From 0852f4504c0374d0b3c3e552d6f0ddb811a975fa Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 29 Jun 2026 14:34:05 +0000 Subject: [PATCH 1/6] Bump actions/cache from 5 to 6 Bumps [actions/cache](https://github.com/actions/cache) from 5 to 6. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v5...v6) --- updated-dependencies: - dependency-name: actions/cache dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/build.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 997f7f92d..dd4e4a85b 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -41,7 +41,7 @@ jobs: - name: Build run: dotnet build --no-restore - name: Save build artifacts - uses: actions/cache/save@v5 + uses: actions/cache/save@v6 with: path: . key: ${{ env.CACHE_KEY }} @@ -56,7 +56,7 @@ jobs: with: dotnet-version: 8.0.x - name: Restore build artifacts - uses: actions/cache/restore@v5 + uses: actions/cache/restore@v6 with: path: . key: ${{ env.CACHE_KEY }} @@ -83,7 +83,7 @@ jobs: with: dotnet-version: 8.0.x - name: Restore build artifacts - uses: actions/cache/restore@v5 + uses: actions/cache/restore@v6 with: path: . key: ${{ env.CACHE_KEY }} @@ -109,7 +109,7 @@ jobs: with: dotnet-version: 8.0.x - name: Restore build artifacts - uses: actions/cache/restore@v5 + uses: actions/cache/restore@v6 with: path: . key: ${{ env.CACHE_KEY }} From 650f93f3b8799b8387ff4e1d87170c85f03c6f85 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 29 Jun 2026 14:34:00 +0000 Subject: [PATCH 2/6] Bump snyk/actions/dotnet from 0.4.0 to 1.0.0 Bumps [snyk/actions/dotnet](https://github.com/snyk/actions) from 0.4.0 to 1.0.0. - [Release notes](https://github.com/snyk/actions/releases) - [Commits](https://github.com/snyk/actions/compare/b98d498629f1c368650224d6d212bf7dfa89e4bf...9adf32b1121593767fc3c057af55b55db032dc04) --- updated-dependencies: - dependency-name: snyk/actions/dotnet dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/snyk.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml index d78eb06bf..6b5d11a18 100644 --- a/.github/workflows/snyk.yml +++ b/.github/workflows/snyk.yml @@ -42,7 +42,7 @@ jobs: run: dotnet restore - name: Run Snyk to check for vulnerabilities - uses: snyk/actions/dotnet@b98d498629f1c368650224d6d212bf7dfa89e4bf # pin@0.4.0 + uses: snyk/actions/dotnet@9adf32b1121593767fc3c057af55b55db032dc04 # pin@1.0.0 env: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} with: From 9d4b6236bd01f6cb316e6c0c7c06bbeefda5de84 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 22 Jun 2026 14:33:56 +0000 Subject: [PATCH 3/6] Bump actions/checkout from 5 to 7 Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v5...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/build.yml | 8 ++++---- .github/workflows/nuget-release.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/rl-secure.yml | 2 +- .github/workflows/snyk.yml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index dd4e4a85b..67d143b7e 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -31,7 +31,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Setup .NET uses: actions/setup-dotnet@v5 with: @@ -50,7 +50,7 @@ jobs: runs-on: ubuntu-latest name: Test Auth0.Core steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Setup .NET uses: actions/setup-dotnet@v5 with: @@ -77,7 +77,7 @@ jobs: runs-on: ubuntu-latest name: Test Auth0.AuthenticationApi steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Setup .NET uses: actions/setup-dotnet@v5 with: @@ -103,7 +103,7 @@ jobs: runs-on: ubuntu-latest name: Test Auth0.ManagementApi steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Setup .NET uses: actions/setup-dotnet@v5 with: diff --git a/.github/workflows/nuget-release.yml b/.github/workflows/nuget-release.yml index f947e0f84..a5eeaf924 100644 --- a/.github/workflows/nuget-release.yml +++ b/.github/workflows/nuget-release.yml @@ -29,7 +29,7 @@ jobs: steps: # Checkout the code - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: fetch-depth: 0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 232883bc7..7888b825c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -94,7 +94,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: fetch-depth: 0 diff --git a/.github/workflows/rl-secure.yml b/.github/workflows/rl-secure.yml index 762cfd846..a4c2a8aef 100644 --- a/.github/workflows/rl-secure.yml +++ b/.github/workflows/rl-secure.yml @@ -38,7 +38,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: fetch-depth: 0 diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml index 6b5d11a18..5c2946f0c 100644 --- a/.github/workflows/snyk.yml +++ b/.github/workflows/snyk.yml @@ -29,7 +29,7 @@ jobs: - if: github.actor == 'dependabot[bot]' || github.event_name == 'merge_group' run: exit 0 # Skip unnecessary test runs for dependabot and merge queues. Artifically flag as successful, as this is a required check for branch protection. - - uses: actions/checkout@v5 + - uses: actions/checkout@v7 with: ref: ${{ github.event.pull_request.merge_commit_sha || github.ref }} From 93fb49cc485a4e884eb0c045b284b65721a991c3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 9 Jun 2026 12:28:33 +0000 Subject: [PATCH 4/6] Bump codecov/codecov-action from 6.0.0 to 7.0.0 Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.0 to 7.0.0. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codecov/codecov-action/compare/57e3a136b779b570ffcdbf80b3bdc90e7fab3de2...fb8b3582c8e4def4969c97caa2f19720cb33a72f) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/build.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 67d143b7e..9b782b0b5 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -64,7 +64,7 @@ jobs: run: dotnet test tests/Auth0.Core.UnitTests/Auth0.Core.UnitTests.csproj --collect:"XPlat Code coverage" --results-directory ./TestResults/ /p:CollectCoverage=true /p:CoverletOutputFormat=cobertura - name: Update codecov report - uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # pin@6.0.0 + uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # pin@7.0.0 with: token: ${{ secrets.CODECOV_TOKEN }} files: ./TestResults/**/coverage.cobertura.xml @@ -91,7 +91,7 @@ jobs: run: dotnet test tests/Auth0.AuthenticationApi.IntegrationTests/Auth0.AuthenticationApi.IntegrationTests.csproj --collect:"XPlat Code coverage" --results-directory ./TestResults/ /p:CollectCoverage=true /p:CoverletOutputFormat=cobertura - name: Update codecov report - uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # pin@6.0.0 + uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # pin@7.0.0 with: token: ${{ secrets.CODECOV_TOKEN }} files: ./TestResults/**/coverage.cobertura.xml @@ -119,7 +119,7 @@ jobs: dotnet test tests/Auth0.ManagementApi.Test/Auth0.ManagementApi.Test.csproj --collect:"XPlat Code coverage" --results-directory ./TestResults/ /p:CollectCoverage=true /p:CoverletOutputFormat=cobertura - name: Update codecov report - uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # pin@6.0.0 + uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # pin@7.0.0 with: token: ${{ secrets.CODECOV_TOKEN }} files: ./TestResults/**/coverage.cobertura.xml From a7b072625fd0211e5d07ec56402794bfead77394 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 29 Jun 2026 04:59:02 +0000 Subject: [PATCH 5/6] Bump Microsoft.IdentityModel.Protocols.OpenIdConnect and System.IdentityModel.Tokens.Jwt Bumps Microsoft.IdentityModel.Protocols.OpenIdConnect from 8.18.0 to 8.19.1 Bumps System.IdentityModel.Tokens.Jwt from 8.18.0 to 8.19.1 --- updated-dependencies: - dependency-name: Microsoft.IdentityModel.Protocols.OpenIdConnect dependency-version: 8.19.1 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: System.IdentityModel.Tokens.Jwt dependency-version: 8.19.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- src/Auth0.AuthenticationApi/Auth0.AuthenticationApi.csproj | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/Auth0.AuthenticationApi/Auth0.AuthenticationApi.csproj b/src/Auth0.AuthenticationApi/Auth0.AuthenticationApi.csproj index 3705a8255..7dc9a5e6a 100644 --- a/src/Auth0.AuthenticationApi/Auth0.AuthenticationApi.csproj +++ b/src/Auth0.AuthenticationApi/Auth0.AuthenticationApi.csproj @@ -16,8 +16,8 @@ - - + + From 43ad1e4e06570df337b2651d60582cb7a1761a9f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 27 May 2026 17:21:31 +0000 Subject: [PATCH 6/6] Bump PolySharp from 1.15.0 to 1.16.0 --- updated-dependencies: - dependency-name: PolySharp dependency-version: 1.16.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- src/Auth0.ManagementApi/Auth0.ManagementApi.Custom.props | 2 +- src/Directory.Build.props | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/Auth0.ManagementApi/Auth0.ManagementApi.Custom.props b/src/Auth0.ManagementApi/Auth0.ManagementApi.Custom.props index 0c2b09e14..e3030f33b 100644 --- a/src/Auth0.ManagementApi/Auth0.ManagementApi.Custom.props +++ b/src/Auth0.ManagementApi/Auth0.ManagementApi.Custom.props @@ -12,7 +12,7 @@ then re-add a single canonical reference to silence NU1504. --> - + all runtime; build; native; contentfiles; analyzers; buildtransitive diff --git a/src/Directory.Build.props b/src/Directory.Build.props index 0e4a38afc..124418525 100644 --- a/src/Directory.Build.props +++ b/src/Directory.Build.props @@ -7,7 +7,7 @@ enable - + all runtime; build; native; contentfiles; analyzers; buildtransitive