Bump the wolverine group with 3 updates by dependabot[bot] · Pull Request #309 · vgmello/momentum

dependabot · 2026-07-27T08:20:08Z

Updated WolverineFx from 6.21.0 to 6.23.0.

Release notes

6.23.0 Projection & agent distribution

TL;DR: this prevents Wolverine from going into a panic doing agent assignments and churning crazily hard during Kubernetes rollouts or cluster starts and that's a very good thing

The bulk of this release. A wave of fixes (WO-1..8) to the agent assignment plane that together remove the re-assignment churn and livelock that could leave projection agents flapping or wedged.

Node heartbeats no longer block behind command execution (#3620)
Node resurrection restores the node's real identity rather than a skeleton record (#3621)
A pending-assignment ledger suppresses duplicate AssignAgent floods (#3622)
Agent batch starts are chunked and bounded-parallel, so they stay safe at scale (#3623)
Ejection hysteresis plus leader protection (#3624)
The assignment row is re-upserted for agents that are already running (#3619)
Local agents drain with bounded parallelism on shutdown (#3636)
Paused shards now say why. IEventSubscriptionAgent.Failure surfaces a ShardFailure — category, the failing event's sequence and type, and the root exception type — through health checks and a new IWolverineObserver.AgentPaused hook plus a NodeRecordType.AgentPaused record. Failures bound to a specific event (ApplyEvent, EventSerialization, UnknownEventType) or to two processes racing one shard (ProgressionOutOfOrder) are no longer auto-restarted, since they would die on the identical event every time (#3637, #3638)
Agent starts retry locally, bounded by Durability.AgentStartRetryAttempts / AgentStartRetryDelay, instead of idling a full CheckAssignmentPeriod after a startup race (#3519)
Store-scoped FindAgentUriAsync overload (#3647) and a store-aware TryRebuildRegisteredProjectionAsync overload (#3618)

Bumps JasperFx.Events to 2.36.1, Marten to 9.20.0 and Polecat to 5.7.0.

HTTP

Endpoints that advertise a request body their HTTP method cannot carry now fail fast at startup instead of silently 404ing out of the route matcher (#3648)
A missing Content-Type on an [AcceptsContentType] route returns 415 rather than 404 (#3649)
Query-only [AsParameters] endpoints no longer advertise a form body, which had been dropping them from route matching entirely (#3630)
Explicitly-routed chains — PublishMessage<T> and SendMessage<T> — now describe the message they read from the body. They had been advertising no request body at all in OpenAPI (#3646)
Enum values in query strings and form posts parse case-insensitively (#3629)
Compiled queries returned as a Wolverine.Http resource no longer execute twice (#3625)

Transports

Conventional routing respects named brokers (#3633)
Google Pub/Sub: named-broker support for sharded and partitioned topics (#3632), and ListenToPubsubSubscriptionOnNamedBroker (#3631)
Kafka: topic-already-exists error codes are handled rather than thrown (#3640)
Redis: scheduled retries survive an unreadable timestamp (#3613), and scheduled entries that repeatedly fail to deserialize are dead-lettered instead of looping (#3644)
EnvelopeMapper reads both timestamp header formats (#3645)
NServiceBus interop: the EnclosedMessageTypes header is split before the message type is resolved, so interop works across Azure Service Bus, SNS, SQS and the database transports (#3628)

Persistence

Oracle runs the durability agent through the shared batching mechanics (#3614). Note that ODP.NET exposes no DbBatch, so the work splits per statement.

Other

Resource discovery no longer eager-connects broker transports (#3617)

Contributors

Thank you to everyone who contributed to this release:

... (truncated)

6.22.0

Wolverine 6.22.0 rolls up the claim-check backend wave, distributed-agent and durability hardening, HTTP/OpenAPI binding fixes, and the Marten 9.18 / JasperFx 2.34 critter-stack alignment.

Dependency alignment

JasperFx family → 2.34.0
Marten → 9.18.0 (with Marten.AspNetCore / Marten.Newtonsoft), Polecat [5.5.0,6.0.0)
Weasel family → 9.18.1

Claim-check offloading

New NATS JetStream Object Store claim-check backend (#3506)
New PostgreSQL database-LOB claim-check backend (#3507)
New Google Cloud Storage claim-check backend (#3505)
Size-threshold auto-offload — large payloads offload to the claim-check store automatically (#3504)
Per-message / per-endpoint store selection (#3508)
Honor a DI-registered IClaimCheckStore (#3564)
New claim-check backends are now packed for NuGet (#3565)

Distributed agents & durability

Recover exclusive listener inboxes on the listening node (#3590)
Reverse the reset-clears-queue-tables behavior; add IHost.ClearAllWolverineStorageAsync() (#3592)
Subscription health check uses the tenant-scoped high water mark for per-tenant subscription agents (#3582)
Isolate agent start failures so one wedged agent no longer skips its siblings (#3519)
Restart a projection agent whose shard wedged out from under it (#3519)
EventSubscriptionAgent restores continuous execution after Rebuild/Rewind (#3520)
Stamp the assigned node onto owned event-store daemons (running_on_node, marten#5001) (#3578)
Solo-mode health-check loop no longer leaks an unbounded OpenTelemetry trace (#3518)
Warn loudly when a host's application assembly is pinned by an earlier host (#3521)

HTTP & OpenAPI

Describe chain-bound OpenAPI params from produced variables; narrow re-reflection to postprocessors (#3601)
Bind [FromQuery] on arrays/collections instead of misrouting to complex-flattening (#3602)
Bind scalar [FromQuery] decimal correctly + shape-test OpenAPI parameter description across type families (#3586)
Don't describe a route-bound [FromQuery]/[FromHeader] parameter twice in OpenAPI (#3586)
Marten 9.18 streaming types — StreamPaged, StreamPagedByCursor, ETag support (#3593)
Honour opt-in discovery filters for HTTP endpoint discovery (#3525)
Never infer a DbContext parameter as the HTTP request body (#3538)

Transports

Add a parallel WolverineFx.Mqtt5 package (MQTTnet 5) (#3517)
Pulsar: don't claim native scheduling without a retry-letter topic (#3491)
Azure Service Bus: pin session listeners to specific session identifiers (#3533)

Persistence

Clear transport queue tables on message-store reset — PostgreSQL (#3529), SQLite (#3553), MySQL (#3551), Oracle (#3552)
Oracle: durable inbox mark-as-handled binds RAW(16) Guid correctly (#3581)
... (truncated)

Commits viewable in compare view.

Updated WolverineFx.Postgresql from 6.21.0 to 6.23.0.

Release notes

Sourced from WolverineFx.Postgresql's releases.

6.23.0 Projection & agent distribution

TL;DR: this prevents Wolverine from going into a panic doing agent assignments and churning crazily hard during Kubernetes rollouts or cluster starts and that's a very good thing

The bulk of this release. A wave of fixes (WO-1..8) to the agent assignment plane that together remove the re-assignment churn and livelock that could leave projection agents flapping or wedged.

Node heartbeats no longer block behind command execution (#3620)
Node resurrection restores the node's real identity rather than a skeleton record (#3621)
A pending-assignment ledger suppresses duplicate AssignAgent floods (#3622)
Agent batch starts are chunked and bounded-parallel, so they stay safe at scale (#3623)
Ejection hysteresis plus leader protection (#3624)
The assignment row is re-upserted for agents that are already running (#3619)
Local agents drain with bounded parallelism on shutdown (#3636)
Paused shards now say why. IEventSubscriptionAgent.Failure surfaces a ShardFailure — category, the failing event's sequence and type, and the root exception type — through health checks and a new IWolverineObserver.AgentPaused hook plus a NodeRecordType.AgentPaused record. Failures bound to a specific event (ApplyEvent, EventSerialization, UnknownEventType) or to two processes racing one shard (ProgressionOutOfOrder) are no longer auto-restarted, since they would die on the identical event every time (#3637, #3638)
Agent starts retry locally, bounded by Durability.AgentStartRetryAttempts / AgentStartRetryDelay, instead of idling a full CheckAssignmentPeriod after a startup race (#3519)
Store-scoped FindAgentUriAsync overload (#3647) and a store-aware TryRebuildRegisteredProjectionAsync overload (#3618)

Bumps JasperFx.Events to 2.36.1, Marten to 9.20.0 and Polecat to 5.7.0.

HTTP

Endpoints that advertise a request body their HTTP method cannot carry now fail fast at startup instead of silently 404ing out of the route matcher (#3648)
A missing Content-Type on an [AcceptsContentType] route returns 415 rather than 404 (#3649)
Query-only [AsParameters] endpoints no longer advertise a form body, which had been dropping them from route matching entirely (#3630)
Explicitly-routed chains — PublishMessage<T> and SendMessage<T> — now describe the message they read from the body. They had been advertising no request body at all in OpenAPI (#3646)
Enum values in query strings and form posts parse case-insensitively (#3629)
Compiled queries returned as a Wolverine.Http resource no longer execute twice (#3625)

Transports

Conventional routing respects named brokers (#3633)
Google Pub/Sub: named-broker support for sharded and partitioned topics (#3632), and ListenToPubsubSubscriptionOnNamedBroker (#3631)
Kafka: topic-already-exists error codes are handled rather than thrown (#3640)
Redis: scheduled retries survive an unreadable timestamp (#3613), and scheduled entries that repeatedly fail to deserialize are dead-lettered instead of looping (#3644)
EnvelopeMapper reads both timestamp header formats (#3645)
NServiceBus interop: the EnclosedMessageTypes header is split before the message type is resolved, so interop works across Azure Service Bus, SNS, SQS and the database transports (#3628)

Persistence

Oracle runs the durability agent through the shared batching mechanics (#3614). Note that ODP.NET exposes no DbBatch, so the work splits per statement.

Other

Resource discovery no longer eager-connects broker transports (#3617)

Contributors

Thank you to everyone who contributed to this release:

... (truncated)

6.22.0

Wolverine 6.22.0 rolls up the claim-check backend wave, distributed-agent and durability hardening, HTTP/OpenAPI binding fixes, and the Marten 9.18 / JasperFx 2.34 critter-stack alignment.

Dependency alignment

JasperFx family → 2.34.0
Marten → 9.18.0 (with Marten.AspNetCore / Marten.Newtonsoft), Polecat [5.5.0,6.0.0)
Weasel family → 9.18.1

Claim-check offloading

New NATS JetStream Object Store claim-check backend (#3506)
New PostgreSQL database-LOB claim-check backend (#3507)
New Google Cloud Storage claim-check backend (#3505)
Size-threshold auto-offload — large payloads offload to the claim-check store automatically (#3504)
Per-message / per-endpoint store selection (#3508)
Honor a DI-registered IClaimCheckStore (#3564)
New claim-check backends are now packed for NuGet (#3565)

Distributed agents & durability

Recover exclusive listener inboxes on the listening node (#3590)
Reverse the reset-clears-queue-tables behavior; add IHost.ClearAllWolverineStorageAsync() (#3592)
Subscription health check uses the tenant-scoped high water mark for per-tenant subscription agents (#3582)
Isolate agent start failures so one wedged agent no longer skips its siblings (#3519)
Restart a projection agent whose shard wedged out from under it (#3519)
EventSubscriptionAgent restores continuous execution after Rebuild/Rewind (#3520)
Stamp the assigned node onto owned event-store daemons (running_on_node, marten#5001) (#3578)
Solo-mode health-check loop no longer leaks an unbounded OpenTelemetry trace (#3518)
Warn loudly when a host's application assembly is pinned by an earlier host (#3521)

HTTP & OpenAPI

Describe chain-bound OpenAPI params from produced variables; narrow re-reflection to postprocessors (#3601)
Bind [FromQuery] on arrays/collections instead of misrouting to complex-flattening (#3602)
Bind scalar [FromQuery] decimal correctly + shape-test OpenAPI parameter description across type families (#3586)
Don't describe a route-bound [FromQuery]/[FromHeader] parameter twice in OpenAPI (#3586)
Marten 9.18 streaming types — StreamPaged, StreamPagedByCursor, ETag support (#3593)
Honour opt-in discovery filters for HTTP endpoint discovery (#3525)
Never infer a DbContext parameter as the HTTP request body (#3538)

Transports

Add a parallel WolverineFx.Mqtt5 package (MQTTnet 5) (#3517)
Pulsar: don't claim native scheduling without a retry-letter topic (#3491)
Azure Service Bus: pin session listeners to specific session identifiers (#3533)

Persistence

Clear transport queue tables on message-store reset — PostgreSQL (#3529), SQLite (#3553), MySQL (#3551), Oracle (#3552)
Oracle: durable inbox mark-as-handled binds RAW(16) Guid correctly (#3581)
... (truncated)

Commits viewable in compare view.

Updated WolverineFx.RuntimeCompilation from 6.21.0 to 6.23.0.

Release notes

Sourced from WolverineFx.RuntimeCompilation's releases.

6.23.0 Projection & agent distribution

TL;DR: this prevents Wolverine from going into a panic doing agent assignments and churning crazily hard during Kubernetes rollouts or cluster starts and that's a very good thing

The bulk of this release. A wave of fixes (WO-1..8) to the agent assignment plane that together remove the re-assignment churn and livelock that could leave projection agents flapping or wedged.

Node heartbeats no longer block behind command execution (#3620)
Node resurrection restores the node's real identity rather than a skeleton record (#3621)
A pending-assignment ledger suppresses duplicate AssignAgent floods (#3622)
Agent batch starts are chunked and bounded-parallel, so they stay safe at scale (#3623)
Ejection hysteresis plus leader protection (#3624)
The assignment row is re-upserted for agents that are already running (#3619)
Local agents drain with bounded parallelism on shutdown (#3636)
Paused shards now say why. IEventSubscriptionAgent.Failure surfaces a ShardFailure — category, the failing event's sequence and type, and the root exception type — through health checks and a new IWolverineObserver.AgentPaused hook plus a NodeRecordType.AgentPaused record. Failures bound to a specific event (ApplyEvent, EventSerialization, UnknownEventType) or to two processes racing one shard (ProgressionOutOfOrder) are no longer auto-restarted, since they would die on the identical event every time (#3637, #3638)
Agent starts retry locally, bounded by Durability.AgentStartRetryAttempts / AgentStartRetryDelay, instead of idling a full CheckAssignmentPeriod after a startup race (#3519)
Store-scoped FindAgentUriAsync overload (#3647) and a store-aware TryRebuildRegisteredProjectionAsync overload (#3618)

Bumps JasperFx.Events to 2.36.1, Marten to 9.20.0 and Polecat to 5.7.0.

HTTP

Endpoints that advertise a request body their HTTP method cannot carry now fail fast at startup instead of silently 404ing out of the route matcher (#3648)
A missing Content-Type on an [AcceptsContentType] route returns 415 rather than 404 (#3649)
Query-only [AsParameters] endpoints no longer advertise a form body, which had been dropping them from route matching entirely (#3630)
Explicitly-routed chains — PublishMessage<T> and SendMessage<T> — now describe the message they read from the body. They had been advertising no request body at all in OpenAPI (#3646)
Enum values in query strings and form posts parse case-insensitively (#3629)
Compiled queries returned as a Wolverine.Http resource no longer execute twice (#3625)

Transports

Conventional routing respects named brokers (#3633)
Google Pub/Sub: named-broker support for sharded and partitioned topics (#3632), and ListenToPubsubSubscriptionOnNamedBroker (#3631)
Kafka: topic-already-exists error codes are handled rather than thrown (#3640)
Redis: scheduled retries survive an unreadable timestamp (#3613), and scheduled entries that repeatedly fail to deserialize are dead-lettered instead of looping (#3644)
EnvelopeMapper reads both timestamp header formats (#3645)
NServiceBus interop: the EnclosedMessageTypes header is split before the message type is resolved, so interop works across Azure Service Bus, SNS, SQS and the database transports (#3628)

Persistence

Oracle runs the durability agent through the shared batching mechanics (#3614). Note that ODP.NET exposes no DbBatch, so the work splits per statement.

Other

Resource discovery no longer eager-connects broker transports (#3617)

Contributors

Thank you to everyone who contributed to this release:

... (truncated)

6.22.0

Wolverine 6.22.0 rolls up the claim-check backend wave, distributed-agent and durability hardening, HTTP/OpenAPI binding fixes, and the Marten 9.18 / JasperFx 2.34 critter-stack alignment.

Dependency alignment

JasperFx family → 2.34.0
Marten → 9.18.0 (with Marten.AspNetCore / Marten.Newtonsoft), Polecat [5.5.0,6.0.0)
Weasel family → 9.18.1

Claim-check offloading

New NATS JetStream Object Store claim-check backend (#3506)
New PostgreSQL database-LOB claim-check backend (#3507)
New Google Cloud Storage claim-check backend (#3505)
Size-threshold auto-offload — large payloads offload to the claim-check store automatically (#3504)
Per-message / per-endpoint store selection (#3508)
Honor a DI-registered IClaimCheckStore (#3564)
New claim-check backends are now packed for NuGet (#3565)

Distributed agents & durability

Recover exclusive listener inboxes on the listening node (#3590)
Reverse the reset-clears-queue-tables behavior; add IHost.ClearAllWolverineStorageAsync() (#3592)
Subscription health check uses the tenant-scoped high water mark for per-tenant subscription agents (#3582)
Isolate agent start failures so one wedged agent no longer skips its siblings (#3519)
Restart a projection agent whose shard wedged out from under it (#3519)
EventSubscriptionAgent restores continuous execution after Rebuild/Rewind (#3520)
Stamp the assigned node onto owned event-store daemons (running_on_node, marten#5001) (#3578)
Solo-mode health-check loop no longer leaks an unbounded OpenTelemetry trace (#3518)
Warn loudly when a host's application assembly is pinned by an earlier host (#3521)

HTTP & OpenAPI

Describe chain-bound OpenAPI params from produced variables; narrow re-reflection to postprocessors (#3601)
Bind [FromQuery] on arrays/collections instead of misrouting to complex-flattening (#3602)
Bind scalar [FromQuery] decimal correctly + shape-test OpenAPI parameter description across type families (#3586)
Don't describe a route-bound [FromQuery]/[FromHeader] parameter twice in OpenAPI (#3586)
Marten 9.18 streaming types — StreamPaged, StreamPagedByCursor, ETag support (#3593)
Honour opt-in discovery filters for HTTP endpoint discovery (#3525)
Never infer a DbContext parameter as the HTTP request body (#3538)

Transports

Add a parallel WolverineFx.Mqtt5 package (MQTTnet 5) (#3517)
Pulsar: don't claim native scheduling without a retry-letter topic (#3491)
Azure Service Bus: pin session listeners to specific session identifiers (#3533)

Persistence

Clear transport queue tables on message-store reset — PostgreSQL (#3529), SQLite (#3553), MySQL (#3551), Oracle (#3552)
Oracle: durable inbox mark-as-handled binds RAW(16) Guid correctly (#3581)
... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps WolverineFx from 6.21.0 to 6.23.0 Bumps WolverineFx.Postgresql from 6.21.0 to 6.23.0 Bumps WolverineFx.RuntimeCompilation from 6.21.0 to 6.23.0 --- updated-dependencies: - dependency-name: WolverineFx.Postgresql dependency-version: 6.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: wolverine - dependency-name: WolverineFx dependency-version: 6.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: wolverine - dependency-name: WolverineFx.RuntimeCompilation dependency-version: 6.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: wolverine ... Signed-off-by: dependabot[bot] <support@github.com>

vgmello · 2026-07-27T14:08:35Z

Superseded by #315 (consolidated dependency bumps).

dependabot · 2026-07-27T14:08:37Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

…Tools, Scalar) (#315) Combines the pending Dependabot dependency PRs into one, superseding **#308, #309, #310, #311, #314** (and closing the held-back **#312, #313**). ## Included - **WolverineFx** + `.Kafka` + `.Postgresql` + `.RuntimeCompilation` `6.21.0` → `6.23.0` (#309, #314). `.Kafka` aligned manually — Dependabot's `wolverine` group only bumped 3 of the 4, which would have left Kafka a minor behind its siblings. - **Microsoft.Orleans** `10.2.1` → `10.2.2` (#308) - **Grpc.Tools** `2.82.0` → `2.83.0` (#310) - **Scalar.AspNetCore** `2.16.15` → `2.16.16` (#311) ## Intentionally excluded - **Refitter.MSBuild 2.1.0** (#312) — generator breaks E2E client generation (`Method not found: System.Text.ValueStringBuilder.AsSpan()`). - **SonarAnalyzer.CSharp 10.30** (#313) — new analyzer rules fail the build on existing code, including a false-positive **S8969** that conflicts with the compiler's own nullability analysis (removing the flagged `!` triggers CS8620). ## Verification - `dotnet build AppDomain.slnx` — 0 warnings / 0 errors. - `dotnet test AppDomain.Tests` — 209/209. - **Generated-template E2E**: `dotnet new mmt --local` (full config, Wolverine 6.23), booted against real Postgres + Kafka, ran the generated E2E suite → **14/14 passed**. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jul 27, 2026

vgmello mentioned this pull request Jul 27, 2026

Consolidate Dependabot updates (Wolverine 6.23, Orleans 10.2.2, Grpc.Tools, Scalar) #315

Merged

vgmello closed this Jul 27, 2026

dependabot Bot deleted the dependabot/nuget/wolverine-9e78bd4a82 branch July 27, 2026 14:08

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the wolverine group with 3 updates - #309

Bump the wolverine group with 3 updates#309
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/wolverine-9e78bd4a82

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

vgmello commented Jul 27, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jul 27, 2026

6.23.0

Projection & agent distribution

HTTP

Transports

Persistence

Other

Contributors

6.22.0

Dependency alignment

Claim-check offloading

Distributed agents & durability

HTTP & OpenAPI

Transports

Persistence

6.23.0

Projection & agent distribution

HTTP

Transports

Persistence

Other

Contributors

6.22.0

Dependency alignment

Claim-check offloading

Distributed agents & durability

HTTP & OpenAPI

Transports

Persistence

6.23.0

Projection & agent distribution

HTTP

Transports

Persistence

Other

Contributors

6.22.0

Dependency alignment

Claim-check offloading

Distributed agents & durability

HTTP & OpenAPI

Transports

Persistence

Uh oh!

vgmello commented Jul 27, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant