Skip to content

chore(deps): Bump the nuget-dependencies group with 6 updates#1

Merged
JerrettDavis merged 1 commit into
mainfrom
dependabot/nuget/WebApiCatchAll/nuget-dependencies-c72fb4be97
Jun 16, 2026
Merged

chore(deps): Bump the nuget-dependencies group with 6 updates#1
JerrettDavis merged 1 commit into
mainfrom
dependabot/nuget/WebApiCatchAll/nuget-dependencies-c72fb4be97

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 16, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.AspNetCore.OpenApi from 8.0.0 to 8.0.28.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

8.0.28

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.27...v8.0.28

8.0.27

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.26...v8.0.27

8.0.26

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.25...v8.0.26

8.0.25

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.24...v8.0.25

8.0.24

Release

8.0.23

Release

What's Changed

https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs

8.0.22

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.21...v8.0.22

8.0.21

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.19...v8.0.20

8.0.18

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

  • Update dependencies from dotnet/arcade (#​61832)
    This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
    The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

  • Update branding to 8.0.17 (#​61830)
    The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

  • Merging internal commits for release/8.0 (#​61924)
    This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.


This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

8.0.13

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.11...v8.0.12

8.0.11

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.10...v8.0.11

8.0.10

Release

8.0.8

Release

8.0.7

Release

8.0.6

Release

8.0.5

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.4...v8.0.5

8.0.4

Release

8.0.3

Release

8.0.2

Release

8.0.1

Release

Commits viewable in compare view.

Updated Serilog from 3.1.1 to 4.3.1.

Release notes

Sourced from Serilog's releases.

4.3.1

What's Changed

New Contributors

Full Changelog: serilog/serilog@v4.3.0...v4.3.1

4.3.0

What's Changed

  • #​2149 - LogEvent.AddPropertyIfAbsent(ILogEventPropertyFactory, ...) overload that helps avoid allocations (@​vanni-giachin)
  • #​2158 - use HTTPS in all README.md images and links (@​TimHess)
  • #​2163 - LogContext.Push() overloads accepting IEnumerable<ILogEventEnricher> and ReadOnlySpan<ILogEventEnricher> (@​SimonCropp)
  • #​2175, #​2178, #​2179 - fix AOT compatibility (@​agocke)

New Contributors

Full Changelog: serilog/serilog@v4.2.0...v4.3.0

4.2.0

What's Changed

  • #​2141 — stabilize and fully implement dotted identifiers in message templates (@​nblumhardt)
  • #​2028 — use RuntimeHelpers.GetHashCode() in message template cache comparer (@​sungam3r)
  • #​2138 — update to .NET 9 SDK, GitHub Actions build, net9.0 TFM (@​nblumhardt)
  • #​2132 — support capturing of multidimensional arrays (@​sungam3r, @​WAcry)
  • #​2136 — fix documentation for ILogEventSink (@​erichiller)

New Contributors

Full Changelog: serilog/serilog@v4.1.0...v4.2.0

4.1.0

  • #​2108 - failure listeners and fallback sinks (@​nblumhardt)
  • #​2120 - add BatchingOptions.RetryTimeLimit and update retry scheduling algorithm (@​nblumhardt)

Important note

IBatchedLogEventSink batch retry scheduling has changed in this version. The default configuration still tries failed batches for approximately ten minutes, but the BufferingTimeLimit no longer implicitly causes the retry time to be extended or reduced. If you need a specific retry time, set BatchingOptions.RetryTimeLimit, which reliably controls retry time.

4.0.2

  • #​2094 - remove boxing and string allocations in output template formatting (@​epeshk)
  • #​2103 - don't capture properties with private get accessors (@​nblumhardt)
  • #​2095 - remove junk file (@​Numpsy)
  • #​2116 - fall back to IDisposable in Log.CloseAndFlushAsync() when the target logger is not IAsyncDisposable (@​nblumhardt)

4.0.1

  • #​2090 — when capturing structured values, reuse HashSet instances, reduce LINQ usage, avoid reallocating string[] to improve performance and cut GC pressure (@​nblumhardt)
  • #​2089 - allow capturing of non-anonymous structured values when trimming (@​nblumhardt)
  • #​2083 - use Major.Minor.0.0 assembly versioning (@​nblumhardt)

4.0.0

What's new in Serilog 4.0.0?

If you're deploying to .NET Framework, note that Serilog's assembly version number has been unpinned from the long-running historical 2.0.0 default, and now matches the package version precisely. If you encounter issues, ensure your build is generating valid assembly binding redirects.

Simple, robust, built-in batching support

Sinks that need batching functionality can now be easily written, without any additional package dependencies, by implementing IBatchedLogEventSink:

class MyBatchedSink: IBatchedLogEventSink
{
    public Task EmitBatchAsync(IReadOnlyCollection<LogEvent> batch)
    {
        // Send a batch of log events...
    }
}

Batched sinks can be added using WriteTo.Sink(IBatchedLogEventSink, ...) - they're given first-class consideration just like regular un-batched sinks.

The built-in batching implementation is based on System.Threading.Channels and draws on the original Serilog.Sinks.PeriodicBatching package (now in maintenance-mode), to provide a full-featured, efficient, async-native batching implementation.

Experimental dotted name capturing

By setting an experimental AppContext switch, message templates can be used to capture dotted names, which are required when using some logging schemas.

AppContext.SetSwitch("Serilog.Parsing.MessageTemplateParser.AcceptDottedPropertyNames", true);

Log.Information("Running as {user.name}", Environment.UserName);
// Captures {"user.name": "nblumhardt"}

While currently experimental and unsupported, this flag is intended to help the ecosystem evaluate and prepare for dotted name support in a future Serilog release.

Changes

  • #​2015 — breaking unpin assembly version (@​nblumhardt)
  • #​2045 — breaking use case-insensitive matching for level overrides (@​tillig)
  • #​2051 — breaking recognize UtcTimestamp as a built-in token in output templates (@​MatthewHays)
  • #​1979 — add tests for ReusableStringWriter (@​nblumhardt)
  • #​2016 — update TFMs (@​nblumhardt, @​bartelink)
  • #​2018 — add LogEvent.UnstableAssembleFromParts() (@​nblumhardt)
  • #​2044 — build updates for compatibility (@​tillig)
  • #​2027 — improve trimming annotations, compatibility switch for compiler-generated type support (@​agocke)
  • #​2055 — introduce IBatchedLogEventSink and WriteTo.Sink(IBatchedLogEventSink) (@​nblumhardt)
  • #​2060 — introduce LoggerSinkConfiguration.CreateSink() and redesign .Wrap() (@​nblumhardt, @​bartelink)
  • #​2063 — improve MessageTemplateParser performance, switch to allow . in captured property names (@​nblumhardt)
  • #​2064 — make message template alignment parsing match spec (@​Insomniak47)
  • #​2065 — allow any character except } in message template format specifiers (@​Insomniak47)
    ... (truncated)

Commits viewable in compare view.

Updated Serilog.AspNetCore from 8.0.1 to 10.0.0.

Release notes

Sourced from Serilog.AspNetCore's releases.

10.0.0

What's Changed

New Contributors

Full Changelog: serilog/serilog-aspnetcore@v9.0.0...v10.0.0

9.0.0

What's Changed

  • #​388 - update to .NET 9 SDK, Serilog.Extensions.Hosting/Serilog.Settings.Configuration 9.0.0, Serilog 4.2.0 (@​nblumhardt)

8.0.3

  • #​383 - update Serilog.Settings.Configuration dependency (@​Numpsy)

8.0.2

  • #​376 - update Serilog.Settings.Configuration dependency to avoid transitive dependency on vulnerable System.Text.Json (@​nblumhardt)
  • #​364 - fix example code (@​RandomBuffer)
  • #​367 - clean up and format (@​sungam3r)
  • #​370 - README updates (@​nblumhardt)

Commits viewable in compare view.

Updated Serilog.Sinks.Console from 5.0.1 to 6.1.1.

Release notes

Sourced from Serilog.Sinks.Console's releases.

6.1.1

What's Changed

Full Changelog: serilog/serilog-sinks-console@v6.1.0...v6.1.1

6.1.0

  • #​165 - support for {UtcTimestamp} in output templates (@​ManuelRin)
  • #​172, #​173 - switch build to Serilog org standard (@​nblumhardt)

6.0.0

  • #​154 - support NO_COLOR environment variable (@​sungam3r)
  • #​157 - update to Serilog 4 (@​nblumhardt)

Commits viewable in compare view.

Updated Serilog.Sinks.File from 5.0.0 to 7.0.0.

Release notes

Sourced from Serilog.Sinks.File's releases.

7.0.0

What's Changed

New Contributors

Full Changelog: serilog/serilog-sinks-file@v4.1.0...v7.0.0

6.0.0

  • #​241 - update package project URL (@​Sjoerdsjoerd)
  • #​274 - build against VS2022 (@​SimonCropp)
  • #​279 - update publishing key (@​SimonCropp)
  • #​254 - new issue tracker templates (@​nblumhardt)
  • #​295 - update TFMs (@​zachrybaker)
  • #​303 - publish SNUPKG (@​MonticolaExplorator)
  • #​280 - code cleanup (@​sungam3r)
  • #​311 - updates for Serilog 4 (@​nblumhardt)

Breaking changes

Drops support for pre-netstandard2.0 TFMs. Users targeting earlier platforms should use version 5.x of this package instead.

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore from 6.4.0 to 10.2.1.

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

10.2.1

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.0...v10.2.1

10.2.0

What's Changed

New Contributors

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.7...v10.2.0

10.1.7

What's Changed

New Contributors

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.6...v10.1.7

10.1.6

What's Changed

New Contributors

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.5...v10.1.6

10.1.5

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.4...v10.1.5

10.1.4

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.3...v10.1.4

10.1.3

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.2...v10.1.3

10.1.2

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.1...v10.1.2

10.1.1

What's Changed

New Contributors

Full Changelog:

domaindrivendev/Swashbuckle.AspNetCore@v10.1.0...v10.1.1

10.1.0

What's Changed

New Features

Bug Fixes

Miscellaneous

New Contributors

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.0.1...v10.1.0

10.0.1

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.0.0...v10.0.1

10.0.0

Swashbuckle.AspNetCore v10.0.0

[!IMPORTANT]
This release contains major breaking changes.

Read our v10 migration guide for further information.

With this release, Swashbuckle.AspNetCore adds support for generating OpenAPI 3.1 documents and for ASP.NET Core 10.

Swashbuckle.AspNetCore v10 depends on OpenAPI.NET v2.3 which introduces many breaking changes to the public API surface. More information can be found in their OpenAPI.NET v2 Upgrade Guide.

To reduce the number of breaking behavioural changes in Swashbuckle.AspNetCore v10, generation of OpenAPI 3.1 documents is opt-in.
To generate OpenAPI 3.1 documents, change the OpenAPI version as shown in the code snippet below:

app.UseSwagger(options =>
{
    options.OpenApiVersion = OpenApiSpecVersion.OpenApi3_1;
});

[!TIP]
It is strongly recommended that you upgrade to Swashbuckle.AspNetCore v9.0.6 before upgrading to v10.

[!IMPORTANT]
Use of Swashbuckle.AspNetCore with the ASP.NET Core WithOpenApi() method is no longer supported.

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v9.0.6...v10.0.0

9.0.6

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v9.0.5...v9.0.6

9.0.5

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v9.0.4...v9.0.5

9.0.4

What's Changed

New Contributors

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v9.0.3...v9.0.4

9.0.3

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v9.0.2...v9.0.3

9.0.2

What's Changed

New Contributors

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v9.0.1...v9.0.2

9.0.1

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v9.0.0...v9.0.1

9.0.0

📣 This release contains the following breaking changes:

  • Drops support for netstandard2.0 and thus .NET Framework - now only net8.0 and net9.0 are supported.
  • Removes all public members annotated as [Obsolete] in previous releases.
  • Removes the deprecated --serializeasv2 option from Swashbuckle.AspNetCore.Cli, which was superseded by --openapiversion from version 8.0.0.

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v8.1.4...v9.0.0

8.1.4

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v8.1.3...v8.1.4

8.1.3

What's Changed

New Contributors

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v8.1.2...v8.1.3

8.1.2

What's Changed

New Contributors

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v8.1.1...v8.1.2

8.1.1

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v8.1.0...v8.1.1

8.1.0

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v8.0.0...v8.1.0

8.0.0

[!IMPORTANT]
Swashbuckle.AspNetCore drops support for .NET 6.

Swashbuckle.AspNetCore v8.0.0 makes the following notable changes:

  • Drops support for net6.0.
  • The netstandard2.0 TFM now depends on ASP.NET Core 2.3 instead of ASP.NET Core 2.1.
  • Updates Microsoft.OpenApi to v1.6.23. This update requires the use of swagger-ui v5.19.0 or later (v5.20.1 is included in the Swashbuckle.AspNetCore.SwaggerUI NuGet package). You may need to clear your browser's cache to pick up the latest JavaScript files for swagger-ui.
  • To prepare for future support for OpenAPI 3.1 documents, deprecates the SerializeAsV2 property by marking it as [Obsolete]. Users should update their code as illustrated below, depending on their use case:
    - options.SerializeAsV2 = true;
    + options.OpenApiVersion = Microsoft.OpenApi.OpenApiSpecVersion.OpenApi2_0;
    
    // or if explicitly disabling (the same as the default behaviour)
    - options.SerializeAsV2 = false;
    + options.OpenApiVersion = Microsoft.OpenApi.OpenApiSpecVersion.OpenApi3_0;
  • To prepare for future support for OpenAPI 3.1 documents, the Swashbuckle.AspNetCore.Cli tool has deprecated the --serializeasv2 option and logs a warning to the console. Users should update their usage as illustrated below, depending on their use case:
    - swagger tofile --output [output] [startupassembly] [swaggerdoc] --serializeasv2
    + swagger tofile --output [output] [startupassembly] [swaggerdoc] --openapiversion "2.0"

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v7.3.2...v8.0.0

7.3.2

What's Changed

New Contributors

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v7.3.1...v7.3.2

7.3.1

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v7.3.0...v7.3.1

7.3.0

What's Changed

New Contributors

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v7.2.0...v7.3.0

7.2.0

What's Changed

New Contributors

  • @​moni-dips made th....

Description has been truncated

Bumps Microsoft.AspNetCore.OpenApi from 8.0.0 to 8.0.28
Bumps Serilog from 3.1.1 to 4.3.1
Bumps Serilog.AspNetCore from 8.0.1 to 10.0.0
Bumps Serilog.Sinks.Console from 5.0.1 to 6.1.1
Bumps Serilog.Sinks.File from 5.0.0 to 7.0.0
Bumps Swashbuckle.AspNetCore from 6.4.0 to 10.2.1

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 8.0.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Serilog
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: Serilog.AspNetCore
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: Serilog.Sinks.Console
  dependency-version: 6.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: Serilog.Sinks.File
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 10.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 16, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@JerrettDavis JerrettDavis merged commit cf721b5 into main Jun 16, 2026
@JerrettDavis JerrettDavis deleted the dependabot/nuget/WebApiCatchAll/nuget-dependencies-c72fb4be97 branch June 16, 2026 01:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant