Bump the dependencies group with 10 updates#962
Conversation
Bumps Elastic.Clients.Elasticsearch from 9.3.4 to 9.4.2 Bumps log4net from 3.3.0 to 3.3.2 Bumps Microsoft.Extensions.Http from 10.0.2 to 10.0.9 Bumps RabbitMQ.Client from 7.0.0 to 7.2.1 Bumps SonarAnalyzer.CSharp from 10.22.0.136894 to 10.29.0.143774 Bumps StackExchange.Redis from 2.12.14 to 3.0.11 Bumps System.Diagnostics.EventLog from 10.0.5 to 10.0.9 Bumps System.Security.Permissions from 10.0.3 to 10.0.9 Bumps System.Text.Encoding.CodePages from 10.0.5 to 10.0.9 Bumps System.Text.Json from 10.0.5 to 10.0.9 --- updated-dependencies: - dependency-name: Elastic.Clients.Elasticsearch dependency-version: 9.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: log4net dependency-version: 3.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.Extensions.Http dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: RabbitMQ.Client dependency-version: 7.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: SonarAnalyzer.CSharp dependency-version: 10.29.0.143774 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: StackExchange.Redis dependency-version: 3.0.11 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: System.Diagnostics.EventLog dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: System.Security.Permissions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: System.Text.Encoding.CodePages dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: System.Text.Json dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
.NET
gstraccini
Bot
added
the
☑️ auto-merge
github-actions
Bot
added
the
size/S
![gstraccini[bot]](https://avatars.githubusercontent.com/in/480132?s=60&v=4){kind=small}
guibranco
left a comment
guibranco
left a comment
There was a problem hiding this comment.
Automatically approved by gstraccini[bot]
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub. |
|
Caution Review the following alerts detected in dependencies. According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.
|
|
Infisical secrets check: ✅ No secrets leaked! 💻 Scan logs2026-07-10T15:33:26Z INF scanning for exposed secrets...
3:33PM INF 827 commits scanned.
2026-07-10T15:33:28Z INF scan completed in 1.16s
2026-07-10T15:33:28Z INF no leaks found
|
|
1 participant
Updated Elastic.Clients.Elasticsearch from 9.3.4 to 9.4.2.
Release notes
Sourced from Elastic.Clients.Elasticsearch's releases.
9.4.2
What's Changed
Unknown*carrier and re-serialize losslessly — no data is dropped for plugin-defined or future variants the client doesn't modelsettings.Variants.Register<IProperty, MyPluginProperty>("my_plugin"); registrations are scoped per client instance and AOT-safe — see the Plugin-defined variant types documentation for detailsUnknown*carrier types for all variant families (properties, analyzers, char filters, token filters, tokenizers, repositories, similarity settings, aggregations, queries, suggesters, rescorers) to support the non-exhaustive variant registryFull Changelog: elastic/elasticsearch-net@9.4.1...9.4.2
9.4.1
What's Changed
InnerHits: theFieldsproperty is split intoField(single-field selector usingFields) and a newFieldscollection ofFieldAndFormat— existing usages ofInnerHits.Fields = …may need to be retargeted toFieldDataStreamLifecyclegainsEffectiveRetentionandRetentionDeterminedBy; newGlobalRetentionandRetentionSourcetypes;GetDataLifecycleResponsenow exposesGlobalRetentionParentReindexStatustype_mvtcontent-type alignment:chat_completion_unified/stream_completionsendContent-Type: application/json;_mvtuses the versionedapplication/vnd.elasticsearch+vnd.mapbox-vector-tileAccept headerFull Changelog: elastic/elasticsearch-net@9.4.0...9.4.1
9.4.0
What's Changed
Initial 9.4.x release.
Full Changelog: elastic/elasticsearch-net@9.3.7...9.4.0
9.3.7
What's Changed
ContentType: application/jsonforChatCompletionUnifiedandStreamCompletionstreaming inference requestsSearchMvtAcceptheader toapplication/vnd.elasticsearch+vnd.mapbox-vector-tile(Elasticsearch product-flavored content-type)Elastic.Transportto 0.17.1max_page_search_sizevalues forpivot(500) andlatest(5000) transformsFull Changelog: elastic/elasticsearch-net@9.3.6...9.3.7
9.3.6
What's Changed
Full Changelog: elastic/elasticsearch-net@9.3.5...9.3.6
9.3.5
What's Changed
IdPropertyNameandDisableIdInferenceby @flobernd in Fix DefaultMappingFor not consuming IdPropertyName and DisableIdInference elastic/elasticsearch-net#8877FieldTypeenum doesnt haveWildcardvalue" (#8826)SearchMvtAsyncthrowsTransportExceptionon successfulHTTP 200 _mvtresponses with valid binary tile payload (#8867)Elastic.Esql0.11.0 by @flobernd in Align LINQ-to-ES|QL integration with Elastic.Esql 0.11.0 elastic/elasticsearch-net#8886Full Changelog: elastic/elasticsearch-net@9.3.4...9.3.5
Commits viewable in compare view.
Updated log4net from 3.3.0 to 3.3.2.
Release notes
Sourced from log4net's releases.
3.3.2
What's Changed
New Contributors
Full Changelog: apache/logging-log4net@rel/3.3.1...rel/3.3.2
Nuget: https://www.nuget.org/packages/log4net/3.3.2
3.3.1
What's Changed
New Contributors
Full Changelog: apache/logging-log4net@rel/3.3.0...rel/3.3.1
Nuget: https://www.nuget.org/packages/log4net/3.3.1
Commits viewable in compare view.
Updated Microsoft.Extensions.Http from 10.0.2 to 10.0.9.
Release notes
Sourced from Microsoft.Extensions.Http's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated RabbitMQ.Client from 7.0.0 to 7.2.1.
Release notes
Sourced from RabbitMQ.Client's releases.
7.2.1
GitHub milestone
What's Changed
actions-upby @lukebakken in Update GHA viaactions-uprabbitmq/rabbitmq-dotnet-client#1886New Contributors
Full Changelog: rabbitmq/rabbitmq-dotnet-client@v7.2.0...v7.2.1
7.2.0
GitHub milestone
What's Changed
basic.returnmessages. by @lukebakken in Add dedicated exception forbasic.returnmessages. rabbitmq/rabbitmq-dotnet-client#1832SemaphoreFullExceptionby @lukebakken in Investigate & fixSemaphoreFullExceptionrabbitmq/rabbitmq-dotnet-client#1819New Contributors
Full Changelog: rabbitmq/rabbitmq-dotnet-client@v7.1.2...v7.2.0
7.1.2
GitHub milestone
What's Changed
longby @lukebakken in Serialize sequence number aslongrabbitmq/rabbitmq-dotnet-client#1806ObjectDisposedExceptionby @lukebakken in AddressObjectDisposedExceptionrabbitmq/rabbitmq-dotnet-client#1809Full Changelog: rabbitmq/rabbitmq-dotnet-client@v7.1.1...v7.1.2
7.1.1
GitHub milestone
What's Changed
IntervalListby @lukebakken in Fix bug inIntervalListrabbitmq/rabbitmq-dotnet-client#1785Channel.Closeby @lukebakken in Demonstrate handling ofChannel.Closerabbitmq/rabbitmq-dotnet-client#1791IntAllocatorfromrabbitmq-java-clientby @lukebakken in PortIntAllocatorfromrabbitmq-java-clientrabbitmq/rabbitmq-dotnet-client#1790Full Changelog: rabbitmq/rabbitmq-dotnet-client@v7.1.0...v7.1.1
7.1.0
GitHub milestone
What's Changed
OperationCanceledExceptionin RPC continuations by @lukebakken in HandleOperationCanceledExceptionin RPC continuations rabbitmq/rabbitmq-dotnet-client#1753TimeSpan.Zeroby @lukebakken in Allow setting heartbeat timeout toTimeSpan.Zerorabbitmq/rabbitmq-dotnet-client#1773timeoutby @lukebakken in Create cancellation token fromtimeoutrabbitmq/rabbitmq-dotnet-client#1775ObjectDisposedExceptionsby @lukebakken in Track downObjectDisposedExceptionsrabbitmq/rabbitmq-dotnet-client#1772New Contributors
Full Changelog: rabbitmq/rabbitmq-dotnet-client@v7.0.0...v7.1.0
7.1.0-alpha.1
GitHub milestone
What's Changed
OperationCanceledExceptionin RPC continuations by @lukebakken in HandleOperationCanceledExceptionin RPC continuations rabbitmq/rabbitmq-dotnet-client#1753TimeSpan.Zeroby @lukebakken in Allow setting heartbeat timeout toTimeSpan.Zerorabbitmq/rabbitmq-dotnet-client#1773timeoutby @lukebakken in Create cancellation token fromtimeoutrabbitmq/rabbitmq-dotnet-client#1775ObjectDisposedExceptionsby @lukebakken in Track downObjectDisposedExceptionsrabbitmq/rabbitmq-dotnet-client#1772New Contributors
Full Changelog: rabbitmq/rabbitmq-dotnet-client@v7.0.0...v7.1.0-alpha.1
7.1.0-alpha.0
GitHub milestone
What's Changed
OperationCanceledExceptionin RPC continuations by @lukebakken in HandleOperationCanceledExceptionin RPC continuations rabbitmq/rabbitmq-dotnet-client#1753New Contributors
Full Changelog: rabbitmq/rabbitmq-dotnet-client@v7.0.0...v7.1.0-alpha.0
Commits viewable in compare view.
Updated SonarAnalyzer.CSharp from 10.22.0.136894 to 10.29.0.143774.
Release notes
Sourced from SonarAnalyzer.CSharp's releases.
10.29.0.143774
Release notes - .NET Analyzers - 10.29
Feature
NET-3997 Move S6444 out of hotspot
NET-4060 Update RSPEC before 10.29 release
False Positive
NET-1626 Fix S6444 FP: REGEX_DEFAULT_MATCH_TIMEOUT
False Negative
NET-3920 Fix S2971 FN: Should raise on EntityFramework IQueryables
NET-3921 Fix S1155 FN: Should raise on EntityFramework IQueryables
NET-3922 Fix S3981 FN: Should raise on EntityFramework IQueryables
NET-3924 Fix S3169 FN: Should raise on EntityFramework IQueryables
10.28.0.143324
Release notes - .NET Analyzers - 10.28
Feature
NET-1990 S100/S101: Configuration for custom acronyms
NET-2280 New Rule T0048: Avoid
is not { } valueNET-3802 Update RSPEC before 10.28 release
NET-3818 Change Protobuf Info message to Debug
NET-3820 Coverage warnings should surface as Analysis Warnings
NET-3827 Create RSPEC for S8717: Multiple "[Key]" attributes should not be used to define a composite key
NET-3843 Implement rule S8717: Multiple "[Key]" attributes should not be used to define a composite key
NET-3949 Modify rule S2696: add fix guidance, compliant example, and exceptions
NET-3950 Modify rule S1135: add compliant example and fix guidance
NET-3951 Modify rule S108: give the C# page its own code examples
NET-3952 Modify rule S1133: add rationale, fix guidance, code examples
NET-3953 Modify rule S3251: add compliant example, fix guidance, and exceptions
NET-3967 Move S1313 out of hotspot
NET-3969 Move S2077 out of hotspot
NET-3972 Move S2092 and S3330 out of hotspot
NET-3973 Move S2245 out of hotspot
NET-3975 Move S2257 out of hotspot
NET-3976 Move S4036 out of hotspot
NET-3978 Move S4502 out of hotspot
NET-3980 Move S4507 out of hotspot
NET-3982 Move S5122 out of hotspot
NET-3983 Move S5332 out of hotspot
NET-3993 Move S5443 out of hotspot
NET-3995 Move S5753 out of hotspot
NET-3996 Move S5766 out of hotspot
NET-3998 Move S6640 out of hotspot
NET-4000 Move S4790 out of hotspot
NET-4001 Move S5693 out of hotspot
NET-4008 Change S1313 message
NET-4009 Change S2257 message
NET-4010 Change S4036 message
NET-4011 Change S2077 message
False Positive
NET-3564 Fix FP S6966: Do not raise for methods for SqlDataReader.IsDBNull/GetFieldValue
NET-3808 Fix S4260 FP: Don't raise on extension properties
NET-3821 Fix S1244 FP: Should not raise on comparison to 0
NET-3825 Fix S2221 FP: Do not raise on async void
NET-3878 Fix S3358 FP: Suggesting to extract ternary from EF Core select
NET-3914 Fix T0044 FP: Should not raise on locator annotaitons
NET-3926 Fix S6608 FP: Should not raise inside expression tree
NET-3927 Fix S6603 FP: Should not raise inside expression tree
NET-3932 S2068: Do not raise on @paramName and $paramName
False Negative
NET-1673 Fix S4790 FN: default parameters
NET-2846 Fix S1117 FN: Extensions, Partial Events
... (truncated)
10.27.0.140913
Release notes - .NET Analyzers - 10.27
Feature
NET-1285 S2629: Add custom message for Log4Net and Castle.Core
NET-3666 Deprecate S5042 and move it from HotSpots to Code Smell
NET-3783 Update RSPEC before 10.27 release
False Positive
NET-2696 Fix S4260 FP: Extension Properties always raise
False Negative
NET-230 Fix S4056 FN: SpecifyIFormatProviderOrCultureInfo for C#13 compatibility
NET-2692 Fix S2190 FN: Recursive extension properties
NET-2705 Fix S3343 FN: Partial Constructor with attribute in definition
NET-2732 Fix S1172 FN: Extension blocks
NET-2745 Fix S4144 FN: Extension Members
NET-2829 Fix S3241 FN: Extension methods and extension blocks
NET-3541 Fix S1117 FN: add CatchDeclaration coverage and adopt LocalDeclarationKinds
10.26.0.140279
Release notes - .NET Analyzers - 10.26
Feature
NET-3694 Update RSPEC before 10.26 release
False Positive
NET-2346 Fix S1854 FP: Variable used after another assignment in finally
NET-2347 Fix S1168 FP: Do not report on value types
NET-3698 Fix S1210 FP: file-scoped types should be exempt
False Negative
NET-1265 Fix S2930 FN: raise issues on non-disposed RegistryKeys
NET-2685 Fix S3604 FN: Field Keyword, Partial Constructors, NullConditional Assignment
NET-2812 Fix S4275 FN: Field Keyword
NET-2999 Fix S6672 FN: Mismatch in primary constructor is not recognized
10.25
?
Feature
sonar.cs.cobertura.reportsPathsparameterFalse Positive
10.24
This release brings a batch of false negative fixes and analyzer crash fixes.
Bug Fixes
False Positives
False Negatives
10.23
This release brings a bunch of fixes! Enjoy.
Bug Fixes
False Positives
False Negatives
Commits viewable in compare view.
Updated StackExchange.Redis from 2.12.14 to 3.0.11.
Release notes
Sourced from StackExchange.Redis's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated System.Diagnostics.EventLog from 10.0.5 to 10.0.9.
Release notes
Sourced from System.Diagnostics.EventLog's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated System.Security.Permissions from 10.0.3 to 10.0.9.
Release notes
Sourced from System.Security.Permissions's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated System.Text.Encoding.CodePages from 10.0.5 to 10.0.9.
Release notes
Sourced from System.Text.Encoding.CodePages's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated System.Text.Json from 10.0.5 to 10.0.9.
Release notes
Sourced from System.Text.Json's releases.
No release notes found for this version range.
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions