Bump the all-updates group with 17 updates by dependabot[bot] · Pull Request #731 · frasermolyneux/geo-location

dependabot · 2026-07-19T03:48:16Z

Updated MaxMind.GeoIP2 from 6.0.0 to 6.1.0.

Release notes

Sourced from MaxMind.GeoIP2's releases.

6.1.0

A new Residential property has been added to
MaxMind.GeoIP2.Model.Anonymizer. This is of the new
MaxMind.GeoIP2.Model.AnonymizerFeed record type and provides residential
proxy data for the network: Confidence, NetworkLastSeen (DateOnly on
.NET 6.0+), and ProviderName. Anonymizer.Residential may be populated even
when none of the other Anonymizer properties are set. If there is no
residential proxy data for the network, this will be an empty object. This is
available from the GeoIP Insights web service.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 9.0.17 to 9.0.18.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

9.0.18

Release

What's Changed

Update branding to 9.0.18 by @vseanreesermsft in Update branding to 9.0.18 dotnet/aspnetcore#66983
[release/9.0] (deps): Bump src/submodules/googletest from d72f9c8 to a721f1b by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from d72f9c8 to a721f1b dotnet/aspnetcore#66974
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#66717
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#66640
[release/9.0] Update dependencies from dotnet/source-build-assets by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#66992
[release/9.0] Add 1ES Unofficial pipeline for Components E2E tests by @wtgodbe in [release/9.0] Add 1ES Unofficial pipeline for Components E2E tests dotnet/aspnetcore#66988
[release/9.0] Bump Crypto.Xml to 8.0.3 for RepoTasks by @wtgodbe in [release/9.0] Bump Crypto.Xml to 8.0.3 for RepoTasks dotnet/aspnetcore#66765
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#67104
[release/9.0] Update npm dependencies by @wtgodbe in [release/9.0] Update npm dependencies dotnet/aspnetcore#67143
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#67057
[release/9.0] Update Microsoft Identity Web package versions to 3.15.1 by @wtgodbe in [release/9.0] Update Microsoft Identity Web package versions to 3.15.1 dotnet/aspnetcore#67163
[release/9.0] (deps): Bump src/submodules/googletest from a721f1b to 7140cd4 by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from a721f1b to 7140cd4 dotnet/aspnetcore#67217
[release/9.0] Update dependencies from dotnet/source-build-assets by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#67113
[release/9.0] Reject ASCII control characters in cookie auth return URLs by @github-actions[bot] in [release/9.0] Reject ASCII control characters in cookie auth return URLs dotnet/aspnetcore#67156

Full Changelog: dotnet/aspnetcore@v9.0.17...v9.0.18

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 9.0.17 to 9.0.18.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

9.0.18

Release

What's Changed

Update branding to 9.0.18 by @vseanreesermsft in Update branding to 9.0.18 dotnet/aspnetcore#66983
[release/9.0] (deps): Bump src/submodules/googletest from d72f9c8 to a721f1b by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from d72f9c8 to a721f1b dotnet/aspnetcore#66974
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#66717
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#66640
[release/9.0] Update dependencies from dotnet/source-build-assets by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#66992
[release/9.0] Add 1ES Unofficial pipeline for Components E2E tests by @wtgodbe in [release/9.0] Add 1ES Unofficial pipeline for Components E2E tests dotnet/aspnetcore#66988
[release/9.0] Bump Crypto.Xml to 8.0.3 for RepoTasks by @wtgodbe in [release/9.0] Bump Crypto.Xml to 8.0.3 for RepoTasks dotnet/aspnetcore#66765
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#67104
[release/9.0] Update npm dependencies by @wtgodbe in [release/9.0] Update npm dependencies dotnet/aspnetcore#67143
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#67057
[release/9.0] Update Microsoft Identity Web package versions to 3.15.1 by @wtgodbe in [release/9.0] Update Microsoft Identity Web package versions to 3.15.1 dotnet/aspnetcore#67163
[release/9.0] (deps): Bump src/submodules/googletest from a721f1b to 7140cd4 by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from a721f1b to 7140cd4 dotnet/aspnetcore#67217
[release/9.0] Update dependencies from dotnet/source-build-assets by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#67113
[release/9.0] Reject ASCII control characters in cookie auth return URLs by @github-actions[bot] in [release/9.0] Reject ASCII control characters in cookie auth return URLs dotnet/aspnetcore#67156

Full Changelog: dotnet/aspnetcore@v9.0.17...v9.0.18

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Abstractions from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Caching.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Memory from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Caching.Memory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Abstractions from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Configuration.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Configuration.EnvironmentVariables's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Json from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Configuration.Json's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 4.13.0 to 4.13.2.

Release notes

Sourced from Microsoft.Identity.Web's releases.

4.13.2 What's Changed

Apply reserved-header handling on the request-clone path and cover all X-MS-TOKEN- headers by @iNinja in Apply reserved-header handling on the request-clone path and cover all X-MS-TOKEN- headers AzureAD/microsoft-identity-web#3915
Restore independent PR pipeline + pool-aware MI identity + net462/472 unit tests by @iarekk in Restore independent PR pipeline + pool-aware MI identity + net462/472 unit tests AzureAD/microsoft-identity-web#3935
Post-release 4.13.0: changelog and public API shipped move by @neha-bhargava in Post-release 4.13.0: changelog and public API shipped move AzureAD/microsoft-identity-web#3937
Remove redundant 'Run unit tests' GitHub Action by @iarekk in Remove redundant 'Run unit tests' GitHub Action AzureAD/microsoft-identity-web#3939
Apply consistent redirect-URI validation on AccountController.SignIn by @iNinja in Apply consistent redirect-URI validation on AccountController.SignIn AzureAD/microsoft-identity-web#3940
Fix duplicate logging of MsalUiRequiredException (in-repo copy of #3910) by @iarekk in Fix duplicate logging of MsalUiRequiredException (in-repo copy of #3910) AzureAD/microsoft-identity-web#3941
Use MSAL's recent UserFIC API for agentic flows by @Avery-Dunn in Use MSAL's recent UserFIC API for agentic flows AzureAD/microsoft-identity-web#3842
Restore CustomizeHttpRequestMessage to run after the authorization header by @neha-bhargava in Restore CustomizeHttpRequestMessage to run after the authorization header AzureAD/microsoft-identity-web#3943
Bump Microsoft.IdentityModel.Tokens.Saml from 5.7.0 to 8.19.1 by @dependabot[bot] in Bump Microsoft.IdentityModel.Tokens.Saml from 5.7.0 to 8.19.1 AzureAD/microsoft-identity-web#3909
Revert #3909: keep OWIN Saml/WsFederation on 5.7.0 by @iarekk in Revert #3909: keep OWIN Saml/WsFederation on 5.7.0 AzureAD/microsoft-identity-web#3944
Bump Microsoft.Identity.Abstractions from 12.4.0 to 12.5.0 by @neha-bhargava in Bump Microsoft.Identity.Abstractions from 12.4.0 to 12.5.0 AzureAD/microsoft-identity-web#3947
Add OnBeforeAuthHeaderCreation / OnAfterAuthHeaderCreation hooks to DownstreamApi by @neha-bhargava in Add OnBeforeAuthHeaderCreation / OnAfterAuthHeaderCreation hooks to DownstreamApi AzureAD/microsoft-identity-web#3942
Update IdentityModelV5Version and SamlPackageVersion to 5.7.1 in proj… by @trwalke in Update IdentityModelV5Version and SamlPackageVersion to 5.7.1 in proj… AzureAD/microsoft-identity-web#3950
Rename retired MSALMSIV2 agent pool to MISEManagedIdentity by @gladjohn with @Copilot in Rename retired MSALMSIV2 agent pool to MISEManagedIdentity AzureAD/microsoft-identity-web#3949
Improve IDW10109 error handling for credential loading failures by @Avery-Dunn in Improve IDW10109 error handling for credential loading failures AzureAD/microsoft-identity-web#3946
Bump MSAL dependencies to 4.86.1 in central props by @gladjohn with @Copilot in Bump MSAL dependencies to 4.86.1 in central props AzureAD/microsoft-identity-web#3953
Bump the notsecurity group with 3 updates by @dependabot[bot] in Bump the notsecurity group with 3 updates AzureAD/microsoft-identity-web#3954

Full Changelog: AzureAD/microsoft-identity-web@4.13.0...4.13.2

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.8.1 What's Changed

Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) by @nohwnd in Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) microsoft/vstest#16281

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0 What's Changed

Migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) by @nohwnd in feat: migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) microsoft/vstest#15687
- For more detail refer to https://devblogs.microsoft.com/dotnet/vs-test-is-removing-its-newtonsoft-json-dependency/
Create source-only filter package by @Youssef1313 in Create source-only filter package microsoft/vstest#15638
Add ARM64 msdia140.dll support to test platform packages by @nohwnd in Cherry-pick: Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15692
Fix mutex cleanup crash on macOS/Linux by @nohwnd in Fix mutex cleanup crash on macOS/Linux microsoft/vstest#15684
Restrict artifact temp directory permissions on Unix by @nohwnd in Restrict artifact temp directory permissions on Unix microsoft/vstest#15729
Add support for filtering uncategorized tests with TestCategory=None by @Evangelink in Add support for filtering uncategorized tests with TestCategory=None microsoft/vstest#15727
Fix SCI binding failure in DTA hosts (main) by @nohwnd in Fix SCI binding failure in DTA hosts (main) microsoft/vstest#15724
Fix HTML logger parallel file collision by @nohwnd in [fix] Fix HTML logger parallel file collision microsoft/vstest#15435
Improve error message when testhost cannot be found by @nohwnd in [fix] Improve error message when testhost cannot be found microsoft/vstest#16053
Fix HTML logger exception on invalid XML chars in test display names by @nohwnd in [fix] Fix HTML logger exception on invalid XML chars in test display names microsoft/vstest#16051

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

Commits viewable in compare view.

Updated Scalar.AspNetCore from 2.16.11 to 2.16.15.

Release notes

Sourced from Scalar.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated System.Security.Cryptography.Xml from 10.0.9 to 10.0.10.

Release notes

Sourced from System.Security.Cryptography.Xml's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps MaxMind.GeoIP2 from 6.0.0 to 6.1.0 Bumps Microsoft.AspNetCore.Mvc.Testing from 9.0.17 to 9.0.18 Bumps Microsoft.AspNetCore.OpenApi from 9.0.17 to 9.0.18 Bumps Microsoft.Extensions.Caching.Abstractions from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Caching.Memory from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Configuration from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Configuration.Abstractions from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Configuration.Json from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.DependencyInjection from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Logging from 10.0.9 to 10.0.10 Bumps Microsoft.Identity.Web from 4.13.0 to 4.13.2 Bumps Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1 Bumps Scalar.AspNetCore from 2.16.11 to 2.16.15 Bumps System.Security.Cryptography.Xml from 10.0.9 to 10.0.10 --- updated-dependencies: - dependency-name: MaxMind.GeoIP2 dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 9.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 9.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 9.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Extensions.Caching.Abstractions dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Extensions.Caching.Memory dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Extensions.Caching.Memory dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Extensions.Configuration dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Extensions.Configuration.Abstractions dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Extensions.Configuration dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Extensions.Configuration.EnvironmentVariables dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Extensions.Configuration.Json dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Extensions.DependencyInjection dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Extensions.Logging dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Extensions.Logging dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Identity.Web dependency-version: 4.13.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: Scalar.AspNetCore dependency-version: 2.16.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: System.Security.Cryptography.Xml dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-19T03:48:35Z

Dependency Review

The following issues were found:

✅ 0 vulnerable package(s)
✅ 0 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
⚠️ 36 package(s) with unknown licenses.

See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 3599b63.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

src/MX.GeoLocation.Api.Client.IntegrationTests/MX.GeoLocation.Api.Client.IntegrationTests.csproj

Package	Version	License	Issue Type
Microsoft.AspNetCore.Mvc.Testing	9.0.18	Null	Unknown License
Microsoft.NET.Test.Sdk	18.8.1	Null	Unknown License

src/MX.GeoLocation.Api.Client.Testing.Tests/MX.GeoLocation.Api.Client.Testing.Tests.csproj

Package	Version	License	Issue Type
Microsoft.Extensions.DependencyInjection	10.0.10	Null	Unknown License
Microsoft.NET.Test.Sdk	18.8.1	Null	Unknown License

src/MX.GeoLocation.Api.Client.Testing/MX.GeoLocation.Api.Client.Testing.csproj

Package	Version	License	Issue Type
Microsoft.Extensions.DependencyInjection.Abstractions	10.0.10	Null	Unknown License

src/MX.GeoLocation.Api.Client.Tests.V1/MX.GeoLocation.Api.Client.Tests.V1.csproj

Package	Version	License	Issue Type
Microsoft.Extensions.Logging	10.0.10	Null	Unknown License
Microsoft.NET.Test.Sdk	18.8.1	Null	Unknown License

src/MX.GeoLocation.Api.Client.V1/MX.GeoLocation.Api.Client.V1.csproj

Package	Version	License	Issue Type
Microsoft.Extensions.Caching.Abstractions	10.0.10	Null	Unknown License
Microsoft.Extensions.Configuration	10.0.10	Null	Unknown License
Microsoft.Extensions.Configuration.Abstractions	10.0.10	Null	Unknown License
Microsoft.Extensions.DependencyInjection	10.0.10	Null	Unknown License
Microsoft.Extensions.DependencyInjection.Abstractions	10.0.10	Null	Unknown License
Microsoft.Extensions.Logging	10.0.10	Null	Unknown License
Microsoft.Extensions.Logging.Abstractions	10.0.10	Null	Unknown License
Microsoft.Extensions.Options	10.0.10	Null	Unknown License

src/MX.GeoLocation.Api.IntegrationTests/MX.GeoLocation.Api.IntegrationTests.csproj

Package	Version	License	Issue Type
Microsoft.AspNetCore.Mvc.Testing	9.0.18	Null	Unknown License
Microsoft.NET.Test.Sdk	18.8.1	Null	Unknown License

src/MX.GeoLocation.Api.Tests.V1/MX.GeoLocation.Api.Tests.V1.csproj

Package	Version	License	Issue Type
Microsoft.NET.Test.Sdk	18.8.1	Null	Unknown License

src/MX.GeoLocation.Api.V1/MX.GeoLocation.Api.V1.csproj

Package	Version	License	Issue Type
MaxMind.GeoIP2	6.1.0	Null	Unknown License
Microsoft.AspNetCore.OpenApi	9.0.18	Null	Unknown License
Microsoft.Extensions.Caching.Memory	10.0.10	Null	Unknown License
Microsoft.Extensions.Diagnostics.HealthChecks	10.0.10	Null	Unknown License
Microsoft.Identity.Web	4.13.2	Null	Unknown License
Scalar.AspNetCore	2.16.15	Null	Unknown License
System.Security.Cryptography.Xml	10.0.10	Null	Unknown License

src/MX.GeoLocation.Web.IntegrationTests/MX.GeoLocation.Web.IntegrationTests.csproj

Package	Version	License	Issue Type
Microsoft.AspNetCore.Mvc.Testing	9.0.18	Null	Unknown License
Microsoft.Extensions.Configuration	10.0.10	Null	Unknown License
Microsoft.Extensions.Configuration.EnvironmentVariables	10.0.10	Null	Unknown License
Microsoft.Extensions.Configuration.Json	10.0.10	Null	Unknown License
Microsoft.NET.Test.Sdk	18.8.1	Null	Unknown License

src/MX.GeoLocation.Web.Tests/MX.GeoLocation.Web.Tests.csproj

Package	Version	License	Issue Type
Microsoft.NET.Test.Sdk	18.8.1	Null	Unknown License

src/MX.GeoLocation.Web/MX.GeoLocation.Web.csproj

Package	Version	License	Issue Type
Microsoft.Extensions.Caching.Memory	10.0.10	Null	Unknown License
Microsoft.Extensions.Configuration.EnvironmentVariables	10.0.10	Null	Unknown License
Microsoft.Extensions.Configuration.Json	10.0.10	Null	Unknown License
Microsoft.Extensions.Diagnostics.HealthChecks	10.0.10	Null	Unknown License
Microsoft.Extensions.Logging	10.0.10	Null	Unknown License

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

nuget/Microsoft.AspNetCore.Mvc.Testing

9.0.18

🟢 6.8

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
Code-Review	🟢 9	Found 18/20 approved changesets -- score normalized to 9
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	🟢 10	security policy file detected
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	🟢 8	branch protection is not maximal on development and all release branches
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	🟢 9	binaries present in source code
Fuzzing	⚠️ 0	project is not fuzzed
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9

nuget/Microsoft.NET.Test.Sdk

18.8.1

🟢 5.4

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 6/27 approved changesets -- score normalized to 2
Maintained	🟢 10	30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Binary-Artifacts	⚠️ 0	binaries present in source code
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Branch-Protection	⚠️ 2	branch protection is not maximal on development and all release branches
Packaging	⚠️ -1	packaging workflow not detected
Fuzzing	⚠️ 0	project is not fuzzed
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

nuget/Microsoft.Extensions.DependencyInjection

10.0.10

Unknown

nuget/Microsoft.NET.Test.Sdk

18.8.1

🟢 5.4

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 6/27 approved changesets -- score normalized to 2
Maintained	🟢 10	30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Binary-Artifacts	⚠️ 0	binaries present in source code
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Branch-Protection	⚠️ 2	branch protection is not maximal on development and all release branches
Packaging	⚠️ -1	packaging workflow not detected
Fuzzing	⚠️ 0	project is not fuzzed
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

nuget/Microsoft.Extensions.DependencyInjection.Abstractions

10.0.10

Unknown

nuget/Microsoft.Extensions.Logging

10.0.10

Unknown

nuget/Microsoft.NET.Test.Sdk

18.8.1

🟢 5.4

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 6/27 approved changesets -- score normalized to 2
Maintained	🟢 10	30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Binary-Artifacts	⚠️ 0	binaries present in source code
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Branch-Protection	⚠️ 2	branch protection is not maximal on development and all release branches
Packaging	⚠️ -1	packaging workflow not detected
Fuzzing	⚠️ 0	project is not fuzzed
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

nuget/Microsoft.Extensions.Caching.Abstractions

10.0.10

Unknown

nuget/Microsoft.Extensions.Configuration

10.0.10

Unknown

nuget/Microsoft.Extensions.Configuration.Abstractions

10.0.10

Unknown

nuget/Microsoft.Extensions.DependencyInjection

10.0.10

Unknown

nuget/Microsoft.Extensions.DependencyInjection.Abstractions

10.0.10

Unknown

nuget/Microsoft.Extensions.Logging

10.0.10

Unknown

nuget/Microsoft.Extensions.Logging.Abstractions

10.0.10

Unknown

nuget/Microsoft.Extensions.Options

10.0.10

Unknown

nuget/Microsoft.AspNetCore.Mvc.Testing

9.0.18

🟢 6.8

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
Code-Review	🟢 9	Found 18/20 approved changesets -- score normalized to 9
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	🟢 10	security policy file detected
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	🟢 8	branch protection is not maximal on development and all release branches
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	🟢 9	binaries present in source code
Fuzzing	⚠️ 0	project is not fuzzed
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9

nuget/Microsoft.NET.Test.Sdk

18.8.1

🟢 5.4

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 6/27 approved changesets -- score normalized to 2
Maintained	🟢 10	30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Binary-Artifacts	⚠️ 0	binaries present in source code
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Branch-Protection	⚠️ 2	branch protection is not maximal on development and all release branches
Packaging	⚠️ -1	packaging workflow not detected
Fuzzing	⚠️ 0	project is not fuzzed
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

nuget/Microsoft.NET.Test.Sdk

18.8.1

🟢 5.4

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 6/27 approved changesets -- score normalized to 2
Maintained	🟢 10	30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Binary-Artifacts	⚠️ 0	binaries present in source code
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Branch-Protection	⚠️ 2	branch protection is not maximal on development and all release branches
Packaging	⚠️ -1	packaging workflow not detected
Fuzzing	⚠️ 0	project is not fuzzed
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

nuget/MaxMind.GeoIP2

6.1.0

Unknown

nuget/Microsoft.AspNetCore.OpenApi

9.0.18

🟢 6.8

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
Code-Review	🟢 9	Found 18/20 approved changesets -- score normalized to 9
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	🟢 10	security policy file detected
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	🟢 8	branch protection is not maximal on development and all release branches
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	🟢 9	binaries present in source code
Fuzzing	⚠️ 0	project is not fuzzed
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9

nuget/Microsoft.Extensions.Caching.Memory

10.0.10

Unknown

nuget/Microsoft.Extensions.Diagnostics.HealthChecks

10.0.10

Unknown

nuget/Microsoft.Identity.Web

4.13.2

Unknown

nuget/Scalar.AspNetCore

2.16.15

Unknown

nuget/System.Security.Cryptography.Xml

10.0.10

Unknown

nuget/Microsoft.AspNetCore.Mvc.Testing

9.0.18

🟢 6.8

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
Code-Review	🟢 9	Found 18/20 approved changesets -- score normalized to 9
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	🟢 10	security policy file detected
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	🟢 8	branch protection is not maximal on development and all release branches
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	🟢 9	binaries present in source code
Fuzzing	⚠️ 0	project is not fuzzed
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9

nuget/Microsoft.Extensions.Configuration

10.0.10

Unknown

nuget/Microsoft.Extensions.Configuration.EnvironmentVariables

10.0.10

Unknown

nuget/Microsoft.Extensions.Configuration.Json

10.0.10

Unknown

nuget/Microsoft.NET.Test.Sdk

18.8.1

🟢 5.4

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 6/27 approved changesets -- score normalized to 2
Maintained	🟢 10	30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Binary-Artifacts	⚠️ 0	binaries present in source code
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Branch-Protection	⚠️ 2	branch protection is not maximal on development and all release branches
Packaging	⚠️ -1	packaging workflow not detected
Fuzzing	⚠️ 0	project is not fuzzed
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

nuget/Microsoft.NET.Test.Sdk

18.8.1

🟢 5.4

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 6/27 approved changesets -- score normalized to 2
Maintained	🟢 10	30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Binary-Artifacts	⚠️ 0	binaries present in source code
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Branch-Protection	⚠️ 2	branch protection is not maximal on development and all release branches
Packaging	⚠️ -1	packaging workflow not detected
Fuzzing	⚠️ 0	project is not fuzzed
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

nuget/Microsoft.Extensions.Caching.Memory

10.0.10

Unknown

nuget/Microsoft.Extensions.Configuration.EnvironmentVariables

10.0.10

Unknown

nuget/Microsoft.Extensions.Configuration.Json

10.0.10

Unknown

nuget/Microsoft.Extensions.Diagnostics.HealthChecks

10.0.10

Unknown

nuget/Microsoft.Extensions.Logging

10.0.10

Unknown

Scanned Files

src/MX.GeoLocation.Api.Client.IntegrationTests/MX.GeoLocation.Api.Client.IntegrationTests.csproj
src/MX.GeoLocation.Api.Client.Testing.Tests/MX.GeoLocation.Api.Client.Testing.Tests.csproj
src/MX.GeoLocation.Api.Client.Testing/MX.GeoLocation.Api.Client.Testing.csproj
src/MX.GeoLocation.Api.Client.Tests.V1/MX.GeoLocation.Api.Client.Tests.V1.csproj
src/MX.GeoLocation.Api.Client.V1/MX.GeoLocation.Api.Client.V1.csproj
src/MX.GeoLocation.Api.IntegrationTests/MX.GeoLocation.Api.IntegrationTests.csproj
src/MX.GeoLocation.Api.Tests.V1/MX.GeoLocation.Api.Tests.V1.csproj
src/MX.GeoLocation.Api.V1/MX.GeoLocation.Api.V1.csproj
src/MX.GeoLocation.Web.IntegrationTests/MX.GeoLocation.Web.IntegrationTests.csproj
src/MX.GeoLocation.Web.Tests/MX.GeoLocation.Web.Tests.csproj
src/MX.GeoLocation.Web/MX.GeoLocation.Web.csproj

sonarqubecloud · 2026-07-19T03:52:47Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot Bot assigned frasermolyneux Jul 19, 2026

dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Jul 19, 2026

github-actions Bot enabled auto-merge (squash) July 19, 2026 03:48

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the all-updates group with 17 updates#731

Bump the all-updates group with 17 updates#731
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/MX.GeoLocation.Api.Client.IntegrationTests/all-updates-548e50713a

dependabot Bot commented on behalf of github Jul 19, 2026

Uh oh!

github-actions Bot commented Jul 19, 2026

Uh oh!

sonarqubecloud Bot commented Jul 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jul 19, 2026

6.1.0

9.0.18

What's Changed

9.0.18

What's Changed

4.13.2

What's Changed

18.8.1

What's Changed

18.8.0

What's Changed

Uh oh!

github-actions Bot commented Jul 19, 2026

Dependency Review

Snapshot Warnings

License Issues

src/MX.GeoLocation.Api.Client.IntegrationTests/MX.GeoLocation.Api.Client.IntegrationTests.csproj

src/MX.GeoLocation.Api.Client.Testing.Tests/MX.GeoLocation.Api.Client.Testing.Tests.csproj

src/MX.GeoLocation.Api.Client.Testing/MX.GeoLocation.Api.Client.Testing.csproj

src/MX.GeoLocation.Api.Client.Tests.V1/MX.GeoLocation.Api.Client.Tests.V1.csproj

src/MX.GeoLocation.Api.Client.V1/MX.GeoLocation.Api.Client.V1.csproj

src/MX.GeoLocation.Api.IntegrationTests/MX.GeoLocation.Api.IntegrationTests.csproj

src/MX.GeoLocation.Api.Tests.V1/MX.GeoLocation.Api.Tests.V1.csproj

src/MX.GeoLocation.Api.V1/MX.GeoLocation.Api.V1.csproj

src/MX.GeoLocation.Web.IntegrationTests/MX.GeoLocation.Web.IntegrationTests.csproj

src/MX.GeoLocation.Web.Tests/MX.GeoLocation.Web.Tests.csproj

src/MX.GeoLocation.Web/MX.GeoLocation.Web.csproj

OpenSSF Scorecard

Scanned Files

Uh oh!

sonarqubecloud Bot commented Jul 19, 2026

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant