Skip to content

deps: Bump Microsoft.SqlServer.TransactSql.ScriptDom and SQLitePCLRaw.bundle_e_sqlite3 - #420

Merged
erikdarlingdata merged 1 commit into
devfrom
dependabot/nuget/server/PlanShare/dev/patch-and-minor-dded2de96d
Aug 3, 2026
Merged

deps: Bump Microsoft.SqlServer.TransactSql.ScriptDom and SQLitePCLRaw.bundle_e_sqlite3#420
erikdarlingdata merged 1 commit into
devfrom
dependabot/nuget/server/PlanShare/dev/patch-and-minor-dded2de96d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.SqlServer.TransactSql.ScriptDom from 180.59.2 to 180.78.1.

Release notes

Sourced from Microsoft.SqlServer.TransactSql.ScriptDom's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated SQLitePCLRaw.bundle_e_sqlite3 from 3.0.4 to 3.0.5.

Release notes

Sourced from SQLitePCLRaw.bundle_e_sqlite3's releases.

3.0.5

Update the lib dependency for SQLitePCLRaw.bundle_e_sqlite3 to package ID SQLite version 3.53.4.

Commits viewable in compare view.

@dependabot @github

dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@erikdarlingdata erikdarlingdata left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependabot patch/minor group bump touching three .csproj files:

  • Microsoft.SqlServer.TransactSql.ScriptDom 180.59.2 → 180.78.1 in src/PlanViewer.App/PlanViewer.App.csproj:27 and src/PlanViewer.Core/PlanViewer.Core.csproj:14
  • SQLitePCLRaw.bundle_e_sqlite3 3.0.4 → 3.0.5 in server/PlanShare/PlanShare.csproj:17

Base branch dev — correct. build-and-test is green; check-branches is green; only the review action is red, and it's failing on every recent dependabot PR (also #421), so that looks like a workflow-side issue rather than something this PR broke. No src/ logic changes and no test updates — the coverage rule doesn't apply.

What needs attention

  1. Stale comment in server/PlanShare/PlanShare.csproj:14-16 — see inline. The comment says "3.0.4 bundles SQLite 3.53.3"; after the bump the ref is 3.0.5, which bundles SQLite 3.53.4. Since the block exists specifically to document the CVE-2025-6965 rationale and the pinned native SQLite version, it needs to move with the ref.

  2. ScriptDom is a 19-patch jump (180.59.2 → 180.78.1). Within-major, so API-stable, but the parser rule tables can shift. Consumers in this repo: src/PlanViewer.Core/Services/SqlObjectResolver.cs, src/PlanViewer.App/Services/SqlFormattingService.cs, src/PlanViewer.App/Services/SqlFormatSettingsService.cs. Worth a smoke pass through object-resolution and format-selection scenarios before merge — nothing in the diff itself is wrong.

Not approving, not requesting changes — comments only.


Generated by Claude Code

Comment on lines 14 to 16
drop it only once that floor moves past 2.1.11 on its own. 3.0.4 bundles
SQLite 3.53.3, and Microsoft.Data.Sqlite 10.0.10 works against the 3.x
native layer (full CRUD verified). -->

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Comment is stale after this bump: "3.0.4 bundles SQLite 3.53.3" but line 17 now pins 3.0.5, which per the 3.0.5 release notes bundles SQLite 3.53.4 (package ID SQLite). Update the comment to 3.0.5 bundles SQLite 3.53.4 so the CVE-2025-6965 rationale stays accurate — the whole point of the block comment is documenting what native SQLite version this ref pins.


Generated by Claude Code

@erikdarlingdata

Copy link
Copy Markdown
Owner

@dependabot rebase

@erikdarlingdata

Copy link
Copy Markdown
Owner

@dependabot recreate

….bundle_e_sqlite3

Bumps Microsoft.SqlServer.TransactSql.ScriptDom from 180.59.2 to 180.78.1
Bumps SQLitePCLRaw.bundle_e_sqlite3 from 3.0.4 to 3.0.5

---
updated-dependencies:
- dependency-name: Microsoft.SqlServer.TransactSql.ScriptDom
  dependency-version: 180.78.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: Microsoft.SqlServer.TransactSql.ScriptDom
  dependency-version: 180.78.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: Microsoft.SqlServer.TransactSql.ScriptDom
  dependency-version: 180.78.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: Microsoft.SqlServer.TransactSql.ScriptDom
  dependency-version: 180.78.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: SQLitePCLRaw.bundle_e_sqlite3
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title deps: Bump the patch-and-minor group with 2 updates deps: Bump Microsoft.SqlServer.TransactSql.ScriptDom and SQLitePCLRaw.bundle_e_sqlite3 Aug 3, 2026
@dependabot
dependabot Bot force-pushed the dependabot/nuget/server/PlanShare/dev/patch-and-minor-dded2de96d branch from 720ee0b to f491a3e Compare August 3, 2026 11:10
@erikdarlingdata
erikdarlingdata merged commit 0aa07cb into dev Aug 3, 2026
3 checks passed
@erikdarlingdata
erikdarlingdata deleted the dependabot/nuget/server/PlanShare/dev/patch-and-minor-dded2de96d branch August 3, 2026 11:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant