Repository navigation
Bump the nuget-minor-and-patch group with 11 updates - #349
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps AutoMapper from 16.1.1 to 16.3.0 Bumps dotnet-outdated-tool from 4.6.9 to 4.9.0 Bumps EntityFramework from 6.5.1 to 6.5.2 Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.9 to 10.0.14 Bumps Microsoft.EntityFrameworkCore.InMemory from 10.0.3 to 10.0.14 Bumps Microsoft.EntityFrameworkCore.Sqlite from 10.0.2 to 10.0.14 Bumps Microsoft.EntityFrameworkCore.SqlServer from 10.0.2 to 10.0.14 Bumps Microsoft.EntityFrameworkCore.Tools from 10.0.2 to 10.0.14 Bumps Microsoft.NET.Test.Sdk from 18.0.1 to 18.11.0 Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.0 to 10.0.3 Bumps Swashbuckle.AspNetCore from 10.1.2 to 10.3.1 --- updated-dependencies: - dependency-name: AutoMapper dependency-version: 16.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: dotnet-outdated-tool dependency-version: 4.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: EntityFramework dependency-version: 6.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.EntityFrameworkCore.InMemory dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.EntityFrameworkCore.InMemory dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.EntityFrameworkCore.Sqlite dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.EntityFrameworkCore.SqlServer dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.EntityFrameworkCore.Tools dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL dependency-version: 10.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Swashbuckle.AspNetCore dependency-version: 10.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
This was referenced Nov 10, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated AutoMapper from 16.1.1 to 16.3.0.
Release notes
Sourced from AutoMapper's releases.
16.3.0
Security
This release fixes two denial-of-service vulnerabilities. In both, deeply nested input could bypass
MaxDepthand exhaust the stack. The resultingStackOverflowExceptioncan't be caught, so it ends the process. Please upgrade if your application maps untrusted, deeply nested data.MaxDepthwasn't enforced when mapping through constructor parameters, including positional records. Thanks to @mcambria for the report.MaxDepth: derived maps,objectand interface members, dictionary and dynamic sources, and recursive type converters.CVE IDs have been requested and will be added here once they're assigned.
Behavior changes
MaxDepthcan't limit now throws a catchableInsufficientExecutionStackExceptioninstead of crashing the process.Include/IncludeBase) now inheritMaxDepthand get the default limit of 64 for self-referential maps. If your polymorphic graphs legitimately go deeper, setMaxDepthexplicitly.ConditiononForAllMembers, or any condition whose member parameter isobjector a base type, now receives the source member value instead of the value converted to the destination type, when those types differ. This matches the documented contract. Anullin a nullable source member is now seen asnullrather than0orfalse(#4655).Other highlights
Fixed
Context.Items are only available...exceptions withMaxDepth, which depended on registration or warmup order (#4651)License keys get a 30-day renewal grace period, which logs a warning instead of an error (#4667)
Clearer license validation messages for malformed keys, client platforms and IdentityModel version mismatches (#4670)
Whitespace is stripped from license keys (#4663), and license validation is isolated from the host app's
CryptoProviderFactory(#4674)What's Changed
New Contributors
Full Changelog: LuckyPennySoftware/AutoMapper@v16.2.0...v16.3.0
16.2.0
What's Changed
New Contributors
Full Changelog: LuckyPennySoftware/AutoMapper@v15.1.1...v16.2.0
Commits viewable in compare view.
Updated dotnet-outdated-tool from 4.6.9 to 4.9.0.
Release notes
Sourced from dotnet-outdated-tool's releases.
4.9.0
What's Changed
New Contributors
Full Changelog: dotnet-outdated/dotnet-outdated@v4.8.1...v4.9.0
4.8.1
What's Changed
#:sdksupport for .NET file-based apps by @devlead in Add#:sdksupport for .NET file-based apps dotnet-outdated/dotnet-outdated#755New Contributors
#:sdksupport for .NET file-based apps dotnet-outdated/dotnet-outdated#755Full Changelog: dotnet-outdated/dotnet-outdated@v4.8.0...v4.8.1
4.8.0
What's Changed
New Contributors
Full Changelog: dotnet-outdated/dotnet-outdated@v4.7.2...v4.8.0
4.7.2
What's Changed
New Contributors
Full Changelog: dotnet-outdated/dotnet-outdated@v4.7.1...v4.7.2
4.7.1
What's Changed
New Contributors
Full Changelog: dotnet-outdated/dotnet-outdated@v4.7.0...v4.7.1
4.7.0
What's Changed
New Contributors
Full Changelog: dotnet-outdated/dotnet-outdated@v4.6.9...v4.7.0
Commits viewable in compare view.
Updated EntityFramework from 6.5.1 to 6.5.2.
Release notes
Sourced from EntityFramework's releases.
6.5.2
What's Changed
Full Changelog: dotnet/ef6@v6.5.1...v6.5.2
Commits viewable in compare view.
Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.9 to 10.0.14.
Release notes
Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.3 to 10.0.14.
Release notes
Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.EntityFrameworkCore.Sqlite from 10.0.2 to 10.0.14.
Release notes
Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.EntityFrameworkCore.SqlServer from 10.0.2 to 10.0.14.
Release notes
Sourced from Microsoft.EntityFrameworkCore.SqlServer's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.EntityFrameworkCore.Tools from 10.0.2 to 10.0.14.
Release notes
Sourced from Microsoft.EntityFrameworkCore.Tools's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.NET.Test.Sdk from 18.0.1 to 18.11.0.
Release notes
Sourced from Microsoft.NET.Test.Sdk's releases.
18.11.0
What's Changed
New Contributors
Full Changelog: microsoft/vstest@v18.10.1...v18.11.0
18.10.1
What's Changed
Full Changelog: microsoft/vstest@v18.10.0...v18.10.1
18.10.0
What's Changed
vstest.consoleand datacollector by @nohwnd in Run Microsoft.Testing.Platform test apps under vstest.console and datacollector microsoft/vstest#16201Full Changelog: microsoft/vstest@v18.9.0...v18.10.0
18.9.0
What's Changed
New Contributors
Full Changelog: microsoft/vstest@v18.8.0...v18.9.0
18.8.1
What's Changed
Full Changelog: microsoft/vstest@v18.8.0...v18.8.1
18.8.0
What's Changed
Full Changelog: microsoft/vstest@v18.7.0...v18.8.0
18.7.0
What's Changed
New Contributors
Full Changelog: microsoft/vstest@v18.6.0...v18.7.0
18.6.0
What's Changed
Changes to tests and infra
... (truncated)
18.5.1
What's Changed
Full Changelog: microsoft/vstest@v18.5.0...v18.5.1
18.5.0
What's Changed
Full Changelog: microsoft/vstest@v18.4.0...v18.5.0
18.4.0
What's Changed
Add LoongArch64 support by @stdmnpkg in Add LoongArch64 support microsoft/vstest#15359
Refactor Condition evaluation by @Youssef1313 in Refactor Condition evaluation microsoft/vstest#15357
Adding info on extensions points part 1 by @nohwnd in Adding info on extensions points part 1 microsoft/vstest#15360
Add option to ask for uploading code QL before the standard window ends by @nohwnd in Add option to ask for uploading code QL before the standard window ends microsoft/vstest#15373
Update runtime versions by @nohwnd in Update runtime versions microsoft/vstest#15372
Fix .NET 10 regression for traits by @Youssef1313 in Fix .NET 10 regression for traits microsoft/vstest#15370
Update target frameworks to net10.0 and net11.0 by @dotnet-maestro[bot] in Update target frameworks to net10.0 and net11.0 microsoft/vstest#15349
Fix names in pipeline matrix so we don't have to align them by @nohwnd in Fix names in pipeline matrix so we don't have to align them microsoft/vstest#15365
Update SECURITY.md by @Youssef1313 in Update SECURITY.md microsoft/vstest#15342
New Contributors
Full Changelog: microsoft/vstest@v18.3.0...v18.4.0
18.3.0
What's Changed
Internal fixes and updates
New Contributors
Commits viewable in compare view.
Updated Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.0 to 10.0.3.
Release notes
Sourced from Npgsql.EntityFrameworkCore.PostgreSQL's releases.
10.0.3
What's Changed
Full Changelog: npgsql/efcore.pg@v10.0.2...v10.0.3
10.0.2
Milestone issue
What's Changed
bytea.Any()aslength > 0by @georg-jung in Translatebytea.Any()aslength > 0npgsql/efcore.pg#3817Full Changelog: npgsql/efcore.pg@v10.0.1...v10.0.2
Commits viewable in compare view.
Updated Swashbuckle.AspNetCore from 10.1.2 to 10.3.1.
Release notes
Sourced from Swashbuckle.AspNetCore's releases.
10.3.1
What's Changed
AmbiguousMatchExceptionfor[FromQuery]by @SENESO in Fix AmbiguousMatchException for [FromQuery] domaindrivendev/Swashbuckle.AspNetCore#4209ISerializerDataContractResolverby @DevKaurav-14 in Avoid deadlock when a schema filter depends on ISerializerDataContractResolver domaindrivendev/Swashbuckle.AspNetCore#4210Deprecations
New Contributors
Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.3.0...v10.3.1
10.3.0
What's Changed
anyOf,allOf,oneOfortype = nullby @ldeluigi in Change nullability handling for schemas with anyOf, allOf, oneOf or type = null domaindrivendev/Swashbuckle.AspNetCore#3976AddServeracross multiple documents by @RaphaelFakhri in Add coverage for AddServer across multiple documents domaindrivendev/Swashbuckle.AspNetCore#4115[EnumMember]by @RaphaelFakhri in Document that System.Text.Json ignores [EnumMember] domaindrivendev/Swashbuckle.AspNetCore#4127ConfigObject.AdditionalItemsby @RaphaelFakhri in Fix #3153: serialize custom values in the UI ConfigObject AdditionalItems domaindrivendev/Swashbuckle.AspNetCore#4132New Contributors
Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.3...v10.3.0
10.2.3
What's Changed
Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.2...v10.2.3
10.2.2
What's Changed
SOURCE_DATE_EPOCHby @martincostello in Set SOURCE_DATE_EPOCH domaindrivendev/Swashbuckle.AspNetCore#3997InvalidOperationExceptionif no route matches by @martincostello in Fix InvalidOperationException if no route matches domaindrivendev/Swashbuckle.AspNetCore#3999[MinLength]/[MaxLength]on dictionary properties tominProperties/maxPropertiesby @KitKeen in Map [MinLength]/[MaxLength] on dictionary properties to minProperties / maxProperties domaindrivendev/Swashbuckle.AspNetCore#3922ExposeSwaggerDocumentUrlsRoutebehaviour by @martincostello in Fix ExposeSwaggerDocumentUrlsRoute behaviour domaindrivendev/Swashbuckle.AspNetCore#4000NUGET_API_KEYby @martincostello in Use NUGET_API_KEY domaindrivendev/Swashbuckle.AspNetCore#4006New Contributors
Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.1...v10.2.2
10.2.1
What's Changed
Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.0...v10.2.1
10.2.0
What's Changed
MapSwaggerUIandMapReDocto support endpoint routing by @Strepto in Add MapSwaggerUI and MapReDoc to support endpoint routing domaindrivendev/Swashbuckle.AspNetCore#3822HEADrequests by @snebjorn in Support HEAD requests domaindrivendev/Swashbuckle.AspNetCore#3887IAsyncSwaggerProviderin CLItofilecommand by @bt-Knodel in Use IAsyncSwaggerProvider in CLI tofile command domaindrivendev/Swashbuckle.AspNetCore#3910New Contributors
Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.7...v10.2.0
10.1.7
What's Changed
New Contributors
Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.6...v10.1.7
10.1.6
What's Changed
New Contributors
Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.5...v10.1.6
10.1.5
What's Changed
Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.4...v10.1.5
10.1.4
What's Changed
Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.3...v10.1.4
10.1.3
What's Changed
"null"by @jgarciadelanoceda in Fix null examples being represented as the string null domaindrivendev/Swashbuckle.AspNetCore#3788Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.2...v10.1.3
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions