Skip to content

Bump the entity-framework group with 3 updates - #220

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/entity-framework-34e6504add
Open

Bump the entity-framework group with 3 updates#220
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/entity-framework-34e6504add

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor

Updated dotnet-ef from 10.0.10 to 10.0.11.

Release notes

Sourced from dotnet-ef's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps dotnet-ef from 10.0.10 to 10.0.11
Bumps Microsoft.EntityFrameworkCore.Design from 10.0.10 to 10.0.11
Bumps Microsoft.EntityFrameworkCore.InMemory from 10.0.10 to 10.0.11

---
updated-dependencies:
- dependency-name: dotnet-ef
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: entity-framework
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: entity-framework
- dependency-name: Microsoft.EntityFrameworkCore.InMemory
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: entity-framework
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Aug 12, 2026
@dependabot
dependabot Bot requested a review from dorssel as a code owner August 12, 2026 13:05
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .net code labels Aug 12, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 39 package(s) with unknown licenses.
See the Details below.

License Issues

Example/Example.csproj

PackageVersionLicenseIssue Type
Microsoft.EntityFrameworkCore10.0.11NullUnknown License
Microsoft.EntityFrameworkCore.Abstractions10.0.11NullUnknown License
Microsoft.EntityFrameworkCore.Analyzers10.0.11NullUnknown License
Microsoft.EntityFrameworkCore.Design10.0.11NullUnknown License
Microsoft.EntityFrameworkCore.Relational10.0.11NullUnknown License
Microsoft.Extensions.Caching.Abstractions10.0.11NullUnknown License
Microsoft.Extensions.Caching.Memory10.0.11NullUnknown License
Microsoft.Extensions.Configuration.Abstractions10.0.11NullUnknown License
Microsoft.Extensions.DependencyInjection10.0.11NullUnknown License
Microsoft.Extensions.DependencyInjection.Abstractions10.0.11NullUnknown License
Microsoft.Extensions.DependencyModel10.0.11NullUnknown License
Microsoft.Extensions.Logging10.0.11NullUnknown License
Microsoft.Extensions.Logging.Abstractions10.0.11NullUnknown License
Microsoft.Extensions.Options10.0.11NullUnknown License
Microsoft.Extensions.Primitives10.0.11NullUnknown License

FuzzingTests/FuzzingTests.csproj

PackageVersionLicenseIssue Type
Microsoft.EntityFrameworkCore10.0.11NullUnknown License
Microsoft.EntityFrameworkCore.Abstractions10.0.11NullUnknown License
Microsoft.EntityFrameworkCore.Analyzers10.0.11NullUnknown License
Microsoft.EntityFrameworkCore.InMemory10.0.11NullUnknown License
Microsoft.Extensions.Caching.Abstractions10.0.11NullUnknown License
Microsoft.Extensions.Caching.Memory10.0.11NullUnknown License
Microsoft.Extensions.DependencyInjection10.0.11NullUnknown License
Microsoft.Extensions.DependencyInjection.Abstractions10.0.11NullUnknown License
Microsoft.Extensions.Logging10.0.11NullUnknown License
Microsoft.Extensions.Logging.Abstractions10.0.11NullUnknown License
Microsoft.Extensions.Options10.0.11NullUnknown License
Microsoft.Extensions.Primitives10.0.11NullUnknown License

UnitTests/UnitTests.csproj

PackageVersionLicenseIssue Type
Microsoft.EntityFrameworkCore10.0.11NullUnknown License
Microsoft.EntityFrameworkCore.Abstractions10.0.11NullUnknown License
Microsoft.EntityFrameworkCore.Analyzers10.0.11NullUnknown License
Microsoft.EntityFrameworkCore.InMemory10.0.11NullUnknown License
Microsoft.Extensions.Caching.Abstractions10.0.11NullUnknown License
Microsoft.Extensions.Caching.Memory10.0.11NullUnknown License
Microsoft.Extensions.DependencyInjection10.0.11NullUnknown License
Microsoft.Extensions.DependencyInjection.Abstractions10.0.11NullUnknown License
Microsoft.Extensions.Logging10.0.11NullUnknown License
Microsoft.Extensions.Logging.Abstractions10.0.11NullUnknown License
Microsoft.Extensions.Options10.0.11NullUnknown License
Microsoft.Extensions.Primitives10.0.11NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
nuget/Microsoft.EntityFrameworkCore 10.0.11 UnknownUnknown
nuget/Microsoft.EntityFrameworkCore.Abstractions 10.0.11 UnknownUnknown
nuget/Microsoft.EntityFrameworkCore.Analyzers 10.0.11 UnknownUnknown
nuget/Microsoft.EntityFrameworkCore.Design 10.0.11 UnknownUnknown
nuget/Microsoft.EntityFrameworkCore.Relational 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.Caching.Abstractions 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.Caching.Memory 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.Configuration.Abstractions 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.DependencyInjection 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.DependencyInjection.Abstractions 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.DependencyModel 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.Logging 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.Logging.Abstractions 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.Options 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.Primitives 10.0.11 UnknownUnknown
nuget/Newtonsoft.Json 13.0.4 🟢 4.9
Details
CheckScoreReason
Maintained⚠️ 20 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 2
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 4Found 13/30 approved changesets -- score normalized to 4
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST🟢 8SAST tool detected but not run on all commits
nuget/Microsoft.EntityFrameworkCore 10.0.11 UnknownUnknown
nuget/Microsoft.EntityFrameworkCore.Abstractions 10.0.11 UnknownUnknown
nuget/Microsoft.EntityFrameworkCore.Analyzers 10.0.11 UnknownUnknown
nuget/Microsoft.EntityFrameworkCore.InMemory 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.Caching.Abstractions 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.Caching.Memory 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.DependencyInjection 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.DependencyInjection.Abstractions 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.Logging 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.Logging.Abstractions 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.Options 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.Primitives 10.0.11 UnknownUnknown
nuget/Microsoft.EntityFrameworkCore 10.0.11 UnknownUnknown
nuget/Microsoft.EntityFrameworkCore.Abstractions 10.0.11 UnknownUnknown
nuget/Microsoft.EntityFrameworkCore.Analyzers 10.0.11 UnknownUnknown
nuget/Microsoft.EntityFrameworkCore.InMemory 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.Caching.Abstractions 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.Caching.Memory 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.DependencyInjection 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.DependencyInjection.Abstractions 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.Logging 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.Logging.Abstractions 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.Options 10.0.11 UnknownUnknown
nuget/Microsoft.Extensions.Primitives 10.0.11 UnknownUnknown

Scanned Files

  • Example/Example.csproj
  • FuzzingTests/FuzzingTests.csproj
  • UnitTests/UnitTests.csproj

@codecov

codecov Bot commented Aug 12, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (ef0e4ff) to head (9ad9bd8).
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff            @@
##              main      #220   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            4         4           
  Lines           81        81           
  Branches        14        14           
=========================================
  Hits            81        81           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

@github-actions

Copy link
Copy Markdown
Contributor

MegaLinter analysis: Success

Descriptor Linter Files Fixed Errors Max errors Warnings Elapsed time
✅ ACTION actionlint 8 0 0 0.12s
✅ ACTION zizmor 8 0 0 3.88s
✅ EDITORCONFIG editorconfig-checker 61 0 0 0.08s
✅ JSON jsonlint 3 0 0 0.11s
✅ JSON prettier 3 0 0 0.39s
✅ JSON v8r 3 0 0 3.72s
✅ MARKDOWN markdownlint 2 0 0 0.58s
✅ MARKDOWN markdown-table-formatter 2 0 0 0.23s
✅ REPOSITORY betterleaks yes no no 0.56s
✅ REPOSITORY checkov yes no no 20.59s
✅ REPOSITORY git_diff yes no no 0.01s
✅ REPOSITORY grype yes no no 60.51s
✅ REPOSITORY osv-scanner yes no no 0.66s
✅ REPOSITORY secretlint yes no no 1.51s
✅ REPOSITORY syft yes no no 1.79s
✅ REPOSITORY trivy-sbom yes no no 2.04s
✅ REPOSITORY trufflehog yes no no 5.16s
✅ XML xmllint 6 0 0 0.06s
✅ YAML prettier 13 0 0 0.72s
✅ YAML v8r 13 0 0 11.08s
✅ YAML yamllint 13 0 0 0.76s

See detailed reports in MegaLinter artifacts

MegaLinter is provided by OX Security
Show us your support by starring ⭐ the repository

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants