chore(deps): Bump the dotnet-minor-patch group with 16 updates - #49
Merged
bgard68 merged 1 commit intoAug 17, 2026
Conversation
Bumps BCrypt.Net-Next from 4.0.3 to 4.2.0 Bumps Dapper from 2.1.66 to 2.1.79 Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.0 to 10.0.11 Bumps Microsoft.AspNetCore.OpenApi from 10.0.0 to 10.0.11 Bumps Microsoft.Extensions.Configuration.Abstractions from 9.0.0 to 9.0.19 Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 9.0.0 to 9.0.19 Bumps Microsoft.Extensions.Options from 9.0.0 to 9.0.19 Bumps Microsoft.Extensions.Options.ConfigurationExtensions from 9.0.0 to 9.0.19 Bumps Microsoft.Extensions.TimeProvider.Testing from 9.0.0 to 9.10.0 Bumps Microsoft.IdentityModel.JsonWebTokens from 8.2.1 to 8.22.0 Bumps Microsoft.NET.Test.Sdk from 17.11.1 to 17.14.1 Bumps Microsoft.OpenApi from 2.7.5 to 2.12.0 Bumps Npgsql from 9.0.3 to 9.0.5 Bumps Otp.NET from 1.4.0 to 1.4.1 Bumps Scalar.AspNetCore from 2.11.3 to 2.16.20 Bumps xunit from 2.9.2 to 2.9.3 --- updated-dependencies: - dependency-name: BCrypt.Net-Next dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor-patch - dependency-name: Dapper dependency-version: 2.1.79 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch - dependency-name: Microsoft.Extensions.Configuration.Abstractions dependency-version: 9.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch - dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions dependency-version: 9.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch - dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions dependency-version: 9.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch - dependency-name: Microsoft.Extensions.Options dependency-version: 9.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch - dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions dependency-version: 9.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch - dependency-name: Microsoft.Extensions.TimeProvider.Testing dependency-version: 9.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor-patch - dependency-name: Microsoft.IdentityModel.JsonWebTokens dependency-version: 8.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 17.14.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor-patch - dependency-name: Microsoft.OpenApi dependency-version: 2.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor-patch - dependency-name: Npgsql dependency-version: 9.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch - dependency-name: Otp.NET dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch - dependency-name: Scalar.AspNetCore dependency-version: 2.16.20 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor-patch - dependency-name: xunit dependency-version: 2.9.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
the
dependencies
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
This was referenced Aug 17, 2026
bgard68
deleted the
dependabot/nuget/src/WidgetWorks.Application/dotnet-minor-patch-9810b8fa15
branch
August 17, 2026 19:44
bgard68
added a commit
that referenced
this pull request
Aug 17, 2026
Supersedes #52, #53, #54, #55, #56, #57 and #37 - all seven went DIRTY when #49 landed, because every one of them edits the same project files. They were never independent, so rebasing seven branches would have re-created the same tangle. Microsoft.Extensions.Configuration.Abstractions 9.0.19 -> 10.0.11 Microsoft.Extensions.DependencyInjection.Abstractions 9.0.19 -> 10.0.11 Microsoft.Extensions.Options 9.0.19 -> 10.0.11 Microsoft.Extensions.Options.ConfigurationExtensions 9.0.19 -> 10.0.11 Microsoft.Extensions.TimeProvider.Testing 9.10.0 -> 10.9.0 Microsoft.NET.Test.Sdk 17.14.1 -> 18.9.0 Npgsql 9.0.5 -> 10.0.1 dbup-postgresql 5.0.40 -> 7.0.1 xunit.runner.visualstudio 2.8.2 -> 4.0.0 The Microsoft.Extensions family moves together on purpose. Splitting it is what broke #53: it took Options.ConfigurationExtensions to 10.0.11, which requires Options >= 10.0.11, while Options itself was bumped in #52 - so each half failed with NU1605 on its own branch and neither could be merged first. Microsoft.OpenApi is deliberately NOT bumped, and #56 cannot be merged at all: NU1608: Microsoft.AspNetCore.OpenApi 10.0.11 requires Microsoft.OpenApi (>= 2.7.5 && < 3.0.0) but version Microsoft.OpenApi 3.10.0 was resolved The 3.x line is outside the range ASP.NET Core 10.0.11 will accept, so 2.12.0 is the newest usable version, not merely the newest tried. That constraint lifts when ASP.NET Core ships a build referencing OpenApi 3.x - not before, and no rebase of #56 changes it. xunit.runner.visualstudio 2.8.2 -> 4.0.0 crosses two majors. That upgrade fails by silently not discovering tests rather than by failing to compile, so a green build proves nothing on its own: all 66 tests were run and pass on the new runner. Verified locally on the 10.0.100 SDK: Release build clean with 0 warnings under TreatWarningsAsErrors, 66/66 tests pass. Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
This was referenced Aug 17, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated BCrypt.Net-Next from 4.0.3 to 4.2.0.
Release notes
Sourced from BCrypt.Net-Next's releases.
4.2.0
Full Changelog: BcryptNet/bcrypt.net@v4.1.0...v4.2.0
4.1.0
What's Changed
New Contributors
Full Changelog: BcryptNet/bcrypt.net@4.0.3...v4.1.0
Commits viewable in compare view.
Updated Dapper from 2.1.66 to 2.1.79.
Release notes
Sourced from Dapper's releases.
2.1.79
What's Changed
New Contributors
Full Changelog: DapperLib/Dapper@2.1.72...2.1.79
2.1.72
What's Changed
New Contributors
Full Changelog: DapperLib/Dapper@2.1.66...2.1.72
Commits viewable in compare view.
Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.0 to 10.0.11.
Release notes
Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.AspNetCore.OpenApi from 10.0.0 to 10.0.11.
Release notes
Sourced from Microsoft.AspNetCore.OpenApi's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.Configuration.Abstractions from 9.0.0 to 9.0.19.
Release notes
Sourced from Microsoft.Extensions.Configuration.Abstractions's releases.
9.0.19
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.18...v9.0.19
9.0.18
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.17...v9.0.18
9.0.17
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.16...v9.0.17
9.0.16
Release
9.0.15
Release
9.0.14
Release
9.0.13
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.12...v9.0.13
9.0.12
Release
9.0.11
Release
What's Changed
UnsafeAccessor- ambiguous name and signature match by @AaronRobinsonMSFT in [release/9.0-staging]UnsafeAccessor- ambiguous name and signature match dotnet/runtime#120011Full Changelog: dotnet/runtime@v9.0.10...v9.0.11
9.0.10
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.9...v9.0.10
9.0.9
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.8...v9.0.9
9.0.8
Release
What's Changed
InvalidOperationExceptiononTestOutputHelperlogging. by @ilonatommy in [release/9.0-staging][wbt] PreventInvalidOperationExceptiononTestOutputHelperlogging. dotnet/runtime#116916Ping_TimedOut_*tests by @github-actions[bot] in [release/9.0-staging] HardenPing_TimedOut_*tests dotnet/runtime#116630Full Changelog: dotnet/runtime@v9.0.7...v9.0.8
9.0.7
Release
What's Changed
sort_mark_listby @github-actions in [release/9.0-staging] throw an exception instead of infinite loop insort_mark_listdotnet/runtime#115529Full Changelog: dotnet/runtime@v9.0.6...v9.0.7
9.0.6
Bug Fixes
Read messages from binlog if process output is missing build finished message (#114676)
Improves reliability of the WebAssembly build process by reading messages from the binlog when the process output does not contain the expected build finished message, preventing build failures in certain scenarios.
Fix debugger app hangs related to thread exit (#114917)
Resolves an issue where applications could hang during debugging when threads exit, ensuring smoother debugging experiences and preventing deadlocks.
[Mono] Workaround MSVC miscompiling sgen_clz (#114903)
Addresses a compiler miscompilation issue in MSVC affecting the Mono garbage collector, improving runtime stability and correctness on affected platforms.
Do not set the salt or info if they are NULL for OpenSSL HKDF (#114877)
Fixes a cryptographic issue by ensuring that the salt or info parameters are not set when they are NULL in OpenSSL HKDF, preventing potential errors or unexpected behavior in key derivation.
[Test Only] Fix Idn tests (#115032)
Corrects issues in Internationalized Domain Name (Idn) tests, ensuring accurate and reliable test results for domain name handling.
JIT: revised fix for fp division issue in profile synthesis (#115026)
Provides a more robust fix for floating-point division issues in JIT profile synthesis, improving numerical accuracy and preventing incorrect calculations.
Handle OSSL 3.4 change to SAN:othername formatting (#115361)
Updates certificate handling to accommodate changes in Subject Alternative Name (SAN) formatting introduced in OpenSSL 3.4, ensuring compatibility and correct parsing of certificates.
[Mono] Fix c11 ARM64 atomics to issue full memory barrier (#115635)
Fixes atomic operations on ARM64 in Mono to issue a full memory barrier, ensuring correct synchronization and preventing subtle concurrency bugs.
Performance Improvements
[WinHTTP] Certificate caching on WinHttpHandler to eliminate extra call to Custom Certificate Validation (#114678)
Improves HTTP performance by caching certificates in WinHttpHandler, reducing redundant calls to custom certificate validation and speeding up secure connections.
Improve distribute_free_regions (#115167)
Optimizes memory management by enhancing the algorithm for distributing free memory regions, leading to better memory utilization and potentially improved application performance.
Technical Improvements
Strip trailing slash from source dir for cmake4 (#114905)
Refines build scripts by removing trailing slashes from source directories when using CMake 4, preventing potential build path issues and improving build reliability.
Don't expose TrustedCertificatesDirectory() and StartNewTlsSessionContext() to NetFx (#114995)
Restricts certain internal APIs from being exposed to .NET Framework, reducing surface area and preventing unintended usage.
Add support for more libicu versions (#115376)
Expands compatibility by supporting additional versions of the International Components for Unicode (ICU) library, enhancing globalization features across more environments.
Infrastructure
Optimizes CI/CD resources by limiting the outerloop pipeline to run only on release branches, reducing unnecessary test runs and speeding up development workflows.
... (truncated)
9.0.5
Release
What's Changed
osx.14.arm64.openandosx.15.amd64.openqueues by @github-actions in [release/9.0-staging] [infra][apple-mobile] Migrate MacCatalyst and iOS/tvOS simulator jobs toosx.14.arm64.openandosx.15.amd64.openqueues dotnet/runtime#114617... (truncated)
9.0.4
Release
What's Changed
BigInteger.Rotate{Left,Right}for backport by @github-actions in [release/9.0] FixBigInteger.Rotate{Left,Right}for backport dotnet/runtime#112991Full Changelog: dotnet/runtime@v9.0.3...v9.0.4
9.0.3
Release
What's Changed
NO-MERGElabel is applied by @github-actions in [release/9.0-staging] Add workflow to prevent merging a PR when theNO-MERGElabel is applied dotnet/runtime#111961Full Changelog: dotnet/runtime@v9.0.2...v9.0.3
9.0.2
Release
What's Changed
Description has been truncated