Bump the nuget group with 4 updates

[dependabot]

Updated Dapper from 2.1.79 to 2.1.86.

Release notes

Sourced from Dapper's releases.

2.1.86

What's Changed

• Point docs links at dapperlib.dev by @​mgravell in Point docs links at dapperlib.dev DapperLib/Dapper#2222
• Point PackageReleaseNotes at GitHub Releases by @​mgravell in Point PackageReleaseNotes at GitHub Releases DapperLib/Dapper#2223
• Pin the docs site config, and give it a favicon by @​mgravell in Pin the docs site config, and give it a favicon DapperLib/Dapper#2224
• DynamicParameters.AddParameters(IDbCommand): identity-free self-apply by @​mgravell in DynamicParameters.AddParameters(IDbCommand): identity-free self-apply DapperLib/Dapper#2225
• Re-enable DateOnly/TimeOnly support, fixing the defects that got it disabled by @​mgravell in Re-enable DateOnly/TimeOnly support, fixing the defects that got it disabled DapperLib/Dapper#2228
• Publish to nuget.org via Trusted Publishing (OIDC), and retire MyGet/AppVeyor by @​mgravell in Publish to nuget.org via Trusted Publishing (OIDC), and retire MyGet/AppVeyor DapperLib/Dapper#2230

Full Changelog: DapperLib/Dapper@2.1.79...2.1.86

Commits viewable in compare view.

Updated MongoDB.Driver from 3.11.1 to 3.11.2.

Release notes

Sourced from MongoDB.Driver's releases.

3.11.2

[!IMPORTANT]
This is a security patch release. It addresses two CVEs reported against the driver, along with a small number of related fixes. There are no public API changes and no application code changes are required to upgrade. Note that the shape of some queries generated by the LINQ provider and by GridFS has changed — see the individual tickets below.

This is a patch release that contains fixes and stability improvements:

• CSHARP-6177 / CVE-2026-88026: Query filter regex injection via unescaped backslash and bracket in LINQ character-set translation
• CSHARP-6190 / CVE-2026-88025: Use exact match for file ID in GridFS delete methods
• CSHARP-6213: Normalize SRV target host names to lower case during SRV polling

The full list of issues resolved in this release is available at CSHARP JIRA project.

Documentation on the .NET driver can be found here.

Commits viewable in compare view.

Updated Ocelot from 25.0.0 to 25.0.1.

Release notes

Sourced from Ocelot's releases.

25.0.1

📦 Reference SDK 10.0.401. Runtime 10.0.12 patch (version 25.0.1)

SDK: 10.0.401
Patched version: 25.0

Version 25.0.1 includes upgraded solutions of all Ocelot packages based on .NET SDK 10.0.401, released on September 8, 2026. For more details about SDK 10.0.401 a.k.a. Runtime 10.0.12, see the .NET 10.0.12 Release Notes as part of .NET 10 Release Notes.

Features of version 25.0.1

Logbook

• _{ba90c504 by Raman Maksimchuk on Monday, September 14 at 21:54 →}
  Release version 25.0.1 for SDK 10.0.401 | +semver: patch
• _{7fac820c by Raman Maksimchuk on Monday, September 14 at 15:08 →}
  Ref SDK 10.0.401 (Runtime 10.0.12) to release Ocelot v25.0.1 and Ocelot.Testing v25.0.1
• _{65686d48 by Raman Maksimchuk on Friday, August 28 at 14:12 →}
  Don't upload code coverage for Release-mode DLLs as a second uploaded report, since it breaks the coverage process for Debug DLLs
• _{5a59e965 by Raman Maksimchuk on Wednesday, August 26 at 15:45 →}
  IDE0130 Namespace Ocelot.AcceptanceTests.* does not match folder structure, expected Ocelot.Acceptance.*
• _{30c2e08e by Raman Maksimchuk on Tuesday, August 18 at 20:24 →}
  Finalize the docs for version 25.0

Full Changelog: ThreeMammals/Ocelot@25.0.0...25.0.1

Commits viewable in compare view.

Updated StackExchange.Redis from 3.1.31 to 3.2.1.

Release notes

Sourced from StackExchange.Redis's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions