Skip to content

Bump Asp.Versioning.Mvc and 2 others - #73

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/project-templates/content/umbraco-headless-bff/UmbracoHeadlessBFF.Cms/multi-0deedc66ca
Closed

Bump Asp.Versioning.Mvc and 2 others#73
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/project-templates/content/umbraco-headless-bff/UmbracoHeadlessBFF.Cms/multi-0deedc66ca

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Updated Asp.Versioning.Mvc from 8.1.1 to 10.0.0.

Release notes

Sourced from Asp.Versioning.Mvc's releases.

10.0.0

The official release for 10.0 is here! In addition to the changes in the preview releases, there are a few additional changes.

Features

All Platforms

  • ApiVersionAttribute, MapToVersionAttribute, and AdvertiseApiVersionsAttribute all now have a constructor which can support the date format without being a string; for example, [ApiVersion(2026, 04, 01)]

ASP.NET Core OpenAPI

  • XmlCommentsTransformer is now resolved via DI, which allows it to be re-registered with a user-defined file path
  • Public types and members are now virtual for developer extensibility

Fixes

ASP.NET Core OpenAPI

  • Fix comparison between entry and calling assembly (#​1175)
  • Ensure keyed services are registered with a lowercase key (#​1176)
  • Fix nested key service resolution (#​1177)
  • Implement IKeyedServiceProvider when injecting ApiVersion (#​1178)

Breaking Changes

ASP.NET Core OpenAPI

  • OpenAPI documents use "enum": ["1.0"] instead of "default": "1.0"
    • This has a similar effect, but removes the free-form input when the value is bounded
    • When optional, the enum value can still be deleted/removed
    • Some UIs, such as Scalar, still provide a way to provide an enumerated value that isn't in the list

Release Notes

  • Asp.Versioning.OData is being released as rc.1 because Microsoft.AspNetCore.OData is only at preview.2
  • Asp.Versioning.OpenAPI is being released as rc.1 pending the outcome of dotnet/aspnetcore#​66408
    • If the package can be released without requiring the explicit use of Reflection, that is the preference
    • No additional changes are planned unless bugs are reported

Feedback

Thanks to the contributors on this release whether it was code contributions or test driving the previews. Special thanks to @​sander1095 for being a strong advocate and helping to bring even more visibility to the project.

10.0.0-preview.2

This release is a quick iteration which contains minor fixes based on feedback from Preview 1.

Trying out previews is always a big ask. The OpenAPI extensions are net new, so I really am looking for some community support to flush out any edge cases I may have been missed before releasing officially. All other libraries are stable.

Aside from whatever the community may report, there are only two final things I'm considering for the final release:

  1. gRPC versioning support, which I'm waiting on grpc/grpc-dotnet#​2690 and grpc/grpc-dotnet#​2693
  2. Coordination with Microsoft to open up types in Microsoft.AspNetCore.OpenAPI so I don't have to resort to Reflection for integration

If these are not able to be completed within the next few weeks, then I will officially release the stable libraries. The gRPC support will then come in a future, likely minor version, release. The OpenAPI extensions may stay in preview as AOT will likely be broken.

Features

All Platforms

  • Support _ prefix character when extracting API versions from a .NET namespace (#​1172)
  • Generate software bill of materials (SBOM) (#​1100)

Fixes

ASP.NET Core with OpenAPI

  • Build-time OpenAPI documents have empty paths (#​1165, #​1168)
  • Missing XML Comments (#​1169)
  • Support <example> tags (#​1170)

Breaking Changes

The OpenAPI extensions for API Versioning (e.g. x-api-versioning) will now use a nested links property rather than a simple array. This allows the schema to be open for possible future enhancements.

Preview 1

{
    "x-api-versioning":
    [
        {
            "title": "Version Policy",
            "type": "text/html",
            "rel": "info",
            "url": "http://my.api.com/policies/versioning.html"
        }
    ]
}

Preview 2+

{
 ... (truncated)

## 10.0.0-preview.1

This is a major release that includes new, publicly visible API changes as well as a rollup of bug fixes. This is an initial preview release that is primarily focused on improving OpenAPI integration. Additional features will come in the next preview. The wiki has not be fully updated - yet, but that will also occur in the near future.

These are preview features and changes. Please report issues if you find them. Feel free to start a [discussion](../../discussions) about the changes in the forthcoming official release.

# Features

## All Platforms

- Support for the `deprecation` response header as defined by [RFC 9745](https://www.rfc-editor.org/rfc/rfc9745.html) (#​1128)

## ASP.NET Core

- Integration with the [Microsoft.AspNetCore.OpenApi](https://www.nuget.org/packages/Microsoft.AspNetCore.OpenApi) library
  - These features in the new [Asp.Versioning.OpenApi](https://www.nuget.org/packages/Asp.Versioning.OpenApi) library
  - OpenAPI documents are now generated per API version
  - Sunset and deprecation policies are automatically included with standard (English) text, but can be customized
  - Sunset and deprecation policies links are included in OpenAPI documents via the `x-api-versioning` extension
  - The versioned `HttpClient` can now read and report on sunset and deprecation policies
  - All [example projects](../../tree/main/examples/AspNetCore) have been updated to use [Scalar](https://scalar.com/)

### Example

The following provides an example of a bare minimum setup:

```c#
var builder = WebApplication.CreateBuilder( args );
var services = builder.Services;

services.AddApiVersioning()
        .AddApiExplorer()
        .AddOpenApi();

var app = builder.Build();
var hello = app.NewVersionedApi( "HelloWorld" );
var v1 = hello.MapGroup( "/hello-world" ).HasApiVersion( 1.0 );
var v2 = hello.MapGroup( "/hello-world" ).HasApiVersion( 2.0 );

v1.MapGet( "/", ( ApiVersion version ) => $"Hello world from v{version}" );
v2.MapGet( "/", ( ApiVersion version ) => $"Hello world from v{version}" );

if ( app.Environment.IsDevelopment() )
{
    app.MapOpenApi().WithDocumentPerVersion();
}

app.Run();

The key differences from what you may be currently doing:

... (truncated)

Commits viewable in compare view.

Updated Umbraco.Cms.Web.Common from 17.5.3 to 18.0.2.

Release notes

Sourced from Umbraco.Cms.Web.Common's releases.

18.0.2

What's Changed

🔒 Security

  • Addressed vulnerability relating to expansion of property values relating to protected, picked content described in GHSA-wr57-hqmp-fgvh

Full Changelog: umbraco/Umbraco-CMS@release-18.0.1...release-18.0.2

18.0.1

What's Changed

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0...release-18.0.1

18.0.0

What's Changed Since The Last Release Candidate (18.0.0-rc3)

📦 Dependencies

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0-rc3...release-18.0.0

What's Changed For 18.0

See the prior release notes for each pre-release version:

Release overview: https://releases.umbraco.com/release/umbraco/Umbraco-CMS/18.0.0
Full Changelog: umbraco/Umbraco-CMS@release-17.5.0...release-18.0.0

18.0.0-rc3

What's Changed Since 18.0.0-rc2

🎨 Design

🐛 Bug Fixes

🧪 Testing

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0-rc2...release-18.0.0-rc3

What's Changed Since 18.0.0-rc1

📦 Dependencies

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0-rc1...release-18.0.0-rc2

18.0.0-rc2

What's Changed since 18.0.0-rc1

📦 Dependencies

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0-rc1...release-18.0.0-rc2

18.0.0-rc1

What's Changed since 18.0.0-beta2

🙌 Notable Changes

🚀 New Features

🏠 Internal

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0-beta2...release-18.0.0-rc1

18.0.0-beta2

What's Changed Since 18.0.0-beta1

🐛 Bug Fixes

Backoffice: Preserve prerelease tag when hoisting peer dependencies by @​iOvergaard in umbraco/Umbraco-CMS#22841
SignalR: Mark ServerEventSender as a distributed cache notification handler by @​ronaldbarendse in umbraco/Umbraco-CMS#22818

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0-beta1...release-18.0.0-beta2

What's Changed in Umbraco 18

🙌 Notable Changes - Testing encouraged and appreciated!

💥 Breaking Changes

18.0.0-beta1

What's Changed

🙌 Notable Changes - Testing encouraged and appreciated!

💥 Breaking Changes

🏠 Internal

17.6.0-rc

What's Changed

📦 Dependencies

🚀 New Features

🚤 Performance

🌈 Accessibility Improvements

🐛 Bug Fixes

Commits viewable in compare view.

Updated Umbraco.Cms.Web.Website from 17.5.3 to 18.0.2.

Release notes

Sourced from Umbraco.Cms.Web.Website's releases.

18.0.2

What's Changed

🔒 Security

  • Addressed vulnerability relating to expansion of property values relating to protected, picked content described in GHSA-wr57-hqmp-fgvh

Full Changelog: umbraco/Umbraco-CMS@release-18.0.1...release-18.0.2

18.0.1

What's Changed

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0...release-18.0.1

18.0.0

What's Changed Since The Last Release Candidate (18.0.0-rc3)

📦 Dependencies

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0-rc3...release-18.0.0

What's Changed For 18.0

See the prior release notes for each pre-release version:

Release overview: https://releases.umbraco.com/release/umbraco/Umbraco-CMS/18.0.0
Full Changelog: umbraco/Umbraco-CMS@release-17.5.0...release-18.0.0

18.0.0-rc3

What's Changed Since 18.0.0-rc2

🎨 Design

🐛 Bug Fixes

🧪 Testing

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0-rc2...release-18.0.0-rc3

What's Changed Since 18.0.0-rc1

📦 Dependencies

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0-rc1...release-18.0.0-rc2

18.0.0-rc2

What's Changed since 18.0.0-rc1

📦 Dependencies

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0-rc1...release-18.0.0-rc2

18.0.0-rc1

What's Changed since 18.0.0-beta2

🙌 Notable Changes

🚀 New Features

🏠 Internal

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0-beta2...release-18.0.0-rc1

18.0.0-beta2

What's Changed Since 18.0.0-beta1

🐛 Bug Fixes

Backoffice: Preserve prerelease tag when hoisting peer dependencies by @​iOvergaard in umbraco/Umbraco-CMS#22841
SignalR: Mark ServerEventSender as a distributed cache notification handler by @​ronaldbarendse in umbraco/Umbraco-CMS#22818

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0-beta1...release-18.0.0-beta2

What's Changed in Umbraco 18

🙌 Notable Changes - Testing encouraged and appreciated!

💥 Breaking Changes

18.0.0-beta1

What's Changed

🙌 Notable Changes - Testing encouraged and appreciated!

💥 Breaking Changes

🏠 Internal

17.6.0-rc

What's Changed

📦 Dependencies

🚀 New Features

Description has been truncated

Dependab...

Description has been truncated

@dependabot
Bump Asp.Versioning.Mvc and 2 others
23f8303 
Bumps Asp.Versioning.Mvc from 8.1.1 to 10.0.0
Bumps Umbraco.Cms.Web.Common from 17.5.3 to 18.0.2
Bumps Umbraco.Cms.Web.Website from 17.5.3 to 18.0.2

---
updated-dependencies:
- dependency-name: Asp.Versioning.Mvc
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Umbraco.Cms.Web.Common
  dependency-version: 18.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Umbraco.Cms.Web.Website
  dependency-version: 18.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 1, 2026
@dependabot dependabot Bot mentioned this pull request Aug 1, 2026
Closed
@dependabot @github

dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #74.

@dependabot dependabot Bot closed this Aug 1, 2026
@dependabot
dependabot Bot deleted the dependabot/nuget/project-templates/content/umbraco-headless-bff/UmbracoHeadlessBFF.Cms/multi-0deedc66ca branch August 1, 2026 12:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants