj | 1 + 1 file changed, 1 insertion(+) diff --git a/PlaywrightXUnitGoesHere/PlaywrightBUnitGoesHere.csproj b/PlaywrightXUnitGoesHere/PlaywrightBUnitGoesHere.csproj index 9c5b30a..189c2d3 100644 --- a/PlaywrightXUnitGoesHere/PlaywrightBUnitGoesHere.csproj +++ b/PlaywrightXUnitGoesHere/PlaywrightBUnitGoesHere.csproj @@ -10,6 +10,7 @@ + From f77de7dfd5c7530c2edbc3ec6b67e13a37c904a8 Mon Sep 17 00:00:00 2001 From: Phil-NHS Date: Wed, 12 Mar 2025 15:08:04 +0000 Subject: [PATCH 6/8] d --- .github/dependabot.yml | 17 ++++++++++++----- 1 file changed, 12 insertions(+), 5 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 8f42f0a..1d78c95 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -8,8 +8,15 @@ updates: interval: "weekly" open-pull-requests-limit: 10 target-branch: "Automatic_version_update_dependabot" - automerge: true - automerge-types: ["minor", "patch", "pin", "digest"] - # Optional: Set version requirement for automerge - versioning-strategy: auto - + +# Root-level configuration for automerge and versioning +automerge: + enable: true + allow: + - dependency-type: "all" + - update-type: "minor" + - update-type: "patch" + - update-type: "pin" + - update-type: "digest" + +versioning-strategy: auto \ No newline at end of file From 68273b77e13343d831499b7c5dbc8e9a4031640f Mon Sep 17 00:00:00 2001 From: Phil-NHS Date: Wed, 12 Mar 2025 15:19:30 +0000 Subject: [PATCH 7/8] v --- .github/dependabot.yml | 21 ++++++++++++++++++--- 1 file changed, 18 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 1d78c95..ad2a72e 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,9 +1,24 @@ version: 2 updates: - # Configuration for minor and patch updates - # NuGet packages (.NET projects) + # Configuration for GitPageBlazorWASMProgressive - package-ecosystem: "nuget" - directory: "/" + directory: "/GitPageBlazorWASMProgressive/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + target-branch: "Automatic_version_update_dependabot" + + # Configuration for Package.BlazorComponentLibrary + - package-ecosystem: "nuget" + directory: "/Package.BlazorComponentLibrary/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + target-branch: "Automatic_version_update_dependabot" + + # Configuration for TestHostPrerenderWASM + - package-ecosystem: "nuget" + directory: "/TestHostPrerenderWASM/" schedule: interval: "weekly" open-pull-requests-limit: 10 From 0eb680f8649420426ce806cd57c3979978a2ad0e Mon Sep 17 00:00:00 2001 From: Phil-NHS Date: Wed, 12 Mar 2025 15:21:32 +0000 Subject: [PATCH 8/8] no versioning --- .github/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index ad2a72e..2f47c62 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -34,4 +34,4 @@ automerge: - update-type: "pin" - update-type: "digest" -versioning-strategy: auto \ No newline at end of file +#versioning-strategy: auto \ No newline at end of file