Skip to content

Bump the tests group with 4 updates - #5

Closed
dependabot[bot] wants to merge 16 commits into
devfrom
dependabot/nuget/Jellyfin.Plugin.Ifdb.Tests/dev/tests-34071731fb
Closed

Bump the tests group with 4 updates#5
dependabot[bot] wants to merge 16 commits into
devfrom
dependabot/nuget/Jellyfin.Plugin.Ifdb.Tests/dev/tests-34071731fb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 30, 2026 •
edited
Loading

Copy link
Copy Markdown

Updated coverlet.msbuild from 6.0.4 to 10.1.0.

Release notes

Sourced from coverlet.msbuild's releases.

10.1.0

Improvements

  • Publish Microsoft.Testing.Platform coverage messages from coverlet.MTP #​2019
  • Implement dynamic exclusion filters for assemblies (Coverlet.MTP) #​1946
  • Replace legacy .sln files with modern .slnx format #​1966
  • coverlet.console: add trace diagnostics and actionable warnings for instrumentation/hit/empty-result failures #​2005
  • Relax auto-property skip logic and improve coverage for records #​1941

Fixed

  • Fix coverlet.MTP does not collect coverage on the .NET Framework portion of a large project #​1980 #​1967
  • Fix Regression in branch coverage for lambda expressions #​1938
  • Fix When using "is" with "or" in pattern matching, branch coverage is lower than normal #​1979
  • Fix silent zero coverage on .NET Framework since 8.0.0 #​1985 by @​tobiwae
  • Fix Race condition between ProcessExit hit-file write and out-of-proc coverage read causes EndOfStreamException #​1987 #​1988 by @​bkoelman
  • Fix Regression TypeInitializationException when targeting .NET Framework - Could not load type 'System.Collections.Concurrent.ConcurrentBag #​2010
  • Fix use --config-file CLI arg in coverlet.MTP #​2030 by alexthornton1
  • Fix silently empty coverage for shared-framework assemblies missing from compileLibraries #​2032 by @​Eljees

Diff between 10.0.1 and 10.1.0

10.0.1

Improvements

Fixed

  • Fix inconsistent paths in cobertura reports #​1723
  • Fix when using "is" with "and" in pattern matching, branch coverage is lower than normal #​1313
  • Fix Coverlet flagging a branch for an async functions finally block where none exists #​1337
  • Fix Coverlet Tracker Missing CompilerGeneratedAttribute #​1828

Maintenance

  • Add architecture docs and diagrams for all integrations #​1927
  • Update NuGet packages and .NET SDK versions #​1933

Diff between 10.0.0 and 10.0.1

10.0.0

Improvements

  • Unique Report Filenames (coverlet.MTP and AzDO) #​1866
  • Add --coverlet-file-prefix option for unique report files #​1869
  • Introduce .NET 10 support #​1823

Fixed

  • Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #​1836
  • Fix [BUG] Missing Coverage after moving to MTP #​1843
  • Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #​1842
  • Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #​1878
  • Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #​1880
  • Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #​1718 by https://github.com/yusyd
  • Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #​1762

Maintenance

  • Add comprehensive async method tests and documentation for issue #​1864
  • Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #​1833
  • Add net9.0 and net10.0 targets #​1822

Diff between 8.0.1 and 10.0.0

8.0.1

Fixed

  • Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
  • Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

  • Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

8.0.0

Special Thanks: A huge thank you to @​Bertk for driving the majority of the work in this release! 🎉

Fixed

Improvements

  • Coverlet MTP extension feature #​1788
  • Generate SBOM for nuget packages #​1752
  • Use multi targets projects for coverlet.collector, coverlet.msbuild.tasks packages #​1742
  • Use .NET 8.0 target framework for coverlet.core and remove Newtonsoft.Json #​1733
  • Use latest System.CommandLine version #​1660
  • Upgraded minimum required .NET SDK and runtime to .NET 8.0 LTS (Long Term Support) (Breaking Change)
  • Use xunit.v3 for tests and example code

Diff between 6.0.4 and 8.0.0

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 17.14.1 to 18.11.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.11.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.10.1...v18.11.0

18.10.1

What's Changed

Full Changelog: microsoft/vstest@v18.10.0...v18.10.1

18.10.0

What's Changed

Full Changelog: microsoft/vstest@v18.9.0...v18.10.0

18.9.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.8.0...v18.9.0

18.8.1

What's Changed

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0

What's Changed

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

18.7.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.6.0...v18.7.0

18.6.0

What's Changed

Changes to tests and infra

18.5.1

What's Changed

Full Changelog: microsoft/vstest@v18.5.0...v18.5.1

18.5.0

⚠️ Unlisted on Nuget, because of #​15718

What's Changed

Full Changelog: microsoft/vstest@v18.4.0...v18.5.0

18.4.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

18.3.0

What's Changed

Internal fixes and updates

New Contributors

18.0.1

What's Changed

Fixing an issue with loading covrun64.dll on systems that have .NET 10 SDK installed: https://learn.microsoft.com/en-us/dotnet/core/compatibility/sdk/10.0/code-coverage-dynamic-native-instrumentation

Internal changes

Full Changelog: microsoft/vstest@v18.0.0...v18.0.1

18.0.0

What's Changed

Internal fixes and updates

Commits viewable in compare view.

Updated NSubstitute from 5.3.0 to 6.2.0.

Release notes

Sourced from NSubstitute's releases.

6.2.0

NSubstitute v6.2.0

This release improves generic call matching (#​989, #​974, #​990). Thanks to @​zvirja and @​JMolenkamp for fixes this.
We've also switched to using trusted nuget publishing linked to GitHub Releases. (#​987, @​zvirja)

What's Changed

Full Changelog: nsubstitute/NSubstitute@v6.1.0...v6.2.0

6.1.0

NSubstitute v6.1.0

This release reverts nullability support introduced in 6.0. This change caused a number of problems for callers (#​973, #​976), and trying to resolve these (#​976) revealed the need for more fundamental changes to NSubstitute to effectively support this. As a result, nullability is again disabled for public API. Huge thanks to @​jdb0123, @​Romfos, and @​Moha-sami for their PRs addressing this, and thanks for all those who raised issues. We also humbly award @​zvirja with one unlimited "I told you so" pass to use as he sees fit.

What's Changed

New Contributors

Full Changelog: nsubstitute/NSubstitute@v6.0.0...v6.1.0

6.0.0

ℹ️ No changes from Release Candidate 1.

NSubstitute v6.0.0

From RC1 notes:

  • [NEW] ArgMatchers.Matching predicate matcher as an alternative to Is(Expression<Predicate<T>>. (.NET6 and above.)
  • [UPDATE] Improved support for custom argument matchers. Arg.Is now accepts arg matchers.
  • [UPDATE][BREAKING] Update target frameworks: .NET8, .NET Standard 2.0
  • [UPDATE][BREAKING] Remove legacy obsolete API
  • [UPDATE][BREAKING] Mark as obsolete api CompatArg with pre c# 7.0 support
  • [UPDATE][BREAKING] Nullability is enabled for public api for .NET 8+ TFMs
  • [UPDATE] Migrate documentation to docfx platform and update samples to NUnit 4
  • [NEW] Added NuGet Package README file.

Full change list

6.0.0-rc.1

NSubstitute v6.0.0 Release Candidate 1

Due to the large number of changes in this release, we wanted to start with a release candidate to ensure we've correctly captured breaking changes.

  • [NEW] ArgMatchers.Matching predicate matcher as an alternative to Is(Expression<Predicate<T>>. (.NET6 and above.)
  • [UPDATE] Improved support for custom argument matchers. Arg.Is now accepts arg matchers.
  • [UPDATE][BREAKING] Update target frameworks: .NET8, .NET Standard 2.0
  • [UPDATE][BREAKING] Remove legacy obsolete API
  • [UPDATE][BREAKING] Mark as obsolete api CompatArg with pre c# 7.0 support
  • [UPDATE][BREAKING] Nullability is enabled for public api for .NET 8+ TFMs
  • [UPDATE] Migrate documentation to docfx platform and update samples to NUnit 4
  • [NEW] Added NuGet Package README file.

Full change list

Commits viewable in compare view.

Updated xunit.runner.visualstudio from 2.8.2 to 4.0.1.

Release notes

Sourced from xunit.runner.visualstudio's releases.

4.0.1

Release notes: https://xunit.net/releases/visualstudio/4.0.1

4.0.0

Release notes: https://xunit.net/releases/visualstudio/4.0.0

4.0.0-pre.5

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.5

4.0.0-pre.4

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.4

4.0.0-pre.3

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.3

3.1.5

Release notes: https://xunit.net/releases/visualstudio/3.1.5

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

claude and others added 16 commits October 29, 2026 11:59
@claude
Rewrite for the current fanedit.org site (fixes #2)
c805a15 
Searches returned nothing because page requests sent no User-Agent, search
depended on hidden jrCheckListing inputs, single-result searches redirect
straight to the entry, and unidentified movies were never searched for.

- New fanedit.org client: identifying User-Agent, request spacing, shared
  page cache, clear log message when Cloudflare bot protection blocks us
- Parser ported from circulon/fanedit-provider, legacy markup as fallback
- Permalink-slug ids; numeric ids from 1.x still resolve and migrate
- Automatic matching during scans with fuzzy title scoring
- Trailers, cover art, backdrops/thumbs for wide images, fanedit type and
  franchise tags, Changes in overview, optional IMDb id, IFDB link
- Trusted Reviewer rating scaled to Jellyfin's 0-100 critic rating
- Real settings page; ImageSharp dependency removed
- Fix restore failure (pinned Logging.Abstractions vs Jellyfin 10.11.11)
- Unit tests; workflows pinned to .NET 9 (shared workflows now default
  to net10.0, which Jellyfin 10.11 can't load) and run on dev
- Dev builds publish to a rolling pre-release and manifest-dev.json

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y5FKGupEjVD8fRvS39hCFE
@claude
Refactor for testability, 100% coverage, new release workflows
d86879f 
- Client state (cache, request queue, blocked-warning timer), configuration
  and clock are injected, so tests run isolated with a fake clock
- Matching and metadata mapping split out of the providers
- Logging guarded so .NET 10's CA1873 analyzer passes
- Fix: HTTP 5xx and 3xx pages were cached for the cache lifetime
- Cancellation is checked before a request starts
- 174 tests at 100% line, branch and method coverage, enforced in CI;
  opt-in live tests (IFDB_LIVE_TESTS=1) with known searches and entries
- Workflows: ci.yaml (build, coverage gate, script tests, package; SDK
  follows build.yaml), release.yaml (stable releases from tags, rolling
  dev build, both gated on CI), weekly newest-Jellyfin and live-site
  checks; non-functional template workflows removed; Dependabot on dev
- Manifest script rewritten with tests; dev manifest lists only the
  latest build
- Version 1.11.0: last release line for Jellyfin 10.11 (1.10.11 was the
  first release, so 1.1.0 would have sorted below it)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y5FKGupEjVD8fRvS39hCFE
@claude
Target Jellyfin 12 and .NET 10 as version 2.0.0
3f65aaa 
Jellyfin.Controller/Model 12.*, net10.0, targetAbi 12.0.0.0. Jellyfin 10.11
continues on the jellyfin-10.11 branch as 1.11.x. No plugin API changes were
needed; builds clean with the .NET 10 analyzers.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y5FKGupEjVD8fRvS39hCFE
@claude
Remove workflows GitHub disabled for inactivity
dd9c8a6 
CodeQL already runs through GitHub's default code scanning setup, which
conflicts with a second CodeQL workflow; the label sync copied Jellyfin's
own label set.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y5FKGupEjVD8fRvS39hCFE
@claude
Code review fixes: SSRF guard, size limit, queue timeout, scoping
a500e39 
Security
- Scraped image addresses must be http(s) on a public host name (no IP
  literals, localhost, single-label or .local/.lan/.internal/.home.arpa
  names), so a bad listing can't make the server fetch internal addresses.
  GetImageResponse applies the same rule.
- Pages are capped at 5 MB, checked by Content-Length and while streaming.
- Release workflow is read-only except the publish job.

Performance
- Time queued behind other requests no longer counts toward the request
  timeout (a long scan could time out requests that never ran).
- Page cache capped at 100 pages (~30 MB) instead of 500; cache minutes
  clamped to a day; default User-Agent computed once.

Correctness
- Ratings, main image, cover art and fallback trailer embeds are read from
  the main content area, so sidebar widgets can't leak into an entry.
- Ids from pasted URLs use the entry's own path segment, so reviews and
  discussion pages resolve to the entry.
- HTTP 410 Gone is treated like 404.

Cleanup and docs
- Removed unused IfdbImage.IsMain and IfdbSearchResult.Url, a dead check,
  and the unused Renovate config (Dependabot handles updates).
- Live tests also run on pushes to dev; coverage tool version pinned.
- README: what happens with both repositories added, scraping safeguards,
  weekly checks only run from main; stale doc comment fixed.

198 tests, 100% line and branch coverage.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y5FKGupEjVD8fRvS39hCFE
@claude
Fix VS Code debug setup left over from the plugin template
c07c37f 
It built Jellyfin.Plugin.Template.sln and copied net8.0 output.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y5FKGupEjVD8fRvS39hCFE
@claude
Live check: report a Cloudflare block of the runner as a warning
cc2294f 
The first run showed fanedit.org challenging every request from GitHub's
runners (HTTP 403). That reflects GitHub's datacenter addresses, not the
plugin, so it no longer fails the job; any other live failure still does.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y5FKGupEjVD8fRvS39hCFE
@claude
Validate downloaded images and clean scraped text
352cefc 
Images: Jellyfin saves whatever a provider's image response holds, named
from its Content-Type, without checking it's an image. The plugin now
buffers each download (max 20 MB), accepts only real JPEG, PNG, GIF or
WebP data by file signature, and labels it with the detected type. SVG
(which can carry script), HTML and anything else come back as 404, so
Jellyfin skips to the next image.

Text: scraped values have control characters (which break NFO XML),
bidirectional override/isolate characters and HTML-tag-shaped text
removed, and are length-limited (300 chars per value, 20000 per
overview). Jellyfin's web client renders overviews as Markdown with HTML
(cleaned by DOMPurify), so this keeps scraped markup out of it.

Overview line breaks now use Markdown's two-space break, so the Changes
section no longer collapses into one line in the web client.

229 tests, 100% line and branch coverage.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y5FKGupEjVD8fRvS39hCFE
@claude
Changelog-driven releases; dev builds numbered below releases
4d971ba 
- CHANGELOG.md (Keep a Changelog) is now the source of release notes: the
  GitHub release text, Jellyfin's catalog changelog and the packaged
  plugin's changelog all come from the version's section. CI fails if
  build.yaml's version has no section. scripts/changelog.js, with tests.
- 2.0.0 notes cover everything changed since 1.10.11, written for users.
- Dev builds are numbered 0.MAJOR.MINOR.RUN (Jellyfin versions must be
  four numbers, so "dev-" prefixes aren't possible). Being lower than any
  release, they now live in the main manifest.json: Jellyfin never
  installs one automatically, and testers pick it from the catalog.
  manifest-dev.json mirrors the latest dev build so its stale 2.0.0.x
  entry can't outrank a release.
- README: single repository, how to test a dev build, release steps,
  and why manifests have their own branch.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y5FKGupEjVD8fRvS39hCFE
@claude
Drop manifest-dev.json; publish image.png as the plugin image
f1c3899 
Dev builds live in manifest.json now, so the separate dev manifest is
removed rather than mirrored. If the repository has an image.png, the
build packages it (Jellyfin shows it on the installed plugin's page) and
the release workflow copies it to the manifest branch as the catalog
image (imageUrl).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y5FKGupEjVD8fRvS39hCFE
@claude
Separate dev repository again; add the plugin image
cab16a9 
Jellyfin has no per-plugin way to stop updates, so with dev builds in
manifest.json numbered 0.x, servers kept moving back to the release.
Dev builds now use their real upcoming version plus a build number
(2.0.0.N) and are only listed in manifest-dev.json, which testers use
instead of the release repository.

image.png is circulon/fanedit-provider's logo (MIT, notice in
THIRD_PARTY_NOTICES.md) on a dark 16:9 background for Jellyfin's
plugin cards. It's packaged with the plugin and published as the
catalog image in both manifests.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y5FKGupEjVD8fRvS39hCFE
@claude
Log every search outcome and every blocked request
1776466 
Blocked requests after the first were only logged at debug level for 15
minutes, and result counts only at debug, so a block and an empty search
looked identical in a normal log. Now each blocked request gets a warning
line (the full advice still at most every 15 minutes), each search logs
its result count, and a search with no results logs the HTTP status, page
size, page title and final address.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y5FKGupEjVD8fRvS39hCFE
@claude
Prepare 2.0.0: quieter logging, Debug-level diagnostics, known issue
f3584e2 
Search outcomes and repeated block notices move to Debug level (the
provider already logs each match at Information, and per-item warnings
flooded scans while fanedit.org blocks everything). The block error now
says what is known: Cloudflare refuses all automated requests, so a
different User-Agent doesn't help. README explains enabling Debug logs.
Changelog dated, with a known-issue note.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y5FKGupEjVD8fRvS39hCFE
@claude
Release automatically when a dev-to-main pull request is merged
8ff5fc0 
A push to main releases build.yaml's version when it has no vX.Y.Z tag
yet: the CHANGELOG.md heading must be dated, then CI runs, the GitHub
release is created with the changelog notes and files, and manifest.json
is updated. Afterwards dev is reset to main if both hold the same files.
Maintenance branches release by running the workflow manually, without
taking over GitHub's latest release. Replaces publishing a release by hand.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y5FKGupEjVD8fRvS39hCFE
@claude
Clear CI warnings and CodeQL findings
456abf8 
- Actions move to their current Node 24 releases (checkout v7, setup-node
  v7, setup-dotnet v6, cache v6, upload-artifact v7, download-artifact v8),
  pinned to commits like the jprm action; Dependabot keeps them current.
- Jobs run on ubuntu-24.04 instead of ubuntu-latest, which is moving to
  Ubuntu 26, so runner changes are deliberate.
- changelog.js matches version headings with a prefix test instead of a
  regular expression built from the version (CodeQL: regular expression
  injection, incomplete escaping).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y5FKGupEjVD8fRvS39hCFE
@dependabot
Bump the tests group with 4 updates
e61ccfc 
Bumps coverlet.msbuild from 6.0.4 to 10.1.0
Bumps Microsoft.NET.Test.Sdk from 17.14.1 to 18.11.0
Bumps NSubstitute from 5.3.0 to 6.2.0
Bumps xunit.runner.visualstudio from 2.8.2 to 4.0.1

---
updated-dependencies:
- dependency-name: coverlet.msbuild
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: tests
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.11.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: tests
- dependency-name: NSubstitute
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: tests
- dependency-name: xunit.runner.visualstudio
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: tests
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies This PR updates or changes a dependency file labels Oct 30, 2026
raetha pushed a commit that referenced this pull request Oct 30, 2026
@claude
Update HtmlAgilityPack to 1.13 and the test packages
b676635 
Takes Dependabot's #5 and #6 directly on dev (their branches were cut
from dev before it was reset to main, so their diffs showed the whole
2.0.0 rewrite).

- HtmlAgilityPack 1.13 adds nullable annotations: ParentNode is now
  nullable, so the two parent lookups say why it can't be null here.
- coverlet 10 counts branches more accurately than 6 and found nine
  conditions only ever tested one way (a links field without IMDb, zero
  review counts, slashed dates, http base addresses, scheme-less site
  addresses and others). New tests cover the other side, and the cache
  prune is simpler. Coverage is back to 100% line and branch.
- Microsoft.NET.Test.Sdk 18, xunit.runner.visualstudio 4, NSubstitute 6.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y5FKGupEjVD8fRvS39hCFE
raetha pushed a commit that referenced this pull request Oct 30, 2026
@claude
Update HtmlAgilityPack to 1.13 and the test packages
2534527 
Takes Dependabot's #5 and #6 directly on dev (their branches were cut
from dev before it was reset to main, so their diffs showed the whole
2.0.0 rewrite).

- HtmlAgilityPack 1.13 adds nullable annotations: ParentNode is now
  nullable, so the two parent lookups say why it can't be null here.
- coverlet 10 counts branches more accurately than 6 and found nine
  conditions only ever tested one way (a links field without IMDb, zero
  review counts, slashed dates, http base addresses, scheme-less site
  addresses and others). New tests cover the other side, and the cache
  prune is simpler. Coverage is back to 100% line and branch.
- Microsoft.NET.Test.Sdk 18, xunit.runner.visualstudio 4, NSubstitute 6.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y5FKGupEjVD8fRvS39hCFE
@dependabot @github

dependabot Bot commented on behalf of github Oct 30, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 30, 2026
@dependabot
dependabot Bot deleted the dependabot/nuget/Jellyfin.Plugin.Ifdb.Tests/dev/tests-34071731fb branch October 30, 2026 19:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies This PR updates or changes a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@claude