chore(deps): Bump the backend-dependencies group with 17 updates by dependabot[bot] · Pull Request #276 · thomastran117x/Elevate

dependabot · 2026-09-14T15:25:53Z

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Updated Confluent.Kafka from 2.15.0 to 2.15.1.

Release notes

Sourced from Confluent.Kafka's releases.

2.15.1 Enhancements

References librdkafka.redist 2.15.1. Refer to the librdkafka v2.15.1 release notes for more information.

Fixes

Fix early return in FindMessageByName (#2644)
Preserve HTTP status for retriable SR errors (#2647)
Security patch in examples and tests using old NJsonSchema versions, test framework upgrade in Confluent.Kafka tests (#2656)

Commits viewable in compare view.

Updated FluentAssertions from 8.10.0 to 8.11.0.

Release notes

Sourced from FluentAssertions's releases.

8.11.0 What's Changed

New Contributors

@jpgomezv made their first contribution in Fix typo in exceptions page fluentassertions/fluentassertions#3317

Full Changelog: fluentassertions/fluentassertions@8.10.0...8.11.0

Commits viewable in compare view.

Updated MailKit from 4.17.0 to 4.18.0.

Release notes

Sourced from MailKit's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.SignalR.Client from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.AspNetCore.SignalR.Client's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.TestHost from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.AspNetCore.TestHost's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Sqlite from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Caching.StackExchangeRedis's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Resilience from 10.9.0 to 10.10.0.

Release notes

Sourced from Microsoft.Extensions.Http.Resilience's releases.

10.10.0

This month's release focuses on AI package reliability: closing gaps in evaluation scoring, hardening OpenAI image-option handling, and removing the deprecated OpenAI Assistants API support.

Experimental API Changes

Removed Experimental APIs

OpenAI Assistants experimental APIs removed (was experimental under OPENAI001) #7724

What's Changed

AI

Remove OpenAI Assistants API support #7724 by @jozkee (co-authored by @Copilot)
Update OpenAI package version to 2.13.0 #7726 by @jozkee
OpenAI: Avoid null implicit conversions for image options #7727 by @jozkee (co-authored by @Copilot)

AI Evaluation

Fail closed when a quality metric has no valid score #7735 by @thaildhe172591
Validate path segments in Azure storage result store and response cache #7718 by @Lroca88

Repository Infrastructure Updates

Add TfxInstaller for publishing #7695 by @peterwaltonwork
Bump PowerShell from 7.6.4 to 7.6.5 #7702
[Infrastructure] Update vulnerable npm dependencies #7705 by @wtgodbe
Add Node installation for TfxInstaller #7703 by @peterwaltonwork
Publish VSIX using publish task instead of output #7711 by @peterwaltonwork
Bump dotnet-coverage from 18.9.0 to 18.10.0 #7708
Do not validate extension during publish step #7725 by @peterwaltonwork
Add skill for upgrading OpenAI #7728 by @jozkee
Fix source indexer stage #7694 by @jjonescz

Acknowledgements

@Lroca88 made their first contribution in #7718
@thaildhe172591 made their first contribution in #7735
@ANcpLua submitted issue #7665 (resolved by #7735)
@jeffhandley @peterwald @shyamnamboodiripad reviewed pull requests

Full Changelog: dotnet/extensions@v10.9.0...v10.10.0

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.9.0 to 18.10.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.10.0 What's Changed

Drop Mono fallback, run .NET Framework tests on Windows only by @nohwnd in Drop Mono fallback, run .NET Framework tests on Windows only microsoft/vstest#16158
Run Microsoft.Testing.Platform test apps under vstest.console and datacollector by @nohwnd in Run Microsoft.Testing.Platform test apps under vstest.console and datacollector microsoft/vstest#16201
Fix test output eaten by MSBuild terminal logger by @nohwnd in [fix] Fix test output eaten by MSBuild terminal logger microsoft/vstest#16223
Remove the experimental test session feature by @nohwnd in Remove the experimental test session feature microsoft/vstest#16231
Skip a single bad executor instead of failing all executor loading by @nohwnd in Skip a single bad executor instead of failing all executor loading microsoft/vstest#16239
Assert apartment state instead of using Clipboard in UI tests by @nohwnd in Assert apartment state instead of using Clipboard in UI tests microsoft/vstest#16270
Surface test host crashes during protocol negotiation by @nohwnd in Surface test host crashes during protocol negotiation microsoft/vstest#16285
Pass the inferred target platform to the host in run settings by @nohwnd in Pass the inferred target platform to the host in run settings microsoft/vstest#16271
Report raw invalid IsTargetPlatformInferred value, cover host x64 forcing by @nohwnd in Report raw invalid IsTargetPlatformInferred value, cover host x64 forcing microsoft/vstest#16295
Disable the MTP testhost by default (#16337) by @nohwnd in [rel/18.10] Disable the MTP testhost by default (#16337) microsoft/vstest#16341

Full Changelog: microsoft/vstest@v18.9.0...v18.10.0

Commits viewable in compare view.

Updated Polly from 8.7.0 to 8.8.0.

Release notes

Sourced from Polly's releases.

8.8.0 Highlights

Add EnableReloadsWithMonitor() accepting custom IOptionsMonitor by @arashzjahangiri in feat(extensions): add EnableReloads overload accepting custom IOptionsMonitor App-vNext/Polly#3140
Return null from FaultGenerator when no fault is generated by @dualfroz in Return null from FaultGenerator when no fault is generated App-vNext/Polly#3220

What's Changed

Update workflow timeout by @martincostello in Update workflow timeout App-vNext/Polly#3106
Set SOURCE_DATE_EPOCH by @martincostello in Set SOURCE_DATE_EPOCH App-vNext/Polly#3115
Use NUGET_API_KEY by @martincostello in Use NUGET_API_KEY App-vNext/Polly#3116
Test refactoring by @martincostello in Test refactoring App-vNext/Polly#3132
Avoid test flakiness by @martincostello in Avoid test flakiness App-vNext/Polly#3134
Group github/codeql-action updates by @martincostello in Group github/codeql-action updates App-vNext/Polly#3147
Fix wrong word in hedging documentation by @latent-9 in Fix wrong word in hedging documentation App-vNext/Polly#3191
OSMF sponsorship notice by @joelhulen in OSMF sponsorship App-vNext/Polly#3194
Fix XML doc comment on PipelineExecutedArguments by @JiuYue0820 in Fix XML doc comment on PipelineExecutedArguments App-vNext/Polly#3201
Update to xunit v3 by @martincostello in Update to xunit v3 App-vNext/Polly#3131
.NET 11 preparation by @martincostello in .NET 11 preparation App-vNext/Polly#3225
Fix flaky test by @martincostello in Fix flaky test App-vNext/Polly#3231

New Contributors

@arashzjahangiri made their first contribution in feat(extensions): add EnableReloads overload accepting custom IOptionsMonitor App-vNext/Polly#3140
@latent-9 made their first contribution in Fix wrong word in hedging documentation App-vNext/Polly#3191
@JiuYue0820 made their first contribution in Fix XML doc comment on PipelineExecutedArguments App-vNext/Polly#3201
@dualfroz made their first contribution in Return null from FaultGenerator when no fault is generated App-vNext/Polly#3220

Full Changelog: App-vNext/Polly@8.7.0...8.8.0

Commits viewable in compare view.

Updated StackExchange.Redis from 3.1.31 to 3.2.1.

Release notes

Sourced from StackExchange.Redis's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Stripe.net from 52.4.1 to 52.4.2.

Release notes

Sourced from Stripe.net's releases.

52.4.2

#3445 Validate that webhook secrets are non-empty

See the changelog for more details.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Confluent.Kafka from 2.15.0 to 2.15.1 Bumps FluentAssertions from 8.10.0 to 8.11.0 Bumps MailKit from 4.17.0 to 4.18.0 Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.11 to 10.0.12 Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.11 to 10.0.12 Bumps Microsoft.AspNetCore.OpenApi from 10.0.11 to 10.0.12 Bumps Microsoft.AspNetCore.SignalR.Client from 10.0.11 to 10.0.12 Bumps Microsoft.AspNetCore.TestHost from 10.0.11 to 10.0.12 Bumps Microsoft.EntityFrameworkCore.Design from 10.0.11 to 10.0.12 Bumps Microsoft.EntityFrameworkCore.Sqlite from 10.0.11 to 10.0.12 Bumps Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.11 to 10.0.12 Bumps Microsoft.Extensions.Hosting from 10.0.11 to 10.0.12 Bumps Microsoft.Extensions.Http.Resilience from 10.9.0 to 10.10.0 Bumps Microsoft.NET.Test.Sdk from 18.9.0 to 18.10.0 Bumps Polly from 8.7.0 to 8.8.0 Bumps StackExchange.Redis from 3.1.31 to 3.2.1 Bumps Stripe.net from 52.4.1 to 52.4.2 --- updated-dependencies: - dependency-name: Confluent.Kafka dependency-version: 2.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Confluent.Kafka dependency-version: 2.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Confluent.Kafka dependency-version: 2.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Confluent.Kafka dependency-version: 2.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Confluent.Kafka dependency-version: 2.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Confluent.Kafka dependency-version: 2.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: FluentAssertions dependency-version: 8.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: FluentAssertions dependency-version: 8.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: MailKit dependency-version: 4.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: MailKit dependency-version: 4.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Microsoft.AspNetCore.SignalR.Client dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Microsoft.AspNetCore.TestHost dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Microsoft.EntityFrameworkCore.Sqlite dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Microsoft.Extensions.Caching.StackExchangeRedis dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Microsoft.Extensions.Hosting dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Microsoft.Extensions.Hosting dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Microsoft.Extensions.Hosting dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Microsoft.Extensions.Hosting dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Microsoft.Extensions.Hosting dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: Microsoft.Extensions.Http.Resilience dependency-version: 10.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: Polly dependency-version: 8.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: Polly dependency-version: 8.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: StackExchange.Redis dependency-version: 3.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: Stripe.net dependency-version: 52.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-09-14T15:26:27Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	nuget/microsoft.extensions.hosting@10.0.11 ⏵ 10.0.12
	nuget/fluentassertions@8.10.0 ⏵ 8.11.0
	nuget/confluent.kafka@2.15.0 ⏵ 2.15.1
	nuget/microsoft.aspnetcore.mvc.testing@10.0.11 ⏵ 10.0.12
	nuget/microsoft.aspnetcore.testhost@10.0.11 ⏵ 10.0.12
	nuget/microsoft.aspnetcore.signalr.client@10.0.11 ⏵ 10.0.12
	nuget/microsoft.net.test.sdk@18.9.0 ⏵ 18.10.0
	nuget/mailkit@4.17.0 ⏵ 4.18.0
	nuget/microsoft.aspnetcore.authentication.jwtbearer@10.0.11 ⏵ 10.0.12
	nuget/microsoft.aspnetcore.openapi@10.0.11 ⏵ 10.0.12
	nuget/microsoft.entityframeworkcore.design@10.0.11 ⏵ 10.0.12
	nuget/microsoft.entityframeworkcore.sqlite@10.0.11 ⏵ 10.0.12
	nuget/microsoft.extensions.caching.stackexchangeredis@10.0.11 ⏵ 10.0.12
	nuget/microsoft.extensions.http.resilience@10.9.0 ⏵ 10.10.0
	nuget/polly@8.7.0 ⏵ 8.8.0
	nuget/stackexchange.redis@3.1.31 ⏵ 3.2.1	⁺²
	nuget/stripe.net@52.4.1 ⏵ 52.4.2

View full report

…xes, CI hardening (#277) - Upgrade Angular 21.2 -> 22.1 together with NgRx 22 and TypeScript 6 via ng update (supersedes #226 and #258, which cannot resolve on their own). - Fix TS 6 config errors the migration leaves behind: drop deprecated baseUrl, set rootDir explicitly; pass CanMatchFn's new third argument in the guard spec. - Pick up playwright 1.63 and @types/node 24.13.4 (#275) and run npm audit fix; production and full-tree audits both report 0 vulnerabilities. - Promote the full-tree npm audit step to blocking now that Angular 22 has landed. - Deflake EventSeriesEndpointsTests: allow 30s instead of 5s for the shared Elasticsearch node to surface reindexed occurrences (failed on #276). - Dependabot: ignore majors of jasmine-core (7 makes describe read-only, which zone.js/testing reassigns) and Microsoft.OpenApi (3.x is incompatible with Microsoft.AspNetCore.OpenApi 10). Superseded: #255, #257. Co-authored-by: Claude Opus 5 <noreply@anthropic.com>

thomastran117 · 2026-09-15T03:23:21Z

@dependabot rebase

thomastran117 · 2026-09-16T01:54:18Z

Superseded by #278, which Dependabot recreated on a fresh branch after #277 landed and which carries the identical 17 backend bumps. A csproj-only diff between main and this branch is empty, so there is nothing left to merge. Closing; this branch still predates #277, so merging it would revert the Angular 22 upgrade.

dependabot · 2026-09-16T01:54:22Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added backend Backend ASP.NET Core dependencies labels Sep 14, 2026

thomastran117 mentioned this pull request Sep 15, 2026

Unblock Dependabot PRs: Angular 22 + NgRx 22 + TS 6, audit fixes, CI hardening #277

Merged

thomastran117 closed this Sep 16, 2026

thomastran117 deleted the dependabot/nuget/backend.tests.Integration/backend-dependencies-ed9d008836 branch September 16, 2026 01:54

Navigation Menu

Uh oh!

chore(deps): Bump the backend-dependencies group with 17 updates - #276

chore(deps): Bump the backend-dependencies group with 17 updates#276
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/backend.tests.Integration/backend-dependencies-ed9d008836

dependabot Bot commented on behalf of github Sep 14, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Sep 14, 2026

Uh oh!

thomastran117 commented Sep 15, 2026

Uh oh!

thomastran117 commented Sep 16, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

2.15.1

Enhancements

Fixes

8.11.0

What's Changed

New features

Improvements

Fixes

Documentation

Others

New Contributors

10.10.0

Experimental API Changes

Removed Experimental APIs

What's Changed

AI

AI Evaluation

Repository Infrastructure Updates

Acknowledgements

18.10.0

What's Changed

8.8.0

Highlights

What's Changed

New Contributors

52.4.2

Uh oh!

socket-security Bot commented Sep 14, 2026

Uh oh!

thomastran117 commented Sep 15, 2026

Uh oh!

thomastran117 commented Sep 16, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Sep 14, 2026 •

edited

Loading