[rodri-oliveira-dev]

Summary

Consolidate all four open dependency/SDK updates into a single reviewable PR.

Included updates

• Bump the minor-and-patch group with 8 updates #78: 8 grouped NuGet dependency updates, including regenerated lock files:
  • Microsoft.Agents.AI and Workflows 1.22.0 → 1.25.0
  • Microsoft.Extensions.AI and AI.OpenAI 10.10.0 → 10.11.0
  • OllamaSharp 5.4.30 → 5.5.0
  • Microsoft.NET.Test.Sdk 18.10.1 → 18.11.0
  • xunit.v3 4.0.1 → 4.0.2
  • xunit.runner.visualstudio 4.0.0 → 4.0.1
• Bump dotnet-sonarscanner from 11.3.0 to 12.0.0 #79: dotnet-sonarscanner 11.3.0 → 12.0.0 (major upgrade; validate Sonar jobs).
• chore(deps): bump dotnet-sdk from 10.0.401 to 10.0.402 #80 / chore: update .NET SDK from 10.0.401 to 10.0.402 #81: deduplicated .NET SDK 10.0.401 → 10.0.402 (one change to global.json).

Dependabot configuration

• Group all NuGet version updates, including major/minor/patch, into a single group PR, with open-pull-requests-limit: 1.
• Group all GitHub Actions version updates into a single group PR, also limited to one.
• Retain a repository-local dotnet-sdk Dependabot entry (one open PR maximum) to ensure global.json continues receiving SDK servicing releases even if the central synchronization is unavailable.
• Preserve Monday schedules and America/Sao_Paulo timezone.

GitHub Dependabot groups by package ecosystem, so one PR across all ecosystems is not supported natively. NuGet and GitHub Actions each use one grouped PR, and the SDK ecosystem permits at most one open PR.

Central sync coordination: The separate rodri-oliveira-dev/.github SDK sync workflow also targets this repository (as evidenced by #81). It may still open a separate SDK PR. Its reserved chore/sync-dotnet-sdk branch remains after #81 was closed; central automation requires a valid open owned PR or no reserved branch, so a repository owner should assess and clean up the stale branch under the central branch-ownership recovery policy. Until central coordination is addressed, Dependabot provides reliable repository-local SDK updates.

Validation

• Combined original PR file changes in one branch.
• Confirmed expected 9-file diff against main.
• Restored local SDK update automation in response to Codex review.
• CI / tests / dependency review checks to run on this PR.
• Review SonarScanner 12 major-version compatibility.

Supersedes #78, #79, #80, and #81.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Source mode: Auto
• Repository: rodri-oliveira-dev/Repo2C4
• Branch: chore/consolidate-dependency-updates-2026-10-23
• File: .coderabbit.yaml
• Commit: 967187d
• Layers: Repository YAML
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 000323ed-dd4f-4bca-b180-86faa5994a8c

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-23T13:24:21.327007Z	5a2d352	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 5a2d35295a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".