build(deps): backend dependency updates (STJ-9.x-safe subset of #49) - #50
Merged
Conversation
Takes the safe backend/test NuGet bumps from Dependabot #49 while keeping the deliberate System.Text.Json 9.x pin (EF Core 9 references STJ 9.0.x; the test host is pinned to avoid a CS1705 mismatch): EF Core Design/InMemory 9.0.9 -> 9.0.17 Microsoft.AspNetCore.Authentication.JwtBearer 8.0.10 -> 8.0.28 Microsoft.AspNetCore.Mvc.Testing 8.0.10 -> 8.0.28 Swashbuckle.AspNetCore 6.6.2 -> 6.9.0 OpenTelemetry.* 1.15.3/1.10.0 -> 1.16.0 Microsoft.Extensions.Configuration.KeyPerFile 8.0.0 -> 8.0.28 xunit 2.9.2 -> 2.9.3 System.Text.Json (test pin) 9.0.9 -> 9.0.17 Held back from #49: Azure.Extensions.AspNetCore.Configuration.Secrets 1.5.1 and Azure.Identity 1.21.0 — their Azure.Core 1.54 transitively requires System.Text.Json >= 10, which would force a STJ 9 -> 10 runtime major and break the intentional pin (NU1605 downgrade). Those, plus the explicit STJ 10 bump, are deferred to a deliberate STJ-10 adoption. Build clean; 472/472 backend tests green. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F1g44VLAeYdf3FAoXsXRu7
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Lands the safe subset of Dependabot's backend group (#49), keeping the deliberate System.Text.Json 9.x pin. #49 couldn't merge because it (implicitly) forced a STJ 9 → 10 runtime major: its
Azure.Extensions.AspNetCore.Configuration.Secrets 1.5.1pullsAzure.Core 1.54, which transitively requiresSystem.Text.Json ≥ 10, colliding with the intentional pin (EF Core 9 references STJ 9.0.x; the test host is pinned to avoid aCS1705mismatch) →NU1605downgrade error.This PR takes everything that's compatible with STJ 9.x and holds back the STJ-10-coupled packages for a separate, deliberate STJ-10 adoption.
Updated
Microsoft.EntityFrameworkCore.Design/.InMemory9.0.9 → 9.0.17Microsoft.AspNetCore.Authentication.JwtBearer8.0.10 → 8.0.28Microsoft.AspNetCore.Mvc.Testing8.0.10 → 8.0.28Swashbuckle.AspNetCore6.6.2 → 6.9.0OpenTelemetry.*1.15.3 / 1.10.0 → 1.16.0Microsoft.Extensions.Configuration.KeyPerFile8.0.0 → 8.0.28xunit2.9.2 → 2.9.3System.Text.Json(test pin) 9.0.9 → 9.0.17 (stays on 9.x)Held back (require STJ 10 — deferred)
Azure.Extensions.AspNetCore.Configuration.Secrets1.5.1Azure.Identity1.21.0System.Text.Json 10.0.9Dependabot added toAtlas.ApiAdopting those is a conscious STJ-10 upgrade across the stack (Api explicit ref + test pin), best done on its own once validated.
Verification
dotnet restoreclean (noNU1605);dotnet build -c Releaseclean;dotnet testgreen — 472/472.Follow-up
Supersedes the mergeable part of #49 — #49 can be closed (or left for Dependabot to regenerate without the STJ-10 group members).
🤖 Generated with Claude Code
Generated by Claude Code