Skip to content

Bump the nuget-minor-and-patch group with 33 updates #522

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
dependabot wants to merge 1 commit into from
Closed

Bump the nuget-minor-and-patch group with 33 updates #522

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
68 changes: 34 additions & 34 deletions backend/Directory.Packages.props
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,95 +9,95 @@
<!-- ASP.NET Core / Microsoft.Extensions / EF Core (9.0.0) -->
<PackageVersion Include="AspNetCore.HealthChecks.NpgSql" Version="9.0.0" />
<PackageVersion Include="AspNetCore.HealthChecks.Hangfire" Version="9.0.0" />
<PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.10" />
<PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.11" />
<PackageVersion Include="Microsoft.AspNetCore.Http.Abstractions" Version="2.3.0" />
<PackageVersion Include="Microsoft.AspNetCore.Identity.EntityFrameworkCore" Version="10.0.10" />
<PackageVersion Include="Microsoft.AspNetCore.Identity.EntityFrameworkCore" Version="10.0.11" />
<PackageVersion Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.10" />
<PackageVersion Include="Microsoft.AspNetCore.OpenApi" Version="10.0.10" />
<PackageVersion Include="Microsoft.EntityFrameworkCore" Version="10.0.10" />
<PackageVersion Include="Microsoft.EntityFrameworkCore" Version="10.0.11" />
<PackageVersion Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.10" />
<PackageVersion Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.10" />
<PackageVersion Include="Microsoft.EntityFrameworkCore.Tools" Version="10.0.10" />
<PackageVersion Include="Microsoft.Extensions.Configuration" Version="10.0.10" />
<PackageVersion Include="Microsoft.Extensions.Configuration.Abstractions" Version="10.0.10" />
<PackageVersion Include="Microsoft.Extensions.Configuration" Version="10.0.11" />
<PackageVersion Include="Microsoft.Extensions.Configuration.Abstractions" Version="10.0.11" />
<PackageVersion Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="10.0.10" />
<PackageVersion Include="Microsoft.Extensions.Configuration.Json" Version="10.0.10" />
<PackageVersion Include="Microsoft.Extensions.Configuration.Binder" Version="10.0.10" />
<PackageVersion Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="10.0.10" />
<PackageVersion Include="Microsoft.Extensions.Configuration.Json" Version="10.0.11" />
<PackageVersion Include="Microsoft.Extensions.Configuration.Binder" Version="10.0.11" />
<PackageVersion Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="10.0.11" />
<PackageVersion Include="Microsoft.Extensions.Http" Version="10.0.10" />
<PackageVersion Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.3" />
<PackageVersion Include="System.Security.Cryptography.ProtectedData" Version="10.0.10" />
<PackageVersion Include="System.Security.Cryptography.ProtectedData" Version="10.0.11" />
<!-- transitive pin: lifts the vulnerable 9.0.0 pulled in by test-stack dependencies -->
<PackageVersion Include="System.Security.Cryptography.Xml" Version="10.0.10" />

<!-- Identity / JWT -->
<PackageVersion Include="Microsoft.IdentityModel.Tokens" Version="8.19.2" />
<PackageVersion Include="System.IdentityModel.Tokens.Jwt" Version="8.19.2" />
<PackageVersion Include="Microsoft.IdentityModel.Tokens" Version="8.22.0" />
<PackageVersion Include="System.IdentityModel.Tokens.Jwt" Version="8.22.0" />
<PackageVersion Include="Google.Apis.Auth" Version="1.68.0" />

<!-- FluentResults / FluentValidation -->
<PackageVersion Include="FluentResults" Version="4.0.0" />
<PackageVersion Include="FluentValidation" Version="11.10.0" />
<PackageVersion Include="FluentValidation.DependencyInjectionExtensions" Version="11.10.0" />
<PackageVersion Include="FluentValidation" Version="11.12.0" />
<PackageVersion Include="FluentValidation.DependencyInjectionExtensions" Version="11.12.0" />

<!-- Hangfire -->
<PackageVersion Include="Hangfire.Core" Version="1.8.14" />
<PackageVersion Include="Hangfire.AspNetCore" Version="1.8.14" />
<PackageVersion Include="Hangfire.PostgreSql" Version="1.20.8" />
<PackageVersion Include="Hangfire.InMemory" Version="0.9.0" />
<PackageVersion Include="Hangfire.Core" Version="1.8.25" />
<PackageVersion Include="Hangfire.AspNetCore" Version="1.8.25" />
<PackageVersion Include="Hangfire.PostgreSql" Version="1.21.1" />
<PackageVersion Include="Hangfire.InMemory" Version="0.11.0" />

<!-- Off-host backups (feature 024): Cloudflare R2 via the S3-compatible API -->
<PackageVersion Include="AWSSDK.S3" Version="4.0.102" />
<PackageVersion Include="AWSSDK.S3" Version="4.0.102.4" />

<!-- Serilog -->
<PackageVersion Include="Serilog" Version="3.1.1" />
<PackageVersion Include="Serilog.AspNetCore" Version="8.0.2" />
<PackageVersion Include="Serilog.AspNetCore" Version="8.0.3" />
<PackageVersion Include="Serilog.Sinks.Console" Version="5.0.1" />
<PackageVersion Include="Serilog.Sinks.File" Version="5.0.0" />
<PackageVersion Include="Serilog.Sinks.Grafana.Loki" Version="8.3.2" />
<PackageVersion Include="Serilog.Settings.Configuration" Version="8.0.4" />
<PackageVersion Include="Serilog.Enrichers.Context" Version="4.6.0" />
<PackageVersion Include="Serilog.Enrichers.Context" Version="4.6.5" />
<PackageVersion Include="Serilog.Enrichers.Environment" Version="2.3.0" />

<!-- OpenTelemetry (metrics → Prometheus /metrics) -->
<PackageVersion Include="OpenTelemetry.Extensions.Hosting" Version="1.17.0" />
<PackageVersion Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.17.0" />
<PackageVersion Include="OpenTelemetry.Instrumentation.Runtime" Version="1.17.0" />
<PackageVersion Include="OpenTelemetry.Extensions.Hosting" Version="1.18.0" />
<PackageVersion Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.18.0" />
<PackageVersion Include="OpenTelemetry.Instrumentation.Runtime" Version="1.18.0" />
<PackageVersion Include="OpenTelemetry.Exporter.Prometheus.AspNetCore" Version="1.17.0-beta.1" />


<!-- Edge gateway (025): YARP reverse proxy + ACME/Let's Encrypt (config-gated) -->
<PackageVersion Include="Yarp.ReverseProxy" Version="2.3.0" />
<PackageVersion Include="LettuceEncrypt" Version="1.3.2" />
<PackageVersion Include="LettuceEncrypt" Version="1.3.3" />

<!-- transitive pin: lifts the vulnerable 11.0.1 pulled in by Hangfire.Core -->
<PackageVersion Include="Newtonsoft.Json" Version="13.0.3" />

<!-- Polly / HTTP / JSON -->
<PackageVersion Include="Polly" Version="8.2.0" />
<PackageVersion Include="Polly.Core" Version="8.4.1" />
<PackageVersion Include="Polly" Version="8.7.0" />
<PackageVersion Include="Polly.Core" Version="8.7.0" />
<PackageVersion Include="Polly.Extensions.Http" Version="3.0.0" />

<!-- Swagger -->
<PackageVersion Include="Swashbuckle.AspNetCore" Version="10.2.3" />
<PackageVersion Include="Swashbuckle.AspNetCore.SwaggerGen" Version="10.2.3" />

<!-- HTML parsing (companion data layer — MarketBeat / TrendForce) -->
<PackageVersion Include="AngleSharp" Version="1.5.2" />
<PackageVersion Include="AngleSharp" Version="1.7.2" />

<!-- MCP -->
<PackageVersion Include="ModelContextProtocol" Version="0.2.0-preview.3" />
<PackageVersion Include="ModelContextProtocol.AspNetCore" Version="0.2.0-preview.3" />
<PackageVersion Include="Microsoft.Extensions.Hosting" Version="10.0.10" />

<!-- Test stack -->
<PackageVersion Include="Microsoft.NET.Test.Sdk" Version="17.9.0" />
<PackageVersion Include="xunit" Version="2.6.6" />
<PackageVersion Include="xunit.runner.visualstudio" Version="2.5.4" />
<PackageVersion Include="Moq" Version="4.20.70" />
<PackageVersion Include="FluentAssertions" Version="6.12.0" />
<PackageVersion Include="Testcontainers" Version="3.9.0" />
<PackageVersion Include="Testcontainers.PostgreSql" Version="3.9.0" />
<PackageVersion Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
<PackageVersion Include="xunit" Version="2.9.3" />
<PackageVersion Include="xunit.runner.visualstudio" Version="2.8.2" />
<PackageVersion Include="Moq" Version="4.20.72" />
<PackageVersion Include="FluentAssertions" Version="6.12.2" />
<PackageVersion Include="Testcontainers" Version="3.10.0" />
<PackageVersion Include="Testcontainers.PostgreSql" Version="3.10.0" />
<!-- Direct pin over Testcontainers' transitive SSH.NET 2023.0.0 (GHSA-q939-rpr3-3284, high). -->
<PackageVersion Include="SSH.NET" Version="2026.0.0" />
</ItemGroup>
Expand Down