Skip to content

Fix Dependabot glob to freeze base Microsoft.EntityFrameworkCore package#109

Merged
lucaslorentz merged 2 commits into
mainfrom
fix/dependabot-efcore-glob
Jul 3, 2026
Merged

Fix Dependabot glob to freeze base Microsoft.EntityFrameworkCore package#109
lucaslorentz merged 2 commits into
mainfrom
fix/dependabot-efcore-glob

Conversation

@lucaslorentz

@lucaslorentz lucaslorentz commented Jul 3, 2026

Copy link
Copy Markdown
Owner

Problem

The current ignore pattern Microsoft.EntityFrameworkCore.* (trailing dot) matches only the suffixed packages (.Relational, .SqlServer, …) and not the base Microsoft.EntityFrameworkCore package.

As a result, Dependabot bumped the base package across a major (8.0.25 → 9.0.17) on the net8.0 TFM while ...Relational stayed at 8.0.25. Since EF Core 9 moved ExecuteDeleteAsync from RelationalQueryableExtensions to EntityFrameworkQueryableExtensions, net8.0 ended up with the method in both assemblies → CS0121 (ambiguous call) → broken build (see #107).

Fix

Dropping the dot (Microsoft.EntityFrameworkCore*) also freezes the base package, honoring the rule in CLAUDE.md:

Microsoft.Extensions.* and Microsoft.EntityFrameworkCore.* must stay at the minimum compatible version for each TFM.

Microsoft.Extensions.* needs no change — there is no base Microsoft.Extensions package.

With this, Dependabot stops touching EF Core (bumps become manual, per TFM). #107 has been closed; the dotnet group will be recreated without the EF Core bumps.

Also

Adds a ## Language section to CLAUDE.md requiring English for all repository-facing content (code, commits, PRs, issue/PR comments, docs), matching the convention already documented in the cldman and auto-compute repos.

🤖 Generated with Claude Code

The ignore pattern `Microsoft.EntityFrameworkCore.*` (trailing dot) matches
only suffixed packages (.Relational, .SqlServer, ...) and NOT the base
`Microsoft.EntityFrameworkCore` package. Dependabot therefore bumped the base
package across a major (8.0.25 -> 9.0.17) on the net8.0 TFM while Relational
stayed at 8.0.25, producing CS0121 ambiguity for `ExecuteDeleteAsync` between
EntityFrameworkQueryableExtensions (core, 9.x) and RelationalQueryableExtensions
(relational, 8.x) and breaking the build.

Dropping the dot freezes the base package too, honoring the "minimum compatible
version per TFM" rule in CLAUDE.md.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
All repository-facing content (code, commits, PR titles/bodies, issue/PR
comments, docs) must be in English, matching the convention already documented
in the cldman and auto-compute repos.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@lucaslorentz
lucaslorentz merged commit 7bd5d28 into main Jul 3, 2026
2 checks passed
@lucaslorentz
lucaslorentz deleted the fix/dependabot-efcore-glob branch July 3, 2026 21:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant