Bump Microsoft.Extensions.Configuration and Microsoft.Extensions.Configuration.EnvironmentVariables

[dependabot]

Updated Microsoft.Extensions.Configuration from 9.0.10 to 9.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

9.0.12

Release

9.0.11

Release

What's Changed

• [release/9.0-staging] Fix DefaultIfEmptyIterator.TryGetElementAt returning default value for out-of-bounds indices by @​github-actions[bot] in [release/9.0-staging] Fix DefaultIfEmptyIterator.TryGetElementAt returning default value for out-of-bounds indices dotnet/runtime#119844
• [release/9.0-staging] Update dependencies from dotnet/cecil by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#119981
• [automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @​github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#119978
• [release/9.0-staging] Add acquire barrier to populate bit reading by @​github-actions[bot] in [release/9.0-staging] Add acquire barrier to populate bit reading dotnet/runtime#119967
• [release/9.0-staging] Bump System.Text.Json toolset version by @​github-actions[bot] in [release/9.0-staging] Bump System.Text.Json toolset version dotnet/runtime#113385
• [release/9.0-staging] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/arcade dotnet/runtime#120034
• [release/9.0-staging] Update dependencies from dotnet/cecil by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#120033
• [release/9.0-staging] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/source-build-reference-packages dotnet/runtime#120020
• [release/9.0-staging] UnsafeAccessor - ambiguous name and signature match by @​AaronRobinsonMSFT in [release/9.0-staging] UnsafeAccessor - ambiguous name and signature match dotnet/runtime#120011
• [release/9.0] Bump OSX.12 helix queues to OSX.13 by @​steveisok in [release/9.0] Bump OSX.12 helix queues to OSX.13 dotnet/runtime#119814
• [release/9.0-staging] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/arcade dotnet/runtime#120128
• [release/9.0-staging] Update dependencies from dotnet/cecil by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#120129
• [release/9.0-staging] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/source-build-reference-packages dotnet/runtime#120106
• [automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @​github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#120057
• [release/9.0-staging] Update dependencies from dotnet/cecil by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#120240
• [release/9.0] [mono] Make the compressed interface bitmap feature usable by @​BrzVlad in [release/9.0] [mono] Make the compressed interface bitmap feature usable dotnet/runtime#120154
• [release/9.0-staging] Remove an STJ deep nested object test causing occasional failures by @​github-actions[bot] in [release/9.0-staging] Remove an STJ deep nested object test causing occasional failures dotnet/runtime#120265
• [release/9.0-staging] Update dependencies from dotnet/hotreload-utils by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/hotreload-utils dotnet/runtime#120331
• [release/9.0-staging] Detect if RSA-384 is supported on the platform by @​vcsjones in [release/9.0-staging] Detect if RSA-384 is supported on the platform dotnet/runtime#120382
• [release/9.0-staging] Load Standalone GC correctly in component scenarios. by @​github-actions[bot] in [release/9.0-staging] Load Standalone GC correctly in component scenarios. dotnet/runtime#120236
• [release/9.0-staging] [mono][hotreload] Make the runtime ignore an update if it is an empty one by @​github-actions[bot] in [release/9.0-staging] [mono][hotreload] Make the runtime ignore an update if it is an empty one dotnet/runtime#120335
• [release/9.0-staging] Update dependencies from dotnet/icu by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#120349
• [release/9.0-staging] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/arcade dotnet/runtime#120397
• [release/9.0-staging] Update dependencies from dotnet/cecil by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#120418
• [release/9.0-staging] Update dependencies from dotnet/xharness by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/xharness dotnet/runtime#120425
• [release/9.0-staging] Update dependencies from dotnet/hotreload-utils by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/hotreload-utils dotnet/runtime#120404
• [release/9.0-staging] Prevent format injection in hosting Windows PAL printf functions when redirected to file by @​jkoritzinsky in [release/9.0-staging] Prevent format injection in hosting Windows PAL printf functions when redirected to file dotnet/runtime#119786
• [release/9.0-staging] Update dependencies from dotnet/runtime-assets by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/runtime-assets dotnet/runtime#120417
• Update branding to 9.0.11 by @​vseanreesermsft in Update branding to 9.0.11 dotnet/runtime#120474
• [release/9.0-staging] Update dependencies from dotnet/icu by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#120586
• [release/9.0] Update dependencies from dotnet/emsdk by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#120409
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/runtime#120396
• [release/9.0-staging] [mono][interp] Fix various leaks, primarily around dynamic methods by @​BrzVlad in [release/9.0-staging] [mono][interp] Fix various leaks, primarily around dynamic methods dotnet/runtime#120600
• [release/9.0-staging] [mono][sgen] Fix incorrect condition when checking if we should do a major collection by @​github-actions[bot] in [release/9.0-staging] [mono][sgen] Fix incorrect condition when checking if we should do a major collection dotnet/runtime#120533
• [automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @​github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#120570
• [manual] Merge release/9.0-staging into release/9.0 by @​PranavSenthilnathan in [manual] Merge release/9.0-staging into release/9.0 dotnet/runtime#120615
• Merging internal commits for release/9.0 by @​vseanreesermsft in Merging internal commits for release/9.0 dotnet/runtime#120719
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/runtime#120765
• [release/9.0] Update dependencies from dotnet/emsdk by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#120779
• [release/9.0] Update dependencies from dotnet/emsdk by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#120814
• [release/9.0] Update Microsoft.Build.* versions to 17.8.43 by @​PranavSenthilnathan in [release/9.0] Update Microsoft.Build.* versions to 17.8.43 dotnet/runtime#120820

Full Changelog: dotnet/runtime@v9.0.10...v9.0.11

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.EnvironmentVariables from 9.0.10 to 9.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration.EnvironmentVariables's releases.

9.0.12

Release

9.0.11

Release

What's Changed

• [release/9.0-staging] Fix DefaultIfEmptyIterator.TryGetElementAt returning default value for out-of-bounds indices by @​github-actions[bot] in [release/9.0-staging] Fix DefaultIfEmptyIterator.TryGetElementAt returning default value for out-of-bounds indices dotnet/runtime#119844
• [release/9.0-staging] Update dependencies from dotnet/cecil by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#119981
• [automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @​github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#119978
• [release/9.0-staging] Add acquire barrier to populate bit reading by @​github-actions[bot] in [release/9.0-staging] Add acquire barrier to populate bit reading dotnet/runtime#119967
• [release/9.0-staging] Bump System.Text.Json toolset version by @​github-actions[bot] in [release/9.0-staging] Bump System.Text.Json toolset version dotnet/runtime#113385
• [release/9.0-staging] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/arcade dotnet/runtime#120034
• [release/9.0-staging] Update dependencies from dotnet/cecil by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#120033
• [release/9.0-staging] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/source-build-reference-packages dotnet/runtime#120020
• [release/9.0-staging] UnsafeAccessor - ambiguous name and signature match by @​AaronRobinsonMSFT in [release/9.0-staging] UnsafeAccessor - ambiguous name and signature match dotnet/runtime#120011
• [release/9.0] Bump OSX.12 helix queues to OSX.13 by @​steveisok in [release/9.0] Bump OSX.12 helix queues to OSX.13 dotnet/runtime#119814
• [release/9.0-staging] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/arcade dotnet/runtime#120128
• [release/9.0-staging] Update dependencies from dotnet/cecil by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#120129
• [release/9.0-staging] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/source-build-reference-packages dotnet/runtime#120106
• [automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @​github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#120057
• [release/9.0-staging] Update dependencies from dotnet/cecil by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#120240
• [release/9.0] [mono] Make the compressed interface bitmap feature usable by @​BrzVlad in [release/9.0] [mono] Make the compressed interface bitmap feature usable dotnet/runtime#120154
• [release/9.0-staging] Remove an STJ deep nested object test causing occasional failures by @​github-actions[bot] in [release/9.0-staging] Remove an STJ deep nested object test causing occasional failures dotnet/runtime#120265
• [release/9.0-staging] Update dependencies from dotnet/hotreload-utils by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/hotreload-utils dotnet/runtime#120331
• [release/9.0-staging] Detect if RSA-384 is supported on the platform by @​vcsjones in [release/9.0-staging] Detect if RSA-384 is supported on the platform dotnet/runtime#120382
• [release/9.0-staging] Load Standalone GC correctly in component scenarios. by @​github-actions[bot] in [release/9.0-staging] Load Standalone GC correctly in component scenarios. dotnet/runtime#120236
• [release/9.0-staging] [mono][hotreload] Make the runtime ignore an update if it is an empty one by @​github-actions[bot] in [release/9.0-staging] [mono][hotreload] Make the runtime ignore an update if it is an empty one dotnet/runtime#120335
• [release/9.0-staging] Update dependencies from dotnet/icu by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#120349
• [release/9.0-staging] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/arcade dotnet/runtime#120397
• [release/9.0-staging] Update dependencies from dotnet/cecil by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#120418
• [release/9.0-staging] Update dependencies from dotnet/xharness by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/xharness dotnet/runtime#120425
• [release/9.0-staging] Update dependencies from dotnet/hotreload-utils by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/hotreload-utils dotnet/runtime#120404
• [release/9.0-staging] Prevent format injection in hosting Windows PAL printf functions when redirected to file by @​jkoritzinsky in [release/9.0-staging] Prevent format injection in hosting Windows PAL printf functions when redirected to file dotnet/runtime#119786
• [release/9.0-staging] Update dependencies from dotnet/runtime-assets by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/runtime-assets dotnet/runtime#120417
• Update branding to 9.0.11 by @​vseanreesermsft in Update branding to 9.0.11 dotnet/runtime#120474
• [release/9.0-staging] Update dependencies from dotnet/icu by @​dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#120586
• [release/9.0] Update dependencies from dotnet/emsdk by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#120409
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/runtime#120396
• [release/9.0-staging] [mono][interp] Fix various leaks, primarily around dynamic methods by @​BrzVlad in [release/9.0-staging] [mono][interp] Fix various leaks, primarily around dynamic methods dotnet/runtime#120600
• [release/9.0-staging] [mono][sgen] Fix incorrect condition when checking if we should do a major collection by @​github-actions[bot] in [release/9.0-staging] [mono][sgen] Fix incorrect condition when checking if we should do a major collection dotnet/runtime#120533
• [automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @​github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#120570
• [manual] Merge release/9.0-staging into release/9.0 by @​PranavSenthilnathan in [manual] Merge release/9.0-staging into release/9.0 dotnet/runtime#120615
• Merging internal commits for release/9.0 by @​vseanreesermsft in Merging internal commits for release/9.0 dotnet/runtime#120719
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/runtime#120765
• [release/9.0] Update dependencies from dotnet/emsdk by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#120779
• [release/9.0] Update dependencies from dotnet/emsdk by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#120814
• [release/9.0] Update Microsoft.Build.* versions to 17.8.43 by @​PranavSenthilnathan in [release/9.0] Update Microsoft.Build.* versions to 17.8.43 dotnet/runtime#120820

Full Changelog: dotnet/runtime@v9.0.10...v9.0.11

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
nuget/Microsoft.Extensions.Configuration	9.0.12	🟢 6.9	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 10 all changesets reviewed CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected License 🟢 10 license file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Signed-Releases ⚠️ -1 no releases found Binary-Artifacts 🟢 10 no binaries found in the repo Fuzzing ⚠️ 0 project is not fuzzed Pinned-Dependencies 🟢 9 dependency not pinned by hash detected -- score normalized to 9 SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities 🟢 9 1 existing vulnerabilities detected
nuget/Microsoft.Extensions.Configuration	9.0.12	🟢 6.9	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 10 all changesets reviewed CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected License 🟢 10 license file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Signed-Releases ⚠️ -1 no releases found Binary-Artifacts 🟢 10 no binaries found in the repo Fuzzing ⚠️ 0 project is not fuzzed Pinned-Dependencies 🟢 9 dependency not pinned by hash detected -- score normalized to 9 SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities 🟢 9 1 existing vulnerabilities detected
nuget/Microsoft.Extensions.Configuration.EnvironmentVariables	9.0.12	🟢 6.9	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 10 all changesets reviewed CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected License 🟢 10 license file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Signed-Releases ⚠️ -1 no releases found Binary-Artifacts 🟢 10 no binaries found in the repo Fuzzing ⚠️ 0 project is not fuzzed Pinned-Dependencies 🟢 9 dependency not pinned by hash detected -- score normalized to 9 SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities 🟢 9 1 existing vulnerabilities detected
nuget/Microsoft.Extensions.Configuration.UserSecrets	9.0.12	Unknown	Unknown
nuget/Microsoft.Extensions.Configuration	9.0.12	🟢 6.9	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 10 all changesets reviewed CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected License 🟢 10 license file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Signed-Releases ⚠️ -1 no releases found Binary-Artifacts 🟢 10 no binaries found in the repo Fuzzing ⚠️ 0 project is not fuzzed Pinned-Dependencies 🟢 9 dependency not pinned by hash detected -- score normalized to 9 SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities 🟢 9 1 existing vulnerabilities detected
nuget/Microsoft.Extensions.Configuration.EnvironmentVariables	9.0.12	🟢 6.9	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 10 all changesets reviewed CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected License 🟢 10 license file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Signed-Releases ⚠️ -1 no releases found Binary-Artifacts 🟢 10 no binaries found in the repo Fuzzing ⚠️ 0 project is not fuzzed Pinned-Dependencies 🟢 9 dependency not pinned by hash detected -- score normalized to 9 SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities 🟢 9 1 existing vulnerabilities detected
nuget/Microsoft.Extensions.Configuration	9.0.12	🟢 6.9	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 10 all changesets reviewed CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected License 🟢 10 license file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Signed-Releases ⚠️ -1 no releases found Binary-Artifacts 🟢 10 no binaries found in the repo Fuzzing ⚠️ 0 project is not fuzzed Pinned-Dependencies 🟢 9 dependency not pinned by hash detected -- score normalized to 9 SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities 🟢 9 1 existing vulnerabilities detected
nuget/Microsoft.Extensions.Configuration.EnvironmentVariables	9.0.12	🟢 6.9	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 10 all changesets reviewed CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected License 🟢 10 license file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Signed-Releases ⚠️ -1 no releases found Binary-Artifacts 🟢 10 no binaries found in the repo Fuzzing ⚠️ 0 project is not fuzzed Pinned-Dependencies 🟢 9 dependency not pinned by hash detected -- score normalized to 9 SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities 🟢 9 1 existing vulnerabilities detected

Scanned Files

• src/XtremeIdiots.Portal.Repository.Api.Client.V1/XtremeIdiots.Portal.Repository.Api.Client.V1.csproj
• src/XtremeIdiots.Portal.Repository.Api.IntegrationTests.Legacy/XtremeIdiots.Portal.Repository.Api.IntegrationTests.Legacy.csproj
• src/XtremeIdiots.Portal.Repository.Api.IntegrationTests.V1/XtremeIdiots.Portal.Repository.Api.IntegrationTests.V1.csproj
• src/XtremeIdiots.Portal.Repository.Api.IntegrationTests.V2/XtremeIdiots.Portal.Repository.Api.IntegrationTests.V2.csproj

[frasermolyneux]

@copilot - this change has broken the build, may need a direct reference to fix it

[Copilot]

@frasermolyneux I've opened a new pull request, #732, to work on those changes. Once the pull request is ready, I'll request review from you.

[frasermolyneux]

@copilot can you resolve the merge conflicts

[Copilot]

@frasermolyneux I've opened a new pull request, #733, to work on those changes. Once the pull request is ready, I'll request review from you.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud