deps: Update dependency Microsoft.Kiota.Abstractions to v2#67
deps: Update dependency Microsoft.Kiota.Abstractions to v2#67renovate[bot] wants to merge 1 commit into
Conversation
|
Claude encountered an error —— View job I'll analyze this and get back to you. |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: d41aa7832b
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| ManagedAgentTelemetry.Host sample. Now that the sample uses | ||
| ANcpLua.NET.Sdk.Web, NU1903 escalates from warning to error in CI. --> | ||
| <PackageVersion Include="Microsoft.Kiota.Abstractions" Version="1.22.2"/> | ||
| <PackageVersion Include="Microsoft.Kiota.Abstractions" Version="2.0.0"/> |
There was a problem hiding this comment.
Keep Kiota packages on a single major version
Pinning only Microsoft.Kiota.Abstractions to 2.0.0 here can create a mixed Kiota dependency graph for ManagedAgentTelemetry.Host (via Microsoft.Graph/Azure.AI.Projects), where Microsoft.Graph.Core and Kiota serializers remain on 1.x while abstractions is forced to 2.x. Kiota 2.0 removed/changed abstraction APIs, so this mismatch can surface as TypeLoadException/MissingMethodException when Graph requests deserialize responses. Please either keep the transitive security pin on a compatible 1.x line or upgrade the full Kiota stack (and upstream Graph/Azure packages) together.
Useful? React with 👍 / 👎.
d41aa78 to
aa9ea64
Compare
|
Claude encountered an error —— View job I'll analyze this and get back to you. |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: aa9ea64ce4
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| ManagedAgentTelemetry.Host sample. Now that the sample uses | ||
| ANcpLua.NET.Sdk.Web, NU1903 escalates from warning to error in CI. --> | ||
| <PackageVersion Include="Microsoft.Kiota.Abstractions" Version="1.22.2"/> | ||
| <PackageVersion Include="Microsoft.Kiota.Abstractions" Version="2.0.0"/> |
There was a problem hiding this comment.
Keep Kiota dependencies on a single major line
Upgrading only Microsoft.Kiota.Abstractions to 2.0.0 here creates a mixed-major Kiota dependency graph in the sample path that brings in Graph/Foundry transitive Kiota packages, because CPM transitive pinning applies this package but does not automatically align the rest of the Kiota family. Kiota 2.0 removes abstraction APIs called out as breaking changes (for example IAsyncParseNodeFactory and old deserialize members), so keeping serializers/auth/http packages on 1.x while forcing abstractions to 2.x can surface runtime MissingMethodException/TypeLoadException during request parsing. Please pin or upgrade the Kiota stack as a set (or remain on 1.22.x across the stack) instead of bumping only abstractions.
Useful? React with 👍 / 👎.
|
Closing this Renovate major bump: live review found unresolved P1 blockers for a mixed Kiota 2.x/1.x dependency graph. This needs a coordinated Kiota/Graph/Azure stack update or a compatible 1.x security pin, not a single-package major bump. |
Renovate Ignore NotificationBecause you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR. |
|
Claude encountered an error —— View job I'll analyze this and get back to you. |
|
Closing per the existing owner triage: this Kiota 2.x single-package major bump leaves a mixed Kiota 2.x/1.x dependency graph and needs a coordinated stack update or compatible 1.x security pin. |
This PR contains the following updates:
1.22.2→2.0.0Release Notes
microsoft/kiota-dotnet (Microsoft.Kiota.Abstractions)
v2.0.0⚠ BREAKING CHANGES
Features
Bug Fixes
Code Refactoring
Configuration
📅 Schedule: (in timezone UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.