Bump MediatR from 12.4.1 to 14.2.0#103
Conversation
--- updated-dependencies: - dependency-name: MediatR dependency-version: 14.2.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: c852c74b75
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| <PackageReference Include="Blazored.LocalStorage" Version="4.5.0" /> | ||
| <PackageReference Include="DotNetEnv" Version="3.2.0" /> | ||
| <PackageReference Include="MediatR" Version="12.4.1" /> | ||
| <PackageReference Include="MediatR" Version="14.2.0" /> |
There was a problem hiding this comment.
This bump crosses MediatR v13, where the package now requires configuring a Lucky Penny/MediatR license key via cfg.LicenseKey or the MEDIATR_LICENSE_KEY/LUCKYPENNY_LICENSE_KEY environment variables. I checked the AddEventDrivenSync registration plus .env.example, secrets.example.json, and the deploy workflow, and none of them wire or document that key, so production deployments that follow this repo will run with the new missing-license warning/error and may be non-compliant. Please either stay on the 12.x line or include the license-key configuration/docs with this upgrade.
Useful? React with 👍 / 👎.
Updated MediatR from 12.4.1 to 14.2.0.
Release notes
Sourced from MediatR's releases.
14.2.0
What's Changed
Full Changelog: LuckyPennySoftware/MediatR@v14.1.0...v14.2.0
14.1.0
What's Changed
New Contributors
Full Changelog: LuckyPennySoftware/MediatR@v14.0.0...v14.1.0
14.0.0
What's Changed
Full Changelog: LuckyPennySoftware/MediatR@v13.1.0...v14.0.0
14.0.0-beta-1
What's Changed
Full Changelog: LuckyPennySoftware/MediatR@v13.1.0...v14.0.0-beta-1
This release is a beta release that introduces .NET 10 support and package signing. Signed packages means going forward packages can be validated against trusted authorities that the package has been published by Lucky Penny Software and not tampered with.
13.1.0
What's Changed
LightInject,StashBox,Lamarby @jithu7432 in Add DI tests forLightInject,StashBox,LamarLuckyPennySoftware/MediatR#1137New Contributors
Full Changelog: LuckyPennySoftware/MediatR@v13.0.0...v13.1.0
13.0.0
Full Changelog: LuckyPennySoftware/MediatR@v12.5.0...v13.0.0
To set your license key:
You can obtain your license key at MediatR.io
12.5.0
What's Changed
Nullableproperty fromMediatR.Contractsby @jithu7432 in Remove duplicateNullableproperty fromMediatR.ContractsLuckyPennySoftware/MediatR#1061New Contributors
Nullableproperty fromMediatR.ContractsLuckyPennySoftware/MediatR#1061Full Changelog: LuckyPennySoftware/MediatR@v12.4.1...v12.5.0
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)