Skip to content

chore(deps): Bump the routine-updates group with 13 updates - #3

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/BrassLedger.Api.Tests/routine-updates-d9face3bd7
Closed

chore(deps): Bump the routine-updates group with 13 updates#3
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/BrassLedger.Api.Tests/routine-updates-d9face3bd7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown

Updated AngleSharp from 1.5.0 to 1.7.1.

Release notes

Sourced from AngleSharp's releases.

1.7.1

Released on Wednesday, August 5 2026

  • Migrated the build system from NUKE to Fallout by @​jafin in Migrate the build system from NUKE to Fallout AngleSharp/AngleSharp#1275
    Released on Wednesday, August 5 2026
  • Improved WHATWG Url specification (#​802) @​jafin
  • Improved tokenizer read performance (#​1274) @​dv00d00
  • Fixed auxiliary browsing context lifetime (#​1278) @​jafin
  • Fixed duplicated DomName attributes on DOM geometry
  • Fixed document.open() destroying the DOM tree in case of encoding problems (#​1276)
  • Fixed source references having wrong line (#​1280)
  • Released 1.7.1 by @​FlorianRappl in Release 1.7.1 AngleSharp/AngleSharp#1281

Full Changelog: AngleSharp/AngleSharp@1.7.0...v1.7.1

1.7.0

Released on Friday, July 31 2026

  • Improved CSS selector performance (#​1270, #​929) @​lahma
  • Added support for the :host pseudo selector (#​1271)
  • Added support for the DomGeometry spec (#​1193)

1.6.0

Released on Sunday, July 26 2026

  • Improved performance for text tokenization (#​1262) @​dv00d00
  • Improved CSS selector performance
  • Improved observer dispatch during HTML parsing (#​1266) @​dv00d00
  • Improved declaration of unsupported pseudo elements
  • Fixed inconsistent behavior and segfaults on Android Release build (#​1252) @​DevGitPit
  • Fixed CSS attribute selector modifier handling for i / I (case-insensitive) and s / S (case-sensitive)
  • Added API enhancements to expose asynchronous HTML token source (#​1265) @​dv00d00
  • Added bounded stream parsing mode (#​1263) @​dv00d00
  • Added canonicalization of decimal, octal, or hexadecimal IPv4 literals in Url
  • Added parsing of / checks for IPv6 literals in Url
  • Added support for the CSS column combinator (||) selector syntax
  • Added correct identification of CurrentSource in CssMediaElement

1.5.2

Released on Sunday, July 5 2026

  • Fixed NodeIterator pre-removing steps to use the first following node (#​1260) @​ivandrofly
  • Fixed Range.IsCollapsed to also compare offsets (#​1259) @​ivandrofly
  • Fixed swapped comparison in Range.CompareBoundaryTo (#​1258) @​ivandrofly
  • Fixed Range.CopyContent to follow the DOM Standard (#​1257) @​ivandrofly
  • Fixed Range.ExtractContent to follow the DOM Standard (#​1256) @​ivandrofly
  • Added missing media attribute change detection on SVG style elements (#​1261) @​ivandrofly

Commits viewable in compare view.

Updated bunit from 1.31.3 to 1.40.0.

Release notes

Sourced from bunit's releases.

1.40.0

Fixed

  • Aligned Microsoft packages to their TFM version

1.39.5

Fixed

  • Do not set the Uri or BaseUri property on the FakeNavigationManager if navigation is prevented by a handler on net7.0 or greater. Reported and fixed by @​ayyron-dev in #​1647
  • Use default renderer properties for AngleSharp. Reported by @​jtleaming in [#​1692].
  • FindComponents throws an exception, when a base and derived class was searched for. Reported by @​BlueDragon709 in [#​1691].

1.38.5

Added

  • Added support for xunit v3 in the bunit.template. By @​linkdotnet.

1.37.7

Added

  • Added support for RendererInfo and AssignedRenderMode (.net9.0).

1.36.0

Added

  • Bumped .NET 9 version dependencies to stable packages.

1.35.3

Added

  • Extension packages (bunit.generators and bunit.web.query) are flagged as stable.

1.34.0

Fixed

1.33.3

Added

  • bunit.generators respect parameters from the base class.
  • Supports components using constructor injection in net9.0.

Fixed

  • Use latest System.Text.Json due to CVE in 8.0.4.

1.32.7

Fixed

  • Ensure that a check in WaitForAssertion and related methods is always performed at once before the wait timer is started. If not, the timeout could occure before a wait-for check-condition had been attempted, causing tests to fail without reason. Fixed by @​egil.

Commits viewable in compare view.

Updated coverlet.collector from 6.0.2 to 6.0.4.

Release notes

Sourced from coverlet.collector's releases.

6.0.4

Fixed

  • Fix empty coverage report when using include and exclude filters #​1726

Diff between 6.0.3 and 6.0.4

6.0.3

Fixed

Improvements

  • Cache the regex used in InstrumentationHelper #​1693
  • Enable dotnetTool integration tests for linux #​660

Diff between 6.0.2 and 6.0.3

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 8.0.10 to 8.0.30.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

8.0.30

Release

What's Changed

New Contributors

Full Changelog: dotnet/aspnetcore@v8.0.29...v8.0.30

8.0.29

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.28...v8.0.29

8.0.28

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.27...v8.0.28

8.0.27

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.26...v8.0.27

8.0.26

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.25...v8.0.26

8.0.25

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.24...v8.0.25

8.0.24

Release

8.0.23

Release

What's Changed

https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs

8.0.22

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.21...v8.0.22

8.0.21

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.19...v8.0.20

8.0.18

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

  • Update dependencies from dotnet/arcade (#​61832)
    This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
    The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

  • Update branding to 8.0.17 (#​61830)
    The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

  • Merging internal commits for release/8.0 (#​61924)
    This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

8.0.13

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.11...v8.0.12

8.0.11

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.10...v8.0.11

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 8.0.25 to 8.0.30.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

8.0.30

Release

What's Changed

New Contributors

Full Changelog: dotnet/aspnetcore@v8.0.29...v8.0.30

8.0.29

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.28...v8.0.29

8.0.28

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.27...v8.0.28

8.0.27

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.26...v8.0.27

8.0.26

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.25...v8.0.26

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Sqlite from 8.0.10 to 8.0.30.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

8.0.30

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.29...v8.0.30

8.0.29

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.28...v8.0.29

8.0.28

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.27...v8.0.28

8.0.27

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.26...v8.0.27

8.0.26

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.25...v8.0.26

8.0.25

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.24...v8.0.25

8.0.24

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.23...v8.0.24

8.0.23

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.22...v8.0.23

8.0.22

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.21...v8.0.22

8.0.21

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.19...v8.0.20

8.0.17

Dependency Updates

  • Update dependencies from dotnet/arcade (#​36085)
    Updates the project's dependencies using the latest versions from the dotnet/arcade repository. This ensures that the build infrastructure and related tooling are up to date, which can bring in important bug fixes, security patches, and improvements from upstream.

Miscellaneous

  • Update branding to 8.0.17 (#​36043)
    Updates the internal version branding to 8.0.17. This change ensures that the product and its packages correctly reflect the new release version, helping users and developers identify the build.

  • Merging internal commits for release/8.0 (#​36080)
    Integrates various internal commits into the release/8.0 branch. This merge brings together important updates and ensures the release branch is synchronized with recent internal development, maintaining consistency and stability for the release.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.13...v8.0.14

8.0.13

[Release](https://github.com/dotnet/core/releases/tag/v8.0.13

What's Changed

Full Changelog: dotnet/efcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.11...v8.0.12

8.0.11

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.10...v8.0.11

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 17.11.1 to 17.14.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

17.14.1

What's Changed

Full Changelog: microsoft/vstest@v17.14.0...v17.14.1

17.14.0

What's Changed

.NET versions updated

This version of VS Test upgraded .NET to net8 and net9. All projects targeting net6.0 (or other end-of-life .NET target frameworks) should pin their version of Microsoft.NET.Test.SDK to 17.13.0, or update the projects to net8 or newer. We remain backwards compatible with previous versions of Microsoft.NET.Test.SDK. This change does NOT prevent you from:

  • Updating to the latest VS, and running tests from net6.0 test projects.
  • Updating to the latest .NET SDK, and running tests from net6.0 test projects.

It also has no impact on .NET Framework projects, where we continue targeting .NET Framework 4.6.2.

Changes

Internal version updates and fixes

New Contributors

17.14.0-preview-25107-01

What's Changed

.NET versions updated

This version of VS Test upgraded .NET to net8 and net9. All projects targeting net6.0 (or other end-of-life .NET target frameworks) should pin their version of Microsoft.NET.Test.SDK to 17.13.0, or update the projects to net8 or newer. We remain backwards compatible with previous versions of Microsoft.NET.Test.SDK. This change does NOT prevent you from:

  • Updating to the latest VS, and running tests from net6.0 test projects.
  • Updating to the latest .NET SDK, and running tests from net6.0 test projects.

It also has no impact on .NET Framework projects, where we continue targeting .NET Framework 4.6.2.

Changes

Internal version updates and fixes

Description has been truncated

@dependabot
chore(deps): Bump the routine-updates group with 13 updates
8712465 
Bumps AngleSharp from 1.5.0 to 1.7.1
Bumps bunit from 1.31.3 to 1.40.0
Bumps coverlet.collector from 6.0.2 to 6.0.4
Bumps Microsoft.AspNetCore.Mvc.Testing from 8.0.10 to 8.0.30
Bumps Microsoft.AspNetCore.OpenApi from 8.0.25 to 8.0.30
Bumps Microsoft.EntityFrameworkCore.Sqlite from 8.0.10 to 8.0.30
Bumps Microsoft.NET.Test.Sdk from 17.11.1 to 17.14.1
Bumps Microsoft.Playwright from 1.54.0 to 1.62.0
Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 8.0.10 to 8.0.11
Bumps SQLitePCLRaw.lib.e_sqlite3 from 2.1.12 to 2.1.13
Bumps Swashbuckle.AspNetCore from 6.6.2 to 6.9.0
Bumps System.Text.Json from 8.0.5 to 8.0.6
Bumps xunit from 2.9.2 to 2.9.3

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL
  dependency-version: 8.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: SQLitePCLRaw.lib.e_sqlite3
  dependency-version: 2.1.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 6.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: coverlet.collector
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL
  dependency-version: 8.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: SQLitePCLRaw.lib.e_sqlite3
  dependency-version: 2.1.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 6.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL
  dependency-version: 8.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: SQLitePCLRaw.lib.e_sqlite3
  dependency-version: 2.1.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: coverlet.collector
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL
  dependency-version: 8.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: SQLitePCLRaw.lib.e_sqlite3
  dependency-version: 2.1.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL
  dependency-version: 8.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: SQLitePCLRaw.lib.e_sqlite3
  dependency-version: 2.1.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL
  dependency-version: 8.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: SQLitePCLRaw.lib.e_sqlite3
  dependency-version: 2.1.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: coverlet.collector
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: Microsoft.Playwright
  dependency-version: 1.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: AngleSharp
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: bunit
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: coverlet.collector
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL
  dependency-version: 8.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: SQLitePCLRaw.lib.e_sqlite3
  dependency-version: 2.1.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: System.Text.Json
  dependency-version: 8.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Aug 13, 2026
@socket-security

socket-security Bot commented Aug 13, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedsystem.text.json@​8.0.5 ⏵ 8.0.64010090100100
Updatedcoverlet.collector@​6.0.2 ⏵ 6.0.464 +1100100100100
Updatedmicrosoft.playwright@​1.54.0 ⏵ 1.62.079 +510010010070 -30
Updatedsqlitepclraw.lib.e_sqlite3@​2.1.12 ⏵ 2.1.138110090100100
Updatedmicrosoft.aspnetcore.mvc.testing@​8.0.10 ⏵ 8.0.309810090100100
Updatedmicrosoft.net.test.sdk@​17.11.1 ⏵ 17.14.110010090100100
Updatedxunit@​2.9.2 ⏵ 2.9.310010090100100
Updatedmicrosoft.aspnetcore.openapi@​8.0.25 ⏵ 8.0.3010010090100100
Updatedswashbuckle.aspnetcore@​6.6.2 ⏵ 6.9.010010090100100
Updatedmicrosoft.entityframeworkcore.sqlite@​8.0.10 ⏵ 8.0.3010010090100100
Updatednpgsql.entityframeworkcore.postgresql@​8.0.10 ⏵ 8.0.1199 -110090100100
Updatedanglesharp@​1.5.0 ⏵ 1.7.19410090100100
Updatedbunit@​1.31.3 ⏵ 1.40.010010090100100

View full report

@socket-security

socket-security Bot commented Aug 13, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: nuget system.reflection.metadata is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: BrassLedger.Api.Tests/BrassLedger.Api.Tests.csproj → nuget/microsoft.net.test.sdk@17.14.1 → nuget/system.reflection.metadata@8.0.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/system.reflection.metadata@8.0.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@rhamenator

rhamenator commented Aug 13, 2026

Copy link
Copy Markdown
Owner

Closing this non-security version-refresh proposal because the portfolio currently has no open Dependabot vulnerability alerts and this update did not complete compatibility evidence during the assurance rollout. Weekly grouped Dependabot updates remain enabled, and a future proposal can be merged once the protected-branch verification suite passes.

@rhamenator rhamenator closed this Aug 13, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown
Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/nuget/BrassLedger.Api.Tests/routine-updates-d9face3bd7 branch August 13, 2026 23:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rhamenator