Skip to content

Bump AWSSDK.S3 and 10 others#20

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/backend/backend-deps-5334b8f2ed
Closed

Bump AWSSDK.S3 and 10 others#20
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/backend/backend-deps-5334b8f2ed

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 10, 2026

Copy link
Copy Markdown

Updated AWSSDK.S3 from 4.0.24 to 4.0.100.3.

Release notes

Sourced from AWSSDK.S3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated FirebaseAdmin from 3.5.0 to 3.6.0.

Release notes

Sourced from FirebaseAdmin's releases.

3.6.0

New Features

  • feat(fcm): Enable fid and deprecate token for Send API (#​525)

Bug Fixes

  • fix(ci): Resolve zizmor security findings in GitHub Actions workflows (#​527)

Miscellaneous

  • [chore] Release 3.6.0 (#​528)
  • chore(deps): bump NuGet/login from 1.1.0 to 1.2.0 (#​520)
  • chore(deps): bump actions/checkout from 6.0.2 to 7.0.0 (#​524)
  • chore: update System.Security.Cryptography.Xml to 8.0.3 (#​518)

Commits viewable in compare view.

Updated Google.Apis.Auth from 1.74.0 to 1.75.0.

Release notes

Sourced from Google.Apis.Auth's releases.

1.75.0

Features:

  • #​3171 Supports caching request parameter property info

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Tools from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Tools's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.2 to 10.0.3.

Release notes

Sourced from Npgsql.EntityFrameworkCore.PostgreSQL's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore from 10.2.1 to 10.2.3.

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

10.2.3

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.2...v10.2.3

10.2.2

What's Changed

New Contributors

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.1...v10.2.2

Commits viewable in compare view.

Updated System.IdentityModel.Tokens.Jwt from 8.18.0 to 8.19.1.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

8.19.1

Bug Fixes

  • Update JwtSecurityTokenHandler for IssuerSigningKeyResolverUsingConfiguration to take priority over IssuerSigningKeyResolver, matching the documented contract and the correct behavior already present in JsonWebTokenHandler. See PR #​3519.

8.19.0

New Features

  • Add ML-DSA (FIPS 204) post-quantum signature support. See PR #​3479.
  • Cache custom crypto providers in CryptoProviderFactory. See PR #​3489.

Bug Fixes

  • Disable automatic redirects on default HttpClient for JKU retrieval. See PR #​3494.
  • Adjust rented buffer handling in claim set parsing. See PR #​3493.
  • Tidy null handling in SAML conditions validation. See PR #​3491.
  • Improve validation of jku claim. See PR #​3481.
  • Limit telemetry algorithm dimension cardinality. See PR #​3490.
  • Add defensive copy of collections in ValidationParameters. See PR #​3492.
  • Update TokenValidationParameter copy constructor to make a deep copy. See PR #​3488.
  • Update to fail-closed when replay protection isn't configured and other DPoP hardening. See PR #​3505.
  • Apply RFC 3986 section 6.2.2 normalization to DPoP htu comparison. See PR #​3509.

Commits viewable in compare view.

@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jul 10, 2026
Bumps AWSSDK.S3 from 4.0.24 to 4.0.100.3
Bumps FirebaseAdmin from 3.5.0 to 3.6.0
Bumps Google.Apis.Auth from 1.74.0 to 1.75.0
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.8 to 10.0.9
Bumps Microsoft.AspNetCore.OpenApi from 10.0.8 to 10.0.9
Bumps Microsoft.EntityFrameworkCore from 10.0.8 to 10.0.9
Bumps Microsoft.EntityFrameworkCore.Design from 10.0.8 to 10.0.9
Bumps Microsoft.EntityFrameworkCore.Tools from 10.0.8 to 10.0.9
Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.2 to 10.0.3
Bumps Swashbuckle.AspNetCore from 10.2.1 to 10.2.3
Bumps System.IdentityModel.Tokens.Jwt from 8.18.0 to 8.19.1

---
updated-dependencies:
- dependency-name: AWSSDK.S3
  dependency-version: 4.0.100.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-deps
- dependency-name: FirebaseAdmin
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-deps
- dependency-name: Google.Apis.Auth
  dependency-version: 1.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-deps
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-deps
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-deps
- dependency-name: Microsoft.EntityFrameworkCore
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-deps
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-deps
- dependency-name: Microsoft.EntityFrameworkCore.Tools
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-deps
- dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL
  dependency-version: 10.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-deps
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 10.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-deps
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-version: 8.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the backend-deps group with 11 updates Bump AWSSDK.S3 and 10 others Jul 13, 2026
@dependabot
dependabot Bot force-pushed the dependabot/nuget/backend/backend-deps-5334b8f2ed branch from da92410 to 428a353 Compare July 13, 2026 10:49
@dependabot @github

dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Author

Superseded by #22.

@dependabot dependabot Bot closed this Jul 17, 2026
@dependabot
dependabot Bot deleted the dependabot/nuget/backend/backend-deps-5334b8f2ed branch July 17, 2026 12:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants