Skip to content

chore(deps): Bump the dotnet-minor-and-patch group with 19 updates#74

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/nuget/dotnet-minor-and-patch-ec3a9eebc5
Closed

chore(deps): Bump the dotnet-minor-and-patch group with 19 updates#74
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/nuget/dotnet-minor-and-patch-ec3a9eebc5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 23, 2026

Copy link
Copy Markdown
Contributor

Updated AWSSDK.Extensions.NETCore.Setup from 4.0.3.37 to 4.0.4.1.

Release notes

Sourced from AWSSDK.Extensions.NETCore.Setup's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated AWSSDK.S3 from 4.0.23 to 4.0.23.4.

Release notes

Sourced from AWSSDK.S3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated BCrypt.Net-Next from 4.0.3 to 4.2.0.

Release notes

Sourced from BCrypt.Net-Next's releases.

4.2.0

Full Changelog: BcryptNet/bcrypt.net@v4.1.0...v4.2.0

4.1.0

What's Changed

New Contributors

Full Changelog: BcryptNet/bcrypt.net@4.0.3...v4.1.0

Commits viewable in compare view.

Updated Bogus from 35.6.1 to 35.6.5.

Release notes

Sourced from Bogus's releases.

35.6.5

CHANGE LOG

35.6.4

CHANGE LOG

35.6.3

CHANGE LOG

35.6.2

CHANGE LOG

Commits viewable in compare view.

Updated FluentValidation from 11.11.0 to 11.12.0.

Release notes

Sourced from FluentValidation's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated FluentValidation.DependencyInjectionExtensions from 11.11.0 to 11.12.0.

Release notes

Sourced from FluentValidation.DependencyInjectionExtensions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated MediatR from 12.4.1 to 12.5.0.

Release notes

Sourced from MediatR's releases.

12.5.0

What's Changed

New Contributors

Full Changelog: LuckyPennySoftware/MediatR@v12.4.1...v12.5.0

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 8.0.11 to 8.0.27.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

8.0.27

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.26...v8.0.27

8.0.26

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.25...v8.0.26

8.0.25

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.24...v8.0.25

8.0.24

Release

8.0.23

Release

What's Changed

https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs

8.0.22

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.21...v8.0.22

8.0.21

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.19...v8.0.20

8.0.18

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

  • Update dependencies from dotnet/arcade (#​61832)
    This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
    The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

  • Update branding to 8.0.17 (#​61830)
    The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

  • Merging internal commits for release/8.0 (#​61924)
    This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.


This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

8.0.13

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.11...v8.0.12

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Relational from 9.0.5 to 9.0.16.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Relational's releases.

9.0.16

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.15...v9.0.16

9.0.15

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.14...v9.0.15

9.0.14

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.13...v9.0.14

9.0.13

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.12...v9.0.13

9.0.12

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.11...v9.0.12

9.0.11

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.10...v9.0.11

9.0.10

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.9...v9.0.10

9.0.9

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.8...v9.0.9

9.0.7

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.6...v9.0.7

9.0.6

Bug Fixes

  • Cosmos/FTS: Improved FullTextScore Translation for Multiple Keywords
    The translation of FullTextScore in Cosmos Full-Text Search has been updated to use multiple keywords instead of a keyword array, addressing issues with search accuracy and query compatibility. This resolves #​35983 and ensures more reliable full-text search results.
    #​36000 by @​maumar

Dependency Updates

  • [release/8.0] Update dependencies from dotnet/arcade
    Updated the Arcade build infrastructure dependencies for the 8.0 release branch, bringing in the latest improvements and security fixes from the Arcade ecosystem.
    #​35930 by @​dotnet-maestro
  • [release/9.0] Update dependencies from dotnet/arcade
    Updated Arcade dependencies for the 9.0 release branch, ensuring the build system benefits from the latest tooling and reliability enhancements.
    #​36006 by @​dotnet-maestro
  • [release/8.0] Update dependencies from dotnet/arcade
    Another update to Arcade dependencies for the 8.0 branch, further aligning with upstream improvements and fixes.
    #​36085 by @​dotnet-maestro
  • [release/9.0] Update dependencies from dotnet/arcade
    Additional update to Arcade dependencies for the 9.0 branch, maintaining up-to-date build tooling and infrastructure.
    #​36065 by @​dotnet-maestro

Technical Improvements

  • Merging Internal Commits for release/8.0
    Integrated various internal commits into the 8.0 release branch, improving code quality, maintainability, and aligning with internal standards.
    #​35926 by @​vseanreesermsft
  • Merging Internal Commits for release/8.0
    Additional internal commits merged into the 8.0 branch, further enhancing stability and maintainability.
    #​36080 by @​vseanreesermsft
  • Merging Internal Commits for release/9.0
    Integrated internal improvements into the 9.0 branch, ensuring consistency and codebase health.
    #​36081 by @​vseanreesermsft

Infrastructure

  • Update Branding to 9.0.6
    Updated the product branding and version numbers to 9.0.6, ensuring that all assemblies and packages reflect the correct release version.
    #​36044 by @​vseanreesermsft
  • Update Branding to 8.0.17
    Updated branding for the 8.0 release line to version 8.0.17, keeping versioning consistent across all release artifacts.
    #​36043 by @​vseanreesermsft

Miscellaneous

  • [automated] Merge branch 'release/8.0' => 'release/9.0'
    Automated merge of changes from the 8.0 branch into the 9.0 branch, ensuring that all relevant fixes and improvements are carried forward.
    #​35927 by @​github-actions
  • Merge release/9.0 to release/9.0-staging
    Merged the 9.0 branch into the 9.0-staging branch, preparing for further testing and validation before final release.
    #​36051 by @​AndriySvyryd
    ... (truncated)

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 17.12.0 to 17.14.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

17.14.1

What's Changed

Full Changelog: microsoft/vstest@v17.14.0...v17.14.1

17.14.0

What's Changed

.NET versions updated

This version of VS Test upgraded .NET to net8 and net9. All projects targeting net6.0 (or other end-of-life .NET target frameworks) should pin their version of Microsoft.NET.Test.SDK to 17.13.0, or update the projects to net8 or newer. We remain backwards compatible with previous versions of Microsoft.NET.Test.SDK. This change does NOT prevent you from:

  • Updating to the latest VS, and running tests from net6.0 test projects.
  • Updating to the latest .NET SDK, and running tests from net6.0 test projects.

It also has no impact on .NET Framework projects, where we continue targeting .NET Framework 4.6.2.

Changes

Internal version updates and fixes

New Contributors

17.14.0-preview-25107-01

What's Changed

.NET versions updated

This version of VS Test upgraded .NET to net8 and net9. All projects targeting net6.0 (or other end-of-life .NET target frameworks) should pin their version of Microsoft.NET.Test.SDK to 17.13.0, or update the projects to net8 or newer. We remain backwards compatible with previous versions of Microsoft.NET.Test.SDK. This change does NOT prevent you from:

  • Updating to the latest VS, and running tests from net6.0 test projects.
  • Updating to the latest .NET SDK, and running tests from net6.0 test projects.

It also has no impact on .NET Framework projects, where we continue targeting .NET Framework 4.6.2.

Changes

Internal version updates and fixes

Will probably revert before release:

New Contributors

Full Changelog: microsoft/vstest@v17.13.0...v17.14.0-preview-25107-01

17.13.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v17.12.0...v17.13.0

Commits viewable in compare view.

Updated Npgsql from 9.0.4 to 9.0.5.

Release notes

Sourced from Npgsql's releases.

9.0.5

v9.0.5 contains several minor bug fixes.

Milestone issues

Full Changelog: npgsql/npgsql@v9.0.4...v9.0.5

Commits viewable in compare view.

Updated OpenIddict.AspNetCore from 5.3.0 to 5.8.0.

Release notes

Sourced from OpenIddict.AspNetCore's releases.

5.8.0

This release introduces the following changes:

  • The OpenIddict client system integration now natively supports Android API 21+ (Android 5.0 and higher), iOS 12.0+, macOS 10.15+ and Mac Catalyst 13.1+. See Operating systems integration for more information.

  • Behavior change: the OpenIddict.Client.SystemIntegration package was updated to produce shorter default pipe names (which is required on macOS where strict length restrictions are enforced).

  • The OpenIddict.Client.SystemNetHttp and OpenIddict.Validation.SystemNetHttp packages have been updated to anticipate a breaking change introduced in the 9.0 version of Microsoft.Extensions.Http. See Consider updating HttpClientFactory defaults to leverage SocketsHttpHandler dotnet/runtime#35987 (comment) for more information.

  • 6 new web providers were added to OpenIddict.Client.WebIntegration:

    • Airtable
    • Calendly
    • Pipedrive
    • Typeform
    • Twitch (thanks @​mbaumanndev! ❤️)
    • Zoho
  • OpenIddict now uses Microsoft.IdentityModel 8.x on .NET 8.0 and higher.

  • The OpenIddict.EntityFramework package now uses EntityFramework 6.5.1 as the minimum version.

5.7.1

This release introduces the following changes:

  • The LinkedIn integration was updated to react to a breaking change introduced by LinkedIn in their discovery document and that was causing an issuer validation error in the OpenIddict client due to the issuer being changed from https://www.linkedin.com/ to https://www.linkedin.com/oauth (thanks @​DovydasNavickas! ❤️).

[!IMPORTANT]
If your code relies on the issuer identity, make sure you update your code/database to use https://www.linkedin.com/oauth instead of https://www.linkedin.com/.

5.7.0

This release introduces the following changes:

Description has been truncated

Summary by CodeRabbit

  • Chores
    • Updated multiple NuGet package dependencies to latest versions across application, infrastructure, API, authentication, and testing components, including core frameworks and database drivers.

Review Change Stack

Bumps AWSSDK.Extensions.NETCore.Setup from 4.0.3.37 to 4.0.4.1
Bumps AWSSDK.S3 from 4.0.23 to 4.0.23.4
Bumps BCrypt.Net-Next from 4.0.3 to 4.2.0
Bumps Bogus from 35.6.1 to 35.6.5
Bumps FluentValidation from 11.11.0 to 11.12.0
Bumps FluentValidation.DependencyInjectionExtensions from 11.11.0 to 11.12.0
Bumps MediatR from 12.4.1 to 12.5.0
Bumps Microsoft.AspNetCore.Mvc.Testing from 8.0.11 to 8.0.27
Bumps Microsoft.EntityFrameworkCore.Relational from 9.0.5 to 9.0.16
Bumps Microsoft.NET.Test.Sdk from 17.12.0 to 17.14.1
Bumps Npgsql from 9.0.4 to 9.0.5
Bumps OpenIddict.AspNetCore from 5.3.0 to 5.8.0
Bumps OpenIddict.EntityFrameworkCore from 5.3.0 to 5.8.0
Bumps Scalar.AspNetCore from 2.6.0 to 2.14.14
Bumps Serilog.Sinks.Console from 6.0.0 to 6.1.1
Bumps StackExchange.Redis from 2.8.16 to 2.13.1
Bumps WolverineFx from 5.38.0 to 5.39.3
Bumps WolverineFx.EntityFrameworkCore from 5.38.0 to 5.39.3
Bumps WolverineFx.Postgresql from 5.38.0 to 5.39.3

---
updated-dependencies:
- dependency-name: AWSSDK.Extensions.NETCore.Setup
  dependency-version: 4.0.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-and-patch
- dependency-name: AWSSDK.S3
  dependency-version: 4.0.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-and-patch
- dependency-name: BCrypt.Net-Next
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-and-patch
- dependency-name: Bogus
  dependency-version: 35.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-and-patch
- dependency-name: FluentValidation
  dependency-version: 11.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-and-patch
- dependency-name: FluentValidation.DependencyInjectionExtensions
  dependency-version: 11.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-and-patch
- dependency-name: MediatR
  dependency-version: 12.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-and-patch
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 8.0.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-and-patch
- dependency-name: Microsoft.EntityFrameworkCore.Relational
  dependency-version: 9.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-and-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-and-patch
- dependency-name: Npgsql
  dependency-version: 9.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-and-patch
- dependency-name: OpenIddict.AspNetCore
  dependency-version: 5.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-and-patch
- dependency-name: OpenIddict.EntityFrameworkCore
  dependency-version: 5.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-and-patch
- dependency-name: Scalar.AspNetCore
  dependency-version: 2.14.14
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-and-patch
- dependency-name: Serilog.Sinks.Console
  dependency-version: 6.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-and-patch
- dependency-name: StackExchange.Redis
  dependency-version: 2.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-and-patch
- dependency-name: WolverineFx
  dependency-version: 5.39.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-and-patch
- dependency-name: WolverineFx.EntityFrameworkCore
  dependency-version: 5.39.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-and-patch
- dependency-name: WolverineFx.Postgresql
  dependency-version: 5.39.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github May 23, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dotnet. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 23, 2026
@coderabbitai

coderabbitai Bot commented May 23, 2026

Copy link
Copy Markdown
📝 Walkthrough

Walkthrough

This pull request updates centralized NuGet package versions across multiple functional layers in Directory.Packages.props—including Application, Infrastructure, API, Auth, and Testing dependencies—and adds a project-specific Npgsql version override to enforce compatibility in the shared infrastructure project.

Changes

Dependency Version Management

Layer / File(s) Summary
Central package version updates
Directory.Packages.props
Application (MediatR, FluentValidation), Infrastructure (EF Core, Npgsql, Redis, WolverineFx, BCrypt, AWS SDK, Serilog sinks), API (Scalar), Auth (OpenIddict), and Testing (Test SDK, AspNetCore.Mvc.Testing, Bogus) packages are bumped to newer versions; SignalR remains unchanged.
Project-specific Npgsql version lock
src/Shared/Axis.Shared.Infrastructure/Axis.Shared.Infrastructure.csproj
Npgsql dependency is explicitly pinned to version 9.0.5 via VersionOverride to enforce a consistent transitive version in this project.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~4 minutes

Poem

🐰 A rabbit's hop through versions new,
Dependencies upgraded, tried and true;
Npgsql locked at 9-oh-five,
Keeping databases alive!
Hop along, all systems thrive! 🌟

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The PR title clearly and accurately describes the primary change: bumping 19 .NET package dependencies in the dotnet-minor-and-patch group, which is exactly what the changeset accomplishes.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/nuget/dotnet-minor-and-patch-ec3a9eebc5

Comment @coderabbitai help to get the list of available commands and usage tips.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@Directory.Packages.props`:
- Around line 15-16: The central props pin for
Microsoft.EntityFrameworkCore.Relational is 9.0.16 but
Microsoft.EntityFrameworkCore (and typically
Microsoft.EntityFrameworkCore.InMemory) remain at 9.0.5, which can cause NU1605
downgrade/conflicts; update the PackageVersion entries for
Microsoft.EntityFrameworkCore and Microsoft.EntityFrameworkCore.InMemory in
Directory.Packages.props to Version="9.0.16" so all EF Core packages match
Microsoft.EntityFrameworkCore.Relational, then restore/build to verify no
downgrade warnings (NU1605) occur.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: a8775bf3-20cd-4c3b-b800-4289891e017d

📥 Commits

Reviewing files that changed from the base of the PR and between b39bd00 and 7298a54.

📒 Files selected for processing (2)
  • Directory.Packages.props
  • src/Shared/Axis.Shared.Infrastructure/Axis.Shared.Infrastructure.csproj

Comment thread Directory.Packages.props
Comment on lines +15 to +16
<PackageVersion Include="Microsoft.EntityFrameworkCore.Relational" Version="9.0.16" />
<PackageVersion Include="Npgsql" Version="9.0.5" />

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Align EF Core package versions to avoid NuGet downgrade/conflict risk.

Microsoft.EntityFrameworkCore.Relational was bumped to 9.0.16, but central Microsoft.EntityFrameworkCore is still 9.0.5. This can produce restore downgrades (NU1605) or implicit transitive overrides. Please align EF Core package versions (at least Microsoft.EntityFrameworkCore, and typically Microsoft.EntityFrameworkCore.InMemory) to 9.0.16.

Suggested diff
-    <PackageVersion Include="Microsoft.EntityFrameworkCore" Version="9.0.5" />
+    <PackageVersion Include="Microsoft.EntityFrameworkCore" Version="9.0.16" />
     <PackageVersion Include="Microsoft.EntityFrameworkCore.Relational" Version="9.0.16" />
...
-    <PackageVersion Include="Microsoft.EntityFrameworkCore.InMemory" Version="9.0.5" />
+    <PackageVersion Include="Microsoft.EntityFrameworkCore.InMemory" Version="9.0.16" />

Run this read-only check to verify the mismatch:

#!/bin/bash
set -euo pipefail

echo "Relational 9.0.16 dependency floor for Microsoft.EntityFrameworkCore:"
curl -fsSL "https://api.nuget.org/v3-flatcontainer/microsoft.entityframeworkcore.relational/9.0.16/microsoft.entityframeworkcore.relational.nuspec" \
  | tr '\n' ' ' \
  | sed -E 's/></>\n</g' \
  | rg -n 'dependency id="Microsoft.EntityFrameworkCore"'

echo
echo "Current EF Core versions in Directory.Packages.props:"
rg -n 'PackageVersion Include="Microsoft.EntityFrameworkCore(\\.Relational|\\.InMemory)?"' Directory.Packages.props

Expected: first command shows dependency version >= 9.0.16, while current props still pins some EF Core packages to 9.0.5.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@Directory.Packages.props` around lines 15 - 16, The central props pin for
Microsoft.EntityFrameworkCore.Relational is 9.0.16 but
Microsoft.EntityFrameworkCore (and typically
Microsoft.EntityFrameworkCore.InMemory) remain at 9.0.5, which can cause NU1605
downgrade/conflicts; update the PackageVersion entries for
Microsoft.EntityFrameworkCore and Microsoft.EntityFrameworkCore.InMemory in
Directory.Packages.props to Version="9.0.16" so all EF Core packages match
Microsoft.EntityFrameworkCore.Relational, then restore/build to verify no
downgrade warnings (NU1605) occur.

@dependabot @github

dependabot Bot commented on behalf of github May 23, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

@phuongnse

Copy link
Copy Markdown
Owner

Closing — replaced by #81. CodeRabbit correctly flagged the EF Core family split (Relational at 9.0.16 while EFCore + InMemory still at 9.0.5 → NU1605 risk). #81 aligns the trio to 9.0.16, also catches a WolverineFx.Http drift Dependabot missed (5.39.3 exists upstream), aligns ASP.NET Core 8.x patches, and rolls up every other safe bump from this PR — without needing the csproj workarounds Dependabot added here.

@phuongnse phuongnse closed this May 23, 2026
@dependabot @github

dependabot Bot commented on behalf of github May 23, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@phuongnse phuongnse deleted the dependabot/nuget/dotnet-minor-and-patch-ec3a9eebc5 branch May 23, 2026 04:30
phuongnse added a commit that referenced this pull request May 23, 2026
CodeRabbit flagged: PR #74 had bumped Npgsql to 9.0.5 but
Npgsql.EntityFrameworkCore.PostgreSQL has not published 9.0.5 yet
(latest is 9.0.4). NuGet auto-resolves to the newer Npgsql, so build
still works, but the family-alignment principle in
memory/feedback_version_family_alignment.md says: keep family members
in lockstep, drop the floater when the leader hasn't moved.

Other CodeRabbit notes acknowledged:
- WolverineFx.Http / MailKit / Serilog.AspNetCore / Serilog.Sinks.Seq
  all verified present on NuGet (HTTP 200) at the declared versions;
  no action needed.
- Scalar.AspNetCore 2.6.0 → 2.14.14 removes `EndpointPathPrefix` and
  changes enum JSON serialization. We never used `EndpointPathPrefix`
  (`MapScalarApiReference` in Program.cs uses `WithOpenApiRoutePattern`
  + `Title` + `Theme` only). Enum serialization change only affects
  the Scalar API-reference UI rendering of examples, not the runtime
  REST surface. Scalar is dev + staging only. Build + unit tests stay
  clean; no action needed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Cosmos/FTS: update translation of FullTextScore to use multiple keywords rather than keyword array

1 participant