Skip to content

chore(deps): Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore and 2 others - #165

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/IncidentInsight.Web/nuget-minor-and-patch-060bb5bd58
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/IncidentInsight.Web/nuget-minor-and-patch-060bb5bd58

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026 •

Copy link
Copy Markdown
Contributor

Updated Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.29 to 8.0.30.

Release notes

Sourced from Microsoft.AspNetCore.Identity.EntityFrameworkCore's releases.

8.0.30

Release

What's Changed

New Contributors

Full Changelog: dotnet/aspnetcore@v8.0.29...v8.0.30

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 8.0.29 to 8.0.30.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

8.0.30

Release

What's Changed

New Contributors

Full Changelog: dotnet/aspnetcore@v8.0.29...v8.0.30

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 8.0.29 to 8.0.30.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore's releases.

8.0.30

Release

What's Changed

New Contributors

Full Changelog: dotnet/aspnetcore@v8.0.29...v8.0.30

Commits viewable in compare view.

@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 17, 2026
@vercel

vercel Bot commented Aug 17, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
incident-insight Error Error Aug 18, 2026 4:22pm
incident-insight-jjt5 Error Error Aug 18, 2026 4:22pm

…nd 2 others

Bumps Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.29 to 8.0.30
Bumps Microsoft.AspNetCore.Mvc.Testing from 8.0.29 to 8.0.30
Bumps Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 8.0.29 to 8.0.30

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.Identity.EntityFrameworkCore
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Copy link
Copy Markdown
Owner

この更新は #166(EF Core 9 系への更新)マージ後の packages.lock.json と衝突するため、#167 / #171 と併せて #172 に集約して再検証しました(全 5 パッケージを 1 本にまとめ、dotnet test 409 件成功を確認)。本 PR はクローズします。#158 は本 PR と同一内容のため同時にクローズします。


Generated by Claude Code

@izumacha izumacha closed this Aug 18, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 18, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/nuget/src/IncidentInsight.Web/nuget-minor-and-patch-060bb5bd58 branch August 18, 2026 16:24
izumacha added a commit that referenced this pull request Aug 18, 2026
EF Core 9 更新(#166)後の main に残っていた dependabot 3 件を集約し、
併せて #166 で埋もれた Microsoft.Data.SqlClient の後退(5.1.7 → 5.1.6)を
直接依存の床値 5.1.7 で防ぐ。

集約した更新:
- Microsoft.AspNetCore.Identity.EntityFrameworkCore 8.0.29 → 8.0.30
- Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore 8.0.29 → 8.0.30
- Microsoft.AspNetCore.Mvc.Testing 8.0.29 → 8.0.30
- Microsoft.NET.Test.Sdk 17.14.1 → 18.9.0
- xunit.runner.visualstudio 2.8.2 → 4.0.0

セキュリティ修正:
- Microsoft.Data.SqlClient を直接依存として 5.1.7 でピン留め
  (EF Core 9 SqlServer が 5.1.6 を推移的にピンするため、
   オンプレ SQL Server 配備でサービシングパッチを黙って下げないよう)
- SNI.runtime も併せて 5.1.2 に復帰

対応 dependabot PR: #158 / #165 / #167 / #171(いずれも lock 衝突のため個別マージ不可)
CLAUDE.md §1: 実装との乖離解消(「EF Core 8」→「EF Core 9」)

検証: build-and-test / Docker image build & smoke test すべて成功、
`dotnet test` 409 件成功。`/code-review ultra` の指摘(SqlClient 後退)を反映済み。
`/security-review ultra`: 新規脆弱性なし(依存の servicing 更新のみ)。

This branch had an error being deployed

2 failed deployments
Preview – incident-insight-jjt5 — 5fe8d445 Deployed Aug 18, 2026 by vercel[bot]
Preview – incident-insight — 5fe8d445 Deployed Aug 18, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant