From 9fea78c4c2dc8b76184dbbb8827ec910ebde2992 Mon Sep 17 00:00:00 2001 From: Malcolm Nixon Date: Fri, 28 Aug 2026 11:48:00 -0400 Subject: [PATCH 1/2] fix: correct SonarCloud opencover glob pattern for coverlet.MTP output SonarCloud reports zero code coverage for this repo. This project uses xunit.v3 4.0.0, which only runs under the Microsoft.Testing.Platform (MTP) 'dotnet test' mode, so the test project correctly uses coverlet.MTP (the VSTest-only coverlet.collector doesn't work under MTP). However, coverlet.MTP names its output file coverage.opencover..xml, whereas the workflow's Sonar scanner argument used the glob **/*.opencover.xml, which only matches filenames literally ending in "opencover.xml" - the session-ID segment breaks that match, so the scanner silently found no coverage report to ingest. Verified locally: `dotnet test --coverlet --coverlet-output-format opencover` (matching CI) produces files such as coverage.opencover.280826154731906.xml, which the corrected glob **/coverage.opencover.*.xml matches but the old glob did not. All 1005 tests still pass. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .github/workflows/build.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index d0a60b8..05b4555 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -172,7 +172,7 @@ jobs: /o:"demaconsulting" /d:sonar.token="${{ secrets.SONAR_TOKEN }}" /d:sonar.host.url="https://sonarcloud.io" - /d:sonar.cs.opencover.reportsPaths=**/*.opencover.xml + /d:sonar.cs.opencover.reportsPaths=**/coverage.opencover.*.xml /d:sonar.scanner.scanAll=false - name: Build From 73b849e998c40cde33bc0c7a3ac9a5888b392086 Mon Sep 17 00:00:00 2001 From: Malcolm Nixon Date: Fri, 28 Aug 2026 11:48:17 -0400 Subject: [PATCH 2/2] chore: bump devDependencies to latest versions Updates direct npm devDependencies to their latest published versions: @mermaid-js/mermaid-cli 11.12.0 -> 11.16.0, cspell 9.7.0 -> 10.1.1, markdownlint-cli2 0.21.0 -> 0.23.2 (mermaid-filter already at latest 1.4.7). Remaining npm audit findings are transitive dependencies pulled in via mermaid-cli/mermaid-filter's puppeteer dependency, with no fix currently available upstream - out of scope per user request. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- package.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package.json b/package.json index a57dc1f..582db62 100644 --- a/package.json +++ b/package.json @@ -1,9 +1,9 @@ { "private": true, "devDependencies": { - "@mermaid-js/mermaid-cli": "11.12.0", - "cspell": "9.7.0", - "markdownlint-cli2": "0.21.0", + "@mermaid-js/mermaid-cli": "11.16.0", + "cspell": "10.1.1", + "markdownlint-cli2": "0.23.2", "mermaid-filter": "1.4.7" } }