timothy/ersatztv
1
0
Fork 0
Code Issues 58 Pull Requests 8 Actions Packages Projects Releases 9 Wiki Activity

chore(deps): update dependency sqlitepclraw.bundle_e_sqlite3 to 3.0.4 #681

Closed
renovate wants to merge 1 commits from renovate/sqlitepclraw.bundle_e_sqlite3-3.x into main
pull from: renovate/sqlitepclraw.bundle_e_sqlite3-3.x
merge into: :main
Conversation 1 Commits 1 Files Changed 1
+1 -1
renovate commented 2026-07-27 05:05:29 +02:00
Collaborator
Copy Link
Copy Source

This PR contains the following updates:

Package Change Age Confidence
SQLitePCLRaw.bundle_e_sqlite3 3.0.3 → 3.0.4 age confidence

Release Notes

ericsink/SQLitePCL.raw (SQLitePCLRaw.bundle_e_sqlite3)

v3.0.4

Update SQLitePCLRaw.bundle_e_sqlite3 to reference SourceGear.sqlite3 version 3.53.3.

Configuration

📅 Schedule: (in timezone Europe/Brussels)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [SQLitePCLRaw.bundle_e_sqlite3](https://github.com/ericsink/SQLitePCL.raw) | `3.0.3` → `3.0.4` | ![age](https://developer.mend.io/api/mc/badges/age/nuget/SQLitePCLRaw.bundle_e_sqlite3/3.0.4?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/nuget/SQLitePCLRaw.bundle_e_sqlite3/3.0.3/3.0.4?slim=true) | --- ### Release Notes <details> <summary>ericsink/SQLitePCL.raw (SQLitePCLRaw.bundle_e_sqlite3)</summary> ### [`v3.0.4`](https://github.com/ericsink/SQLitePCL.raw/releases/tag/v3.0.4) Update SQLitePCLRaw\.bundle\_e\_sqlite3 to reference SourceGear.sqlite3 version 3.53.3. </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Brussels) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI4MS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
renovate added the dependencies label 2026-07-27 05:05:29 +02:00
renovate added 1 commit 2026-07-27 05:05:29 +02:00
chore(deps): update dependency sqlitepclraw.bundle_e_sqlite3 to 3.0.4
PR Gates / CI image pin matches docker/ci (pull_request) Successful in 12s
Details
PR Gates / Docs update reminder (pull_request) Successful in 20s
Details
PR Gates / decisions lifecycle (pull_request) Successful in 19s
Details
review-verdict/h10 Exempt: authored by the 'renovate' bot account and touches no protected path
Details
Review verdict / Set review-verdict status (pull_request) Successful in 10s
Details
PR Gates / Script tests (pytest) (pull_request) Successful in 48s
Details
Build ErsatzTV Image / EF migration integrity (SQLite + MySql) (pull_request) Failing after 1m19s
Details
Build ErsatzTV Image / API docs in sync (OpenAPI + endpoint index) (pull_request) Successful in 38s
Details
Build ErsatzTV Image / Formatting (changed .cs conform to .editorconfig) (pull_request) Successful in 17s
Details
Build ErsatzTV Image / Build & test (.NET) (pull_request) Successful in 8m4s
Details
Build ErsatzTV Image / Build & push image (amd64) (pull_request) Has been skipped
Details
Build ErsatzTV Image / Functional E2E (curl + UI contracts) (pull_request) Successful in 17m16s
Details
29aa156805
timothy commented 2026-07-30 23:32:06 +02:00
Owner
Copy Link
Copy Source

Superseded by #714, merged to main as 9928be805. SQLitePCLRaw.bundle_e_sqlite3 3.0.3 → 3.0.4 is now on main at Directory.Packages.props:97 — the bump this PR proposed has landed, unchanged.

Consolidated with #679 and #680 because all three edit the same file: merging them individually would have forced a rebase and a full CI re-run for each remaining PR.

This one warranted more scrutiny than its siblings, because a SQLite native-bundle bump whose SQLite migration job goes red is a plausible causal link rather than obvious infra. It wasn't. The job died after 1m19s inside the tar cache-restore step with hundreds of No space left on device errors, which corrupted the partial NuGet cache and then broke dotnet restore on .nupkg.metadata parsing. Neither the SQLite half nor the MySQL half ever ran, so the bundle bump was never exercised there at all — same host disk-exhaustion incident as #679 and #680, ~03:20 UTC on 2026-07-27.

Since that meant the risk was genuinely untested, it was verified explicitly in #714 rather than assumed:

  • locally: SQLite model drift clean, and dotnet ef database update applied every migration to a fresh DB
  • on the real runners: EF migration integrity (SQLite + MySql) green in 20m9s, with both halves actually running this time

One thing Renovate could not do on its own: the pin at Directory.Packages.props:94-97 is a deliberate security override (EF Core 9's transitive 2.1.10 has a vulnerable bundled SQLite, GHSA-2m69-gcr7-jv3q), and its comment named 3.0.3 explicitly. Renovate only rewrites the version attribute, so this PR would have left that comment contradicting the line directly beneath it. #714 updated the comment to 3.0.4 in the same change. The pin's intent is unchanged: stay on the 3.x line that ships the patched native, and 3.0.4 still satisfies Microsoft.Data.Sqlite's >= 2.1.10.

Closing as superseded. Renovate will not recreate this: the version on main already matches the target. Note 3.0.5 has since shipped upstream, so expect a fresh PR for that on the next run.

Superseded by #714, merged to `main` as 9928be805. SQLitePCLRaw.bundle_e_sqlite3 3.0.3 → **3.0.4** is now on `main` at `Directory.Packages.props:97` — the bump this PR proposed has landed, unchanged. Consolidated with #679 and #680 because all three edit the same file: merging them individually would have forced a rebase and a full CI re-run for each remaining PR. This one warranted more scrutiny than its siblings, because a SQLite native-bundle bump whose *SQLite migration job* goes red is a plausible causal link rather than obvious infra. It wasn't. The job died after 1m19s inside the tar cache-restore step with hundreds of `No space left on device` errors, which corrupted the partial NuGet cache and then broke `dotnet restore` on `.nupkg.metadata` parsing. **Neither the SQLite half nor the MySQL half ever ran**, so the bundle bump was never exercised there at all — same host disk-exhaustion incident as #679 and #680, ~03:20 UTC on 2026-07-27. Since that meant the risk was genuinely untested, it was verified explicitly in #714 rather than assumed: - locally: SQLite model drift clean, and `dotnet ef database update` applied every migration to a fresh DB - on the real runners: `EF migration integrity (SQLite + MySql)` green in 20m9s, with both halves actually running this time One thing Renovate could not do on its own: the pin at `Directory.Packages.props:94-97` is a deliberate security override (EF Core 9's transitive 2.1.10 has a vulnerable bundled SQLite, GHSA-2m69-gcr7-jv3q), and its comment named `3.0.3` explicitly. Renovate only rewrites the version attribute, so this PR would have left that comment contradicting the line directly beneath it. #714 updated the comment to `3.0.4` in the same change. The pin's intent is unchanged: stay on the 3.x line that ships the patched native, and 3.0.4 still satisfies `Microsoft.Data.Sqlite`'s `>= 2.1.10`. Closing as superseded. Renovate will not recreate this: the version on `main` already matches the target. Note 3.0.5 has since shipped upstream, so expect a fresh PR for that on the next run.
timothy closed this pull request 2026-07-30 23:32:19 +02:00

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
ad-hoc
One-off / ad-hoc work not tracked by a dedicated issue
 api
REST API / HTTP endpoints
 bug
Something isn't working
 ci-cd
Build, test, deploy pipeline
 content
Channel content / schedules / playlists
 dependencies
Dependency updates (Renovate)
 enhancement
New feature or improvement
 frontend
ChicoryTV React SPA frontend
 in-progress
Claimed by an active session — do not pick up
 jellyfin
Jellyfin tuner / IPTV integration
 parked
Excluded from automatic queue pickup; work only when explicitly selected
 priority: high
priority: low
priority: medium
review
Adversarial review finding
 security
Security / vulnerability fix
No labels dependencies
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
renovate timothy (Timothy)
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: timothy/ersatztv#681