Skip to content

build: Bump Dapper, Microsoft.Data.Sqlite and rodrioliveira.adrguard - #287

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/dotnet-minor-patch-e41eb74bbb
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/dotnet-minor-patch-e41eb74bbb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Pinned Dapper at 2.1.89.

Release notes

Sourced from Dapper's releases.

2.1.89

What's Changed

New Contributors

Full Changelog: DapperLib/Dapper@2.1.86...2.1.89

2.1.86

What's Changed

Full Changelog: DapperLib/Dapper@2.1.79...2.1.86

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite from 10.0.12 to 10.0.14.

Release notes

Sourced from Microsoft.Data.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite from 10.0.13 to 10.0.14.

Release notes

Sourced from Microsoft.Data.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated rodrioliveira.adrguard from 1.6.0 to 1.9.0.

Release notes

Sourced from rodrioliveira.adrguard's releases.

1.9.0

ADR Guard v1.9.0 — Precise Diagnostics, Shared Core & Cross-Platform Reliability

ADR Guard 1.9.0 improves diagnostic precision, strengthens its internal architecture, and expands cross-platform reliability — without breaking existing integrations.

This release builds on the CLI, VS Code, and MCP ecosystem introduced in previous versions, focusing on more actionable validation feedback, shared architectural behavior, and long-term maintainability.

Highlights

1. Precise Diagnostics — Navigate Directly to Problems

ADR Guard now supports opt-in source locations in JSON and SARIF validation reports.

The new --diagnostic-locations flag provides one-based line and column information when the Markdown parser can identify the exact source of a finding.

adr-guard check docs/adr --format json --diagnostic-locations
adr-guard check docs/adr --format sarif --diagnostic-locations

What this improves:

  • More actionable validation results with precise source locations.

  • Better navigation through the VS Code Problems panel.

  • More useful SARIF diagnostics for code scanning integrations.

  • Improved relationship diagnostics, including invalid or empty Superseded by sections.

  • Safe file-level fallback when an exact source position cannot be established.

Backward compatibility: This feature is entirely opt-in. Without the flag, existing JSON and SARIF report structures remain unchanged.

The VS Code extension 1.1.0 can request these locations automatically and retains compatibility with older CLI versions.

2. AdrGuard.Core — A Cleaner, Shared Architecture

The internal architecture has been refactored to introduce AdrGuard.Core, a dedicated assembly containing reusable domain capabilities.

The shared Core now owns:

  • ADR parsing, models, and validation.

  • Configuration loading and repository policies.

  • Git change detection and inventory.

  • Architecture impact analysis.

  • Architectural drift evaluation.

Both the CLI and MCP server reference the same Core directly:

VS Code / GitHub Action
          |
      ADR Guard CLI
          |
      AdrGuard.Core
          |
   Shared Domain Rules

MCP Client
|
ADR Guard MCP
|
AdrGuard.Core

This removes the previous MCP-to-CLI project dependency and provides clearer component boundaries.

Why it matters:

  • One deterministic implementation of architectural rules.

  • Reduced coupling between independent executables.

  • Easier maintenance, testing, and future evolution.

  • Consistent validation behavior and diagnostic identities.

AdrGuard.Core is an internal implementation assembly, not a new public NuGet library. It is included in the relevant executable packages without introducing another versioning or release stream.

3. Stronger Cross-Platform Reliability

This release improves Git repository handling and expands automated validation across operating systems.

Key improvements:

  • Fixed physical Git path resolution for macOS aliases such as /var and /private/var.

  • Preserved repository containment and symlink security protections.

  • Added end-to-end CLI smoke tests on Linux, Windows, and macOS.

  • Verified real CLI workflows, including init, new, check, index, and incremental validation.

  • Added regression coverage for deterministic diagnostics, JSON schema compatibility, and exit codes.

These improvements help ensure consistent behavior across local development environments and CI pipelines.

4. Reproducible Performance Baseline

A new benchmark harness establishes a documented performance baseline for future improvements.

It covers synthetic repositories containing 100, 500, and 900 ADRs, measuring validation and index generation.

The baseline records execution times, memory observations, runtime information, and reproducibility metadata.

These measurements are informational, environment-specific, and are not performance guarantees or release gates.

Compatibility & Stability

ADR Guard 1.9.0 is a backward-compatible minor release.

The following contracts remain unchanged:

  • Existing CLI commands, arguments, and defaults.

  • Exit codes 0–4 and their meanings.

  • JSON report schema 1.0.

  • SARIF 2.1.0.

  • Diagnostic codes, severities, identities, and fingerprints.

  • Deterministic report ordering.

  • Existing ADR validation and governance rules.

  • VS Code form and integration contracts.

  • The seven read-only MCP tools and their versioned contracts.

Requirement: .NET 10.

Component Independence

ADR Guard components continue to follow independent versioning and distribution lifecycles.

Component Version Notes
ADR Guard CLI 1.9.0 This release
VS Code Extension 1.1.0 Independently published
ADR Guard MCP 1.0.1 Separately prepared and versioned
AdrGuard.Core Internal Bundled assembly; no independent release

The CLI does not require the MCP server or VS Code extension. Likewise, the MCP server no longer depends on the CLI executable.

AI-assisted drafting and review remain optional and advisory. Architectural approval and governance decisions remain under human control.

Installation

New installation

dotnet tool install --global RodriOliveira.AdrGuard --version 1.9.0

Update an existing installation

dotnet tool update --global RodriOliveira.AdrGuard --version 1.9.0

Verify the installed version

adr-guard --version

The package is also attached to this GitHub Release as RodriOliveira.AdrGuard.1.9.0.nupkg.

Public NuGet availability should be verified independently.

Documentation & References

Key implementation PRs: #​192 · #​197 · #​208 · #​210

Full Changelog: v1.8.0...v1.9.0


ADR Guard continues evolving toward more reliable, transparent, and maintainable architecture governance.

Version 1.9.0 makes validation findings easier to act on while establishing a stronger foundation for CLI, editor, and AI-assisted workflows — without compromising compatibility, deterministic behavior, or human ownership of architectural decisions

# ADR Guard v1.9.0 — Precise Diagnostics, Shared Core & Cross-Platform Reliability

ADR Guard 1.9.0 improves diagnostic precision, strengthens its internal architecture, and expands cross-platform reliability — without breaking existing integrations.

This release builds on the CLI, VS Code, and MCP ecosystem introduced in previous versions, focusing on more actionable validation feedback, shared architectural behavior, and long-term maintainability.

Highlights

1. Precise Diagnostics — Navigate Directly to Problems

ADR Guard now supports opt-in source locations in JSON and SARIF validation reports.

The new --diagnostic-locations flag provides one-based line and column information when the Markdown parser can identify the exact source of a finding.

adr-guard check docs/adr --format json --diagnostic-locations
adr-guard check docs/adr --format sarif --diagnostic-locations

What this improves:

  • More actionable validation results with precise source locations.
  • Better navigation through the VS Code Problems panel.
  • More useful SARIF diagnostics for code scanning integrations.
    ... (truncated)

1.8.0

ADR Guard v1.8.0 — MCP Integration, Visual Architecture Workflows & Governance

ADR Guard v1.8.0 marks a major step toward bringing architecture decision governance into developer workflows and AI-assisted engineering.

This release introduces the ADR Guard MCP Server in the repository, expands the VS Code integration with visual architecture workflows, and strengthens the shared .NET foundation — while preserving the CLI's existing commands, validation contracts, and deterministic behavior.

Highlights

Model Context Protocol (MCP) Server

ADR Guard now includes a standalone .NET 10 MCP server that exposes architecture decisions and governance capabilities to compatible AI agents.

Seven read-only tools are available:

MCP Tool | Capability -- | -- list_adrs | Discover Architecture Decision Records get_adr | Retrieve ADR content and metadata search_adrs | Search architectural decisions get_adr_relationships | Inspect dependencies and supersession validate_adrs | Execute deterministic ADR validation analyze_impact | Identify decisions affected by code changes verify_architecture | Evaluate architectural drift and evidence

The server uses stdio, structured contracts, bounded execution, repository isolation, and existing ADR Guard domain services. It does not duplicate validation logic or automatically modify architectural decisions.

Distribution: The MCP Server is versioned independently as 1.0.0. NuGet packaging, an official MCP Registry manifest, and a protected release workflow are included in the repository. Public MCP distribution requires its separate release process.

Expanded VS Code Architecture Workflows

The VS Code extension now includes the source implementation of additional CLI-backed visual workflows:

  • Architecture Impact Analysis: Explore affected decisions, related code changes, mapping coverage, and supporting evidence.

  • Architectural Drift: Inspect fitness rules, violations, passing results, and inconclusive evidence.

  • Diagnostic Baselines: Create and update baselines through explicit user actions.

  • Enriched ADR Catalog: Generate richer architecture decision indexes.

  • AI-Assisted Drafting: Preview proposed ADRs with explicit provider, model, and context selection.

  • Technical Review: Review existing ADRs and compare revisions using an explicit Git reference.

The extension also integrates with VS Code's MCP server provider API, allowing compatible agents to discover ADR Guard tools when the integration is enabled.

MCP remains optional and disabled by default. Traditional CLI-powered workflows continue to work independently.

Extension distribution: These enhancements are prepared for the independently versioned VS Code extension 1.1.0; their availability in the Marketplace depends on its separate publication.

CLI Integration and Compatibility

ADR Guard CLI 1.8.0 remains the authoritative engine for parsing, validation, generation, impact analysis, architectural drift, and governance policies.

The release preserves the established command set:

init · check · baseline · index · new · edit · draft · review · impact · drift

Existing capabilities remain supported, including canonical ADR validation, optional MADR 4.0, lifecycle and relationship policies, incremental checks, JSON/SARIF reports, diagnostic baselines, and advisory AI workflows.

The shared implementation is now reusable by the MCP server without changing the established CLI interface.

No intentional breaking changes to CLI commands, flags, report schemas, defaults, or exit-code semantics.

Security and Reliability

This release reinforces predictable and controlled architecture governance:

  • Repository-scoped MCP access with strict path and symlink validation.

  • Read-only MCP operations with bounded inputs, outputs, and execution.

  • Safer Git subprocess handling, preventing child processes from consuming MCP protocol input.

  • Explicit confirmation for file-changing workflows and external AI provider requests.

  • Workspace trust and isolation for VS Code integrations.

  • Continued human ownership of ADR lifecycle and architectural approval.

Impact analysis and AI-assisted reviews remain advisory. Inconclusive evidence is never silently treated as architectural compliance.

Release Automation and Quality

The repository now includes a dedicated MCP distribution pipeline, separate from the existing CLI and VS Code release workflows.

The MCP pipeline is designed for manually authorized publishing through NuGet.org, GitHub Releases, and the official MCP Registry, with OIDC authentication, package integrity verification, and cross-platform installation tests.

The implementation also adds automated coverage for MCP protocol negotiation, tool discovery, filesystem security, packaging, VS Code integration, and documentation consistency.

Installation

ADR Guard CLI 1.8.0 requires .NET 10.

For an existing global installation, once version 1.8.0 is available on NuGet.org:

dotnet tool update --global RodriOliveira.AdrGuard --version 1.8.0

For a new installation:

dotnet tool install --global RodriOliveira.AdrGuard --version 1.8.0

The CLI package is also attached to this GitHub Release as RodriOliveira.AdrGuard.1.8.0.nupkg.

The MCP Server and VS Code extension have separate installation and release lifecycles; neither is required for standalone CLI usage.

Documentation

The release includes expanded English and Brazilian Portuguese documentation, covering MCP tools and configuration, VS Code visual workflows, architectural analysis, security, compatibility, and release processes.


Full Changelog: v1.7.0...v1.8.0

Implementation: PR #​183 — MCP Server and VS Code Architecture Workflows

Architecture decisions remain human-owned. ADR Guard helps teams document, validate, understand, and evaluate those decisions across development tools and AI-assisted workflows.

# ADR Guard v1.8.0 — MCP Integration, Visual Architecture Workflows & Governance

ADR Guard v1.8.0 marks a major step toward bringing architecture decision governance into developer workflows and AI-assisted engineering.

This release introduces the ADR Guard MCP Server in the repository, expands the VS Code integration with visual architecture workflows, and strengthens the shared .NET foundation — while preserving the CLI's existing commands, validation contracts, and deterministic behavior.

Highlights

Model Context Protocol (MCP) Server

ADR Guard now includes a standalone .NET 10 MCP server that exposes architecture decisions and governance capabilities to compatible AI agents.

Seven read-only tools are available:

MCP Tool Capability
list_adrs Discover Architecture Decision Records
get_adr Retrieve ADR content and metadata
search_adrs Search architectural decisions
get_adr_relationships Inspect dependencies and supersession
validate_adrs Execute deterministic ADR validation
analyze_impact Identify decisions affected by code changes
verify_architecture Evaluate architectural drift and evidence

The server uses stdio, structured contracts, bounded execution, repository isolation, and existing ADR Guard domain services. It does not duplicate validation logic or automatically modify architectural decisions.

Distribution: The MCP Server is versioned independently as 1.0.0. NuGet packaging, an official MCP Registry manifest, and a protected release workflow are included in the repository. Public MCP distribution requires its separate release process.

Expanded VS Code Architecture Workflows

The VS Code extension now includes the source implementation of additional CLI-backed visual workflows:

  • Architecture Impact Analysis: Explore affected decisions, related code changes, mapping coverage, and supporting evidence.
  • Architectural Drift: Inspect fitness rules, violations, passing results, and inconclusive evidence.
  • Diagnostic Baselines: Create and update baselines through explicit user actions.
    ... (truncated)

1.7.0

ADR Guard v1.7.0 — Structured ADR Creation and Editing

ADR Guard 1.7.0 introduces structured creation and editing contracts for Architecture Decision Records (ADRs), providing the foundation for visual workflows in the VS Code extension.

This release extends the existing .NET CLI with versioned interfaces for creating and updating ADRs while preserving document integrity, backward compatibility, and the CLI's responsibility for validation and persistence.

What's New

Structured ADR Creation

The new adr-guard new <directory> --form contract enables visual clients to create ADRs through structured fields.

  • Support for Minimal and Extended ADR templates.
  • Template discovery and field definitions through versioned JSON contracts.
  • Side-effect-free Markdown previews before saving.
  • Atomic document creation with existing filename and identifier policies.
  • English and Brazilian Portuguese document generation.
  • Preservation of the traditional CLI workflow and custom-template support.

Structured ADR Editing

The new adr-guard edit <file> --form contract introduces safe, in-place editing of existing ADRs.

  • Support for canonical ADRs and MADR 4.0 documents.
  • Format-aware loading and validation.
  • Preservation of filenames, identifiers, unknown sections, and unchanged Markdown content.
  • SHA-256-based conflict detection to prevent overwriting externally modified documents.
  • Atomic persistence to protect document integrity.

VS Code Visual Workflow Integration

Versioned CLI contracts now support the visual management capabilities developed for the separately versioned VS Code extension.

These include:

  • An ADR list with search, status filters, sorting, and workspace selection.
  • Guided creation and editing forms with Markdown previews.
  • Configurable languages, templates, ADR directories, and validation preferences.
  • Navigation between listing, creation, editing, and settings screens.
  • Explicit save operations, dirty-state handling, and protection against unintended validation during Back or Cancel actions.
  • English and Brazilian Portuguese interfaces.

Important: This release publishes the CLI capabilities required by the visual workflows. The VS Code extension is versioned and published independently. Visual creation and editing require a compatible extension build and ADR Guard CLI 1.7.0 or newer.

Compatibility and Reliability

  • Existing CLI commands and arguments remain supported.
  • Canonical ADR validation remains the default; MADR 4.0 support stays opt-in.
  • Existing JSON, SARIF, review, impact analysis, and architectural drift contracts remain compatible.
  • Custom ADR templates continue to use the traditional creation workflow.
    ... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Dapper from 2.1.79 to 2.1.89
Bumps Microsoft.Data.Sqlite to 10.0.14
Bumps rodrioliveira.adrguard from 1.6.0 to 1.9.0

---
updated-dependencies:
- dependency-name: Dapper
  dependency-version: 2.1.89
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: rodrioliveira.adrguard
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 26, 2026
@coderabbitai

coderabbitai Bot commented Oct 26, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot @github

dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #288.

@dependabot dependabot Bot closed this Oct 26, 2026
@dependabot
dependabot Bot deleted the dependabot/nuget/dot-config/dotnet-minor-patch-e41eb74bbb branch October 26, 2026 12:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants