Bump the nuget group with 7 updates

[dependabot]

Updated Dapr.AspNetCore from 1.18.4 to 1.18.5.

Release notes

Sourced from Dapr.AspNetCore's releases.

1.18.5

What's Changed

• Promoting Dapr.Actors.Next to 1.18 patch release by @​WhitWaldo in Dapr Actors (Next) SDK dapr/dotnet-sdk#1865
• Added support for actor retry failure policies by @​WhitWaldo in Added support for actor retry failure policies dapr/dotnet-sdk#1872
• Fixing workflow tracing + adding observability integration testing by @​WhitWaldo in Fixing workflow tracing + adding observability integration testing dapr/dotnet-sdk#1870
• Can now pass environment variables into daprd container during integration tests by @​WhitWaldo in Can now pass environment variables into daprd container during integration tests dapr/dotnet-sdk#1871
• No longer swallows exceptions for anything except NotFound error when retrieving workflow state from runtime by @​WhitWaldo in No longer swallows exceptions for anything except NotFound error when retrieving workflow state from runtime dapr/dotnet-sdk#1877
• Propagate trace context for gRPC calls by @​mtaghavi2005 in Propagate trace context for gRPC calls dapr/dotnet-sdk#1858

Miscellaneous infrastructure changes:

• Restoring 1.17 to CI testing by @​WhitWaldo in Restoring 1.17 to CI testing dapr/dotnet-sdk#1856
• Auto open issue on ci failure during release by @​cicoyle in auto open issue on ci failure during release dapr/dotnet-sdk#1864

New Contributors

• @​cicoyle made their first contribution in auto open issue on ci failure during release dapr/dotnet-sdk#1864

Full Changelog: dapr/dotnet-sdk@v1.18.4...v1.18.5

Commits viewable in compare view.

Updated Dapr.Client from 1.18.4 to 1.18.5.

Release notes

Sourced from Dapr.Client's releases.

1.18.5

What's Changed

• Promoting Dapr.Actors.Next to 1.18 patch release by @​WhitWaldo in Dapr Actors (Next) SDK dapr/dotnet-sdk#1865
• Added support for actor retry failure policies by @​WhitWaldo in Added support for actor retry failure policies dapr/dotnet-sdk#1872
• Fixing workflow tracing + adding observability integration testing by @​WhitWaldo in Fixing workflow tracing + adding observability integration testing dapr/dotnet-sdk#1870
• Can now pass environment variables into daprd container during integration tests by @​WhitWaldo in Can now pass environment variables into daprd container during integration tests dapr/dotnet-sdk#1871
• No longer swallows exceptions for anything except NotFound error when retrieving workflow state from runtime by @​WhitWaldo in No longer swallows exceptions for anything except NotFound error when retrieving workflow state from runtime dapr/dotnet-sdk#1877
• Propagate trace context for gRPC calls by @​mtaghavi2005 in Propagate trace context for gRPC calls dapr/dotnet-sdk#1858

Miscellaneous infrastructure changes:

• Restoring 1.17 to CI testing by @​WhitWaldo in Restoring 1.17 to CI testing dapr/dotnet-sdk#1856
• Auto open issue on ci failure during release by @​cicoyle in auto open issue on ci failure during release dapr/dotnet-sdk#1864

New Contributors

• @​cicoyle made their first contribution in auto open issue on ci failure during release dapr/dotnet-sdk#1864

Full Changelog: dapr/dotnet-sdk@v1.18.4...v1.18.5

Commits viewable in compare view.

Updated Dapr.Workflow from 1.18.4 to 1.18.5.

Release notes

Sourced from Dapr.Workflow's releases.

1.18.5

What's Changed

• Promoting Dapr.Actors.Next to 1.18 patch release by @​WhitWaldo in Dapr Actors (Next) SDK dapr/dotnet-sdk#1865
• Added support for actor retry failure policies by @​WhitWaldo in Added support for actor retry failure policies dapr/dotnet-sdk#1872
• Fixing workflow tracing + adding observability integration testing by @​WhitWaldo in Fixing workflow tracing + adding observability integration testing dapr/dotnet-sdk#1870
• Can now pass environment variables into daprd container during integration tests by @​WhitWaldo in Can now pass environment variables into daprd container during integration tests dapr/dotnet-sdk#1871
• No longer swallows exceptions for anything except NotFound error when retrieving workflow state from runtime by @​WhitWaldo in No longer swallows exceptions for anything except NotFound error when retrieving workflow state from runtime dapr/dotnet-sdk#1877
• Propagate trace context for gRPC calls by @​mtaghavi2005 in Propagate trace context for gRPC calls dapr/dotnet-sdk#1858

