Bump the minor-and-patch group with 17 updates by dependabot[bot] · Pull Request #20 · MALIEV-Co-Ltd/Maliev.PurchaseOrderService

dependabot · 2026-07-18T02:19:52Z

Updated Asp.Versioning.Mvc from 8.1.0 to 8.1.1.

Release notes

Sourced from Asp.Versioning.Mvc's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Asp.Versioning.Mvc.ApiExplorer from 8.1.0 to 8.1.1.

Release notes

Sourced from Asp.Versioning.Mvc.ApiExplorer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated AutoMapper from 15.0.1 to 15.1.3.

Release notes

Sourced from AutoMapper's releases.

15.1.3 What's Changed

Fix GHSA-rvv3-g6hj-g44x: default MaxDepth of 64 for self-referential types (15.x backport) by @jbogard in Fix GHSA-rvv3-g6hj-g44x: default MaxDepth of 64 for self-referential types (15.x backport) LuckyPennySoftware/AutoMapper#4619

Security

Fixed an issue where certain cyclic or self-referential object graphs could trigger uncontrolled recursion during mapping, potentially resulting in stack exhaustion and denial of service.

Applications that process untrusted or attacker-controlled object graphs through affected mapping paths may be impacted.

Users should upgrade to this release.

Security advisory: GHSA-rvv3-g6hj-g44x

Thanks to @skdishansachin for responsibly disclosing this issue.

Full Changelog: LuckyPennySoftware/AutoMapper@v15.1.0...v15.1.3

15.1.2 What's Changed

docs: Document duplicate license message behavior and fixes by @Copilot in docs: Document duplicate license message behavior and fixes LuckyPennySoftware/AutoMapper#4617

Security

Fixed an issue where certain cyclic or self-referential object graphs could trigger uncontrolled recursion during mapping, potentially resulting in stack exhaustion and denial of service.

Applications that process untrusted or attacker-controlled object graphs through affected mapping paths may be impacted.

Users should upgrade to this release.

Security advisory: GHSA-rvv3-g6hj-g44x

Thanks to @skdishansachin for responsibly disclosing this issue.

Full Changelog: LuckyPennySoftware/AutoMapper@v16.1.1...v15.1.2

15.1.1 What's Changed

docs: Document duplicate license message behavior and fixes by @Copilot in docs: Document duplicate license message behavior and fixes LuckyPennySoftware/AutoMapper#4617

Security

Fixed an issue where certain cyclic or self-referential object graphs could trigger uncontrolled recursion during mapping, potentially resulting in stack exhaustion and denial of service.

Applications that process untrusted or attacker-controlled object graphs through affected mapping paths may be impacted.

Users should upgrade to this release.

Security advisory: GHSA-rvv3-g6hj-g44x

Thanks to @skdishansachin for responsibly disclosing this issue.

Full Changelog: LuckyPennySoftware/AutoMapper@v16.1.1...v15.1.1

15.1.0 What's Changed

remove Microsoft.SourceLink.GitHub by @SimonCropp in remove Microsoft.SourceLink.GitHub LuckyPennySoftware/AutoMapper#4555
Direct .NET 4.x support by @jbogard in Direct .NET 4.x support LuckyPennySoftware/AutoMapper#4569
Bumping the JsonWebTokens because of GHSA-8g4q-xg66-9fp4; fixes #4575 by @jbogard in Bumping the JsonWebTokens because of GHSA-8g4q-xg66-9fp4; fixes #4575 LuckyPennySoftware/AutoMapper#4576
Provide better exceptions for errors when building the mapping plan by @jbogard in Provide better exceptions for errors when building the mapping plan LuckyPennySoftware/AutoMapper#4577
Adding docs for license configuration by @jbogard in Adding docs for license configuration LuckyPennySoftware/AutoMapper#4581
Updating refs to fix missing method issue by @jbogard in Updating refs to fix missing method issue LuckyPennySoftware/AutoMapper#4582

New Contributors

@SimonCropp made their first contribution in remove Microsoft.SourceLink.GitHub LuckyPennySoftware/AutoMapper#4555

Full Changelog: LuckyPennySoftware/AutoMapper@v15.0.1...v15.1.0

Commits viewable in compare view.

Updated coverlet.collector from 6.0.2 to 6.0.4.

Release notes

Sourced from coverlet.collector's releases.

6.0.4

Fixed

Fix empty coverage report when using include and exclude filters #1726

Diff between 6.0.3 and 6.0.4

6.0.3

Fixed

Fix RuntimeConfigurationReader to support self-contained builds #1705 by https://github.com/pfeigl
Fix inconsistent filenames with UseSourceLink after .NET 8 #1679
Fix hanging tests #989
Fix coverlet instrumentation becomes slow after installing dotnet sdk 8.0.200 #1620
Fix upgrading v6.0.1 to v6.0.2 increases instrumentation time #1649
Fix Unable to instrument module - NET 8 #1631
Fix slow modules filtering process #1646 by https://github.com/BlackGad
Fix incorrect coverage await using in generic method #1490

Improvements

Cache the regex used in InstrumentationHelper #1693
Enable dotnetTool integration tests for linux #660

Diff between 6.0.2 and 6.0.3

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 9.0.8 to 9.0.18.

Update branding to 9.0.9 by @vseanreesermsft in Update branding to 9.0.9 dotnet/aspnetcore#63107
[release/9.0] (deps): Bump src/submodules/googletest from c67de11 to 373af2e by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from c67de11 to 373af2e dotnet/aspnetcore#63035
[release/9.0] Dispose the certificate chain elements with the chain by @github-actions[bot] in [release/9.0] Dispose the certificate chain elements with the chain dotnet/aspnetcore#62992
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#62702
[release/9.0] Update Microsoft.Build versions by @wtgodbe in [release/9.0] Update Microsoft.Build versions dotnet/aspnetcore#62505
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#62832
[release/9.0] Update SignalR Redis tests to use internal Docker Hub mirror by @github-actions[bot] in [release/9.0] Update SignalR Redis tests to use internal Docker Hub mirror dotnet/aspnetcore#63116
[release/9.0] [SignalR] Don't throw for message headers in Java client by @github-actions[bot] in [release/9.0] [SignalR] Don't throw for message headers in Java client dotnet/aspnetcore#62783
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#63151
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#63190
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#63214

Full Changelog: dotnet/aspnetcore@v9.0.8...v9.0.9

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore from 9.0.8 to 9.0.18.

Update branding to 9.0.9 by @vseanreesermsft in Update branding to 9.0.9 dotnet/aspnetcore#63107
[release/9.0] (deps): Bump src/submodules/googletest from c67de11 to 373af2e by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from c67de11 to 373af2e dotnet/aspnetcore#63035
[release/9.0] Dispose the certificate chain elements with the chain by @github-actions[bot] in [release/9.0] Dispose the certificate chain elements with the chain dotnet/aspnetcore#62992
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#62702
[release/9.0] Update Microsoft.Build versions by @wtgodbe in [release/9.0] Update Microsoft.Build versions dotnet/aspnetcore#62505
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#62832
[release/9.0] Update SignalR Redis tests to use internal Docker Hub mirror by @github-actions[bot] in [release/9.0] Update SignalR Redis tests to use internal Docker Hub mirror dotnet/aspnetcore#63116
[release/9.0] [SignalR] Don't throw for message headers in Java client by @github-actions[bot] in [release/9.0] [SignalR] Don't throw for message headers in Java client dotnet/aspnetcore#62783
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#63151
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#63190
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#63214

Full Changelog: dotnet/aspnetcore@v9.0.8...v9.0.9

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Identity.EntityFrameworkCore from 9.0.8 to 9.0.18.

Update branding to 9.0.9 by @vseanreesermsft in Update branding to 9.0.9 dotnet/aspnetcore#63107
[release/9.0] (deps): Bump src/submodules/googletest from c67de11 to 373af2e by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from c67de11 to 373af2e dotnet/aspnetcore#63035
[release/9.0] Dispose the certificate chain elements with the chain by @github-actions[bot] in [release/9.0] Dispose the certificate chain elements with the chain dotnet/aspnetcore#62992
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#62702
[release/9.0] Update Microsoft.Build versions by @wtgodbe in [release/9.0] Update Microsoft.Build versions dotnet/aspnetcore#62505
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#62832
[release/9.0] Update SignalR Redis tests to use internal Docker Hub mirror by @github-actions[bot] in [release/9.0] Update SignalR Redis tests to use internal Docker Hub mirror dotnet/aspnetcore#63116
[release/9.0] [SignalR] Don't throw for message headers in Java client by @github-actions[bot] in [release/9.0] [SignalR] Don't throw for message headers in Java client dotnet/aspnetcore#62783
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#63151
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#63190
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#63214

Full Changelog: dotnet/aspnetcore@v9.0.8...v9.0.9

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Identity.UI from 9.0.8 to 9.0.18.

Update branding to 9.0.13 by @vseanreesermsft in Update branding to 9.0.13 dotnet/aspnetcore#64938
[release/9.0] (deps): Bump src/submodules/googletest from 1b96fa1 to 9156d4c by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from 1b96fa1 to 9156d4c dotnet/aspnetcore#64908
[release/9.0] Pass container image correctly for source-build job in official build by @akoeplinger in [release/9.0] Pass container image correctly for source-build job in official build dotnet/aspnetcore#64781
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#64686
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#64685
[release/9.0] Update gradle by @github-actions[bot] in [release/9.0] Update gradle dotnet/aspnetcore#64980
Backport #64657: Use shallow clones for CI jobs by @Copilot in Backport #64657: Use shallow clones for CI jobs dotnet/aspnetcore#64677
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#65012
[release/9.0] Add .slnx fallback for TestHost content root discovery by @Copilot in https://github.com/dotnet/...

Description has been truncated

Bumps Asp.Versioning.Mvc from 8.1.0 to 8.1.1 Bumps Asp.Versioning.Mvc.ApiExplorer from 8.1.0 to 8.1.1 Bumps AutoMapper from 15.0.1 to 15.1.3 Bumps coverlet.collector from 6.0.2 to 6.0.4 Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 9.0.8 to 9.0.18 Bumps Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore from 9.0.8 to 9.0.18 Bumps Microsoft.AspNetCore.Identity.EntityFrameworkCore from 9.0.8 to 9.0.18 Bumps Microsoft.AspNetCore.Identity.UI from 9.0.8 to 9.0.18 Bumps Microsoft.EntityFrameworkCore.InMemory from 9.0.8 to 9.0.18 Bumps Microsoft.EntityFrameworkCore.SqlServer from 9.0.8 to 9.0.18 Bumps Microsoft.EntityFrameworkCore.Tools from 9.0.8 to 9.0.18 Bumps Microsoft.IdentityModel.Tokens from 8.14.0 to 8.19.2 Bumps Microsoft.NET.Test.Sdk from 17.12.0 to 17.14.1 Bumps Swashbuckle.AspNetCore.Swagger from 9.0.4 to 9.0.6 Bumps Swashbuckle.AspNetCore.SwaggerGen from 9.0.4 to 9.0.6 Bumps Swashbuckle.AspNetCore.SwaggerUI from 9.0.4 to 9.0.6 Bumps xunit from 2.9.2 to 2.9.3 --- updated-dependencies: - dependency-name: Asp.Versioning.Mvc dependency-version: 8.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Asp.Versioning.Mvc.ApiExplorer dependency-version: 8.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: AutoMapper dependency-version: 15.1.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: coverlet.collector dependency-version: 6.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 9.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore dependency-version: 9.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.AspNetCore.Identity.EntityFrameworkCore dependency-version: 9.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.AspNetCore.Identity.UI dependency-version: 9.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.EntityFrameworkCore.InMemory dependency-version: 9.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.EntityFrameworkCore.SqlServer dependency-version: 9.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.EntityFrameworkCore.Tools dependency-version: 9.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.IdentityModel.Tokens dependency-version: 8.19.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 17.14.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Swashbuckle.AspNetCore.Swagger dependency-version: 9.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Swashbuckle.AspNetCore.SwaggerGen dependency-version: 9.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Swashbuckle.AspNetCore.SwaggerUI dependency-version: 9.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: xunit dependency-version: 2.9.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-18T02:21:47Z

🤖 Hi @dependabot[bot], I've received your request, and I'm working on it now! You can track my progress in the logs for more details.

github-actions · 2026-07-18T02:25:25Z

🤖 I'm sorry @dependabot[bot], but I was unable to process your request. Please see the logs for more details.

natthapolvanasrivilai · 2026-07-19T19:13:18Z

Closed as superseded by validated convergence PR #30 and exact-tree promotion #31. Applicable updates were incorporated and tested against the current graph; this grouped PR targets the obsolete pre-convergence graph.

dependabot · 2026-07-19T19:13:22Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Jul 18, 2026

natthapolvanasrivilai closed this Jul 19, 2026

dependabot Bot deleted the dependabot/nuget/Maliev.PurchaseOrderService.Api/minor-and-patch-d88ea239a9 branch July 19, 2026 19:24

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the minor-and-patch group with 17 updates#20

Bump the minor-and-patch group with 17 updates#20
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/Maliev.PurchaseOrderService.Api/minor-and-patch-d88ea239a9

dependabot Bot commented on behalf of github Jul 18, 2026

Uh oh!

github-actions Bot commented Jul 18, 2026

Uh oh!

github-actions Bot commented Jul 18, 2026

Uh oh!

natthapolvanasrivilai commented Jul 19, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 18, 2026

15.1.3

What's Changed

Security

15.1.2

What's Changed

Security

15.1.1

What's Changed

Security

15.1.0

What's Changed

New Contributors

6.0.4

Fixed

6.0.3

Fixed

Improvements

9.0.18

What's Changed

9.0.17

What's Changed

9.0.16

What's Changed

9.0.15

What's Changed

9.0.14

What's Changed

9.0.13

What's Changed

9.0.12

What's Changed

9.0.11

What's Changed

9.0.10

What's Changed

9.0.9

What's Changed

9.0.18

What's Changed

9.0.17

What's Changed

9.0.16

What's Changed

9.0.15

What's Changed

9.0.14

What's Changed

9.0.13

What's Changed

9.0.12

What's Changed

9.0.11

What's Changed

9.0.10

What's Changed

9.0.9

What's Changed

9.0.18

What's Changed

9.0.17

What's Changed

9.0.16

What's Changed

9.0.15

What's Changed

9.0.14

What's Changed

9.0.13

What's Changed

9.0.12

What's Changed

9.0.11

What's Changed

9.0.10

What's Changed

9.0.9

What's Changed