Skip to content

Bump nuget-minor-patch group (26 updates) + align Caching.Memory 10.0.13 - #2328

Merged
richardorchard merged 3 commits into
mainfrom
codex/deps-nuget-minor-patch
Oct 16, 2026
Merged

richardorchard merged 3 commits into
mainfrom
codex/deps-nuget-minor-patch

Conversation

@richardorchard

Copy link
Copy Markdown
Collaborator

Agent

Agent: Grok Bot

Summary

Replaces Dependabot PR #2311 (nuget-minor-patch group, 26 updates). It keeps all of #2311's bumps, merges current main, and adds one fix:

  • Directory.Packages.props: Microsoft.Extensions.Caching.Memory 10.0.12 → 10.0.13. Microsoft.EntityFrameworkCore.SqlServer 10.0.13 requires Caching.Memory >= 10.0.13. QueenZone.NewsAgent references it directly at 10.0.12, so dotnet restore failed with NU1605 (downgrade warning treated as an error). That one restore failure broke the build, Verify formatting and Check for vulnerable packages jobs on Bump the nuget-minor-patch group with 26 updates #2311.

Testing

  • dotnet restore QueenZone.sln: no NU1605
  • dotnet build QueenZone.sln --configuration Release --no-restore: CI only (the local box has no SixLabors license key, which ImageSharp 4.1.3's build targets require)
  • dotnet test: CI
  • dotnet format QueenZone.sln --verify-no-changes: clean

Legacy database checks

  • Not required for this change

Verification

Review findings

Issue

Related PR: #2311

No tracking issue exists; this is a dependency update (no-issue).

Follow-up

dependabot Bot and others added 3 commits October 14, 2026 21:27
Bumps dotnet-ef from 10.0.12 to 10.0.13
Bumps Microsoft.AspNetCore.Authentication.Google from 10.0.12 to 10.0.13
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.12 to 10.0.13
Bumps Microsoft.AspNetCore.Authentication.MicrosoftAccount from 10.0.12 to 10.0.13
Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.12 to 10.0.13
Bumps Microsoft.AspNetCore.OpenApi from 10.0.12 to 10.0.13
Bumps Microsoft.EntityFrameworkCore.Design from 10.0.12 to 10.0.13
Bumps Microsoft.EntityFrameworkCore.Sqlite from 10.0.12 to 10.0.13
Bumps Microsoft.EntityFrameworkCore.SqlServer from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.Configuration from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.Configuration.Abstractions from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.Configuration.Json from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.DependencyInjection from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.Hosting.Abstractions from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.Http from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.Logging.Console from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.Options from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.TimeProvider.Testing from 10.10.0 to 10.11.0
Bumps Microsoft.Identity.Web from 4.16.0 to 4.16.1
Bumps Microsoft.NET.Test.Sdk from 18.10.1 to 18.11.0
Bumps SixLabors.ImageSharp from 4.1.2 to 4.1.3
Bumps xunit.runner.visualstudio from 4.0.0 to 4.0.1

---
updated-dependencies:
- dependency-name: dotnet-ef
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.AspNetCore.Authentication.Google
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.AspNetCore.Authentication.MicrosoftAccount
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.EntityFrameworkCore.SqlServer
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Configuration.Abstractions
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Configuration.EnvironmentVariables
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Hosting.Abstractions
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Http
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Options
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Logging.Console
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.TimeProvider.Testing
  dependency-version: 10.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Identity.Web
  dependency-version: 4.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: SixLabors.ImageSharp
  dependency-version: 4.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: xunit.runner.visualstudio
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
EF Core SqlServer 10.0.13 needs Caching.Memory >= 10.0.13, so leaving it at
10.0.12 failed restore with NU1605 (downgrade treated as an error).
@richardorchard richardorchard added dependencies Automated dependency update pull request. no-issue PR intentionally has no linked GitHub issue labels Oct 16, 2026
@github-actions github-actions Bot added the agent:codex Pull request authored by the codex agent/tooling. label Oct 16, 2026
@sonarqubecloud

Copy link
Copy Markdown

Copy link
Copy Markdown
Collaborator Author

Ship at 6ffcbe3afcdcc927c68fcc585cad92ef7cd9a346

This moves the AspNetCore, EF Core and Extensions packages (including Caching.Memory) from 10.0.12 to 10.0.13, with the dotnet-ef tool in step. The rest are patch or minor test and library bumps: Identity.Web, ImageSharp, Test.Sdk, the xunit runner and TimeProvider.Testing. Versions are managed centrally in Directory.Packages.props, and no csproj overrides them. No code changes are needed.

The only red check is check-issue-link, which is metadata.

Merge only when Richard names it.

@richardorchard
richardorchard added this pull request to the merge queue Oct 16, 2026
Merged via the queue into main with commit 30371c6 Oct 16, 2026
52 of 53 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

agent:codex Pull request authored by the codex agent/tooling. dependencies Automated dependency update pull request. no-issue PR intentionally has no linked GitHub issue

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant