chore(deps): Bump Meziantou.Analyzer from 3.0.54 to 3.0.119 by dependabot[bot] · Pull Request #2 · cwouyang/ezDDD.NET

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Hoist the metadata duplicated across ten csproj files (version, package metadata, language settings, doc generation, pack items) into a single Directory.Build.props; add nuget.config with a cleared source list, LF normalization via .gitattributes, and the CSharpier tool manifest. Packed nuspec output verified byte-equivalent before and after.

Pin the SDK via global.json (8.0.200, latestPatch roll-forward) so builds stop drifting onto newer installed SDKs, and enable TreatWarningsAsErrors now that the solution builds warning-free.

Drop the MessageBus mentions and message-bus tag (removed in Phase 7), mention the Relay pattern instead, and update the parity claim to Java ezddd 6.0.1.

Repository-wide whitespace, wrapping, and trailing-comma normalization by the CSharpier formatter (printWidth 120, LF). No semantic changes: every file verified token-equivalent modulo whitespace and trailing commas. Add .csharpierrc.yaml and .csharpierignore (csproj excluded).

Mechanical cleanup driven by the Meziantou/Roslynator measurement pass: seal private test helpers (CA1852), collection expressions (IDE0028), ConfigureAwait(false) in library code (MA0004), explicit ordinal string comparisons (MA0006/MA0002), invariant culture in tests (CA1304/05/11, MA0011), move ExitCodeExtensions and NullContext to their own files (MA0048), and split oversized concurrency tests (MA0051). Two observable (pre-release) changes: InternalDomainEventDto.Metadata is now typed IDictionary<string, string> (MA0016, aligns with Java Map), and DomainEventTypeMapper argument exceptions carry the parameter name (MA0015).

Add Meziantou.Analyzer and Roslynator.Analyzers (PrivateAssets=all) with EnforceCodeStyleInBuild and latest-recommended analysis level. Rebase .editorconfig on the uContract.NET Level Z profile: every :suggestion promoted to :warning (build-blocking with TreatWarningsAsErrors), the formatting section removed in favor of CSharpier, and the broken type_parameter naming rule fixed. Test-only suppressions (CA1707, MA0002, MA0004, MA0048, RCS1194) and thirteen targeted SuppressMessage sites document their rationale inline; BiMap.cs and ConverterTests.cs also carry their remaining mechanical fixes.

Add Microsoft.CodeAnalysis.PublicApiAnalyzers 3.3.4 to the five packable projects with empty PublicAPI.Shipped.txt baselines (nothing released yet) and the current surface captured in PublicAPI.Unshipped.txt. Any public API change now fails the build until the baseline is updated.

The concurrent-registration test bound a shared event type to 100 random names with swallowed exceptions; whichever registration won the race could poison the process-global DomainEventTypeMapper and cascade-fail ~24 tests in this assembly (order-dependent, never observed only by scheduling luck). Rewrite it around dedicated event types with fixed, idempotent mappings and real bidirectional assertions, and serialize the three mapper-touching test classes into the DomainEventTypeMapper collection.

Adapt the uContract.NET workflows: CSharpier gate plus build and test on ubuntu/windows for every branch; release-triggered publish that validates the tag against the Directory.Build.props version, packs the solution, asserts exactly five packages, and pushes through the nuget environment gate; weekly Dependabot for NuGet and Actions.

Adapt CONTRIBUTING, SECURITY, CODE_OF_CONDUCT (Contributor Covenant 2.1), and issue/PR templates from uContract.NET. The security policy scope is rewritten for this library's actual attack surface: the event/aggregate reconstruction pipeline (System.Text.Json paths, registration-map type resolution, reflection-based replay constructor invocation).

Add a 128x128 flat hexagon icon in the uContract.NET family palette and pack it into all five packages via Directory.Build.props. Enable EmbedUntrackedSources so generated sources are embedded alongside the in-box SDK Source Link (sourcelink.json verified for all five projects). Trim/AOT compatibility is deliberately not claimed: the replay pipeline relies on reflection and reflection-based System.Text.Json.

xunit 2.5.3->2.9.3, xunit.runner.visualstudio 2.5.3->3.1.5, Microsoft.NET.Test.Sdk 17.8.0->18.7.0, coverlet.collector 6.0.0->10.0.1. Clears two High transitive advisories pulled in via the old xunit (System.Net.Http 4.3.0, System.Text.RegularExpressions 4.3.0) and the known coverlet 6.0.0 hang. 543 tests verified stable across three runs under the 3.x runner scheduling.

…lding Replace the 36KB CLAUDE.md with a concise AGENTS.md (commands, standards, key rules, gotchas) plus a one-line CLAUDE.md pointer, following the uContract.NET pattern. Remove DOTNET_PORT.md (internal porting log) and the .claude/ directory (personal tooling config) from the repository, rewrite ROADMAP.md as a lean public roadmap, sweep every reference (ADRs, README, templates), replace local filesystem paths in ADRs with upstream-relative ones, and point feature requests at Issues instead of the unprovisioned Discussions.

Drop the CS1591 suppression so missing public API docs fail the build, document the 15 BiMap members it caught (inheritdoc for pure contract forwarding, real docs where BiMap semantics diverge from Dictionary: Add overwrites instead of throwing, values are unique, CopyTo truncates), and exempt test projects via a nested Directory.Build.props that turns off documentation generation.

Add CODEOWNERS, a CI status badge, extra secret ignore patterns, and route the release tag through an env var in publish.yml instead of inline interpolation.

The CSharpier baseline commit was rehashed by the pre-publication history rewrite; point .git-blame-ignore-revs at its new id.

--- updated-dependencies: - dependency-name: Meziantou.Analyzer dependency-version: 3.0.119 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-04T17:29:13Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot · 2026-07-06T14:08:39Z

Looks like Meziantou.Analyzer is updatable in another way, so this is no longer needed.

cwouyang and others added 18 commits July 4, 2026 16:57

build: pin .NET SDK 8 and treat warnings as errors

a22b8cc

Pin the SDK via global.json (8.0.200, latestPatch roll-forward) so builds stop drifting onto newer installed SDKs, and enable TreatWarningsAsErrors now that the solution builds warning-free.

docs(core): refresh package description after Phase 7 sync

6c620f2

Drop the MessageBus mentions and message-bus tag (removed in Phase 7), mention the Relay pattern instead, and update the parity claim to Java ezddd 6.0.1.

chore: ignore the CSharpier baseline commit in git blame

d3c842e

chore: publish-readiness hardening

544c776

Add CODEOWNERS, a CI status badge, extra secret ignore patterns, and route the release tag through an env var in publish.yml instead of inline interpolation.

chore: refresh the blame-ignore SHA after history rewrite

1f94e68

The CSharpier baseline commit was rehashed by the pre-publication history rewrite; point .git-blame-ignore-revs at its new id.

cwouyang force-pushed the master branch from 86aeccd to b1e1ab2 Compare July 5, 2026 09:17

dependabot Bot closed this Jul 6, 2026

dependabot Bot deleted the dependabot/nuget/Meziantou.Analyzer-3.0.119 branch July 6, 2026 14:08

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): Bump Meziantou.Analyzer from 3.0.54 to 3.0.119#2

chore(deps): Bump Meziantou.Analyzer from 3.0.54 to 3.0.119#2
dependabot[bot] wants to merge 18 commits into
masterfrom
dependabot/nuget/Meziantou.Analyzer-3.0.119

dependabot Bot commented on behalf of github Jul 4, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 4, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jul 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.0.119

What's Changed

3.0.118

What's Changed

3.0.117

What's Changed

3.0.116

What's Changed

3.0.115

What's Changed

3.0.114

What's Changed

3.0.113

What's Changed

3.0.112

3.0.111

What's Changed

3.0.110

What's Changed

3.0.109

What's Changed

3.0.108

What's Changed

3.0.107

What's Changed

3.0.106

What's Changed

3.0.105

What's Changed

3.0.104

What's Changed

3.0.103

What's Changed

3.0.102

What's Changed

3.0.101

What's Changed

3.0.100

What's Changed

3.0.99

What's Changed

3.0.98

What's Changed

3.0.97

What's Changed

3.0.96

3.0.95

What's Changed

3.0.94

What's Changed

3.0.93

What's Changed

3.0.92

What's Changed

3.0.91

What's Changed

3.0.90

What's Changed

3.0.89

What's Changed

3.0.88

What's Changed

3.0.87

What's Changed

3.0.86

What's Changed

3.0.85

What's Changed

3.0.84

What's Changed

3.0.83

What's Changed

3.0.82

What's Changed

3.0.81

What's Changed

3.0.80

dependabot Bot commented on behalf of github Jul 4, 2026 •

edited

Loading