Miscellaneous infrastructure changes:

• Restoring 1.17 to CI testing by @​WhitWaldo in Restoring 1.17 to CI testing dapr/dotnet-sdk#1856
• Auto open issue on ci failure during release by @​cicoyle in auto open issue on ci failure during release dapr/dotnet-sdk#1864

New Contributors

• @​cicoyle made their first contribution in auto open issue on ci failure during release dapr/dotnet-sdk#1864

Full Changelog: dapr/dotnet-sdk@v1.18.4...v1.18.5

Commits viewable in compare view.

Updated Microsoft.IdentityModel.Tokens from 8.21.0 to 8.22.0.

Release notes

Sourced from Microsoft.IdentityModel.Tokens's releases.

8.22.0

What's Changed

• Promote exception to property, add test by @​westin-m in [cherry-pick] promote exception to property, add test (#3471) AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3486
• Add IgnoreCaseWhenValidatingAudience flag to audience validation by @​cpp11nullptr in Backport: Add IgnoreCaseWhenValidatingAudience flag to audience validation (#3558) AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3563

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.21.0...8.22.0

Commits viewable in compare view.

Updated Scalar.AspNetCore from 2.16.16 to 2.16.17.

Release notes

Sourced from Scalar.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated SharpCompress from 0.50.0 to 0.50.3.

Release notes

Sourced from SharpCompress's releases.

0.50.3

What's Changed

• Fix RAR5 async decompression corruption in UnpWriteBufAsync by @​adamhathcock in Fix RAR5 async decompression corruption in UnpWriteBufAsync adamhathcock/sharpcompress#1396

Full Changelog: adamhathcock/sharpcompress@0.50.2...0.50.3

0.50.2

What's Changed

• Fix SeekableSharpCompressStream.StopRecording() to rewind to recorded… by @​adamhathcock in Fix SeekableSharpCompressStream.StopRecording() to rewind to recorded… adamhathcock/sharpcompress#1393

Full Changelog: adamhathcock/sharpcompress@0.50.1...0.50.2

0.50.1

What's Changed

• Fix ArgumentException in ZlibBaseStream when disposing mid-stream GZip probe in ReaderFactory by @​adamhathcock with @​Copilot in Fix ArgumentException in ZlibBaseStream when disposing mid-stream GZip probe in ReaderFactory adamhathcock/sharpcompress#1371
• Fixes ZipWriter to be fully forward only by @​adamhathcock in Fixes ZipWriter to be fully forward only adamhathcock/sharpcompress#1372
• Fix tar.gz reader detection for GZip archive entry streams by @​adamhathcock with @​Copilot in Fix tar.gz reader detection for GZip archive entry streams adamhathcock/sharpcompress#1376

Thanks for reporting!

Full Changelog: adamhathcock/sharpcompress@0.50.0...0.50.1

Commits viewable in compare view.

Updated System.IdentityModel.Tokens.Jwt from 8.21.0 to 8.22.0.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

8.22.0

What's Changed

• Promote exception to property, add test by @​westin-m in [cherry-pick] promote exception to property, add test (#3471) AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3486
• Add IgnoreCaseWhenValidatingAudience flag to audience validation by @​cpp11nullptr in Backport: Add IgnoreCaseWhenValidatingAudience flag to audience validation (#3558) AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3563

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.21.0...8.22.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 7b21bf57f7

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[fairspot-delivery-bot]

⏸️ Codex flagged a P0/P1/P2 finding, so this PR was converted to Draft and handed back to its implementer (Status → Needs changes). Address the review comments above, then mark it Ready for review to re-trigger Codex.

[RobertVejvoda]

@copilot there is unresolved Bump the package version with dependency metadata

[Copilot]

@copilot there is unresolved Bump the package version with dependency metadata

Could you clarify what you mean by "unresolved Bump the package version with dependency metadata"? I can see no merge conflict markers in any .csproj files.

Are you asking me to bump the FPS.SharedKernel NuGet package version (currently 0.1.0) since its dependencies (Microsoft.IdentityModel.Tokens, System.IdentityModel.Tokens.Jwt, Dapr.Client, Dapr.Workflow) were updated in this PR? If so, should it be a patch bump to 0.1.1?

Or is this referring to a separate open Dependabot PR that is in conflict with this one?

[RobertVejvoda]

@copilot Yes. Bump code/server/Shared/FPS.SharedKernel/FPS.SharedKernel.csproj from version 0.1.0 to 0.1.1 because this PR changes its published dependency metadata. If 0.1.1 already exists, use the next unused patch version. Commit only this additional change to PR #895.

[Copilot]

@copilot Yes. Bump code/server/Shared/FPS.SharedKernel/FPS.SharedKernel.csproj from version 0.1.0 to 0.1.1 because this PR changes its published dependency metadata. If 0.1.1 already exists, use the ...

Done. Bumped FPS.SharedKernel from 0.1.0 to 0.1.1 in commit 5eea4aa.

[Copilot]

Pull request overview

This PR updates a set of NuGet dependencies across the server projects (Dapr SDK, IdentityModel JWT/Tokens, Scalar.AspNetCore, and SharpCompress) to their next patch/minor releases, keeping the solution aligned on consistent package versions.

Changes:

• Bumped Dapr packages from 1.18.4 → 1.18.5 across services and tests.
• Bumped Microsoft.IdentityModel.Tokens / System.IdentityModel.Tokens.Jwt from 8.21.0 → 8.22.0 where referenced.
• Bumped Scalar.AspNetCore 2.16.16 → 2.16.17 and SharpCompress 0.50.0 → 0.50.3 where used; also incremented FairSpot.SharedKernel package version to 0.1.1.

Reviewed changes

Copilot reviewed 18 out of 18 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
code/server/Shared/FPS.SharedKernel/FPS.SharedKernel.csproj	Bumps SharedKernel package version and updates Dapr + IdentityModel dependencies.
code/server/Reporting/FPS.Reporting/FPS.Reporting.csproj	Updates Dapr.AspNetCore to 1.18.5.
code/server/Reporting/FPS.Reporting.Tests/FPS.Reporting.Tests.csproj	Updates IdentityModel Tokens/JWT to 8.22.0.
code/server/Profile/FPS.Profile/FPS.Profile.csproj	Updates Dapr.AspNetCore/Dapr.Client and Scalar.AspNetCore.
code/server/Profile/FPS.Profile.Tests/FPS.Profile.Tests.csproj	Updates Dapr.Client and IdentityModel Tokens/JWT.
code/server/Notification/FPS.Notification/FPS.Notification.csproj	Updates Dapr.AspNetCore and Scalar.AspNetCore.
code/server/Notification/FPS.Notification.Tests/FPS.Notification.Tests.csproj	Updates Dapr.Client to 1.18.5.
code/server/Identity/FPS.Identity/FPS.Identity.csproj	Updates Dapr.AspNetCore and Scalar.AspNetCore.
code/server/Identity/FPS.Identity.Tests/FPS.Identity.Tests.csproj	Updates IdentityModel Tokens/JWT to 8.22.0.
code/server/DataHub/FPS.DataHub/FPS.DataHub.csproj	Updates Dapr.AspNetCore and Scalar.AspNetCore.
code/server/Customer/FPS.Customer/FPS.Customer.csproj	Updates Dapr.AspNetCore/Dapr.Client and Scalar.AspNetCore.
code/server/Customer/FPS.Customer.Tests/FPS.Customer.Tests.csproj	Updates IdentityModel Tokens/JWT to 8.22.0.
code/server/Configuration/FPS.Configuration/FPS.Configuration.csproj	Updates Dapr.AspNetCore/Dapr.Client to 1.18.5.
code/server/Configuration/FPS.Configuration.Tests/FPS.Configuration.Tests.csproj	Updates Dapr.Client and IdentityModel Tokens/JWT.
code/server/Booking/FPS.Booking/FPS.Booking.csproj	Updates Dapr packages, Scalar.AspNetCore, and SharpCompress.
code/server/Booking/FPS.Booking.Tests/FPS.Booking.Tests.csproj	Updates IdentityModel Tokens/JWT to 8.22.0.
code/server/Audit/FPS.Audit/FPS.Audit.csproj	Updates Dapr packages and IdentityModel Tokens/JWT.
code/server/Audit/FPS.Audit.Tests/FPS.Audit.Tests.csproj	Updates Dapr.Client and IdentityModel Tokens/JWT.