Skip to content

chore(deps): Bump Asp.Versioning.Mvc and 18 others #40

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): Bump Asp.Versioning.Mvc and 18 others #40

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .config/dotnet-tools.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
"isRoot": true,
"tools": {
"dotnet-ef": {
"version": "8.0.10",
"version": "8.0.31",
"commands": [
"dotnet-ef"
],
Expand Down
6 changes: 3 additions & 3 deletions backend/admin-api/AdminApi/AdminApi.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,9 +9,9 @@
</PropertyGroup>

<ItemGroup>
<PackageReference Include="Asp.Versioning.Mvc" Version="8.1.0" />
<PackageReference Include="Serilog.AspNetCore" Version="8.0.1" />
<PackageReference Include="Swashbuckle.AspNetCore" Version="6.6.2" />
<PackageReference Include="Asp.Versioning.Mvc" Version="8.1.1" />
<PackageReference Include="Serilog.AspNetCore" Version="8.0.3" />
<PackageReference Include="Swashbuckle.AspNetCore" Version="6.9.0" />
<!-- Task #393: pins a transitive dependency up past GHSA-hh2w-p6rv-4g7w
(High). Nothing here calls System.Text.Json directly - this is only
to float the version ASP.NET Core's own model binding resolves. -->
Expand Down
8 changes: 4 additions & 4 deletions backend/consumer-api/ConsumerApi/ConsumerApi.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,13 +9,13 @@
</PropertyGroup>

<ItemGroup>
<PackageReference Include="Asp.Versioning.Mvc" Version="8.1.0" />
<PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="8.0.10">
<PackageReference Include="Asp.Versioning.Mvc" Version="8.1.1" />
<PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="8.0.31">
<PrivateAssets>all</PrivateAssets>
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
</PackageReference>
<PackageReference Include="Serilog.AspNetCore" Version="8.0.1" />
<PackageReference Include="Swashbuckle.AspNetCore" Version="6.6.2" />
<PackageReference Include="Serilog.AspNetCore" Version="8.0.3" />
<PackageReference Include="Swashbuckle.AspNetCore" Version="6.9.0" />
</ItemGroup>

<ItemGroup>
Expand Down
6 changes: 3 additions & 3 deletions backend/provider-api/ProviderApi/ProviderApi.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,9 +9,9 @@
</PropertyGroup>

<ItemGroup>
<PackageReference Include="Asp.Versioning.Mvc" Version="8.1.0" />
<PackageReference Include="Serilog.AspNetCore" Version="8.0.1" />
<PackageReference Include="Swashbuckle.AspNetCore" Version="6.6.2" />
<PackageReference Include="Asp.Versioning.Mvc" Version="8.1.1" />
<PackageReference Include="Serilog.AspNetCore" Version="8.0.3" />
<PackageReference Include="Swashbuckle.AspNetCore" Version="6.9.0" />
<!-- Task #393: pins a transitive dependency up past GHSA-hh2w-p6rv-4g7w
(High). Nothing here calls System.Text.Json directly - this is only
to float the version ASP.NET Core's own model binding resolves. -->
Expand Down
8 changes: 4 additions & 4 deletions backend/shared/Application/Application.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,10 +8,10 @@
</PropertyGroup>

<ItemGroup>
<PackageReference Include="FluentValidation" Version="11.9.2" />
<PackageReference Include="FluentValidation.DependencyInjectionExtensions" Version="11.9.2" />
<PackageReference Include="MediatR" Version="12.4.1" />
<PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="8.0.1" />
<PackageReference Include="FluentValidation" Version="11.12.0" />
<PackageReference Include="FluentValidation.DependencyInjectionExtensions" Version="11.12.0" />
<PackageReference Include="MediatR" Version="12.5.0" />
<PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="8.0.3" />
</ItemGroup>

<ItemGroup>
Expand Down
17 changes: 10 additions & 7 deletions backend/shared/Infrastructure/Infrastructure.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,22 +21,25 @@
<PackageReference Include="AspNetCore.HealthChecks.Redis" Version="8.0.1" />
<PackageReference Include="EFCore.NamingConventions" Version="8.0.3" />
<PackageReference Include="FirebaseAdmin" Version="3.6.0" />
<PackageReference Include="FluentValidation" Version="11.12.0" />
<PackageReference Include="FluentValidation.DependencyInjectionExtensions" Version="11.12.0" />
<PackageReference Include="MailKit" Version="4.17.0" />
<PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="8.0.10" />
<PackageReference Include="MediatR" Version="12.5.0" />
<PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="8.0.31" />
<PackageReference Include="Hangfire.AspNetCore" Version="1.8.24" />
<PackageReference Include="Hangfire.PostgreSql" Version="1.20.12" />
<PackageReference Include="Microsoft.EntityFrameworkCore" Version="8.0.10" />
<PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="8.0.10">
<PackageReference Include="Hangfire.PostgreSql" Version="1.21.1" />
<PackageReference Include="Microsoft.EntityFrameworkCore" Version="8.0.31" />
<PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="8.0.31">
<PrivateAssets>all</PrivateAssets>
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
</PackageReference>
<PackageReference Include="Microsoft.Extensions.Caching.StackExchangeRedis" Version="8.0.10" />
<PackageReference Include="Microsoft.Extensions.Caching.StackExchangeRedis" Version="8.0.31" />
<!-- Task #393: 8.0.10 pulled in MessagePack 2.5.108, which carries
GHSA-4qm4-8hg2-g2xm (2 High + 10 Moderate). Bumped alone, ahead of
the rest of this project's 8.0.10-pinned Microsoft.* packages, to
float the transitive MessagePack version past the fix. -->
<PackageReference Include="Microsoft.AspNetCore.SignalR.StackExchangeRedis" Version="8.0.30" />
<PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="8.0.10" />
<PackageReference Include="Microsoft.AspNetCore.SignalR.StackExchangeRedis" Version="8.0.31" />
<PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="8.0.11" />
<PackageReference Include="OpenTelemetry.Exporter.Prometheus.AspNetCore" Version="1.17.0-beta.1" />
<PackageReference Include="OpenTelemetry.Extensions.Hosting" Version="1.17.0" />
</ItemGroup>
Expand Down
8 changes: 4 additions & 4 deletions backend/tests/Catalog.Tests/Catalog.Tests.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,21 +9,21 @@
</PropertyGroup>

<ItemGroup>
<PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.11.1" />
<PackageReference Include="xunit" Version="2.9.2" />
<PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
<PackageReference Include="xunit" Version="2.9.3" />
<PackageReference Include="xunit.runner.visualstudio" Version="2.8.2">
<PrivateAssets>all</PrivateAssets>
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
</PackageReference>
<!-- Pinned to 7.x: FluentAssertions 8.0 requires a paid licence for commercial use. -->
<PackageReference Include="FluentAssertions" Version="7.2.0" />
<PackageReference Include="FluentAssertions" Version="7.2.2" />
<!--
SQLite rather than the EF in-memory provider: these tests assert on
unique-index enforcement, and the in-memory provider ignores indexes
entirely, so it would report a false pass.
-->
<!-- Task #393: bumped past GHSA-2m69-gcr7-jv3q (High) in the transitive SQLitePCLRaw.lib.e_sqlite3 - test-only, never in a published image, but easy to clear so it should not linger. -->
<PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="8.0.30" />
<PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="8.0.31" />
<PackageReference Include="EFCore.NamingConventions" Version="8.0.3" />
<!-- NotificationTemplateRenderer's IMemoryCache dependency (tasks 126a-d) - a standalone package, not pulled in by FrameworkReference like Infrastructure.csproj has. -->
<PackageReference Include="Microsoft.Extensions.Caching.Memory" Version="8.0.1" />
Expand Down
8 changes: 4 additions & 4 deletions backend/tests/CustomerManagement.Tests/CustomerManagement.Tests.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,8 +9,8 @@
</PropertyGroup>

<ItemGroup>
<PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.11.1" />
<PackageReference Include="xunit" Version="2.9.2" />
<PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
<PackageReference Include="xunit" Version="2.9.3" />
<PackageReference Include="xunit.runner.visualstudio" Version="2.8.2">
<PrivateAssets>all</PrivateAssets>
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
Expand All @@ -20,15 +20,15 @@
paid licence for commercial use, and Nestly is a commercial product.
7.2.0 is the last Apache-2.0 release.
-->
<PackageReference Include="FluentAssertions" Version="7.2.0" />
<PackageReference Include="FluentAssertions" Version="7.2.2" />
<!--
SQLite rather than the EF in-memory provider: same rationale as
Identity.Tests/TestDatabase.cs - real relational behaviour (unique
indexes, correlated subqueries) rather than the in-memory provider's
approximations.
-->
<!-- Task #393: bumped past GHSA-2m69-gcr7-jv3q (High) in the transitive SQLitePCLRaw.lib.e_sqlite3 - test-only, never in a published image, but easy to clear so it should not linger. -->
<PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="8.0.30" />
<PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="8.0.31" />
<PackageReference Include="EFCore.NamingConventions" Version="8.0.3" />
</ItemGroup>

Expand Down
8 changes: 4 additions & 4 deletions backend/tests/Identity.Tests/Identity.Tests.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,8 +9,8 @@
</PropertyGroup>

<ItemGroup>
<PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.11.1" />
<PackageReference Include="xunit" Version="2.9.2" />
<PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
<PackageReference Include="xunit" Version="2.9.3" />
<PackageReference Include="xunit.runner.visualstudio" Version="2.8.2">
<PrivateAssets>all</PrivateAssets>
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
Expand All @@ -20,15 +20,15 @@
paid licence for commercial use, and Nestly is a commercial product.
7.2.0 is the last Apache-2.0 release.
-->
<PackageReference Include="FluentAssertions" Version="7.2.0" />
<PackageReference Include="FluentAssertions" Version="7.2.2" />
<PackageReference Include="Moq" Version="4.20.72" />
<!--
SQLite rather than the EF in-memory provider: these tests assert on
unique-index enforcement (task 35c), and the in-memory provider ignores
indexes entirely, so it would report a false pass.
-->
<!-- Task #393: bumped past GHSA-2m69-gcr7-jv3q (High) in the transitive SQLitePCLRaw.lib.e_sqlite3 - test-only, never in a published image, but easy to clear so it should not linger. -->
<PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="8.0.30" />
<PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="8.0.31" />
<PackageReference Include="EFCore.NamingConventions" Version="8.0.3" />
</ItemGroup>

Expand Down
8 changes: 4 additions & 4 deletions backend/tests/Performance.Tests/Performance.Tests.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,14 +9,14 @@
</PropertyGroup>

<ItemGroup>
<PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.11.1" />
<PackageReference Include="xunit" Version="2.9.2" />
<PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
<PackageReference Include="xunit" Version="2.9.3" />
<PackageReference Include="xunit.runner.visualstudio" Version="2.8.2">
<PrivateAssets>all</PrivateAssets>
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
</PackageReference>
<!-- Pinned to 7.x: FluentAssertions 8.0 requires a paid licence for commercial use (see Catalog.Tests.csproj). -->
<PackageReference Include="FluentAssertions" Version="7.2.0" />
<PackageReference Include="FluentAssertions" Version="7.2.2" />
<!--
SQLite rather than the EF in-memory provider: these are concurrency/load
tests that assert on real relational behaviour (unique-index
Expand All @@ -27,7 +27,7 @@
connections instead of sharing one.
-->
<!-- Task #393: bumped past GHSA-2m69-gcr7-jv3q (High) in the transitive SQLitePCLRaw.lib.e_sqlite3 - test-only, never in a published image, but easy to clear so it should not linger. -->
<PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="8.0.30" />
<PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="8.0.31" />
<PackageReference Include="EFCore.NamingConventions" Version="8.0.3" />
</ItemGroup>

Expand Down
Loading