Skip to content

[main] Update dependencies from dotnet/diagnostics#9613

Merged
dotnet-maestro[bot] merged 1 commit into
mainfrom
darc-main-1ee72f36-65b5-4a10-8773-2a2cbc519fa9
Jul 13, 2026
Merged

[main] Update dependencies from dotnet/diagnostics#9613
dotnet-maestro[bot] merged 1 commit into
mainfrom
darc-main-1ee72f36-65b5-4a10-8773-2a2cbc519fa9

Conversation

@dotnet-maestro

Copy link
Copy Markdown
Contributor

This pull request updates the following dependencies

From https://github.com/dotnet/diagnostics

…20260712.1

On relative base path root
Microsoft.Diagnostics.Monitoring , Microsoft.Diagnostics.Monitoring.EventPipe From Version 10.0.0-preview.26361.1 -> To Version 10.0.0-preview.26362.1
Microsoft.FileFormats From Version 1.0.736101 -> To Version 1.0.736201

@dotnet-policy-service dotnet-policy-service Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approving dependency update.

@dotnet-policy-service dotnet-policy-service Bot added automatic-pr Pull requests that are automated by bots dependencies Pull requests that update a dependency file labels Jul 13, 2026
@dotnet-maestro
dotnet-maestro Bot merged commit b5f655c into main Jul 13, 2026
25 checks passed
@dotnet-maestro
dotnet-maestro Bot deleted the darc-main-1ee72f36-65b5-4a10-8773-2a2cbc519fa9 branch July 13, 2026 02:45
wiktork added a commit that referenced this pull request Jul 16, 2026
* Update dependencies from https://github.com/dotnet/diagnostics build 20260707.1 (#9606)

[main] Update dependencies from dotnet/diagnostics

* Pin Microsoft.OpenApi to 2.7.5 (#9607)

* Pin Microsoft.OpenApi to 2.7.5 to address GHSA-v5pm-xwqc-g5wc

Microsoft.AspNetCore.OpenApi transitively pulls Microsoft.OpenApi 2.0.0, which has a known high severity vulnerability (NU1903). Transitive-pin it to the patched 2.7.5 and keep the Microsoft.OpenApi.Readers 1.x consumer on 1.6.29 via VersionOverride.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Use Microsoft.OpenApi 2.7.5 everywhere; migrate tests off Microsoft.OpenApi.Readers

Per PR feedback, drop the VersionOverride/downversioning for the OpenApiGen tests. Migrate the test to the Microsoft.OpenApi 2.x reader/validation API (OpenApiDocument.LoadAsync) and remove the now-unused Microsoft.OpenApi.Readers 1.x package.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Update dependencies from https://github.com/dotnet/diagnostics build 20260710.1 (#9610)

[main] Update dependencies from dotnet/diagnostics

* Update dependencies from https://github.com/dotnet/arcade build 20260708.3 (#9611)

[main] Update dependencies from dotnet/arcade

* Update dependencies from https://github.com/dotnet/diagnostics build 20260711.1 (#9612)

[main] Update dependencies from dotnet/diagnostics

* Update dependencies from https://github.com/dotnet/diagnostics build 20260712.1 (#9613)

[main] Update dependencies from dotnet/diagnostics

* generate release notes (#9609)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

* Update dependencies from https://github.com/dotnet/diagnostics build 20260713.1 (#9614)

[main] Update dependencies from dotnet/diagnostics

* Update dependencies from https://github.com/dotnet/diagnostics build 20260714.1 (#9616)

[main] Update dependencies from dotnet/diagnostics

* Update release approval group to NETMonitor alias (#9617)

Replace obsolete '.NET Monitor Working Group' with NETMonitor@service.microsoft.com in the ManualValidation notifyUsers/approvers of dotnet-monitor-publish.yml.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 182ebfa1-4c84-45a3-b0ab-0ef76501ecfe

* Try empty approvers (#9636)

* Try empty approvers

* Update approvers to group

* [main] Bump the runtime-dependencies group with 2 updates (#9620)

Bumps Microsoft.NETCore.DotNetHost from 8.0.28 to 8.0.29
Bumps System.Text.Json from 10.0.9 to 10.0.10

---
updated-dependencies:
- dependency-name: Microsoft.NETCore.DotNetHost
  dependency-version: 8.0.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
- dependency-name: System.Text.Json
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* [main] Bump the runtime-dependencies group with 5 updates (#9630)

Bumps Microsoft.Extensions.Configuration.Abstractions from 10.0.9 to 10.0.10
Bumps Microsoft.Extensions.Logging from 10.0.9 to 10.0.10
Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.9 to 10.0.10
Bumps Microsoft.Extensions.Logging.Console from 10.0.9 to 10.0.10
Bumps System.Text.Json from 10.0.9 to 10.0.10

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Configuration.Abstractions
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
- dependency-name: Microsoft.Extensions.Logging
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
- dependency-name: Microsoft.Extensions.Logging.Console
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
- dependency-name: System.Text.Json
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* [main] Bump Microsoft.NETCore.DotNetAppHost from 10.0.9 to 10.0.10 (#9635)

---
updated-dependencies:
- dependency-name: Microsoft.NETCore.DotNetAppHost
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Temporarily turn off sbom validation (#9637)

* Update dependencies from https://github.com/dotnet/diagnostics build 20260715.1 (#9638)

[main] Update dependencies from dotnet/diagnostics

* Try explicit sbom enable (#9639)

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dotnet-maestro[bot] <42748379+dotnet-maestro[bot]@users.noreply.github.com>
Co-authored-by: kkeirstead <85592574+kkeirstead@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automatic-pr Pull requests that are automated by bots dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants