Skip to content

Enable Dependabot auto-updates for objectmodel stable versions - #439

Open
Anderson Silva (anderson-joyle) wants to merge 2 commits into
mainfrom
dependabot-objectmodel-stable-updates
Open

Anderson Silva (anderson-joyle) wants to merge 2 commits into
mainfrom
dependabot-objectmodel-stable-updates

Conversation

@anderson-joyle

Copy link
Copy Markdown
Contributor

Inline the six Microsoft.Agents.* (objectmodel) package versions and add a dedicated objectmodel Dependabot group so new stable versions on nuget.org are picked up automatically.

Why: Dependabot cannot bump a version behind an MSBuild property (Version=$(AgentsPackageVersion)), so it was silently skipping objectmodel updates. Inlining literal versions fixes that; the group keeps all six in one PR, separate from general dependency bumps.

  • src/Packages.props: drop AgentsPackageVersion property; inline Version="2026.5.4" on all six packages.
  • .github/dependabot.yml: add objectmodel group (Microsoft.Agents.*); exclude them from all-dependencies.

Version-preserving (still 2026.5.4). Validated locally: Sync unit tests 1784/1784 pass; all objectmodel-consuming libraries compile.

…ble versions

Inline literal versions on the six Microsoft.Agents.* packages (drop the
AgentsPackageVersion MSBuild property) so Dependabot can trace and bump them;
it cannot follow a property indirection. Add a dedicated "objectmodel"
Dependabot group so all six update together in one PR, separate from the
general dependency group, which now excludes them.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 3e18ba02-d377-4075-8a2d-4077ae344501
Copilot AI balanced review requested due to automatic review settings October 2, 2026 17:21

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Warning

Copilot couldn't run its full agentic review because it didn't start before the timeout. Make sure your repository has a runner available, or add a copilot-code-review.yml file specifying one with the runs-on attribute. See the docs for more details.

Copilot review overview

Review effort: Lite
Findings: None

What changed in this PR

Updates the repository to let Dependabot automatically bump the six Microsoft.Agents.* objectmodel packages by inlining their versions (since Dependabot can’t update MSBuild property-based versions) and adding a dedicated Dependabot group for them.

Changes:

  • Removed AgentsPackageVersion MSBuild property and inlined Version="2026.5.4" across the six Microsoft.Agents.* package references.
  • Added a new Dependabot objectmodel group for Microsoft.Agents.* packages and excluded them from the general all-dependencies group.
File Description
src/​Packages.props Inlines objectmodel package versions to enable Dependabot updates.
.github/​dependabot.yml Adds a dedicated Dependabot group for Microsoft.Agents.* and excludes them from the general group.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

The new public-package claim conflicts with existing contributor and build documentation.

Review effort: Balanced
Findings: 1 Low severity

Open (1)

Comment thread src/Packages.props
</PropertyGroup>

<!-- Microsoft.Agents.* packages (from CCI-Dependency feed) -->
<!-- Microsoft.Agents.* (objectmodel) packages, published to nuget.org.
Comment thread src/Packages.props Outdated
<PackageReference Update="Microsoft.Agents.ObjectModel.PowerFx" Version="$(AgentsPackageVersion)" />
<PackageReference Update="Microsoft.Agents.Platform.Content" Version="$(AgentsPackageVersion)" />
<PackageReference Update="Microsoft.Agents.Platform.Content.Internal" Version="$(AgentsPackageVersion)" />
<PackageReference Update="Microsoft.Agents.ObjectModel" Version="2026.5.4" />

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Anderson Silva (@anderson-joyle)
can you update the base version to the preview release we have setup now.

Refresh of the objectmodel-stable dependabot PR onto latest main.

- src/Packages.props: pin the six Microsoft.Agents.* (objectmodel)
  packages to the stable 2026.10.5.265 (inlined per-package so Dependabot
  can bump them); drop the AgentsPackageVersion property and the stale
  prerelease pin.
- .github/dependabot.yml: already carries the dedicated "objectmodel"
  group plus exclude-patterns on all-dependencies.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 3e18ba02-d377-4075-8a2d-4077ae344501

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

The package versions conflict with the version-preserving PR description and validation scope.

Review effort: Balanced
Findings: 1 Medium severity · 1 Low severity

Open (2)

Comment thread src/Packages.props
<PackageReference Update="Microsoft.Agents.ObjectModel.PowerFx" Version="$(AgentsPackageVersion)" />
<PackageReference Update="Microsoft.Agents.Platform.Content" Version="$(AgentsPackageVersion)" />
<PackageReference Update="Microsoft.Agents.Platform.Content.Internal" Version="$(AgentsPackageVersion)" />
<PackageReference Update="Microsoft.Agents.ObjectModel" Version="2026.10.5.265" />
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants