Bump the "dotnet-sdk-updates" group with 2 updates across multiple ecosystems - #447
Conversation
Bumps the dotnet-sdk-updates group with 1 update: [dotnet-sdk](https://github.com/dotnet/sdk). Updates `dotnet-sdk` from 10.0.302 to 10.0.400 - [Release notes](https://github.com/dotnet/sdk/releases) - [Commits](dotnet/sdk@v10.0.302...v10.0.400) build(deps): bump node in the dotnet-sdk-updates group Bumps the dotnet-sdk-updates group with 1 update: node. Updates `node` from 24-bookworm-slim to 26-bookworm-slim --- updated-dependencies: - dependency-name: dotnet-sdk dependency-version: 10.0.400 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-sdk-updates - dependency-name: node dependency-version: 26-bookworm-slim dependency-type: direct:production dependency-group: dotnet-sdk-updates ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
dependabot
Bot
added
the
dependencies
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
github-actions
Bot
added
the
ai-approved-major-update
🤖 Automated Major Version Review — APPROVEDPackages: Node.js Docker image, .NET SDK Research Summary
Breaking Changes AnalysisNode.js 26 breaking changes reviewed:
The Node.js image is used exclusively as a build stage ( .NET SDK Security CheckNo security advisories found for Node.js 26. Upgrading from Node 24 also clears any vulnerabilities present in the older version. Decision✅ This major version update is safe to merge. CI checks pass (Build/Test/Deploy: ✅, CodeQL: ✅), the diff contains only version file changes (
|
There was a problem hiding this comment.
🤖 Automated Major Version Review — APPROVED
Packages: Node.js Docker image (24→26), .NET SDK (10.0.302→10.0.400)
Ecosystem: Docker / .NET SDK
Version change: node:24-bookworm-slim → node:26-bookworm-slim (major bump); .NET SDK 10.0.302 → 10.0.400 (minor bump)
Research Summary
- Sources consulted:
- https://nodejs.org/en/blog/release/v26.0.0 — Node.js 26 release notes reviewed; V8 14.6, Temporal API enabled by default, Undici 8. Breaking changes include removal of
http.Server.prototype.writeHeader(), legacy_stream_*modules, and some crypto deprecations.
- https://nodejs.org/en/blog/release/v26.0.0 — Node.js 26 release notes reviewed; V8 14.6, Temporal API enabled by default, Undici 8. Breaking changes include removal of
Breaking Changes Analysis
Node.js 26 breaking changes reviewed:
http.Server.prototype.writeHeader()removed → Not used in this repo (only webpack/TypeScript build toolchain runs in this Node.js container)_stream_*legacy modules removed → Not used in the build process- Undici 8 upgrade → Only affects HTTP client internals, not relevant to build stage
- V8 engine upgrade → No breaking changes for standard TypeScript compilation
The Node.js image is used only as a build stage (FROM node:26-bookworm-slim AS node-build) to run build-js.sh (npm/webpack build). None of the Node.js 26 runtime breaking changes affect this build pipeline.
.NET SDK 10.0.302 → 10.0.400 is a minor patch update within the same major version (10), with no breaking changes.
Security Check
No known security advisories for Node.js 26 were found. The upgrade from Node 24 to 26 also resolves any vulnerabilities that may have been present in Node 24.
Decision
✅ This major version update is safe to merge. CI checks pass (Build, Test, and Deploy: success; CodeQL: success), the diff contains only version file changes (Dockerfile and global.json), and no breaking changes affect this repository's build pipeline or runtime code.
1 participant
Bumps the dotnet-sdk-updates group with 1 update: dotnet-sdk.
Updates
dotnet-sdkfrom 10.0.302 to 10.0.400Release notes
Sourced from dotnet-sdk's releases.
... (truncated)
Commits
32593ca[release/10.0.4xx] Fix hostfxr resolution failure on musl (#55519)34bb679[release/10.0.4xx] Fix NuGet subcommand help forwarding (#55482)5b623a1[release/10.0.4xx] Fix missing data for ReportInstallSucces (#55485)0066c99Merge branch 'release/10.0.4xx' into backport/pr-55483-to-release/10.0.4xx042be08[release/10.0.4xx] Source code updates from dotnet/dotnet (#55465)a5af175Fix missing data for ReportInstallSucces9cac8b9Add copilot-app LLM environment telemetry detection [10.0.4xx] (#55443)1d1aa49Re-enable C++/CLI test coverage previously gated on VS 2026 toolset availabil...5b2b079[automated] Merge branch 'release/10.0.3xx' => 'release/10.0.4xx' (#55375)87fb6b4Reset files to release/10.0.4xxBumps the dotnet-sdk-updates group with 1 update: node.
Updates
nodefrom 24-bookworm-slim to 26-bookworm-slimDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions