Bump CrispyWaffle from 10.2.6 to 10.2.9 by dependabot[bot] · Pull Request #1034 · GuilhermeStracini/POC-GHActions-CI-NetFramework

dependabot · 2026-07-13T11:43:22Z

Updated CrispyWaffle from 10.2.6 to 10.2.9.

Release notes

Sourced from CrispyWaffle's releases.

10.2.9 What's Changed

Bump the dependencies group with 10 updates by @dependabot[bot] in Bump the dependencies group with 10 updates guibranco/CrispyWaffle#962

Full Changelog: guibranco/CrispyWaffle@v10.2.8...v10.2.9

10.2.8 What's Changed

Bump the microsoft group with 1 update by @dependabot[bot] in Bump the microsoft group with 1 update guibranco/CrispyWaffle#961

Full Changelog: guibranco/CrispyWaffle@v10.2.7...v10.2.8

10.2.7 What's Changed

chore(deps): bump the github-actions group with 7 updates by @dependabot[bot] in chore(deps): bump the github-actions group with 7 updates guibranco/CrispyWaffle#960

Full Changelog: guibranco/CrispyWaffle@v10.2.6...v10.2.7

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

--- updated-dependencies: - dependency-name: CrispyWaffle dependency-version: 10.2.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

semanticdiff-com · 2026-07-13T11:43:25Z

Review changes with

Changed Files

File	Status
Src/GHActionsCI/GHActionsCI.csproj	100% smaller
Src/GHActionsCI/App.config	Unsupported file format
Src/GHActionsCI/Properties/AssemblyInfo.cs	0% smaller
Src/GHActionsCI/Properties/Version.txt	Unsupported file format
Src/GHActionsCI/packages.config	Unsupported file format

pr-code-reviewer · 2026-07-13T11:43:27Z

👋 Hi there!

Everything looks good!

_{^{Automatically generated with the help of gpt-3.5-turbo.

Feedback? Please don't hesitate to drop me an email at webber@takken.io.}}

github-actions · 2026-07-13T11:43:40Z

🔥 Formatting issues detected

File	Line
./Src/GHActionsCI/App.config	9

⚡ Please run dotnet csharpier . locally to fix the formatting issues.

socket-security · 2026-07-13T11:43:43Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	crispywaffle@10.2.6 ⏵ 10.2.9

View full report

socket-security · 2026-07-13T11:43:45Z

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Block		Potential code anomaly (AI signal): nuget `crispywaffle` is 62.0% likely to have a medium risk anomaly Notes: No definitive malware/backdoor is visible in the provided fragment. However, there are notable security risks: the library performs an outbound request to https://api.ipify.org to determine external IP (privacy/exfil signal), and it executes XSLT compiled from a provided string in XmlTemplateRender (potential server-side template/XSLT abuse, depending on runtime protections). It also performs object deserialization and writes to file paths provided by the caller. These are strong reasons to review usage patterns and add hardening (secure XML settings/resolvers, output encoding in hosts, restrict filesystem/network permissions, and avoid unsafe deserialization contexts). Confidence: 0.62 Severity: 0.62 From: Src/GHActionsCI/packages.config → `nuget/crispywaffle@10.2.9` ℹ Read more on: This package \| This alert \| What is an AI-detected potential code anomaly? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: An AI system found a low-risk anomaly in this package. It may still be fine to use, but you should check that it is safe before proceeding. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore nuget/crispywaffle@10.2.9`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

codacy-production · 2026-07-13T11:43:51Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity

Metric Results

Complexity 0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes.}

net-framework-updater · 2026-07-13T11:44:06Z

Build debug & Version bump: 🔰 Building GHActionsCI.sln

net-framework-updater · 2026-07-13T11:45:36Z

Build debug & Version bump: 🎯 Build succeeded - New version: 1.0.1075.1

net-framework-updater · 2026-07-13T11:45:42Z

Build debug & Version bump: ✅ Successfully builded and patched GHActionsCI.sln.

Version: #️⃣ 1.0.1075.1
Warnings: ⚠️

D:\a\POC-GHActions-CI-NetFramework\POC-GHActions-CI-NetFramework\Src\GHActionsCI\Program.cs(27,20): warning S1118: Add a 'protected' constructor or the 'static' keyword to the class declaration. [D:\a\POC-GHActions-CI-NetFramework\POC-GHActions-CI-NetFramework\Src\GHActionsCI\GHActionsCI.csproj]

github-actions · 2026-07-13T11:46:22Z

Infisical secrets check: ✅ No secrets leaked!

💻 Scan logs

2026-07-13T11:46:18Z INF scanning for exposed secrets...
11:46AM INF 575 commits scanned.
2026-07-13T11:46:19Z INF scan completed in 630ms
2026-07-13T11:46:19Z INF no leaks found

guibranco

Automatically approved by gstraccini[bot]

dependabot · 2026-07-20T11:43:37Z

A newer version of CrispyWaffle exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

guibranco · 2026-07-21T13:24:40Z

@dependabot recreate

dependabot · 2026-07-21T13:26:35Z

Looks like CrispyWaffle is updatable in another way, so this is no longer needed.

dependabot · 2026-07-21T13:26:41Z

Oh no! Something went wrong on our end. Please try again later.

If the problem persists, please contact GitHub support for assistance 🙇

Bump CrispyWaffle from 10.2.6 to 10.2.9

2653800

--- updated-dependencies: - dependency-name: CrispyWaffle dependency-version: 10.2.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot assigned guibranco Jul 13, 2026

dependabot Bot added .NET Pull requests that update .net code dependencies Dependencies nuget NuGet package labels Jul 13, 2026

github-actions Bot added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label Jul 13, 2026

Version bump (CI)

c03f7e5

guibranco enabled auto-merge (squash) July 15, 2026 14:59

gstraccini Bot added the ☑️ auto-merge Automatic merging of pull requests (gstraccini-bot) label Jul 15, 2026

gstraccini Bot approved these changes Jul 15, 2026

View reviewed changes

guibranco approved these changes Jul 15, 2026

View reviewed changes

gstraccini Bot added 🤖 bot Automated processes or integrations 📦 dependencies labels Jul 15, 2026

dependabot Bot closed this Jul 21, 2026

auto-merge was automatically disabled July 21, 2026 13:26
Pull request was closed

dependabot Bot deleted the dependabot/nuget/Src/GHActionsCI/CrispyWaffle-10.2.9 branch July 21, 2026 13:26

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

10.2.9

What's Changed

10.2.8

What's Changed

10.2.7

What's Changed

Uh oh!

semanticdiff-com Bot commented Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pr-code-reviewer Bot commented Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

👋 Hi there!

Uh oh!

github-actions Bot commented Jul 13, 2026

🔥 Formatting issues detected

Uh oh!

socket-security Bot commented Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

codacy-production Bot commented Jul 13, 2026

Up to standards ✅

Uh oh!

net-framework-updater Bot commented Jul 13, 2026

Uh oh!

net-framework-updater Bot commented Jul 13, 2026

Uh oh!

net-framework-updater Bot commented Jul 13, 2026

Uh oh!

github-actions Bot commented Jul 13, 2026

Uh oh!

guibranco left a comment

Choose a reason for hiding this comment

Uh oh!

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

guibranco commented Jul 21, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 21, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 13, 2026 •

edited

Loading

semanticdiff-com Bot commented Jul 13, 2026 •

edited

Loading

pr-code-reviewer Bot commented Jul 13, 2026 •

edited

Loading

socket-security Bot commented Jul 13, 2026 •

edited

Loading

socket-security Bot commented Jul 13, 2026 •

edited

Loading