Skip to content

Bump the backend-dependencies group with 7 updates - #432

Merged
jnroesch merged 1 commit into
mainfrom
dependabot/nuget/backend/backend-dependencies-65375d2594
Oct 11, 2026
Merged

jnroesch merged 1 commit into
mainfrom
dependabot/nuget/backend/backend-dependencies-65375d2594

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 11, 2026

Copy link
Copy Markdown
Contributor

Updated Azure.Storage.Blobs from 12.30.0 to 12.30.1.

Release notes

Sourced from Azure.Storage.Blobs's releases.

12.30.1

12.30.1 (2026-10-05)

Bugs Fixed

  • Fixed AuthenticatedRegionCryptoStream.Dispose() to be idempotent and thread-safe, so the buffer it rents is no longer returned to the shared ArrayPool<byte> more than once when the stream is disposed repeatedly or concurrently. Returning the same array twice allowed unrelated callers to rent the same array instance and corrupt each other's data.

Commits viewable in compare view.

Updated Scalar.AspNetCore from 2.17.13 to 2.17.14.

Release notes

Sourced from Scalar.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated SixLabors.ImageSharp from 4.1.2 to 4.1.3.

Release notes

Sourced from SixLabors.ImageSharp's releases.

4.1.3

What's Changed

Full Changelog: SixLabors/ImageSharp@v4.1.2...v4.1.3

Commits viewable in compare view.

Updated Testcontainers.Azurite from 4.15.0 to 4.16.0.

Release notes

Sourced from Testcontainers.Azurite's releases.

4.16.0

What's Changed

Huge thanks to everyone for your contributions and feedback 🧡.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​54051351.

🚀 Features

  • feat: Add common WithSsl builder API and support it in Azurite (#​1788) @​aleksandarMilev, @​HofmeisterAn
  • feat: Add BuildKit support for image builds via sidecar container (#​1761) @​george-petrakis, @​HofmeisterAn
  • feat(Elasticsearch): Add OTLP and certificate support (#​1774) @​HofmeisterAn

🐛 Bug Fixes

  • fix(PostgreSql): Support SSL with Alpine images and non-root users (#​1790) @​HofmeisterAn
  • fix: Do not pull base image with unresolved platform variable (#​1787) @​HofmeisterAn
  • fix(Kafka): Default to KRaft for Confluent Platform 8.x images (#​1775) @​arnelirobles, @​HofmeisterAn
  • fix(Kafka): Drop the trailing comma from advertised listeners (#​1772) @​arnelirobles, @​HofmeisterAn
  • fix: Prevent Docker ignore patterns from matching path prefixes (#​1768) @​Benziza, @​HofmeisterAn

📖 Documentation

  • docs: Complete builder API tables and align heading casing (#​1778) @​HofmeisterAn
  • docs: Explain how builder configurations combine (#​1770) @​arnelirobles, @​HofmeisterAn

🧹 Housekeeping

  • fix: Regenerate expired test certificates (#​1786) @​zcsizmadia
  • chore: Resolve Sonar findings (#​1776) @​HofmeisterAn
  • chore: Remove Minio module (#​1769) @​HofmeisterAn
  • chore: Publish NuGet packages with Trusted Publishing (OIDC) (#​1763) @​HofmeisterAn
  • feat: Prepare next release cycle (4.16.0) (#​1762) @​HofmeisterAn

📦 Dependency Updates

Commits viewable in compare view.

Updated Testcontainers.PostgreSql from 4.15.0 to 4.16.0.

Release notes

Sourced from Testcontainers.PostgreSql's releases.

4.16.0

What's Changed

Huge thanks to everyone for your contributions and feedback 🧡.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​54051351.

🚀 Features

  • feat: Add common WithSsl builder API and support it in Azurite (#​1788) @​aleksandarMilev, @​HofmeisterAn
  • feat: Add BuildKit support for image builds via sidecar container (#​1761) @​george-petrakis, @​HofmeisterAn
  • feat(Elasticsearch): Add OTLP and certificate support (#​1774) @​HofmeisterAn

🐛 Bug Fixes

  • fix(PostgreSql): Support SSL with Alpine images and non-root users (#​1790) @​HofmeisterAn
  • fix: Do not pull base image with unresolved platform variable (#​1787) @​HofmeisterAn
  • fix(Kafka): Default to KRaft for Confluent Platform 8.x images (#​1775) @​arnelirobles, @​HofmeisterAn
  • fix(Kafka): Drop the trailing comma from advertised listeners (#​1772) @​arnelirobles, @​HofmeisterAn
  • fix: Prevent Docker ignore patterns from matching path prefixes (#​1768) @​Benziza, @​HofmeisterAn

📖 Documentation

  • docs: Complete builder API tables and align heading casing (#​1778) @​HofmeisterAn
  • docs: Explain how builder configurations combine (#​1770) @​arnelirobles, @​HofmeisterAn

🧹 Housekeeping

  • fix: Regenerate expired test certificates (#​1786) @​zcsizmadia
  • chore: Resolve Sonar findings (#​1776) @​HofmeisterAn
  • chore: Remove Minio module (#​1769) @​HofmeisterAn
  • chore: Publish NuGet packages with Trusted Publishing (OIDC) (#​1763) @​HofmeisterAn
  • feat: Prepare next release cycle (4.16.0) (#​1762) @​HofmeisterAn

📦 Dependency Updates

Commits viewable in compare view.

Updated Testcontainers.Redis from 4.15.0 to 4.16.0.

Release notes

Sourced from Testcontainers.Redis's releases.

4.16.0

What's Changed

Huge thanks to everyone for your contributions and feedback 🧡.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​54051351.

🚀 Features

  • feat: Add common WithSsl builder API and support it in Azurite (#​1788) @​aleksandarMilev, @​HofmeisterAn
  • feat: Add BuildKit support for image builds via sidecar container (#​1761) @​george-petrakis, @​HofmeisterAn
  • feat(Elasticsearch): Add OTLP and certificate support (#​1774) @​HofmeisterAn

🐛 Bug Fixes

  • fix(PostgreSql): Support SSL with Alpine images and non-root users (#​1790) @​HofmeisterAn
  • fix: Do not pull base image with unresolved platform variable (#​1787) @​HofmeisterAn
  • fix(Kafka): Default to KRaft for Confluent Platform 8.x images (#​1775) @​arnelirobles, @​HofmeisterAn
  • fix(Kafka): Drop the trailing comma from advertised listeners (#​1772) @​arnelirobles, @​HofmeisterAn
  • fix: Prevent Docker ignore patterns from matching path prefixes (#​1768) @​Benziza, @​HofmeisterAn

📖 Documentation

  • docs: Complete builder API tables and align heading casing (#​1778) @​HofmeisterAn
  • docs: Explain how builder configurations combine (#​1770) @​arnelirobles, @​HofmeisterAn

🧹 Housekeeping

  • fix: Regenerate expired test certificates (#​1786) @​zcsizmadia
  • chore: Resolve Sonar findings (#​1776) @​HofmeisterAn
  • chore: Remove Minio module (#​1769) @​HofmeisterAn
  • chore: Publish NuGet packages with Trusted Publishing (OIDC) (#​1763) @​HofmeisterAn
  • feat: Prepare next release cycle (4.16.0) (#​1762) @​HofmeisterAn

📦 Dependency Updates

Commits viewable in compare view.

Updated xunit.runner.visualstudio from 4.0.0 to 4.0.1.

Release notes

Sourced from xunit.runner.visualstudio's releases.

4.0.1

Release notes: https://xunit.net/releases/visualstudio/4.0.1

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Azure.Storage.Blobs from 12.30.0 to 12.30.1
Bumps Scalar.AspNetCore from 2.17.13 to 2.17.14
Bumps SixLabors.ImageSharp from 4.1.2 to 4.1.3
Bumps Testcontainers.Azurite from 4.15.0 to 4.16.0
Bumps Testcontainers.PostgreSql from 4.15.0 to 4.16.0
Bumps Testcontainers.Redis from 4.15.0 to 4.16.0
Bumps xunit.runner.visualstudio from 4.0.0 to 4.0.1

---
updated-dependencies:
- dependency-name: Azure.Storage.Blobs
  dependency-version: 12.30.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-dependencies
- dependency-name: Scalar.AspNetCore
  dependency-version: 2.17.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-dependencies
- dependency-name: SixLabors.ImageSharp
  dependency-version: 4.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-dependencies
- dependency-name: Testcontainers.Azurite
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-dependencies
- dependency-name: Testcontainers.PostgreSql
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-dependencies
- dependency-name: Testcontainers.Redis
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-dependencies
- dependency-name: xunit.runner.visualstudio
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 11, 2026
@coderabbitai

coderabbitai Bot commented Oct 11, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: Repository: jnroesch/juggerhub/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: b71891c5-852b-4b2f-adbf-5b4b3af3883b

📥 Commits

Reviewing files that changed from the base of the PR and between a172a14 and b608c8c.


📒 Files selected for processing (2)
  • backend/JuggerHub.Api.csproj
  • backend/tests/JuggerHub.Api.IntegrationTests/JuggerHub.Api.IntegrationTests.csproj

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 7 remain after this review.



📝 Summary

Summary by CodeRabbit

  • Chores
    • Updated several backend and integration test packages to newer versions.

Walkthrough

The API project updates three package versions. The integration test project updates three Testcontainers package versions and the xUnit Visual Studio runner version.

Changes

Package updates

Layer / File(s) Summary
API and integration test dependencies
backend/JuggerHub.Api.csproj, backend/tests/JuggerHub.Api.IntegrationTests/JuggerHub.Api.IntegrationTests.csproj
The API project updates Azure.Storage.Blobs, Scalar.AspNetCore, and SixLabors.ImageSharp. The integration test project updates three Testcontainers packages and xunit.runner.visualstudio.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other


Merge Risk: ⚪ Minimal · up to b608c

The updates affect API libraries and integration-test tooling, but no specific breaking behavior is evident. The PR appears mergeable after normal restore, build, and test checks.

Architecture Summary

Architecture risk: 🔵 Low · up to b608c

The change affects 1 system.

Changed systems: backend

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

  • observed — backend (service) was modified; 2 changed files map to changed impact.

Before / after behavior

  • observed — Modified behavior in backend/JuggerHub.Api.csproj: Azure.Storage.Blobs is updated from version 12.30.0 to 12.30.1.
  • observed — Modified behavior in backend/JuggerHub.Api.csproj: Scalar.AspNetCore is updated from version 2.17.13 to 2.17.14.
  • observed — Modified behavior in backend/JuggerHub.Api.csproj: SixLabors.ImageSharp is updated from version 4.1.2 to 4.1.3.
  • observed — Modified behavior in backend/tests/JuggerHub.Api.IntegrationTests/JuggerHub.Api.IntegrationTests.csproj: The three Testcontainers packages are updated from 4.15.0 to 4.16.0, and xunit.runner.visualstudio is updated from 4.0.0 to 4.0.1; the xUnit package remains at 2.9.3.

Pre-merge checks | Passed 8
✅ Passed checks (8 passed)
Check name Status Explanation
Description check Passed The description accurately covers the dependency updates shown in both project files, including the application and integration-test packages.
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Modifieddate On Bulk Updates Passed The pull request changes only two .csproj files and only updates package versions. The patch adds, changes, or removes no ExecuteUpdate or ExecuteUpdateAsync call in backend/, so no bulk-updat…
Migration Matches The Model Change Passed The pull request changes only package versions in two .csproj files. The authoritative diff contains no changes under backend/Entities, no change to backend/Data/AppDbContext.cs, and no migratio…
User Data Is Erased Or Kept On Purpose Passed The pull request changes only package versions in two .csproj files. It adds no entity or user-reference property, so the account-deletion or retention condition does not apply.
Outbound Calls Use Shared Resilience Passed The reviewed diff only changes NuGet package versions in two .csproj files. It adds no outbound client, changes no HttpClient registration or retry loop, and does not alter any existing `.AddJugge…
Translations In All Three Languages Passed The check does not apply. The pull request changes only backend/JuggerHub.Api.csproj and backend/tests/JuggerHub.Api.IntegrationTests/JuggerHub.Api.IntegrationTests.csproj. It does not change `fro…

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR

  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@jnroesch
jnroesch merged commit 7adb808 into main Oct 11, 2026
7 checks passed
@jnroesch
jnroesch deleted the dependabot/nuget/backend/backend-dependencies-65375d2594 branch October 11, 2026 11:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant