Bump the backend-dependencies group with 20 updates#109
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
Bump the backend-dependencies group with 20 updates#109dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps Aspire.Hosting.AppHost from 13.1.2 to 13.2.0 Bumps Aspire.Hosting.PostgreSQL from 13.1.2 to 13.2.0 Bumps coverlet.collector from 8.0.0 to 8.0.1 Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.3 to 10.0.5 Bumps Microsoft.AspNetCore.OpenApi from 10.0.3 to 10.0.5 Bumps Microsoft.CodeAnalysis.CSharp from 5.0.0 to 5.3.0 Bumps Microsoft.CodeAnalysis.CSharp.Workspaces from 5.0.0 to 5.3.0 Bumps Microsoft.CodeAnalysis.Features from 5.0.0 to 5.3.0 Bumps Microsoft.EntityFrameworkCore from 10.0.3 to 10.0.5 Bumps Microsoft.EntityFrameworkCore.Relational from 10.0.3 to 10.0.5 Bumps Microsoft.EntityFrameworkCore.Tools from 10.0.3 to 10.0.5 Bumps Microsoft.Extensions.Http.Resilience from 10.3.0 to 10.4.0 Bumps Microsoft.Extensions.ServiceDiscovery from 10.3.0 to 10.4.0 Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.0 to 10.0.1 Bumps Npgsql.OpenTelemetry from 10.0.1 to 10.0.2 Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.15.0 to 1.15.1 Bumps OpenTelemetry.Extensions.Hosting from 1.15.0 to 1.15.1 Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.15.0 to 1.15.1 Bumps Scalar.AspNetCore from 2.13.1 to 2.13.17 Bumps SonarAnalyzer.CSharp from 10.20.0.135146 to 10.22.0.136894 --- updated-dependencies: - dependency-name: Aspire.Hosting.AppHost dependency-version: 13.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: Aspire.Hosting.PostgreSQL dependency-version: 13.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: coverlet.collector dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Microsoft.CodeAnalysis.CSharp dependency-version: 5.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: Microsoft.CodeAnalysis.CSharp.Workspaces dependency-version: 5.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: Microsoft.CodeAnalysis.Features dependency-version: 5.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Microsoft.EntityFrameworkCore.Relational dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Microsoft.EntityFrameworkCore.Tools dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Microsoft.Extensions.Http.Resilience dependency-version: 10.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: Microsoft.Extensions.ServiceDiscovery dependency-version: 10.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL dependency-version: 10.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Npgsql.OpenTelemetry dependency-version: 10.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Scalar.AspNetCore dependency-version: 2.13.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: SonarAnalyzer.CSharp dependency-version: 10.22.0.136894 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated Aspire.Hosting.AppHost from 13.1.2 to 13.2.0.
Release notes
Sourced from Aspire.Hosting.AppHost's releases.
13.2.0
Aspire 13.2
Aspire 13.2 brings major CLI enhancements, a new TypeScript AppHost (preview), dashboard data export/import, Microsoft Foundry integration, and multi-language improvements — all focused on making local development more streamlined for developers and AI coding agents
alike.
Highlights
and aspire agent (renamed from aspire mcp) for AI agent integration.
Notable breaking changes include service discovery env vars now using endpoint scheme instead of name, aspire.config.json replacing split config files, AIFoundry → Foundry rename, WithSecretBuildArg → WithBuildSecret, and updated default Azure credential behavior.
See the full list of breaking changes.
📖 Learn more
For the full details on everything in this release, check out the What's new in Aspire 13.2 documentation.
Thank you to all the community contributors who helped make this release happen! 💜
13.1.3
What's Changed
Full Changelog: microsoft/aspire@v13.1.2...v13.1.3
Commits viewable in compare view.
Updated Aspire.Hosting.PostgreSQL from 13.1.2 to 13.2.0.
Release notes
Sourced from Aspire.Hosting.PostgreSQL's releases.
13.2.0
Aspire 13.2
Aspire 13.2 brings major CLI enhancements, a new TypeScript AppHost (preview), dashboard data export/import, Microsoft Foundry integration, and multi-language improvements — all focused on making local development more streamlined for developers and AI coding agents
alike.
Highlights
and aspire agent (renamed from aspire mcp) for AI agent integration.
Notable breaking changes include service discovery env vars now using endpoint scheme instead of name, aspire.config.json replacing split config files, AIFoundry → Foundry rename, WithSecretBuildArg → WithBuildSecret, and updated default Azure credential behavior.
See the full list of breaking changes.
📖 Learn more
For the full details on everything in this release, check out the What's new in Aspire 13.2 documentation.
Thank you to all the community contributors who helped make this release happen! 💜
13.1.3
What's Changed
Full Changelog: microsoft/aspire@v13.1.2...v13.1.3
Commits viewable in compare view.
Updated coverlet.collector from 8.0.0 to 8.0.1.
Release notes
Sourced from coverlet.collector's releases.
8.0.1
Fixed
Improvements
Diff between 8.0.0 and 8.0.1
Commits viewable in compare view.
Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.3 to 10.0.5.
Release notes
Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.AspNetCore.OpenApi from 10.0.3 to 10.0.5.
Release notes
Sourced from Microsoft.AspNetCore.OpenApi's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.CodeAnalysis.CSharp from 5.0.0 to 5.3.0.
Release notes
Sourced from Microsoft.CodeAnalysis.CSharp's releases.
5.0.4
Release
5.0.2
Release Notes
Install Instructions
Repos
5.0.1
Release Notes
Install Instructions
Repo
Commits viewable in compare view.
Updated Microsoft.CodeAnalysis.CSharp.Workspaces from 5.0.0 to 5.3.0.
Updated Microsoft.CodeAnalysis.Features from 5.0.0 to 5.3.0.
Release notes
Sourced from Microsoft.CodeAnalysis.Features's releases.
5.0.4
Release
5.0.2
Release Notes
Install Instructions
Repos
5.0.1
Release Notes
Install Instructions
Repo
Commits viewable in compare view.
Updated Microsoft.EntityFrameworkCore from 10.0.3 to 10.0.5.
Release notes
Sourced from Microsoft.EntityFrameworkCore's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.EntityFrameworkCore.Relational from 10.0.3 to 10.0.5.
Release notes
Sourced from Microsoft.EntityFrameworkCore.Relational's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.EntityFrameworkCore.Tools from 10.0.3 to 10.0.5.
Release notes
Sourced from Microsoft.EntityFrameworkCore.Tools's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.Http.Resilience from 10.3.0 to 10.4.0.
Release notes
Sourced from Microsoft.Extensions.Http.Resilience's releases.
10.4.0
This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring.
Experimental API Changes
Now Stable
MEAI001) #7299FakeLogCollector.GetLogsAsync(CancellationToken)is now stable (previouslyEXTEXP0003) #7332New Experimental APIs
AddExtendedHttpClientLoggingoverloads withwrapHandlersPipelineparameter (EXTEXP0013) #7231Removed Experimental APIs
MEAI001) #7353What's Changed
AI
Telemetry and Observability
HTTP Resilience and Diagnostics
... (truncated)
Commits viewable in compare view.
Updated Microsoft.Extensions.ServiceDiscovery from 10.3.0 to 10.4.0.
Release notes
Sourced from Microsoft.Extensions.ServiceDiscovery's releases.
10.4.0
This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring.
Experimental API Changes
Now Stable
MEAI001) #7299FakeLogCollector.GetLogsAsync(CancellationToken)is now stable (previouslyEXTEXP0003) #7332New Experimental APIs
AddExtendedHttpClientLoggingoverloads withwrapHandlersPipelineparameter (EXTEXP0013) #7231Removed Experimental APIs
MEAI001) #7353What's Changed
AI
Telemetry and Observability
HTTP Resilience and Diagnostics
... (truncated)
Commits viewable in compare view.
Updated Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.0 to 10.0.1.
Release notes
Sourced from Npgsql.EntityFrameworkCore.PostgreSQL's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Npgsql.OpenTelemetry from 10.0.1 to 10.0.2.
Release notes
Sourced from Npgsql.OpenTelemetry's releases.
10.0.2
v10.0.2 contains several minor bug fixes.
Milestone issues
Full Changelog: npgsql/npgsql@v10.0.1...v10.0.2
Commits viewable in compare view.
Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.15.0 to 1.15.1.
Release notes
Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.
1.15.1
For highlights and announcements pertaining to this release see: Release Notes > 1.15.1.
The following changes are from the previous release 1.15.0.
NuGet: OpenTelemetry v1.15.1
Fixed
Tracer.StartSpan()leaving the new span asActivity.Currentwhenthe previous activity was stopped by another thread during span creation.
(#6257)
Fixed
OverflowExceptioninTraceIdRatioBasedSamplerwhen trace ID bytesproduced
long.MinValue.([#6928])
Fixed precision issues when using
Histogram<float>with customHistogramBucketBoundaries.(#6866)
Fixed a thread-safety issue in
LogRecordSharedPool.Rent().(#6833)
Fixed observable instruments (ObservableCounter, ObservableUpDownCounter,
ObservableGauge) continuing to export stale data points after a callback
stops reporting a series.
(#5950)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.15.1
specification,
which disallows empty baggage names and treats baggage names and values as case
sensitive.
(#6931)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.15.1
No notable changes.
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.15.1
No notable changes.
See CHANGELOG for details.
... (truncated)
1.15.1-beta.1
The following changes are from the previous release 1.15.0-beta.1.
NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.15.1-beta.1
1.15.1.(#7010)
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.15.1-beta.1
1.15.1.(#7010)
See CHANGELOG for details.
NuGet: OpenTelemetry.Shims.OpenTracing v1.15.1-beta.1
This package is deprecated and it will stop receiving any updates in
March 2027. Use the OpenTelemetry API and SDK directly instead of the OpenTracing
shims.
(#6976)
Updated OpenTelemetry core component version(s) to
1.15.1.(#7010)
See CHANGELOG for details.
Commits viewable in compare view.
Updated OpenTelemetry.Extensions.Hosting from 1.15.0 to 1.15.1.
Release notes
Sourced from OpenTelemetry.Extensions.Hosting's releases.
1.15.1
For highlights and announcements pertaining to this release see: Release Notes > 1.15.1.
The following changes are from the previous release 1.15.0.
NuGet: OpenTelemetry v1.15.1
Fixed
Tracer.StartSpan()leaving the new span asActivity.Currentwhenthe previous activity was stopped by another thread during span creation.
(#6257)
Fixed
OverflowExceptioninTraceIdRatioBasedSamplerwhen trace ID bytesproduced
long.MinValue.([#6928])
Fixed precision issues when using
Histogram<float>with customHistogramBucketBoundaries.(#6866)
Fixed a thread-safety issue in
LogRecordSharedPool.Rent().(#6833)
Fixed observable instruments (ObservableCounter, ObservableUpDownCounter,
ObservableGauge) continuing to export stale data points after a callback
stops reporting a series.
(#5950)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.15.1
specification,
which disallows empty baggage names and treats baggage names and values as case
sensitive.
(#6931)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.15.1
No notable changes.
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.15.1
No notable changes.
See CHANGELOG for details.
... (truncated)
1.15.1-beta.1
The following changes are from the previous release 1.15.0-beta.1.
NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.15.1-beta.1
1.15.1.(#7010)
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.15.1-beta.1
1.15.1.(#7010)
See CHANGELOG for details.
NuGet: OpenTelemetry.Shims.OpenTracing v1.15.1-beta.1
This package is deprecated and it will stop receiving any updates in
March 2027. Use the OpenTelemetry API and SDK directly instead of the OpenTracing
shims.
(#6976)
Updated OpenTelemetry core component version(s) to
1.15.1.(#7010)
See CHANGELOG for details.
Commits viewable in compare view.
Updated OpenTelemetry.Instrumentation.AspNetCore from 1.15.0 to 1.15.1.
Release notes
Sourced from OpenTelemetry.Instrumentation.AspNetCore's releases.
1.15.1
NuGet: OpenTelemetry.Instrumentation.AspNet v1.15.1
No notable changes.
See CHANGELOG for details.
NuGet: OpenTelemetry.Instrumentation.AspNet.TelemetryHttpModule v1.15.1
Activityis created.(#3820)
See CHANGELOG for details.
Commits viewable in compare view.
Updated Scalar.AspNetCore from 2.13.1 to 2.13.17.
Release notes
Sourced from Scalar.AspNetCore's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated SonarAnalyzer.CSharp from 10.20.0.135146 to 10.22.0.136894.
Release notes
Sourced from SonarAnalyzer.CSharp's releases.
10.22
Hello everyone,
This release brings 4 new rules to help developers transition to C# 14, and a bunch of false positive fixes.
New rules
False Positive
Bugs
Other
10.21
### Bug
Feature
False Positive
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions