Skip to content

chore: Bump Asp.Versioning.Mvc and Asp.Versioning.Mvc.ApiExplorer - #508

Closed
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/nuget/IdentityProvider/multi-cbf8988066
Closed

chore: Bump Asp.Versioning.Mvc and Asp.Versioning.Mvc.ApiExplorer#508
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/nuget/IdentityProvider/multi-cbf8988066

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor

Updated Asp.Versioning.Mvc from 10.0.0 to 10.2.1.

Release notes

Sourced from Asp.Versioning.Mvc's releases.

10.2.0

This release includes some big new features but is fully backward compatible with 10.0.0. The new features include versioned model member filtering, Roslyn analyzers, gRPC preview support, and a number of servicing patches since the previous release.

Fixes

All Platforms

  • Parsing an API version whose status ends in '.' no longer succeeds silently
  • Very large padding values in a format string no longer cause a stack overflow
  • Incorrect lower and upper bounds when matching API version ranges
  • Parsing a positive integer no longer allows whitespace or a leading '-'

ASP.NET Core

  • Routes are no longer incorrectly evicted from the route table (#​1138)
  • Fixed routing of unversioned endpoints
  • Fixed extracting an API version that includes a status when versioning by URL segment (#​1187)
  • A user-registered IProblemDetailsWriter is preserved by AddApiVersioning() (#​1191)

ASP.NET Core OpenAPI

  • Support for more XML comment tags (#​1205)
  • Fixed the error message reported for an unmapped JSON property
  • Fixed descriptions applied to filtered members

Features

All Platforms

  • New ApiVersionRange type for matching a set of API versions using the same interval notation as a package version
    • 1.0x ≥ 1.0
    • [1.0]x == 1.0
    • (1.0,)x > 1.0
    • (,1.0]x ≤ 1.0
    • [1.0,2.0)1.0 ≤ x < 2.0
    • Multiple rules are combined as a logical or; ApiVersionRange.Any and ApiVersionRange.Empty are provided for
      the degenerate cases
    • A range matches API versions; it does not define them. API versions must still be explicitly declared
  • New VisibleInApiVersionAttribute indicates the range of API versions a data member is visible in; for example,
    [VisibleInApiVersion("2.0")]
  • New IAnnotation<TKey, TValue> abstraction for associating out-of-band metadata with a member
  • [StringSyntax] is now applied to API version inputs so the IDE and analyzers understand them; the recognized
    syntaxes are ApiVersion, ApiVersionRange, and ApiVersionFormat

Analyzers

API Versioning now ships Roslyn analyzers. There is no new package to install — the core rules are packed into Asp.Versioning.Abstractions and the API rules are packed into Asp.Versioning.Http, so any application that already references API Versioning picks them up transitively.

There is an initial set of 31 rules. You can find all of the rule information in the new diagnostics wiki topic.

Notes:
... (truncated)

Commits viewable in compare view.

Updated Asp.Versioning.Mvc.ApiExplorer from 10.0.0 to 10.2.1.

Release notes

Sourced from Asp.Versioning.Mvc.ApiExplorer's releases.

10.2.0

This release includes some big new features but is fully backward compatible with 10.0.0. The new features include versioned model member filtering, Roslyn analyzers, gRPC preview support, and a number of servicing patches since the previous release.

Fixes

All Platforms

  • Parsing an API version whose status ends in '.' no longer succeeds silently
  • Very large padding values in a format string no longer cause a stack overflow
  • Incorrect lower and upper bounds when matching API version ranges
  • Parsing a positive integer no longer allows whitespace or a leading '-'

ASP.NET Core

  • Routes are no longer incorrectly evicted from the route table (#​1138)
  • Fixed routing of unversioned endpoints
  • Fixed extracting an API version that includes a status when versioning by URL segment (#​1187)
  • A user-registered IProblemDetailsWriter is preserved by AddApiVersioning() (#​1191)

ASP.NET Core OpenAPI

  • Support for more XML comment tags (#​1205)
  • Fixed the error message reported for an unmapped JSON property
  • Fixed descriptions applied to filtered members

Features

All Platforms

  • New ApiVersionRange type for matching a set of API versions using the same interval notation as a package version
    • 1.0x ≥ 1.0
    • [1.0]x == 1.0
    • (1.0,)x > 1.0
    • (,1.0]x ≤ 1.0
    • [1.0,2.0)1.0 ≤ x < 2.0
    • Multiple rules are combined as a logical or; ApiVersionRange.Any and ApiVersionRange.Empty are provided for
      the degenerate cases
    • A range matches API versions; it does not define them. API versions must still be explicitly declared
  • New VisibleInApiVersionAttribute indicates the range of API versions a data member is visible in; for example,
    [VisibleInApiVersion("2.0")]
  • New IAnnotation<TKey, TValue> abstraction for associating out-of-band metadata with a member
  • [StringSyntax] is now applied to API version inputs so the IDE and analyzers understand them; the recognized
    syntaxes are ApiVersion, ApiVersionRange, and ApiVersionFormat

Analyzers

API Versioning now ships Roslyn analyzers. There is no new package to install — the core rules are packed into Asp.Versioning.Abstractions and the API rules are packed into Asp.Versioning.Http, so any application that already references API Versioning picks them up transitively.

There is an initial set of 31 rules. You can find all of the rule information in the new diagnostics wiki topic.

Notes:
... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

nanasess and others added 3 commits August 7, 2026 19:23
本番 DB と Key Vault に直接触れる運用ツールは OSS である本リポジトリから分離し、
非公開の EcAuth/ConsoleApp へ移設した。移設先は EcAuth を submodule として参照し、
IdentityProvider を ProjectReference で使うため、Organization / Client の生成ロジック
(IOrganizationProvisioningService) は従来どおり共有される。

削除するもの:

- ConsoleApp/ 一式
- EcAuth.sln のプロジェクト参照
- .github/workflows/backfill-client-secrets.yml (ConsoleApp をビルド・実行するため道連れ)
- .github/scripts/sql-firewall.sh (上記ワークフロー専用)
- .github/dependabot.yml の /ConsoleApp エントリ

backfill-client-secrets は EcAuthDocs#106 の一回限りの移行ジョブで、移設先の CLI に
コマンドとして残っている。CI から実行する手段は失うが、Key Vault の一時付与 +
ローカル実行で代替できる(手順は移設先の README に記載)。

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01H5kr2QnM1Ms5zaMSGHcZjc
chore: 運用 CLI (ConsoleApp) を非公開リポジトリへ移設したため削除
Bumps Asp.Versioning.Mvc from 10.0.0 to 10.2.1
Bumps Asp.Versioning.Mvc.ApiExplorer from 10.0.0 to 10.2.1

---
updated-dependencies:
- dependency-name: Asp.Versioning.Mvc
  dependency-version: 10.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Asp.Versioning.Mvc.ApiExplorer
  dependency-version: 10.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #513.

@dependabot dependabot Bot closed this Aug 7, 2026
@dependabot
dependabot Bot deleted the dependabot/nuget/IdentityProvider/multi-cbf8988066 branch August 7, 2026 12:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant