Repository navigation
build: Bump Dapper, Microsoft.Data.Sqlite and rodrioliveira.adrguard - #287
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps Dapper from 2.1.79 to 2.1.89 Bumps Microsoft.Data.Sqlite to 10.0.14 Bumps rodrioliveira.adrguard from 1.6.0 to 1.9.0 --- updated-dependencies: - dependency-name: Dapper dependency-version: 2.1.89 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch - dependency-name: Microsoft.Data.Sqlite dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch - dependency-name: Microsoft.Data.Sqlite dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch - dependency-name: Microsoft.Data.Sqlite dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch - dependency-name: Microsoft.Data.Sqlite dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch - dependency-name: Microsoft.Data.Sqlite dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch - dependency-name: Microsoft.Data.Sqlite dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch - dependency-name: rodrioliveira.adrguard dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
|
Important Review skippedBot user detected. To trigger a single review, invoke the
|
Contributor
Author
|
Superseded by #288. |
dependabot
Bot
deleted the
dependabot/nuget/dot-config/dotnet-minor-patch-e41eb74bbb
branch
October 26, 2026 12:44
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Pinned Dapper at 2.1.89.
Release notes
Sourced from Dapper's releases.
2.1.89
What's Changed
New Contributors
Full Changelog: DapperLib/Dapper@2.1.86...2.1.89
2.1.86
What's Changed
Full Changelog: DapperLib/Dapper@2.1.79...2.1.86
Commits viewable in compare view.
Updated Microsoft.Data.Sqlite from 10.0.12 to 10.0.14.
Release notes
Sourced from Microsoft.Data.Sqlite's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Data.Sqlite from 10.0.13 to 10.0.14.
Release notes
Sourced from Microsoft.Data.Sqlite's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated rodrioliveira.adrguard from 1.6.0 to 1.9.0.
Release notes
Sourced from rodrioliveira.adrguard's releases.
1.9.0
ADR Guard v1.9.0 — Precise Diagnostics, Shared Core & Cross-Platform Reliability
ADR Guard 1.9.0 improves diagnostic precision, strengthens its internal architecture, and expands cross-platform reliability — without breaking existing integrations.
This release builds on the CLI, VS Code, and MCP ecosystem introduced in previous versions, focusing on more actionable validation feedback, shared architectural behavior, and long-term maintainability.
Highlights
1. Precise Diagnostics — Navigate Directly to Problems
ADR Guard now supports opt-in source locations in JSON and SARIF validation reports.
The new
--diagnostic-locationsflag provides one-based line and column information when the Markdown parser can identify the exact source of a finding.What this improves:
More actionable validation results with precise source locations.
Better navigation through the VS Code Problems panel.
More useful SARIF diagnostics for code scanning integrations.
Improved relationship diagnostics, including invalid or empty
Superseded bysections.Safe file-level fallback when an exact source position cannot be established.
Backward compatibility: This feature is entirely opt-in. Without the flag, existing JSON and SARIF report structures remain unchanged.
The VS Code extension 1.1.0 can request these locations automatically and retains compatibility with older CLI versions.
2. AdrGuard.Core — A Cleaner, Shared Architecture
The internal architecture has been refactored to introduce
AdrGuard.Core, a dedicated assembly containing reusable domain capabilities.The shared Core now owns:
ADR parsing, models, and validation.
Configuration loading and repository policies.
Git change detection and inventory.
Architecture impact analysis.
Architectural drift evaluation.
Both the CLI and MCP server reference the same Core directly:
This removes the previous MCP-to-CLI project dependency and provides clearer component boundaries.
Why it matters:
One deterministic implementation of architectural rules.
Reduced coupling between independent executables.
Easier maintenance, testing, and future evolution.
Consistent validation behavior and diagnostic identities.
AdrGuard.Coreis an internal implementation assembly, not a new public NuGet library. It is included in the relevant executable packages without introducing another versioning or release stream.3. Stronger Cross-Platform Reliability
This release improves Git repository handling and expands automated validation across operating systems.
Key improvements:
Fixed physical Git path resolution for macOS aliases such as
/varand/private/var.Preserved repository containment and symlink security protections.
Added end-to-end CLI smoke tests on Linux, Windows, and macOS.
Verified real CLI workflows, including
init,new,check,index, and incremental validation.Added regression coverage for deterministic diagnostics, JSON schema compatibility, and exit codes.
These improvements help ensure consistent behavior across local development environments and CI pipelines.
4. Reproducible Performance Baseline
A new benchmark harness establishes a documented performance baseline for future improvements.
It covers synthetic repositories containing 100, 500, and 900 ADRs, measuring validation and index generation.
The baseline records execution times, memory observations, runtime information, and reproducibility metadata.
These measurements are informational, environment-specific, and are not performance guarantees or release gates.
Compatibility & Stability
ADR Guard 1.9.0 is a backward-compatible minor release.
The following contracts remain unchanged:
Existing CLI commands, arguments, and defaults.
Exit codes
0–4and their meanings.JSON report schema
1.0.SARIF
2.1.0.Diagnostic codes, severities, identities, and fingerprints.
Deterministic report ordering.
Existing ADR validation and governance rules.
VS Code form and integration contracts.
The seven read-only MCP tools and their versioned contracts.
Requirement: .NET 10.
Component Independence
ADR Guard components continue to follow independent versioning and distribution lifecycles.
The CLI does not require the MCP server or VS Code extension. Likewise, the MCP server no longer depends on the CLI executable.
AI-assisted drafting and review remain optional and advisory. Architectural approval and governance decisions remain under human control.
Installation
New installation
Update an existing installation
Verify the installed version
The package is also attached to this GitHub Release as
RodriOliveira.AdrGuard.1.9.0.nupkg.Public NuGet availability should be verified independently.
Documentation & References
Documentation Portal
CLI Reference
JSON & SARIF Reports
Shared Core Architecture Decision
Quality & Performance Baseline
Release Notes in Portuguese
Key implementation PRs: #192 · #197 · #208 · #210
Full Changelog: v1.8.0...v1.9.0
ADR Guard continues evolving toward more reliable, transparent, and maintainable architecture governance.
Version 1.9.0 makes validation findings easier to act on while establishing a stronger foundation for CLI, editor, and AI-assisted workflows — without compromising compatibility, deterministic behavior, or human ownership of architectural decisions
# ADR Guard v1.9.0 — Precise Diagnostics, Shared Core & Cross-Platform ReliabilityADR Guard 1.9.0 improves diagnostic precision, strengthens its internal architecture, and expands cross-platform reliability — without breaking existing integrations.
This release builds on the CLI, VS Code, and MCP ecosystem introduced in previous versions, focusing on more actionable validation feedback, shared architectural behavior, and long-term maintainability.
Highlights
1. Precise Diagnostics — Navigate Directly to Problems
ADR Guard now supports opt-in source locations in JSON and SARIF validation reports.
The new
--diagnostic-locationsflag provides one-based line and column information when the Markdown parser can identify the exact source of a finding.What this improves:
... (truncated)
1.8.0
ADR Guard v1.8.0 — MCP Integration, Visual Architecture Workflows & Governance
ADR Guard v1.8.0 marks a major step toward bringing architecture decision governance into developer workflows and AI-assisted engineering.
This release introduces the ADR Guard MCP Server in the repository, expands the VS Code integration with visual architecture workflows, and strengthens the shared .NET foundation — while preserving the CLI's existing commands, validation contracts, and deterministic behavior.
Highlights
Model Context Protocol (MCP) Server
ADR Guard now includes a standalone .NET 10 MCP server that exposes architecture decisions and governance capabilities to compatible AI agents.
Seven read-only tools are available:
MCP Tool | Capability -- | -- list_adrs | Discover Architecture Decision Records get_adr | Retrieve ADR content and metadata search_adrs | Search architectural decisions get_adr_relationships | Inspect dependencies and supersession validate_adrs | Execute deterministic ADR validation analyze_impact | Identify decisions affected by code changes verify_architecture | Evaluate architectural drift and evidenceThe server uses
stdio, structured contracts, bounded execution, repository isolation, and existing ADR Guard domain services. It does not duplicate validation logic or automatically modify architectural decisions.Distribution: The MCP Server is versioned independently as
1.0.0. NuGet packaging, an official MCP Registry manifest, and a protected release workflow are included in the repository. Public MCP distribution requires its separate release process.Expanded VS Code Architecture Workflows
The VS Code extension now includes the source implementation of additional CLI-backed visual workflows:
Architecture Impact Analysis: Explore affected decisions, related code changes, mapping coverage, and supporting evidence.
Architectural Drift: Inspect fitness rules, violations, passing results, and inconclusive evidence.
Diagnostic Baselines: Create and update baselines through explicit user actions.
Enriched ADR Catalog: Generate richer architecture decision indexes.
AI-Assisted Drafting: Preview proposed ADRs with explicit provider, model, and context selection.
Technical Review: Review existing ADRs and compare revisions using an explicit Git reference.
The extension also integrates with VS Code's MCP server provider API, allowing compatible agents to discover ADR Guard tools when the integration is enabled.
MCP remains optional and disabled by default. Traditional CLI-powered workflows continue to work independently.
Extension distribution: These enhancements are prepared for the independently versioned VS Code extension
1.1.0; their availability in the Marketplace depends on its separate publication.CLI Integration and Compatibility
ADR Guard CLI
1.8.0remains the authoritative engine for parsing, validation, generation, impact analysis, architectural drift, and governance policies.The release preserves the established command set:
init·check·baseline·index·new·edit·draft·review·impact·driftExisting capabilities remain supported, including canonical ADR validation, optional MADR 4.0, lifecycle and relationship policies, incremental checks, JSON/SARIF reports, diagnostic baselines, and advisory AI workflows.
The shared implementation is now reusable by the MCP server without changing the established CLI interface.
No intentional breaking changes to CLI commands, flags, report schemas, defaults, or exit-code semantics.
Security and Reliability
This release reinforces predictable and controlled architecture governance:
Repository-scoped MCP access with strict path and symlink validation.
Read-only MCP operations with bounded inputs, outputs, and execution.
Safer Git subprocess handling, preventing child processes from consuming MCP protocol input.
Explicit confirmation for file-changing workflows and external AI provider requests.
Workspace trust and isolation for VS Code integrations.
Continued human ownership of ADR lifecycle and architectural approval.
Impact analysis and AI-assisted reviews remain advisory. Inconclusive evidence is never silently treated as architectural compliance.
Release Automation and Quality
The repository now includes a dedicated MCP distribution pipeline, separate from the existing CLI and VS Code release workflows.
The MCP pipeline is designed for manually authorized publishing through NuGet.org, GitHub Releases, and the official MCP Registry, with OIDC authentication, package integrity verification, and cross-platform installation tests.
The implementation also adds automated coverage for MCP protocol negotiation, tool discovery, filesystem security, packaging, VS Code integration, and documentation consistency.
Installation
ADR Guard CLI 1.8.0 requires .NET 10.
For an existing global installation, once version
1.8.0is available on NuGet.org:For a new installation:
The CLI package is also attached to this GitHub Release as
RodriOliveira.AdrGuard.1.8.0.nupkg.The MCP Server and VS Code extension have separate installation and release lifecycles; neither is required for standalone CLI usage.
Documentation
The release includes expanded English and Brazilian Portuguese documentation, covering MCP tools and configuration, VS Code visual workflows, architectural analysis, security, compatibility, and release processes.
Documentation portal
MCP Server guide
MCP tool reference
Compatibility matrix
Full Changelog: v1.7.0...v1.8.0
Implementation: PR #183 — MCP Server and VS Code Architecture Workflows
Architecture decisions remain human-owned. ADR Guard helps teams document, validate, understand, and evaluate those decisions across development tools and AI-assisted workflows.
# ADR Guard v1.8.0 — MCP Integration, Visual Architecture Workflows & GovernanceADR Guard v1.8.0 marks a major step toward bringing architecture decision governance into developer workflows and AI-assisted engineering.
This release introduces the ADR Guard MCP Server in the repository, expands the VS Code integration with visual architecture workflows, and strengthens the shared .NET foundation — while preserving the CLI's existing commands, validation contracts, and deterministic behavior.
Highlights
Model Context Protocol (MCP) Server
ADR Guard now includes a standalone .NET 10 MCP server that exposes architecture decisions and governance capabilities to compatible AI agents.
Seven read-only tools are available:
list_adrsget_adrsearch_adrsget_adr_relationshipsvalidate_adrsanalyze_impactverify_architectureThe server uses
stdio, structured contracts, bounded execution, repository isolation, and existing ADR Guard domain services. It does not duplicate validation logic or automatically modify architectural decisions.Distribution: The MCP Server is versioned independently as
1.0.0. NuGet packaging, an official MCP Registry manifest, and a protected release workflow are included in the repository. Public MCP distribution requires its separate release process.Expanded VS Code Architecture Workflows
The VS Code extension now includes the source implementation of additional CLI-backed visual workflows:
... (truncated)
1.7.0
ADR Guard v1.7.0 — Structured ADR Creation and Editing
ADR Guard 1.7.0 introduces structured creation and editing contracts for Architecture Decision Records (ADRs), providing the foundation for visual workflows in the VS Code extension.
This release extends the existing .NET CLI with versioned interfaces for creating and updating ADRs while preserving document integrity, backward compatibility, and the CLI's responsibility for validation and persistence.
What's New
Structured ADR Creation
The new
adr-guard new <directory> --formcontract enables visual clients to create ADRs through structured fields.Structured ADR Editing
The new
adr-guard edit <file> --formcontract introduces safe, in-place editing of existing ADRs.VS Code Visual Workflow Integration
Versioned CLI contracts now support the visual management capabilities developed for the separately versioned VS Code extension.
These include:
Important: This release publishes the CLI capabilities required by the visual workflows. The VS Code extension is versioned and published independently. Visual creation and editing require a compatible extension build and ADR Guard CLI 1.7.0 or newer.
Compatibility and Reliability
... (truncated)
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions