fix(deps): batch the open Dependabot updates (2026-09) - #16
Merged
Merged
Conversation
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 to ed142fd0673e97e23eac54620cfb913e5ce36c25. - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@a9c7b0f...ed142fd) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-version: ed142fd0673e97e23eac54620cfb913e5ce36c25 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.2.0 to 4.3.0. - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@bb05f3f...37fe631) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps Microsoft.AspNetCore.OpenApi from 10.0.5 to 10.0.11 Bumps Microsoft.EntityFrameworkCore from 10.0.5 to 10.0.11 Bumps Microsoft.EntityFrameworkCore.InMemory from 10.0.5 to 10.0.11 Bumps Microsoft.EntityFrameworkCore.Relational from 10.0.5 to 10.0.11 Bumps Microsoft.EntityFrameworkCore.Sqlite from 10.0.5 to 10.0.11 Bumps Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.5 to 10.0.11 Bumps Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 10.0.5 to 10.0.11 Bumps Microsoft.Extensions.Hosting.WindowsServices from 10.0.5 to 10.0.11 Bumps Microsoft.Graph from 5.103.0 to 6.5.0 Bumps Microsoft.Identity.Client from 4.83.1 to 4.88.0 Bumps Microsoft.Kiota.Abstractions from 1.22.0 to 2.1.0 Bumps Microsoft.NET.Test.Sdk from 17.12.0 to 18.9.0 Bumps Microsoft.OpenApi from 2.11.0 to 2.12.2 Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.1 to 10.0.3 Bumps System.Diagnostics.PerformanceCounter from 10.0.5 to 10.0.11 --- updated-dependencies: - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet - dependency-name: Microsoft.EntityFrameworkCore.InMemory dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet - dependency-name: Microsoft.EntityFrameworkCore.Relational dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet - dependency-name: Microsoft.EntityFrameworkCore.Sqlite dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet - dependency-name: Microsoft.Extensions.Caching.StackExchangeRedis dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet - dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet - dependency-name: Microsoft.Extensions.Hosting.WindowsServices dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet - dependency-name: Microsoft.Graph dependency-version: 6.5.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dotnet - dependency-name: Microsoft.Identity.Client dependency-version: 4.88.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet - dependency-name: Microsoft.Kiota.Abstractions dependency-version: 2.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dotnet - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.9.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dotnet - dependency-name: Microsoft.OpenApi dependency-version: 2.12.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet - dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL dependency-version: 10.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet - dependency-name: System.Diagnostics.PerformanceCounter dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet ... Signed-off-by: dependabot[bot] <support@github.com>
--- updated-dependencies: - dependency-name: AWSSDK.S3 dependency-version: 4.0.102.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
--- updated-dependencies: - dependency-name: Azure.Storage.Blobs dependency-version: 12.29.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
--- updated-dependencies: - dependency-name: BCrypt.Net-Next dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Pomelo.EntityFrameworkCore.MySql has no release for EF Core 10, so the mysql leg of test-db-providers fails with a MissingMethodException by design until upstream ships one. The allowance was a job-level continue-on-error, which only spares the workflow run's conclusion - the job's own check still reported failure, so every pull request (all seven open Dependabot PRs) showed a red mysql check. The allowance now sits on the /healthz step, the app log is still uploaded when that step fails, and sqlite/postgresql keep their real failure signal.
…curity/trivy-action-ed142fd0673e97e23eac54620cfb913e5ce36c25' into deps/batch-2026-09
…/setup-buildx-action-4.3.0' into deps/batch-2026-09
…me.Application/dotnet-591b604216' into deps/batch-2026-09
…me.Application/AWSSDK.S3-4.0.102.4' into deps/batch-2026-09
…me.Application/Azure.Storage.Blobs-12.29.2' into deps/batch-2026-09 # Conflicts: # LagersystemLVHome.Application/LagersystemLVHome.Application.csproj
…me.Application/BCrypt.Net-Next-4.2.0' into deps/batch-2026-09
This was referenced Sep 4, 2026
|
🎉 This PR is included in version 1.3.5 🎉 The release is available on GitHub release Your semantic-release bot 📦🚀 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Batches the six open Dependabot PRs that only failed CI because of the MySQL provider job (fixed in #15, this branch is stacked on it - merge #15 first or this PR carries that change too).
Included, superseding: #8 (trivy-action), #9 (setup-buildx-action 4.3.0), #10 (dotnet group, 15 updates), #11 (AWSSDK.S3 4.0.102.4), #12 (Azure.Storage.Blobs 12.29.2), #13 (BCrypt.Net-Next 4.2.0).
Majors inside the dotnet group, covered by the build + unit tests (both already green on #10): Microsoft.Graph 5.103 -> 6.5, Microsoft.Kiota.Abstractions 1.22 -> 2.1 (still pinned explicitly above Graph's transitive for GHSA-7j59-v9qr-6fq9), Microsoft.NET.Test.Sdk 17.12 -> 18.9.
Not included: #14 (Blazor-ApexCharts 6 -> 7) stays open as a separate decision.