Skip to content

release: v1.264.0 - installable web app (PWA) support + minor-and-patch dependencies - #620

Merged
ivanball merged 6 commits into
mainfrom
dependabot/nuget/minor-and-patch-25379c73e8
Oct 27, 2026
Merged

ivanball merged 6 commits into
mainfrom
dependabot/nuget/minor-and-patch-25379c73e8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 27, 2026 •

Copy link
Copy Markdown
Contributor

v1.264.0 release PR. Carries the Dependabot minor-and-patch group, the installable-web-app (PWA) support for Blazor Web hosts, and the release stamp. Not breaking: a host that maps nothing changes nothing.

Installable web app (MMCA.Common.UI.Web, ADR-136)

  • app.MapCommonServiceWorker() serves /service-worker.js at the site root: anonymous, Cache-Control: no-cache, stamped with the package version so each release updates it.
  • The worker handles GET navigations only, network first with navigation preload, and shows _content/MMCA.Common.UI.Web/offline.html when the network fails. It never caches a page or a response, because server-rendered pages carry the signed-in user's data. API calls, the Blazor circuit, hubs and framework files never pass through it.
  • _content/MMCA.Common.UI.Web/pwa-register.js registers it after load, secure context only (a file, because the host CSP blocks inline script).
  • Kill switch: Pwa:ServiceWorker:Enabled=false serves a retired worker with no fetch handler that deletes the offline cache.
  • The host owns manifest.webmanifest, icons and theme-color. The CSP (default-src 'self') already allows a same-origin manifest and worker, and the UI rate limiter already exempts both paths (file extension).

Tests: ServiceWorkerEndpointTests (5, unit). The Gallery now maps the worker and loads the register script, so the whole E2E suite runs with it installed; ServiceWorkerE2ETests pins root-scope registration on every engine and the offline page on Chromium. Locally: UI.Web.Tests 240/240, full Gallery E2E on Chromium 111/111, the new E2E class green on chromium, firefox and webkit.

Dependencies (Dependabot)

Polly/Polly.Core 8.8.0 -> 8.8.1, Google.Cloud.Firestore 4.5.0 -> 4.6.0, AWSSDK patch updates. Dependabot regenerated only six lock files (NU1004 on every Polly-transitive project); every lock is regenerated with --force-evaluate, the twelve out-of-slnx projects included. The SDK-implicit Microsoft.NET.ILLink.Tasks (UI.Maui) and Microsoft.AspNetCore.App.Internal.Assets (Gallery) blocks stay at the CI SDK's 10.0.12.

Release

CHANGELOG [1.264.0] (v1.263.0 landed on main while this PR was open; main is merged in); Promote-PublicApi.ps1 as the last commit (it also promotes entries earlier releases shipped without promoting). Consumer note: ADC (Polly.Core) and Store (Polly) pin 8.8.0 and must raise it with the bump (NU1605).

🤖 Generated with Claude Code

https://claude.ai/code/session_01VkaHCMhi84vqJ7KJFUUDa2

Bumps AWSSDK.DynamoDBv2 from 4.0.109.1 to 4.0.109.2
Bumps AWSSDK.RDS from 4.0.107.1 to 4.0.107.2
Bumps AWSSDK.S3 from 4.0.104.6 to 4.0.104.7
Bumps AWSSDK.SecretsManager from 4.0.100.21 to 4.0.100.22
Bumps AWSSDK.SimpleNotificationService from 4.0.100.21 to 4.0.100.22
Bumps Google.Cloud.Firestore from 4.5.0 to 4.6.0
Bumps Polly from 8.8.0 to 8.8.1
Bumps Polly.Core from 8.8.0 to 8.8.1

---
updated-dependencies:
- dependency-name: AWSSDK.DynamoDBv2
  dependency-version: 4.0.109.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: AWSSDK.RDS
  dependency-version: 4.0.107.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: AWSSDK.S3
  dependency-version: 4.0.104.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: AWSSDK.SecretsManager
  dependency-version: 4.0.100.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: AWSSDK.SimpleNotificationService
  dependency-version: 4.0.100.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Google.Cloud.Firestore
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Polly
  dependency-version: 8.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Polly.Core
  dependency-version: 8.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from ivanball as a code owner October 27, 2026 04:44
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 27, 2026
ivanball and others added 3 commits October 27, 2026 09:11
Dependabot updated only six lock files, so every project carrying Polly as
CentralTransitive failed restore with NU1004. Regenerated with
--force-evaluate across the slnx and the twelve out-of-slnx projects; the
SDK-implicit ILLink.Tasks (UI.Maui) and App.Internal.Assets (Gallery) blocks
are kept at the CI SDK's 10.0.12.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VkaHCMhi84vqJ7KJFUUDa2
MapCommonServiceWorker serves /service-worker.js at the site root (anonymous,
no-cache, stamped with the package version). The worker handles GET
navigations only, network first with navigation preload, and falls back to
_content/MMCA.Common.UI.Web/offline.html; it never caches a page or a
response, because server-rendered pages carry the signed-in user's data.
pwa-register.js registers it after load. Pwa:ServiceWorker:Enabled=false
serves a retired worker with no fetch handler (the kill switch).

The Gallery maps the worker and loads the register script, so the whole E2E
suite runs with it installed; ServiceWorkerE2ETests pins registration at the
root on every engine and the offline page on Chromium.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VkaHCMhi84vqJ7KJFUUDa2
Promote-PublicApi.ps1 moves every PublicAPI.Unshipped.txt entry into its
Shipped file: the six new UI.Web entries, plus entries earlier releases
shipped without promoting (UI, Shared, Application, Infrastructure, Aspire,
Aws, Gcp, Testing.Architecture).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VkaHCMhi84vqJ7KJFUUDa2
@ivanball ivanball changed the title deps: Bump the minor-and-patch group with 8 updates release: v1.263.0 - installable web app (PWA) support + minor-and-patch dependencies Oct 27, 2026
@ivanball ivanball closed this Oct 27, 2026
@ivanball ivanball reopened this Oct 27, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 27, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

ivanball and others added 2 commits October 27, 2026 09:23
…r-and-patch-25379c73e8

# Conflicts:
#	CHANGELOG.md
v1.263.0 landed on main while this PR was open, so this PR ships as
v1.264.0. It also shipped UserPreferencesTestsBase.DarkPaletteBackgrounds
without promoting it; promoted here so every Unshipped file is empty at
the tag.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VkaHCMhi84vqJ7KJFUUDa2
@ivanball ivanball changed the title release: v1.263.0 - installable web app (PWA) support + minor-and-patch dependencies release: v1.264.0 - installable web app (PWA) support + minor-and-patch dependencies Oct 27, 2026
@ivanball
ivanball merged commit 879a7a7 into main Oct 27, 2026
17 checks passed
@cryslebron-cmd
cryslebron-cmd deleted the dependabot/nuget/minor-and-patch-25379c73e8 branch October 28, 2026 00:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant