Bump the grpc group with 3 updates - #42
Conversation
Bumps Grpc.AspNetCore.Web from 2.83.0 to 2.84.0 Bumps Grpc.Core.Api from 2.83.0 to 2.84.0 Bumps Grpc.Net.Client from 2.83.0 to 2.84.0 --- updated-dependencies: - dependency-name: Grpc.AspNetCore.Web dependency-version: 2.84.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: grpc - dependency-name: Grpc.Core.Api dependency-version: 2.84.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: grpc - dependency-name: Grpc.Net.Client dependency-version: 2.84.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: grpc ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
.NET
dependabot
Bot
added
dependencies
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Dependabot updated six locks; ArcForges.Cli, StructureTests and the other dependent locks still requested Grpc.Core.Api/Grpc.Net.Client 2.83.0, so the locked restore failed with NU1004. Refresh them for 2.84.0 only: SDK-implicit ILCompiler/ILLink entries stay at the 10.0.11 packs selected by the pinned SDK 10.0.400. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Contracts packages now depend on Grpc.Net.Client 2.84.0, so a consumer pinning 2.83.0 would hit a downgrade error. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Add the append-only receipt dependabot-2026-09-26-grpc-2-84-0 (successor of dependabot-2026-09-26-prettier-3-9-8): admit Grpc.Core.Api, Grpc.Net.Client, Grpc.AspNetCore.Web and Grpc.Net.Common 2.84.0 (Apache-2.0) and the transitive Microsoft.Extensions.Logging/DependencyInjection.Abstractions 8.0.1 (MIT) from their published nuspecs, retire the replaced coordinates and bind the updated input hashes. Refresh the contract-access package-graph hashes, classify the receipt in the provenance inventory, allowlist its four reviewed public SHA-256 rows and register that block in the admission test. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
|
Reviewed 12236f8: Grpc.Core.Api, Grpc.Net.Client and Grpc.AspNetCore.Web 2.83.0 -> 2.84.0, with main merged in. Dependabot left the ArcForges.Cli, StructureTests and SerializationProbe locks stale (NU1004); they are refreshed for 2.84.0 only, and the SDK-implicit ILCompiler/ILLink entries stay at the 10.0.11 packs of the pinned SDK 10.0.400. The receipt dependabot-2026-09-26-grpc-2-84-0 (successor of the prettier receipt) admits the four grpc packages at 2.84.0 and the transitive Microsoft.Extensions abstractions 8.0.1 from their published nuspecs and retires the replaced coordinates. The contract-access package-graph hashes were refreshed and the receipt's four public SHA-256 rows allowlisted exactly and registered in the admission test. The consumer example now shows Grpc.Net.Client 2.84.0. The admission, naming and provenance checks, admission tests and Prettier check passed locally; every required check passed on this head. Approved. |
1 participant
Updated Grpc.AspNetCore.Web from 2.83.0 to 2.84.0.
Release notes
Sourced from Grpc.AspNetCore.Web's releases.
2.84.0
What's Changed
New Contributors
Full Changelog: grpc/grpc-dotnet@v2.83.0...v2.84.0
2.84.0-pre1
What's Changed
New Contributors
Full Changelog: grpc/grpc-dotnet@v2.83.0...v2.84.0-pre1
Commits viewable in compare view.
Updated Grpc.Core.Api from 2.83.0 to 2.84.0.
Release notes
Sourced from Grpc.Core.Api's releases.
2.84.0
What's Changed
New Contributors
Full Changelog: grpc/grpc-dotnet@v2.83.0...v2.84.0
2.84.0-pre1
What's Changed
New Contributors
Full Changelog: grpc/grpc-dotnet@v2.83.0...v2.84.0-pre1
Commits viewable in compare view.
Updated Grpc.Net.Client from 2.83.0 to 2.84.0.
Release notes
Sourced from Grpc.Net.Client's releases.
2.84.0
What's Changed
New Contributors
Full Changelog: grpc/grpc-dotnet@v2.83.0...v2.84.0
2.84.0-pre1
What's Changed
New Contributors
Full Changelog: grpc/grpc-dotnet@v2.83.0...v2.84.0-pre1
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions