From e509bdae45cbd2e70449113d77ead7226fa7b9d0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 14 Jul 2026 06:12:13 +0000
Subject: [PATCH] Bump coverlet.collector and 8 others

Bumps coverlet.collector from 6.0.4 to 10.0.1
Bumps coverlet.msbuild from 6.0.4 to 10.0.1
Bumps Meziantou.Analyzer from 2.0.302 to 3.0.123
Bumps Microsoft.AspNetCore.OpenApi from 10.0.7 to 10.0.9
Bumps Microsoft.NET.Test.Sdk from 17.14.1 to 18.7.0
Bumps Microsoft.OpenApi from 2.9.0 to 3.8.0
Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.2 to 10.0.3
Bumps NSubstitute from 5.3.0 to 6.0.0
Bumps Scalar.AspNetCore from 2.16.10 to 2.16.11

---
updated-dependencies:
- dependency-name: coverlet.collector
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-dependencies
- dependency-name: coverlet.msbuild
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-dependencies
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.123
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-dependencies
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-dependencies
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.7.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-dependencies
- dependency-name: Microsoft.OpenApi
  dependency-version: 3.8.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-dependencies
- dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL
  dependency-version: 10.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-dependencies
- dependency-name: NSubstitute
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-dependencies
- dependency-name: Scalar.AspNetCore
  dependency-version: 2.16.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 backend/Directory.Build.props       | 2 +-
 backend/src/UKPS.Api.csproj         | 8 ++++----
 backend/tests/UKPS.Api.Tests.csproj | 8 ++++----
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/backend/Directory.Build.props b/backend/Directory.Build.props
index b90d524..0771d6a 100644
--- a/backend/Directory.Build.props
+++ b/backend/Directory.Build.props
@@ -8,7 +8,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Meziantou.Analyzer" Version="2.*" PrivateAssets="all" />
+    <PackageReference Include="Meziantou.Analyzer" Version="3.*" PrivateAssets="all" />
     <PackageReference Include="Roslynator.Analyzers" Version="4.*" PrivateAssets="all" />
     <PackageReference Include="SonarAnalyzer.CSharp" Version="10.*" PrivateAssets="all" />
   </ItemGroup>
diff --git a/backend/src/UKPS.Api.csproj b/backend/src/UKPS.Api.csproj
index 48ed618..e97bf86 100644
--- a/backend/src/UKPS.Api.csproj
+++ b/backend/src/UKPS.Api.csproj
@@ -12,15 +12,15 @@
   <ItemGroup>
     <PackageReference Include="EFCore.NamingConventions" Version="10.0.1" />
     <PackageReference Include="Microsoft.EntityFrameworkCore.Relational" Version="10.0.9" />
-    <PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="10.0.7" />
+    <PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="10.0.9" />
     <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.9">
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>
     <!-- TODO URP 300: This overrides the dependency (marked as vulnerable) from the Microsoft.AspNetCore.OpenApi.
     Once this package is updated to not have a vulnerable dependency this can be removed. -->
-    <PackageReference Include="Microsoft.OpenApi" Version="2.9.0" />
-    <PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.2" />
-    <PackageReference Include="Scalar.AspNetCore" Version="2.16.10" />
+    <PackageReference Include="Microsoft.OpenApi" Version="3.8.0" />
+    <PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.3" />
+    <PackageReference Include="Scalar.AspNetCore" Version="2.16.11" />
   </ItemGroup>
 </Project>
diff --git a/backend/tests/UKPS.Api.Tests.csproj b/backend/tests/UKPS.Api.Tests.csproj
index f7f77fa..c90919a 100644
--- a/backend/tests/UKPS.Api.Tests.csproj
+++ b/backend/tests/UKPS.Api.Tests.csproj
@@ -17,11 +17,11 @@
 
   <ItemGroup>
     <PackageReference Include="Bogus" Version="35.6.5" />
-    <PackageReference Include="coverlet.collector" Version="6.0.4" />
-    <PackageReference Include="coverlet.msbuild" Version="6.0.4" PrivateAssets="all" />
+    <PackageReference Include="coverlet.collector" Version="10.0.1" />
+    <PackageReference Include="coverlet.msbuild" Version="10.0.1" PrivateAssets="all" />
     <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.9" />
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
-    <PackageReference Include="NSubstitute" Version="5.3.0" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.7.0" />
+    <PackageReference Include="NSubstitute" Version="6.0.0" />
     <PackageReference Include="Respawn" Version="7.0.0" />
     <PackageReference Include="Shouldly" Version="4.3.0" />
     <PackageReference Include="Testcontainers.PostgreSql" Version="4.13.0" />