Brett V. Forsgren comments

Results 143 comments of


                                            Brett V. Forsgren

Timeout running job when updating NuGet packages after updater logic was re-written in C#

@batkaevruslan I'm not aware of any setting to change the max run length, but given how long I've left this running locally with no end in sight, I don't think...

Timeout running job when updating NuGet packages after updater logic was re-written in C#

@batkaevruslan This is something we're actively working on, but the short version is that we don't want to generate PRs that will fail the end user's CI and with the...

Dependabot doesn't update NuGet version in all projects

@prplecake Is the repo where you're seeing this public? If not can you share the job ID so I can pull the full logs from my end? There will be...

No pull requests are created for the NuGet ecosystem

Is this issue entirely covered by #9696? If so I'd like to close this to consolidate the open issues.

improve NuGet discovery by expanding `.proj` and `.sln` files

@samtrion There's more than just this PR to enable anything that's not .csproj/.vbproj/.fsproj so I'll leave that for the future just to keep this PR focused.

Dependabot does not respect version range specified in NuGet (PackageReference format)

There have been several improvements in the last few months to NuGet version handling. Are you still seeing this issue?

Dependabot does not respect version range specified in NuGet (PackageReference format)

I did some investigation and the initial dependency discovery can handle version ranges like this, but the update step has issues making a final edit.

Nuget System.ArgumentException: Value cannot be null or an empty string. (Parameter 'value')

Could you share a repo/project or a log file that shows this error?

[NuGet] Support package versions stored in MSBuild properties

There have been several improvements in the last few months around versions stored in properties. Are you still seeing the issue?

Nuget scanner is targeting ProjectReferences and PackageReferences in monoliths, timeout with complicated sub tree on projectReferences, add some type of flag to only look at PackageReference and turn of ProjectRefernce

Are you still seeing timeouts when scanning the repo? There have been some recent improvements to dependency scanning that hopefully should result in a timeout.