Skip to content

Bump System.IO.Abstractions from 21.0.29 to 22.1.1#11

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/InstallerClean.Core/System.IO.Abstractions-22.1.1
Closed

Bump System.IO.Abstractions from 21.0.29 to 22.1.1#11
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/InstallerClean.Core/System.IO.Abstractions-22.1.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Updated System.IO.Abstractions from 21.0.29 to 22.1.1.

Release notes

Sourced from System.IO.Abstractions's releases.

22.1.1

What's Changed

22.1.0

What's Changed

New Contributors

Full Changelog: TestableIO/System.IO.Abstractions@v22.0.16...v22.1.0

22.0.16

What's Changed

New Contributors

Full Changelog: TestableIO/System.IO.Abstractions@v22.0.15...v22.0.16

22.0.15

What's Changed

New Contributors

Full Changelog: TestableIO/System.IO.Abstractions@v22.0.14...v22.0.15

22.0.14

What's Changed

New Contributors

Full Changelog: TestableIO/System.IO.Abstractions@v22.0.13...v22.0.14

22.0.13

What's Changed

New Contributors

Full Changelog: TestableIO/System.IO.Abstractions@v22.0.12...v22.0.13

22.0.12

What's Changed

New Contributors

Full Changelog: TestableIO/System.IO.Abstractions@v22.0.11...v22.0.12

22.0.11

What's Changed

Full Changelog: TestableIO/System.IO.Abstractions@v22.0.10...v22.0.11

22.0.10

What's Changed

Full Changelog: TestableIO/System.IO.Abstractions@v22.0.9...v22.0.10

22.0.9

What's Changed

Full Changelog: TestableIO/System.IO.Abstractions@v21.3.1...v22.0.9

21.3.1

What's Changed

Full Changelog: TestableIO/System.IO.Abstractions@v21.2.12...v21.3.1

21.2.12

What's Changed

Full Changelog: TestableIO/System.IO.Abstractions@v21.2.8...v21.2.12

21.2.8

What's Changed

Full Changelog: TestableIO/System.IO.Abstractions@v21.2.1...v21.2.8

21.2.1

What's Changed

New Contributors

Full Changelog: TestableIO/System.IO.Abstractions@v21.1.7...v21.2.1

21.1.7

What's Changed

Full Changelog: TestableIO/System.IO.Abstractions@v21.1.3...v21.1.7

21.1.3

What's Changed

Full Changelog: TestableIO/System.IO.Abstractions@v21.1.2...v21.1.3

21.1.2

What's Changed

Full Changelog: TestableIO/System.IO.Abstractions@v21.1.1...v21.1.2

21.1.1

What's Changed

New Contributors

Full Changelog: TestableIO/System.IO.Abstractions@v21.0.29...v21.1.1

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---
updated-dependencies:
- dependency-name: System.IO.Abstractions
  dependency-version: 22.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels May 4, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 4, 2026

Looks like System.IO.Abstractions is no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this May 4, 2026
@dependabot dependabot Bot deleted the dependabot/nuget/src/InstallerClean.Core/System.IO.Abstractions-22.1.1 branch May 4, 2026 10:07
FarmLox added a commit that referenced this pull request May 5, 2026
Addresses every actionable finding from the independent ship-readiness
review at non-repo-files/v1.5.4-ship-readiness-review.md. Findings
that the review flagged but explicitly did not fix here are documented
inline with their reasoning.

Native interop (latent UB; harmless on x64 by ABI luck):
- SHFILEOPSTRUCT: Pack=8 -> Pack=1 to match the Windows SDK's
  pshpack1.h declaration. Pack=8 inserted 4 bytes of padding before
  pFrom on x64, putting the C# field at offset 16 while the kernel
  reads from offset 12 - the shell happened to read field-aligned
  bytes that just so happened to look right.
- MSIHANDLE: changed from IntPtr (8 bytes on x64) to uint (4 bytes,
  matching `typedef unsigned long MSIHANDLE` in msi.h). The IntPtr
  signature would crash on x86 where the calling convention pushes
  8 bytes for a 4-byte argument. Cascaded the type change through
  Msi.cs and MsiFileInfoService.cs.
- X509Certificate.CreateFromSignedFile result is now disposed too
  (was leaked until finalisation; the X509Certificate2 wrapper
  duplicates the handle so the inner needs its own using).

Operation correctness:
- F5 keybinding (and any other Re-scan trigger) now gates on
  Cleanup.IsOperating and Completion.IsComplete via a new
  ScanViewModel.IsExternallyBlocked flag flipped from MainViewModel.
  Without this, F5 during a Move started a parallel scan that raced
  the active operation.
- EnumeratePatches now throws InvalidOperationException after
  MaxConsecutiveNonSuccess just like EnumerateProducts does. The
  silent break would have left real-but-superseded patches missing
  from the result set, classifying them as orphaned and offering
  them for cleanup.
- EnumeratePatches now Array.Clear's its GUID buffers between
  iterations, matching EnumerateProducts.
- Pre-flight write probe in CleanupViewModel.MoveAllAsync is now
  cancellable: the operationCts is created BEFORE the probe (was
  after), so the Cancel button on the operating overlay actually
  cancels rather than waiting out the SMB timeout. The probe also
  goes through the injected IFileSystem so MockFileSystem-driven
  tests don't hit real disk.
- Settings file lost-update race fixed: SaveAfterDelayAsync re-loads
  before saving, copies MoveDestination onto the freshly-loaded
  AppSettings, then writes. Previously, the cached _settings instance
  could clobber updates the detail-window code-behinds wrote
  (window-size persistence) while the user was typing in the move-
  destination textbox.
- PruneEmptySubdirectories called with CancellationToken.None: best-
  effort cleanup, not an operation the user's Cancel should
  re-classify a successful Move/Delete as cancelled.
- Move/DeleteFailed status pill now also includes the crash log path,
  so users can find detail rather than guess where to look.
- Maximize/Restore button glyph now updates with the window state.

Path leakage under elevation:
- DescribeWriteFailure no longer routes ex.Message into the dialog.
  Even an IOException's .Message can carry paths from outside the
  user's typed destination (lock-holder process paths, NTFS
  resolution chains); under elevation those could be paths from
  another user's profile. Caller now writes to crash log first,
  passes the log path through DescribeWriteFailure, and the dialog
  body shows only the user's own dest plus the log-path pointer.
  Resx patterns updated; matching tests inverted.
- ScanViewModel generic-exception catch shows a dialog (was status
  pill only, easily missed).
- DispatcherUnhandledException in App.xaml.cs guards against re-
  entry: a second exception during the MessageBox's nested message
  pump no longer stacks two dialogs / two log entries.

CLI:
- Rejects extra positional args for /s, /d (silent truncation
  before); /m allows args[1] only.
- /m PATH path with unquoted spaces ("/m D:\My Backup") used to
  become "D:\My" with no warning.
- Three-state exit code: 0 success, 2 partial success, 1 full
  failure. Documented in --help. Sysadmin retry policies can now
  distinguish "all files failed" from "1 of 100 failed".
- DeletingFiles / MovingFiles status messages take a pluralised
  noun parameter so "1 files" is no longer printed for single-
  orphan runs.
- Console.CancelKeyPress handler registered BEFORE the mutex
  acquisition so a Ctrl+C in the gap prints "Cancelling..."
  gracefully.
- Pre-mutex-cancel path also unhooks the cancel handler before
  return, matching the post-finally cleanup.

Threading / state:
- ScanViewModel re-samples HasPendingReboot AFTER the scan await,
  not before. Sampling before could publish a stale "no pending
  reboot" if Windows Update queued a reboot during a multi-second
  scan, allowing Move/Delete to enable on stale state.
- PropertyChanged-based MoveDestination binding (was LostFocus): the
  400 ms debounce now actually earns its keep (per-keystroke updates
  let the placeholder hide on the first character and the Move
  button enable as soon as the path becomes non-empty), and the
  debounce prevents save thrashing.
- MoveAllAsync uses the captured `dest` consistently (was reading
  MoveDestination live for confirmation / move call / restore-hint
  string), closing a race where a fast user could change the
  textbox between IsInstallerFolderOrChild validation and the Move
  service call.

Localisation:
- Strings.en-GB.resx deleted: it was a 1:1 duplicate of the neutral
  resx, and the project's NeutralLanguage is en-GB so .NET fallback
  already returned the neutral resource for en-GB consumers. The
  satellite assembly was loaded but its content was identical.
  Maintenance trap eliminated.
- Resx patterns added: Cli.Help.ExitCodes* (the new --help block),
  Cli.PendingRebootBlocked, Cli.EventLogPendingRebootBlocked.

UX polish:
- Result overlay tab-cycles inside the overlay's two buttons (was
  cycling through main-window buttons behind the overlay until
  focus eventually landed on Close).
- Result overlay has a 1px slate border so it reads as a layered
  window instead of a free-floating block.
- Click on the dim margin around the result overlay dismisses it.
- Maximize/Restore button glyph swaps between U+25A1 and U+2750.
- Result-screen errors block is now keyboard-focusable so screen
  readers can read it (overrides SelectableText style's
  IsTabStop=False locally).
- AboutWindow Close button gets AutomationProperties.Name (was
  inconsistent with the four other windows' close buttons).
- SubtleLink hyperlinks now underline on hover so the link is
  discoverable without relying on colour shift alone.

Tests:
- DescribeWriteFailureTests: inverted to assert the inner exception
  message does NOT leak and the log path DOES surface.
- MainViewModelTests timing-coupled debounce wait now reads
  CleanupViewModel.MoveDestinationSaveDelay (made internal)
  instead of hardcoding 700 ms.
- OrphanedFilesViewModelTests dispose-cancel test uses
  TaskCompletionSource (await-based) instead of
  DateTime.UtcNow polling.
- PendingRebootServiceTests removed the tautological
  Assert.IsType<bool>(svc.HasPendingReboot()) test.
- PruneEmptySubdirectoriesTests gated on the
  INSTALLERCLEAN_TEST_PRUNE=1 env var so they don't delete real
  installer-folder subdirs on dev/CI hosts.
- InstallerClean.Tests.csproj sets RestorePackagesWithLockFile=true
  so test dependency drift can't mask production behaviour.

CLAUDE.md / MEMORY.md drift:
- CLAUDE.md said neutral resx is en-US; actually en-GB. Fixed and
  noted the en-GB.resx satellite removal.
- CLAUDE.md said only Core has SupportedOSPlatform; CLI has it too.
  Now mentions both.
- "Nothing currently blocking" replaced with a pointer to the latest
  ship-readiness review.
- MEMORY.md "no ex.Message to UI" claim qualified with the documented
  inline exceptions (DescribeWriteFailure, ScanViewModel's
  InvalidOperationException catch).

Findings explicitly NOT actioned (with reasoning):
- #18, #25, #59 are duplicates of #1, #11.
- #31 EventTrigger animation paths: reviewer's own conclusion was
  "no fix unless profiler shows it".
- #32 Process.Start as Admin: would require explorer-token-drop
  machinery; deferred (a click-once-per-session UX paper-cut).
- #36, #41, #44, #48, #53, #54, #57: reviewer confirmed not bugs.
- #40 RescanRequested via constructor: reviewer's "not a bug today".
- #43 AllowsTransparency: acceptable trade-off for confirm dialogs.
- #45, #46 manifest version: cosmetic.
- #47 Inno [Files] precondition: release-script concern, not
  shipped product.
- #55, #56: minor UX nits.
- #58 CrashLog.Write return success/failure: would change the
  signature across every caller; out of scope for a fixup pass.

178/178 tests passed before this commit; running on Windows after.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants