Skip to content

Bump Microsoft.AspNetCore.Authentication.JwtBearer and 5 others - #2

Open
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/nuget/minor-and-patch-f83a90de8d
Open

Bump Microsoft.AspNetCore.Authentication.JwtBearer and 5 others#2
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/nuget/minor-and-patch-f83a90de8d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.OpenApi from 2.10.0 to 2.11.0.

Release notes

Sourced from Microsoft.OpenApi's releases.

2.11.0

2.11.0 (2026-07-15)

Features

Bug Fixes

  • adds explicit error message for invalid json pointers (#​2955) (a304e56)
  • differentiate unset value from null value in OpenApiSchema.Const (#​2936) (a8787af)
  • differentiate unset value from null value in OpenApiSchema.Const (#​2936) (e08570f)
  • handle nullability more accurately during serialization for 3.0/2.0 (#​2933) (bc11356)
  • handle nullability more accurately during serialization for 3.0/2.0 (#​2933) (310b6e2)

Commits viewable in compare view.

Updated Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.2 to 10.0.3.

Release notes

Sourced from Npgsql.EntityFrameworkCore.PostgreSQL's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated System.IdentityModel.Tokens.Jwt from 8.19.1 to 8.21.0.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

8.20.0

Performance Improvements

  • Add JsonWebToken header-replacement path to avoid re-parsing payload. See PR #​3552.
  • Add claims dictionary preallocation. See PR #​3542.

Bug Fixes

  • Fix CI build failures: remove unused log message and add missing DPoP API entries. See PR #​3551.

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.19.2...8.20.0

8.19.2

What's Changed

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.19.1...8.19.2

Commits viewable in compare view.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Jul 23, 2026
@dependabot dependabot Bot changed the title Bump the minor-and-patch group with 6 updates Bump Microsoft.AspNetCore.Authentication.JwtBearer and 5 others Jul 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/nuget/minor-and-patch-f83a90de8d branch from e0d9413 to d8770de Compare July 23, 2026 19:56
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.9 to 10.0.10
Bumps Microsoft.AspNetCore.OpenApi from 10.0.9 to 10.0.10
Bumps Microsoft.EntityFrameworkCore.Design from 10.0.9 to 10.0.10
Bumps Microsoft.OpenApi from 2.10.0 to 2.11.0
Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.2 to 10.0.3
Bumps System.IdentityModel.Tokens.Jwt from 8.19.1 to 8.21.0

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.OpenApi
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL
  dependency-version: 10.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-version: 8.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/nuget/minor-and-patch-f83a90de8d branch from d8770de to fffb87b Compare July 26, 2026 10:40
…p's build

This bump raises Microsoft.EntityFrameworkCore.Design to 10.0.10, which
floors Microsoft.EntityFrameworkCore.Relational at 10.0.10. Without an
explicit direct reference, Npgsql.EntityFrameworkCore.PostgreSQL 10.0.3
still only floors Relational at 10.0.4, so BackendApi.Tests (which
references Microsoft.EntityFrameworkCore.InMemory 10.0.9, itself
requiring EFCore >= 10.0.9) picks up a mismatched, lower-than-required
EFCore/Relational at build time and fails with CS1705.

PR #10 (not yet merged) fixes the pre-existing MSB3277 warning version of
this same class of problem by pinning Relational to 10.0.9, matching
Design's pre-bump version. That exact pin reintroduces the conflict here
as a hard NU1605 downgrade error, since Design is now 10.0.10 - so this
pins to 10.0.10 instead, matching Design's version after this bump.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant