Skip to content

Bump the nuget-minor-patch group with 21 updates - #223

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/Orbit.Analyzers/nuget-minor-patch-d8e2125ebf
Closed

Bump the nuget-minor-patch group with 21 updates#223
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/Orbit.Analyzers/nuget-minor-patch-d8e2125ebf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Updated BCrypt.Net-Next from 4.1.0 to 4.2.0.

Release notes

Sourced from BCrypt.Net-Next's releases.

4.2.0

Full Changelog: BcryptNet/bcrypt.net@v4.1.0...v4.2.0

Commits viewable in compare view.

Updated FluentAssertions from 8.8.0 to 8.10.0.

Release notes

Sourced from FluentAssertions's releases.

8.10.0

What's Changed

Improvements

Documentation

Others

Full Changelog: fluentassertions/fluentassertions@8.9.0...8.10.0

8.9.0

[!WARNING]
For projects targeting .NET 9, you need at least .NET SDK 9.0.200 as earlier versions will trigger compile errors because of invalid overload resolution. See #​3225

What's Changed

New features

Improvements

Fixes

Documentation

Others

Commits viewable in compare view.

Updated Google.Apis.Calendar.v3 from 1.73.0.4073 to 1.75.0.4182.

Release notes

Sourced from Google.Apis.Calendar.v3's releases.

1.75.0

Features:

  • #​3171 Supports caching request parameter property info

1.74.0

Bug fixes:

  • #​3156 Use a single instance of the default serializer.
  • #​3151 Do not duplicate quota project header on retries.

Features:

  • #​3091 Expose helper methots to build a credential from JsonParameters.

Commits viewable in compare view.

Updated MediatR from 14.0.0 to 14.1.0.

Release notes

Sourced from MediatR's releases.

14.1.0

What's Changed

New Contributors

Full Changelog: LuckyPennySoftware/MediatR@v14.0.0...v14.1.0

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.2 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.CodeAnalysis.CSharp.Workspaces from 4.8.0 to 4.14.0.

Release notes

Sourced from Microsoft.CodeAnalysis.CSharp.Workspaces's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.2 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.2 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.2 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Sqlite from 10.0.2 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Abstractions from 10.0.5 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Caching.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Memory from 10.0.5 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Caching.Memory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.2 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Caching.StackExchangeRedis's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http from 10.0.0 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Http's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.6.0 to 18.7.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.7.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.6.0...v18.7.0

Commits viewable in compare view.

Updated ModelContextProtocol from 1.2.0 to 1.4.0.

Release notes

Sourced from ModelContextProtocol's releases.

1.4.0

v1.4.0 introduces support for the Identity Assertion Authorization Grant (ID-JAG) flow via the new IdentityAssertionGrantProvider, enabling enterprise SSO scenarios where users authenticate once via their enterprise Identity Provider and access MCP servers without per-server authorization prompts. The release also adds a new InheritEnvironmentVariables option on StdioClientTransportOptions for controlling the child server's environment, alongside two security hardening fixes: the stdio client transport no longer enumerates child-process environment variables in Trace logs, and DELETE on a Streamable HTTP session now requires the same authenticated user that initiated the session.

What's Changed

  • Stop logging stdio transport environment variables #​1538 by @​halter73 (co-authored by @​Copilot)
  • Add InheritEnvironmentVariables to StdioClientTransportOptions #​1563 by @​halter73 (co-authored by @​Copilot)
  • Validate user on Streamable HTTP session DELETE #​1604 by @​halter73 (co-authored by @​Copilot)
    • HandleDeleteRequestAsync now mirrors the HasSameUserId check already enforced on GET and POST. A DELETE with a valid Mcp-Session-Id but a different authenticated user now returns 403 Forbidden instead of terminating the session — defense-in-depth against a leaked session ID being used to DoS the original owner.
  • Add Enterprise Managed Authorization (SEP-990) support #​1305 by @​aniket-okta (backported in #​1625)
    • Adds IdentityAssertionGrantProvider and supporting option/response types in ModelContextProtocol.Authentication implementing the Identity Assertion Authorization Grant flow: RFC 8693 token exchange at the enterprise IdP (ID Token → JWT Authorization Grant) followed by RFC 7523 JWT bearer grant at the MCP authorization server (JAG → access token). See the new Cross-Application Access section in the transport docs for full usage details.

Documentation Updates

  • Fix broken links to MCP Tasks specification #​1594 by @​tarekgh

Repository Infrastructure Updates

  • Update release processes to support release servicing branches #​1620 by @​jeffhandley (co-authored by @​Copilot)

Acknowledgements

  • @​aniket-okta made their first contribution in #​1305
  • @​felixweinberger submitted issue #​949 (resolved by #​1305)
  • @​eiriktsarpalis @​ericstj @​PranavSenthilnathan reviewed pull requests

Full Changelog: modelcontextprotocol/csharp-sdk@v1.3.0...v1.4.0

1.3.0

v1.3.0 focuses on improved transport diagnostics and security-focused documentation. The new public ClientTransportClosedException gives stdio and HTTP clients structured access to transport closure details (exit codes, process IDs, stderr tails, HTTP status codes) without parsing exception messages. Two reliability fixes harden the stdio process pipeline (preventing host crashes from user StandardErrorLines callbacks) and correct the stateless HTTP transport's capability advertisement. New conceptual documentation covers role/identity propagation in tool execution, allowed-hosts and CORS guidance for HTTP servers, and aligns the docs information architecture with the MCP specification structure.

What's Changed

  • Make ClientTransportClosedException public and unify transport exception handling #​1467 by @​stephentoub (co-authored by @​halter73 @​Copilot)
    • As part of this unification, SSE/HTTP client connection failures from McpClient.CreateAsync(...) now surface as IOException (the new ClientTransportClosedException derives from IOException) rather than InvalidOperationException. Caller-triggered OperationCanceledException is also no longer wrapped, matching standard async cancellation semantics.
  • Fix process crash when testing Stderr #​1449 by @​ericstj (co-authored by @​Copilot)
  • Fix stateless HTTP transport advertising listChanged capability #​1509 by @​jayaraman-venkatesan

Documentation Updates

  • docs: align docs IA with MCP specification structure #​1481 by @​jeffhandley (co-authored by @​mikekistler @​Copilot)
  • Document recommended pattern for role/identity propagation in MCP tool execution #​1497 by @​jeffhandley (co-authored by @​halter73 @​mikekistler @​Copilot)
  • Document and demonstrate allowed hosts and CORS policy guidance #​1554 by @​jeffhandley (co-authored by @​halter73 @​mikekistler @​Copilot)

Test Improvements

  • Fix flaky OutgoingFilter_MultipleFilters_ExecuteInOrder test #​1488 by @​ericstj (co-authored by @​Copilot)

Repository Infrastructure Updates

  • Bump the opentelemetry-testing group with 5 updates #​1478
  • Bump actions/deploy-pages from 4.0.5 to 5.0.0 #​1477
  • Bump actions/download-artifact from 8.0.0 to 8.0.1 #​1437
  • Bump actions/setup-dotnet from 5.1.0 to 5.2.0 #​1418
  • Bump actions/setup-node from 6.2.0 to 6.3.0 #​1419
  • Bump the testing-frameworks group with 1 update #​1459
  • Bump the npm_and_yarn group across 1 directory with 2 updates #​1410
  • Switch to custom CodeQL workflow #​1489 by @​jeffhandley
  • Block Release Publishing workflow from automatically running on forks #​1450 by @​jeffhandley (co-authored by @​Copilot)
  • Bump actions/checkout from 4 to 6 #​1504
  • Add testing guidelines, update copilot instructions for tests #​1507 by @​ericstj
  • Bump OpenTelemetry and 3 others #​1514
  • Bump the opentelemetry-testing group with 6 updates #​1533
  • Bump actions/setup-node from 6.3.0 to 6.4.0 #​1522
  • Bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 #​1511
  • Bump the npm_and_yarn group across 1 directory with 5 updates #​1500
  • Bump Anthropic from 12.9.0 to 12.11.0 #​1506
  • Bump actions/upload-artifact from 7.0.0 to 7.0.1 #​1512
  • Bump danielpalme/ReportGenerator-GitHub-Action from 5.5.4 to 5.5.5 #​1521
  • Bump the testing-frameworks group with 2 updates #​1523
  • Bump the other-testing group with 2 updates #​1534
  • Bump Microsoft.Extensions.AI from 10.4.1 to 10.5.0 #​1525
  • Remove extraneous labels from dependabot.yml #​1535 by @​mikekistler
  • Bump Anthropic from 12.11.0 to 12.17.0 #​1544
  • Fix dev container configuration to work in codespaces #​1555 by @​mikekistler
  • Bump Microsoft.NET.Test.Sdk from 18.4.0 to 18.5.1 #​1543
  • Bump the npm_and_yarn group across 1 directory with 3 updates #​1565
  • Bump Microsoft.Extensions.AI.Abstractions from 10.5.0 to 10.5.2 #​1561

... (truncated)

Commits viewable in compare view.

Updated ModelContextProtocol.AspNetCore from 1.2.0 to 1.4.0.

Release notes

Sourced from ModelContextProtocol.AspNetCore's releases.

1.4.0

v1.4.0 introduces support for the Identity Assertion Authorization Grant (ID-JAG) flow via the new IdentityAssertionGrantProvider, enabling enterprise SSO scenarios where users authenticate once via their enterprise Identity Provider and access MCP servers without per-server authorization prompts. The release also adds a new InheritEnvironmentVariables option on StdioClientTransportOptions for controlling the child server's environment, alongside two security hardening fixes: the stdio client transport no longer enumerates child-process environment variables in Trace logs, and DELETE on a Streamable HTTP session now requires the same authenticated user that initiated the session.

What's Changed

  • Stop logging stdio transport environment variables #​1538 by @​halter73 (co-authored by @​Copilot)
  • Add InheritEnvironmentVariables to StdioClientTransportOptions #​1563 by @​halter73 (co-authored by @​Copilot)
  • Validate user on Streamable HTTP session DELETE #​1604 by @​halter73 (co-authored by @​Copilot)
    • HandleDeleteRequestAsync now mirrors the HasSameUserId check already enforced on GET and POST. A DELETE with a valid Mcp-Session-Id but a different authenticated user now returns 403 Forbidden instead of terminating the session — defense-in-depth against a leaked session ID being used to DoS the original owner.
  • Add Enterprise Managed Authorization (SEP-990) support #​1305 by @​aniket-okta (backported in #​1625)
    • Adds IdentityAssertionGrantProvider and supporting option/response types in ModelContextProtocol.Authentication implementing the Identity Assertion Authorization Grant flow: RFC 8693 token exchange at the enterprise IdP (ID Token → JWT Authorization Grant) followed by RFC 7523 JWT bearer grant at the MCP authorization server (JAG → access token). See the new Cross-Application Access section in the transport docs for full usage details.

Documentation Updates

  • Fix broken links to MCP Tasks specification #​1594 by @​tarekgh

Repository Infrastructure Updates

  • Update release processes to support release servicing branches #​1620 by @​jeffhandley (co-authored by @​Copilot)

Acknowledgements

  • @​aniket-okta made their first contribution in #​1305
  • @​felixweinberger submitted issue #​949 (resolved by #​1305)
  • @​eiriktsarpalis @​ericstj @​PranavSenthilnathan reviewed pull requests

Full Changelog: modelcontextprotocol/csharp-sdk@v1.3.0...v1.4.0

1.3.0

v1.3.0 focuses on improved transport diagnostics and security-focused documentation. The new public ClientTransportClosedException gives stdio and HTTP clients structured access to transport closure details (exit codes, process IDs, stderr tails, HTTP status codes) without parsing exception messages. Two reliability fixes harden the stdio process pipeline (preventing host crashes from user StandardErrorLines callbacks) and correct the stateless HTTP transport's capability advertisement. New conceptual documentation covers role/identity propagation in tool execution, allowed-hosts and CORS guidance for HTTP servers, and aligns the docs information architecture with the MCP specification structure.

What's Changed

  • Make ClientTransportClosedException public and unify transport exception handling #​1467 by @​stephentoub (co-authored by @​halter73 @​Copilot)
    • As part of this unification, SSE/HTTP client connection failures from McpClient.CreateAsync(...) now surface as IOException (the new ClientTransportClosedException derives from IOException) rather than InvalidOperationException. Caller-triggered OperationCanceledException is also no longer wrapped, matching standard async cancellation semantics.
  • Fix process crash when testing Stderr #​1449 by @​ericstj (co-authored by @​Copilot)
  • Fix stateless HTTP transport advertising listChanged capability #​1509 by @​jayaraman-venkatesan

Documentation Updates

  • docs: align docs IA with MCP specification structure #​1481 by @​jeffhandley (co-authored by @​mikekistler @​Copilot)
  • Document recommended pattern for role/identity propagation in MCP tool execution #​1497 by @​jeffhandley (co-authored by @​halter73 @​mikekistler @​Copilot)
  • Document and demonstrate allowed hosts and CORS policy guidance #​1554 by @​jeffhandley (co-authored by @​halter73 @​mikekistler @​Copilot)

Test Improvements

  • Fix flaky OutgoingFilter_MultipleFilters_ExecuteInOrder test #​1488 by @​ericstj (co-authored by @​Copilot)

Repository Infrastructure Updates

  • Bump the opentelemetry-testing group with 5 updates #​1478
  • Bump actions/deploy-pages from 4.0.5 to 5.0.0 #​1477
  • Bump actions/download-artifact from 8.0.0 to 8.0.1 #​1437
  • Bump actions/setup-dotnet from 5.1.0 to 5.2.0 #​1418
  • Bump actions/setup-node from 6.2.0 to 6.3.0 #​1419
  • Bump the testing-frameworks group with 1 update #​1459
  • Bump the npm_and_yarn group across 1 directory with 2 updates #​1410
  • Switch to custom CodeQL workflow #​1489 by @​jeffhandley
  • Block Release Publishing workflow from automatically running on forks #​1450 by @​jeffhandley (co-authored by @​Copilot)
  • Bump actions/checkout from 4 to 6 #​1504
  • Add testing guidelines, update copilot instructions for tests #​1507 by @​ericstj
  • Bump OpenTelemetry and 3 others #​1514
  • Bump the opentelemetry-testing group with 6 updates #​1533
  • Bump actions/setup-node from 6.3.0 to 6.4.0 #​1522
  • Bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 #​1511
  • Bump the npm_and_yarn group across 1 directory with 5 updates #​1500
  • Bump Anthropic from 12.9.0 to 12.11.0 #​1506
  • Bump actions/upload-artifact from 7.0.0 to 7.0.1 #​1512
  • Bump danielpalme/ReportGenerator-GitHub-Action from 5.5.4 to 5.5.5 #​1521
  • Bump the testing-frameworks group with 2 updates #​1523
  • Bump the other-testing group with 2 updates #​1534
  • Bump Microsoft.Extensions.AI from 10.4.1 to 10.5.0 #​1525
  • Remove extraneous labels from dependabot.yml #​1535 by @​mikekistler
  • Bump Anthropic from 12.11.0 to 12.17.0 #​1544
  • Fix dev container configuration to work in codespaces #​1555 by @​mikekistler
  • Bump Microsoft.NET.Test.Sdk from 18.4.0 to 18.5.1 #​1543
  • Bump the npm_and_yarn group across 1 directory with 3 updates #​1565
  • Bump Microsoft.Extensions.AI.Abstractions from 10.5.0 to 10.5.2 #​1561

... (truncated)

Commits viewable in compare view.

Updated Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.0 to 10.0.2.

Release notes

Sourced from Npgsql.EntityFrameworkCore.PostgreSQL's releases.

10.0.2

Milestone issue

What's Changed

Full Changelog: npgsql/efcore.pg@v10.0.1...v10.0.2

Commits viewable in compare view.

Updated OpenAI from 2.8.0 to 2.11.0.

Release notes

Sourced from OpenAI's releases.

2.11.0

See full changelog: https://github.com/openai/openai-dotnet/blob/OpenAI_2.11.0/CHANGELOG.md

2.11.0-oidc.test1

See full changelog: https://github.com/openai/openai-dotnet/blob/OpenAI_2.11.0-oidc.test1/CHANGELOG.md

2.10.0

See full changelog: https://github.com/openai/openai-dotnet/blob/OpenAI_2.10.0/CHANGELOG.md

2.9.1

See full changelog: https://github.com/openai/openai-dotnet/blob/OpenAI_2.9.1/CHANGELOG.md

2.9.0

See full changelog: https://github.com/openai/openai-dotnet/blob/OpenAI_2.9.0/CHANGELOG.md

Commits viewable in compare view.

Updated Scalar.AspNetCore from 2.12.36 to 2.16.5.

Release notes

Sourced from Scalar.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated xunit.runner.visualstudio from 3.1.4 to 3.1.5.

Release notes

Sourced from xunit.runner.visualstudio's releases.

3.1.5

Release notes: https://xunit.net/releases/visualstudio/3.1.5

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the nuget-minor-patch group with 21 updates
4fb0be8 
Bumps BCrypt.Net-Next from 4.1.0 to 4.2.0
Bumps FluentAssertions from 8.8.0 to 8.10.0
Bumps Google.Apis.Calendar.v3 from 1.73.0.4073 to 1.75.0.4182
Bumps MediatR from 14.0.0 to 14.1.0
Bumps Microsoft.AspNetCore.OpenApi from 10.0.2 to 10.0.9
Bumps Microsoft.CodeAnalysis.CSharp.Workspaces from 4.8.0 to 4.14.0
Bumps Microsoft.EntityFrameworkCore from 10.0.2 to 10.0.9
Bumps Microsoft.EntityFrameworkCore.Design from 10.0.2 to 10.0.9
Bumps Microsoft.EntityFrameworkCore.InMemory from 10.0.2 to 10.0.9
Bumps Microsoft.EntityFrameworkCore.Sqlite from 10.0.2 to 10.0.9
Bumps Microsoft.Extensions.Caching.Abstractions from 10.0.5 to 10.0.9
Bumps Microsoft.Extensions.Caching.Memory from 10.0.5 to 10.0.9
Bumps Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.2 to 10.0.9
Bumps Microsoft.Extensions.Http from 10.0.0 to 10.0.9
Bumps Microsoft.NET.Test.Sdk from 18.6.0 to 18.7.0
Bumps ModelContextProtocol from 1.2.0 to 1.4.0
Bumps ModelContextProtocol.AspNetCore from 1.2.0 to 1.4.0
Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.0 to 10.0.2
Bumps OpenAI from 2.8.0 to 2.11.0
Bumps Scalar.AspNetCore from 2.12.36 to 2.16.5
Bumps xunit.runner.visualstudio from 3.1.4 to 3.1.5

---
updated-dependencies:
- dependency-name: BCrypt.Net-Next
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: FluentAssertions
  dependency-version: 8.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: FluentAssertions
  dependency-version: 8.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: FluentAssertions
  dependency-version: 8.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: Google.Apis.Calendar.v3
  dependency-version: 1.75.0.4182
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: MediatR
  dependency-version: 14.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.CodeAnalysis.CSharp.Workspaces
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.EntityFrameworkCore
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.EntityFrameworkCore
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.EntityFrameworkCore.InMemory
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Caching.Abstractions
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Caching.Memory
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Caching.StackExchangeRedis
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Http
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: ModelContextProtocol
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: ModelContextProtocol.AspNetCore
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: OpenAI
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: Scalar.AspNetCore
  dependency-version: 2.16.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Jun 23, 2026
@thomasluizon

thomasluizon commented Jun 23, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@thomasluizon

thomasluizon commented Jun 23, 2026

Copy link
Copy Markdown
Owner

@dependabot recreate

@thomasluizon

thomasluizon commented Jun 23, 2026

Copy link
Copy Markdown
Owner

Closing — conflicts with main after the Roslyn bump (#224) merged underneath it. Dependabot will re-open the nuget-minor-patch group cleanly (without the conflicting package) on the next weekly scan; no manual rebase needed.

@dependabot @github

dependabot Bot commented on behalf of github Jun 23, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/nuget/src/Orbit.Analyzers/nuget-minor-patch-d8e2125ebf branch June 23, 2026 20:25
thomasluizon added a commit that referenced this pull request Jun 26, 2026
@thomasluizon @claude
fix(api): enforce supported-language allowlist on tag suggestion (#223)
1250840 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@claude claude Bot mentioned this pull request Jun 26, 2026
Merged
thomasluizon added a commit that referenced this pull request Jun 26, 2026
@thomasluizon @claude
fix(api): rate-limit tag suggestion + catalog it as a write capability (
c083852 
#223)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
thomasluizon added a commit that referenced this pull request Jun 26, 2026
@thomasluizon @claude
fix(api): adapt tag-suggest call to generalized CompleteJsonAsync (#223)
fe33ad6 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
thomasluizon added a commit that referenced this pull request Jun 26, 2026
@thomasluizon @claude
feat(api): AI tag suggestion endpoint (#223) (#259)
558e92b 
* feat(api): AI tag suggestion endpoint (#223)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(api): enforce supported-language allowlist on tag suggestion (#223)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(api): rate-limit tag suggestion + catalog it as a write capability (#223)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(api): adapt tag-suggest call to generalized CompleteJsonAsync (#223)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@thomasluizon