From fffb87b193c19341d5d82d9a8549b6f6024380e9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 26 Jul 2026 10:40:33 +0000 Subject: [PATCH 1/2] Bump Microsoft.AspNetCore.Authentication.JwtBearer and 5 others Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.9 to 10.0.10 Bumps Microsoft.AspNetCore.OpenApi from 10.0.9 to 10.0.10 Bumps Microsoft.EntityFrameworkCore.Design from 10.0.9 to 10.0.10 Bumps Microsoft.OpenApi from 2.10.0 to 2.11.0 Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.2 to 10.0.3 Bumps System.IdentityModel.Tokens.Jwt from 8.19.1 to 8.21.0 --- updated-dependencies: - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.OpenApi dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL dependency-version: 10.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: System.IdentityModel.Tokens.Jwt dependency-version: 8.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] --- BackendApi.csproj | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/BackendApi.csproj b/BackendApi.csproj index 7835bc5..2f1aa35 100644 --- a/BackendApi.csproj +++ b/BackendApi.csproj @@ -28,20 +28,20 @@ - - + + all runtime; build; native; contentfiles; analyzers; buildtransitive - + runtime; build; native; contentfiles; analyzers; buildtransitive all - - + + - + From a82fa7761a5a5c36ee9f06fc8ca8c8bf8a28102f Mon Sep 17 00:00:00 2001 From: Ruthvik Anne Date: Sun, 26 Jul 2026 19:52:20 +0530 Subject: [PATCH 2/2] fix: pin Microsoft.EntityFrameworkCore.Relational to unblock this bump's build This bump raises Microsoft.EntityFrameworkCore.Design to 10.0.10, which floors Microsoft.EntityFrameworkCore.Relational at 10.0.10. Without an explicit direct reference, Npgsql.EntityFrameworkCore.PostgreSQL 10.0.3 still only floors Relational at 10.0.4, so BackendApi.Tests (which references Microsoft.EntityFrameworkCore.InMemory 10.0.9, itself requiring EFCore >= 10.0.9) picks up a mismatched, lower-than-required EFCore/Relational at build time and fails with CS1705. PR #10 (not yet merged) fixes the pre-existing MSB3277 warning version of this same class of problem by pinning Relational to 10.0.9, matching Design's pre-bump version. That exact pin reintroduces the conflict here as a hard NU1605 downgrade error, since Design is now 10.0.10 - so this pins to 10.0.10 instead, matching Design's version after this bump. --- BackendApi.csproj | 1 + 1 file changed, 1 insertion(+) diff --git a/BackendApi.csproj b/BackendApi.csproj index 2f1aa35..3ac0e25 100644 --- a/BackendApi.csproj +++ b/BackendApi.csproj @@ -38,6 +38,7 @@ runtime; build; native; contentfiles; analyzers; buildtransitive all +