Skip to content

Bump the build-tools group with 1 update - #126

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/build-tools-5c7b030abd
Closed

Bump the build-tools group with 1 update#126
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/build-tools-5c7b030abd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 30, 2026

Copy link
Copy Markdown
Contributor

Updated slopwatch.cmd from 0.3.3 to 0.4.0.

Release notes

Sourced from slopwatch.cmd's releases.

0.4.0

0.4.0 March 2nd 2026

Bug Fixes:

  • --config flag now properly loads custom suppression configurations during analysis - the option was previously documented but not wired into the analysis pipeline (PR #​71)
  • Hook mode now falls back to full file analysis when git status is unavailable (e.g., outside a git repository), instead of silently returning no results (PR #​71)

Documentation:

  • Updated README examples to reflect correct .slopwatch/config.json schema, SW006 severity levels, and local tool installation instructions (PR #​71)

0.3.4 February 18th 2026

New Features:

  • .razor files (Blazor) are now scanned by default - SW001-SW006 detection rules apply to Razor components without requiring explicit -f flags (PR #​64)

0.3.3 January 20th 2026

Bug Fixes:

  • Fixed slopwatch init command to scan .props and .targets files, matching the patterns used by analyze - prevents incomplete baselines when projects have SW005 violations in MSBuild property files (PR #​53, fixes #​52)

Improvements:

  • JSON output now uses relaxed escaping for human-readable characters - apostrophes appear as ' instead of \u0027 in baseline.json and JSON output (PR #​54, fixes #​50)
  • Centralized default file patterns into DefaultPatterns class to prevent drift between commands (PR #​56)

0.3.2 January 17th 2026

Compatibility:

  • SW006 now treats CPM package version overrides (Version and VersionOverride) as errors, preventing inline overrides when CPM is enabled (PR #​48)

0.3.1 January 14th 2026

Bug Fixes:

  • Fixed slopwatch --version and --help returning exit code 2 instead of 0, which was breaking CI/CD pipelines (PR #​44, fixes #​43)
  • SW003 no longer flags catch blocks that log exceptions - logging IS handling for fire-and-forget operations, background jobs, and graceful degradation scenarios (PR #​45, fixes #​42)

Dependency Updates:

  • Bump actions/setup-dotnet from 5.0.1 to 5.1.0 (PR #​39)
  • Bump xunit.runner.visualstudio from 3.0.2 to 3.1.5 (PR #​37)

0.3.0 January 12th 2026

Compatibility:

  • Downgraded to .NET 8 for broader compatibility across environments (PR #​34)

Bug Fixes:

  • MultiEdit tool now properly analyzed in Claude Code hook mode (PR #​32)

Documentation:

  • Improved hook error messages for clarity when working with programming assistants (PR #​35)

0.2.1 January 11th 2026

... (truncated)

0.3.4

0.3.4 February 18th 2026

New Features:

  • .razor files (Blazor) are now scanned by default - SW001-SW006 detection rules apply to Razor components without requiring explicit -f flags (PR #​64)

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot Bot added the .NET Pull requests that update .NET code label Apr 30, 2026
@dependabot
dependabot Bot requested a review from st0o0 as a code owner April 30, 2026 11:12
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 30, 2026
@dependabot
dependabot Bot requested a review from LineOfC0d3 as a code owner April 30, 2026 11:12
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Apr 30, 2026
Bumps slopwatch.cmd from 0.3.3 to 0.4.0

---
updated-dependencies:
- dependency-name: slopwatch.cmd
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: build-tools
...

Signed-off-by: dependabot[bot] <support@github.com>
@st0o0
st0o0 force-pushed the dependabot/nuget/dot-config/build-tools-5c7b030abd branch from 122c243 to a2b3b02 Compare May 1, 2026 17:33

@st0o0 st0o0 left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@dependabot @github

dependabot Bot commented on behalf of github May 4, 2026

Copy link
Copy Markdown
Contributor Author

Looks like slopwatch.cmd is no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this May 4, 2026
@dependabot
dependabot Bot deleted the dependabot/nuget/dot-config/build-tools-5c7b030abd branch May 4, 2026 13:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant