Bump the nuget group with 10 updates

[dependabot]

Updated Microsoft.Extensions.Caching.Memory from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Caching.Memory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.UserSecrets from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Configuration.UserSecrets's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Options's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.8.1

What's Changed

• Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) by @​nohwnd in Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) microsoft/vstest#16281

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0

What's Changed

• Migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) by @​nohwnd in feat: migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) microsoft/vstest#15687
  • For more detail refer to https://devblogs.microsoft.com/dotnet/vs-test-is-removing-its-newtonsoft-json-dependency/
• Create source-only filter package by @​Youssef1313 in Create source-only filter package microsoft/vstest#15638
• Add ARM64 msdia140.dll support to test platform packages by @​nohwnd in Cherry-pick: Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15692
• Fix mutex cleanup crash on macOS/Linux by @​nohwnd in Fix mutex cleanup crash on macOS/Linux microsoft/vstest#15684
• Restrict artifact temp directory permissions on Unix by @​nohwnd in Restrict artifact temp directory permissions on Unix microsoft/vstest#15729
• Add support for filtering uncategorized tests with TestCategory=None by @​Evangelink in Add support for filtering uncategorized tests with TestCategory=None microsoft/vstest#15727
• Fix SCI binding failure in DTA hosts (main) by @​nohwnd in Fix SCI binding failure in DTA hosts (main) microsoft/vstest#15724
• Fix HTML logger parallel file collision by @​nohwnd in [fix] Fix HTML logger parallel file collision microsoft/vstest#15435
• Improve error message when testhost cannot be found by @​nohwnd in [fix] Improve error message when testhost cannot be found microsoft/vstest#16053
• Fix HTML logger exception on invalid XML chars in test display names by @​nohwnd in [fix] Fix HTML logger exception on invalid XML chars in test display names microsoft/vstest#16051

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

Commits viewable in compare view.

Updated Microsoft.OpenApi from 3.8.0 to 3.9.0.

Release notes

Sourced from Microsoft.OpenApi's releases.

3.9.0

3.9.0 (2026-07-15)

Features

• adds support for anchor and id external resolution (1591007)
• schema: resolve bare $dynamicRef via $dynamicAnchor index (#​2913) (eacc2fc)
• support relative URI resolution in $dynamicRef (#​2928) (#​2945) (821053b)

Bug Fixes

• adds explicit error message for invalid json pointers (63fc55d)
• adds explicit error message for invalid json pointers (bc93efe)
• default mapping is not being serialized with the correct shape (fe4a25f)
• differentiate unset value from null value in OpenApiSchema.Const (#​2936) (07b525f)
• handle nullability more accurately during serialization for 3.0/2.0 (#​2933) (0ace243)
• validate required properties of security scheme before serialization (#​2952) (f31b192)

Commits viewable in compare view.

Updated XtremeIdiots.Portal.Repository.Api.Client.V1 from 4.1.1 to 4.2.9.

Release notes

Sourced from XtremeIdiots.Portal.Repository.Api.Client.V1's releases.

4.2.9

Full Changelog: frasermolyneux/portal-repository@v4.2.8...v4.2.9

4.2.8

Full Changelog: frasermolyneux/portal-repository@v4.2.7...v4.2.8

4.2.7

Full Changelog: frasermolyneux/portal-repository@v4.2.6...v4.2.7

4.2.6

Full Changelog: frasermolyneux/portal-repository@v4.2.4...v4.2.6

4.2.4

Full Changelog: frasermolyneux/portal-repository@v4.2.1...v4.2.4

4.2.1

What's Changed

• Bump the all-updates group with 3 updates by @​dependabot[bot] in Bump the all-updates group with 3 updates portal-repository#840

Full Changelog: frasermolyneux/portal-repository@v4.1.1...v4.2.1

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 14 package(s) with unknown licenses.

See the Details below.

License Issues

src/XtremeIdiots.Portal.Events.Ingest.Api.Client.Testing.Tests/XtremeIdiots.Portal.Events.Ingest.Api.Client.Testing.Tests.csproj

Package	Version	License	Issue Type
Microsoft.NET.Test.Sdk	18.8.1	Null	Unknown License

src/XtremeIdiots.Portal.Events.Ingest.Api.Client.Testing/XtremeIdiots.Portal.Events.Ingest.Api.Client.Testing.csproj

Package	Version	License	Issue Type
Microsoft.Extensions.DependencyInjection.Abstractions	10.0.10	Null	Unknown License

src/XtremeIdiots.Portal.Events.Ingest.Api.Client.V1/XtremeIdiots.Portal.Events.Ingest.Api.Client.V1.csproj

Package	Version	License	Issue Type
Microsoft.Extensions.DependencyInjection.Abstractions	10.0.10	Null	Unknown License
Microsoft.Extensions.Logging.Abstractions	10.0.10	Null	Unknown License
Microsoft.Extensions.Options	10.0.10	Null	Unknown License

src/XtremeIdiots.Portal.Events.Ingest.App.V1.Tests/XtremeIdiots.Portal.Events.Ingest.App.V1.Tests.csproj

Package	Version	License	Issue Type
Microsoft.Extensions.Configuration	10.0.10	Null	Unknown License
Microsoft.NET.Test.Sdk	18.8.1	Null	Unknown License
XtremeIdiots.Portal.Repository.Api.Client.V1	4.2.9	Null	Unknown License

src/XtremeIdiots.Portal.Events.Ingest.App.V1/XtremeIdiots.Portal.Events.Ingest.App.V1.csproj

Package	Version	License	Issue Type
Microsoft.Extensions.Caching.Memory	10.0.10	Null	Unknown License
Microsoft.Extensions.Configuration	10.0.10	Null	Unknown License
Microsoft.Extensions.Configuration.UserSecrets	10.0.10	Null	Unknown License
Microsoft.Extensions.Diagnostics.HealthChecks	10.0.10	Null	Unknown License
Microsoft.OpenApi	3.9.0	Null	Unknown License
XtremeIdiots.Portal.Repository.Api.Client.V1	4.2.9	Null	Unknown License

OpenSSF Scorecard

Scorecard details

Package	Version	Score	Details
nuget/Microsoft.NET.Test.Sdk	18.8.1	🟢 5.4	Details Check Score Reason Code-Review ⚠️ 2 Found 6/27 approved changesets -- score normalized to 2 Maintained 🟢 10 30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10 Security-Policy 🟢 10 security policy file detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Binary-Artifacts ⚠️ 0 binaries present in source code Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Branch-Protection ⚠️ 2 branch protection is not maximal on development and all release branches Packaging ⚠️ -1 packaging workflow not detected Fuzzing ⚠️ 0 project is not fuzzed Token-Permissions 🟢 9 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies 🟢 9 dependency not pinned by hash detected -- score normalized to 9 SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
nuget/Microsoft.Extensions.DependencyInjection.Abstractions	10.0.10	Unknown	Unknown
nuget/Microsoft.Extensions.DependencyInjection.Abstractions	10.0.10	Unknown	Unknown
nuget/Microsoft.Extensions.Logging.Abstractions	10.0.10	Unknown	Unknown
nuget/Microsoft.Extensions.Options	10.0.10	Unknown	Unknown
nuget/Microsoft.Extensions.Configuration	10.0.10	Unknown	Unknown
nuget/Microsoft.NET.Test.Sdk	18.8.1	🟢 5.4	Details Check Score Reason Code-Review ⚠️ 2 Found 6/27 approved changesets -- score normalized to 2 Maintained 🟢 10 30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10 Security-Policy 🟢 10 security policy file detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Binary-Artifacts ⚠️ 0 binaries present in source code Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Branch-Protection ⚠️ 2 branch protection is not maximal on development and all release branches Packaging ⚠️ -1 packaging workflow not detected Fuzzing ⚠️ 0 project is not fuzzed Token-Permissions 🟢 9 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies 🟢 9 dependency not pinned by hash detected -- score normalized to 9 SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
nuget/XtremeIdiots.Portal.Repository.Api.Client.V1	4.2.9	Unknown	Unknown
nuget/Microsoft.Extensions.Caching.Memory	10.0.10	Unknown	Unknown
nuget/Microsoft.Extensions.Configuration	10.0.10	Unknown	Unknown
nuget/Microsoft.Extensions.Configuration.UserSecrets	10.0.10	Unknown	Unknown
nuget/Microsoft.Extensions.Diagnostics.HealthChecks	10.0.10	Unknown	Unknown
nuget/Microsoft.OpenApi	3.9.0	Unknown	Unknown
nuget/XtremeIdiots.Portal.Repository.Api.Client.V1	4.2.9	Unknown	Unknown

Scanned Files

• src/XtremeIdiots.Portal.Events.Ingest.Api.Client.Testing.Tests/XtremeIdiots.Portal.Events.Ingest.Api.Client.Testing.Tests.csproj
• src/XtremeIdiots.Portal.Events.Ingest.Api.Client.Testing/XtremeIdiots.Portal.Events.Ingest.Api.Client.Testing.csproj
• src/XtremeIdiots.Portal.Events.Ingest.Api.Client.V1/XtremeIdiots.Portal.Events.Ingest.Api.Client.V1.csproj
• src/XtremeIdiots.Portal.Events.Ingest.App.V1.Tests/XtremeIdiots.Portal.Events.Ingest.App.V1.Tests.csproj
• src/XtremeIdiots.Portal.Events.Ingest.App.V1/XtremeIdiots.Portal.Events.Ingest.App.V1.csproj