Skip to content

build: Bump the nuget-deps group with 8 updates#589

Closed
dependabot[bot] wants to merge 1 commit intodependabotchangesfrom
dependabot/nuget/App/backend-api/Microsoft.GS.DPS/dependabotchanges/nuget-deps-a52da46b96
Closed

build: Bump the nuget-deps group with 8 updates#589
dependabot[bot] wants to merge 1 commit intodependabotchangesfrom
dependabot/nuget/App/backend-api/Microsoft.GS.DPS/dependabotchanges/nuget-deps-a52da46b96

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2026

Updated AutoMapper from 16.0.0 to 16.1.1.

Release notes

Sourced from AutoMapper's releases.

16.1.1

What's Changed

Security

Fixed an issue where certain cyclic or self-referential object graphs could trigger uncontrolled recursion during mapping, potentially resulting in stack exhaustion and denial of service.

Applications that process untrusted or attacker-controlled object graphs through affected mapping paths may be impacted.

Users should upgrade to this release.

Security advisory: GHSA-rvv3-g6hj-g44x

Thanks to @​skdishansachin for responsibly disclosing this issue.

Full Changelog: LuckyPennySoftware/AutoMapper@v16.1.0...v16.1.1

16.1.0

What's Changed

New Contributors

Full Changelog: LuckyPennySoftware/AutoMapper@v16.0.0...v16.1.0

Commits viewable in compare view.

Updated Azure.Identity from 1.18.0 to 1.20.0.

Release notes

Sourced from Azure.Identity's releases.

1.20.0

1.20.0 (2026-03-30)

Features Added

  • Added a JSON schema segment to the NuGet package that provides IntelliSense and validation for Azure.Identity credential configuration in appsettings.json.

Breaking Changes

  • AddAzureClient, AddKeyedAzureClient, and WithAzureCredential return type changed from IHostApplicationBuilder to IClientBuilder to align with the IClientBuilder composition change in System.ClientModel.

1.19.0

1.19.0 (2026-03-11)

Features Added

  • Added support in ClientCertificateCredential to specify a path in the form of cert:/StoreLocation/StoreName/Thumbprint to refer to a certificate in the platform certificate store - such as the Windows Certificate Store on Windows, and the KeyChain on MacOS - instead of a file on disk. For example to load a certificate from the "My" store in the "CurrentUser" location use the path cert:/CurrentUser/My/E661583E8FABEF4C0BEF694CBC41C28FB81CD870 (A community contribution, courtesy of fowl2).

Other Changes

  • Updated Microsoft.Identity.Client and Microsoft.Identity.Client.Extensions.Msal dependencies to version 4.83.1.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Json from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Configuration.Json's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Options's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Maui.Graphics from 10.0.41 to 10.0.51.

Release notes

Sourced from Microsoft.Maui.Graphics's releases.

10.0.51

What's Changed

Full Changelog: dotnet/maui@10.0.50...10.0.51

10.0.50

What's Changed

.NET MAUI 10.0.50 introduces significant improvements across all platforms with focus on quality, performance, and developer experience. This release includes 78 commits with various improvements, bug fixes, and enhancements.

AI

Ai Agents

Animation

API

Button

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Maui.Graphics.Skia from 10.0.41 to 10.0.51.

Release notes

Sourced from Microsoft.Maui.Graphics.Skia's releases.

10.0.51

What's Changed

Full Changelog: dotnet/maui@10.0.50...10.0.51

10.0.50

What's Changed

.NET MAUI 10.0.50 introduces significant improvements across all platforms with focus on quality, performance, and developer experience. This release includes 78 commits with various improvements, bug fixes, and enhancements.

AI

Ai Agents

Animation

API

Button

... (truncated)

Commits viewable in compare view.

Updated MongoDB.Driver from 3.6.0 to 3.7.1.

Release notes

Sourced from MongoDB.Driver's releases.

3.7.1

This is a patch release that contains fixes and stability improvements:

  • CSHARP-5916: ExpressionNotSupportedException when a $set stage expression references a member of a captured constant
  • CSHARP-5918: ExpressionNotSupportedException when a $set stage expression uses ToList method
  • CSHARP-5917: Mql.Field should lookup for default serializer if null is provided as a bsonSerializer parameter
  • CSHARP-5920: SerializerFinder wrapping serializer into Upcast/Downcast serializer breaks some expressions translation
  • CSHARP-5905: Fix bug when using EnumRepresentationConvention or ObjectSerializerAllowedTypesConvention
  • CSHARP-5928: LINQ Provider throws misleading exception if expression translation is not supported
  • CSHARP-5929: Improve SerializerFinder to proper handling of IUnknowableSerializer

The full list of issues resolved in this release is available at CSHARP JIRA project.

Documentation on the .NET driver can be found here.

3.7.0

This is the general availability release for the 3.7.0 version of the driver.

The main new features in 3.7.0 include:

  • CSHARP-3124: OpenTelemetry implementation
  • CSHARP-5736: Expose atClusterTime parameter in snapshot sessions
  • CSHARP-5805: Add support for server selection's deprioritized servers to all topologies
  • CSHARP-5712: WithTransaction API retries too frequently
  • CSHARP-5836: Support new Reverse with array overload introduced by .NET 10
  • CSHARP-4566: Support filters comparing nullable numeric or char field to constant
  • CSHARP-5606: Support ConvertChecked as well as Convert

Improvements:

  • CSHARP-5841: Rewrite $elemMatch with $or referencing implied element due to server limitations
  • CSHARP-5572: Implement new SerializerFinder
  • CSHARP-5861: Use ConnectAsync in synchronous code-path to avoid dead-locks
  • CSHARP-5876: Convert some disposer classes to structs
  • CSHARP-5889: Optimize comparison with nullable constant translation
  • CSHARP-5890: Avoid byte array allocations writing Int64, Double, Decimal128 in ByteBufferStream
  • CSHARP-5888: Optimize CommandEventHelper to avoid redundant message decoding

Fixes:

  • CSHARP-5564: Enum with ushort underlying type is not serialized correctly
  • CSHARP-5654: String.IndexOf comparisons to -1 return incorrect results
  • CSHARP-5866: Avoid raising ClusterDescriptionChangedEvent on unchanged DNS records update
  • CSHARP-5850: Use of an untranslatable property reference in a LINQ expression should be executed client-side
  • CSHARP-5863: The built-in IPAddressSerializer throws when using IPAddress.Any, etc
  • CSHARP-5877: Fix First/Last field path in GroupBy optimizer when source is wrapped
  • CSHARP-5894: Deadlock during concurrent BsonClassMap initialization

The full list of issues resolved in this release is available at CSHARP JIRA project.

Documentation on the .NET driver can be found here.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build: Bump the nuget-deps group with 8 updates
6afc4d0 
Bumps AutoMapper from 16.0.0 to 16.1.1
Bumps Azure.Identity from 1.18.0 to 1.20.0
Bumps Microsoft.Extensions.Configuration from 10.0.3 to 10.0.5
Bumps Microsoft.Extensions.Configuration.Json from 10.0.3 to 10.0.5
Bumps Microsoft.Extensions.Options from 10.0.3 to 10.0.5
Bumps Microsoft.Maui.Graphics from 10.0.41 to 10.0.51
Bumps Microsoft.Maui.Graphics.Skia from 10.0.41 to 10.0.51
Bumps MongoDB.Driver from 3.6.0 to 3.7.1

---
updated-dependencies:
- dependency-name: AutoMapper
  dependency-version: 16.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-deps
- dependency-name: Azure.Identity
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-deps
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: Microsoft.Extensions.Options
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: Microsoft.Maui.Graphics
  dependency-version: 10.0.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: Microsoft.Maui.Graphics.Skia
  dependency-version: 10.0.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: MongoDB.Driver
  dependency-version: 3.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Apr 1, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 1, 2026

Superseded by #591.

@dependabot dependabot bot closed this Apr 1, 2026
@dependabot dependabot bot deleted the dependabot/nuget/App/backend-api/Microsoft.GS.DPS/dependabotchanges/nuget-deps-a52da46b96 branch April 1, 2026 23:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Avijit-Microsoft Avijit-Microsoft Awaiting requested review from Avijit-Microsoft Avijit-Microsoft is a code owner

@Roopan-Microsoft Roopan-Microsoft Awaiting requested review from Roopan-Microsoft Roopan-Microsoft is a code owner

@Prajwal-Microsoft Prajwal-Microsoft Awaiting requested review from Prajwal-Microsoft Prajwal-Microsoft is a code owner

@Dongbumlee Dongbumlee Awaiting requested review from Dongbumlee Dongbumlee is a code owner

@Vinay-Microsoft Vinay-Microsoft Awaiting requested review from Vinay-Microsoft Vinay-Microsoft is a code owner

@aniaroramsft aniaroramsft Awaiting requested review from aniaroramsft aniaroramsft is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants