-
Notifications
You must be signed in to change notification settings - Fork 0
deps: Bump the dotnet-minor group with 18 updates #153
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: trunk
Are you sure you want to change the base?
deps: Bump the dotnet-minor group with 18 updates #153
Conversation
Bumps Aspire.Hosting from 13.0.0 to 13.1.0 Bumps Aspire.Hosting.PostgreSQL from 13.0.0 to 13.1.0 Bumps Aspire.Hosting.Redis from 13.0.0 to 13.1.0 Bumps Aspire.Npgsql from 13.0.0 to 13.1.0 Bumps Aspire.StackExchange.Redis.DistributedCaching from 13.0.0 to 13.1.0 Bumps dbup-postgresql from 6.0.3 to 6.1.5 Bumps FluentAssertions from 7.0.0 to 7.2.0 Bumps NetEscapades.AspNetCore.SecurityHeaders from 1.1.0 to 1.3.1 Bumps NetTopologySuite from 2.5.0 to 2.6.0 Bumps Npgsql from 9.0.2 to 9.0.4 Bumps Npgsql.NetTopologySuite from 9.0.2 to 9.0.4 Bumps Npgsql.OpenTelemetry from 9.0.4 to 10.0.0 Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.12.0 to 1.14.0 Bumps OpenTelemetry.Extensions.Hosting from 1.12.0 to 1.14.0 Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.12.0 to 1.14.0 Bumps OpenTelemetry.Instrumentation.Http from 1.12.0 to 1.14.0 Bumps OpenTelemetry.Instrumentation.Runtime from 1.12.0 to 1.14.0 Bumps Polly from 8.4.2 to 8.6.5 --- updated-dependencies: - dependency-name: Aspire.Hosting dependency-version: 13.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor - dependency-name: Aspire.Hosting.PostgreSQL dependency-version: 13.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor - dependency-name: Aspire.Hosting.Redis dependency-version: 13.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor - dependency-name: Aspire.Npgsql dependency-version: 13.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor - dependency-name: Npgsql.OpenTelemetry dependency-version: 10.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dotnet-minor - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor - dependency-name: Aspire.StackExchange.Redis.DistributedCaching dependency-version: 13.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor - dependency-name: dbup-postgresql dependency-version: 6.1.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor - dependency-name: FluentAssertions dependency-version: 7.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor - dependency-name: NetEscapades.AspNetCore.SecurityHeaders dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor - dependency-name: NetTopologySuite dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor - dependency-name: Npgsql dependency-version: 9.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor - dependency-name: Npgsql.NetTopologySuite dependency-version: 9.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-minor - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor - dependency-name: OpenTelemetry.Instrumentation.Http dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor - dependency-name: OpenTelemetry.Instrumentation.Runtime dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor - dependency-name: Polly dependency-version: 8.6.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor - dependency-name: Polly dependency-version: 8.6.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor - dependency-name: Polly dependency-version: 8.6.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-minor ... Signed-off-by: dependabot[bot] <[email protected]>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
- Update Npgsql from 9.0.4 to 10.0.0 in TestKit and Postgres projects - Resolves NU1605 downgrade warnings caused by Aspire.Npgsql 13.1.0 requiring Npgsql >= 10.0.0 - Fixes CI build failures in PR #153
- Remove unused Microsoft.AspNetCore.Http.HttpResults using statement - Resolves IDE0005 code style warning
🤖 LLM Architecture Review🚫 Assessment: BLOCKING_ISSUES 🏗️ Architecture Review Summary Process Checks:
Diff Review Chunks: 8 Chunk 1/8 (src/Honua.AppHost/Honua.AppHost.csproj)🏗️ Architecture Review Summary
💡 Fallback Recommendation: Overall Assessment: NEEDS_ATTENTION (API Configuration Issue) Falling back to basic static analysis... Chunk 2/8 (src/Honua.Core/Honua.Core.csproj)🏗️ Architecture Review Summary
💡 Fallback Recommendation: Overall Assessment: NEEDS_ATTENTION (API Configuration Issue) Falling back to basic static analysis... Chunk 3/8 (src/Honua.Postgres/Honua.Postgres.csproj)🏗️ Architecture Review Summary
💡 Fallback Recommendation: Overall Assessment: NEEDS_ATTENTION (API Configuration Issue) Falling back to basic static analysis... Chunk 4/8 (src/Honua.Server/Honua.Server.csproj)🏗️ Architecture Review Summary
💡 Fallback Recommendation: Overall Assessment: NEEDS_ATTENTION (API Configuration Issue) Falling back to basic static analysis... Chunk 5/8 (src/Honua.ServiceDefaults/Honua.ServiceDefaults.csproj)🏗️ Architecture Review Summary
💡 Fallback Recommendation: Overall Assessment: NEEDS_ATTENTION (API Configuration Issue) Falling back to basic static analysis... Chunk 6/8 (tests/Honua.Architecture.Tests/Honua.Architecture.Tests.csproj)🏗️ Architecture Review Summary
💡 Fallback Recommendation: Overall Assessment: NEEDS_ATTENTION (API Configuration Issue) Falling back to basic static analysis... Chunk 7/8 (tests/Honua.Server.Tests/Honua.Server.Tests.csproj)🏗️ Architecture Review Summary
💡 Fallback Recommendation: Overall Assessment: NEEDS_ATTENTION (API Configuration Issue) Falling back to basic static analysis... Chunk 8/8 (tests/Honua.TestKit/Honua.TestKit.csproj)🏗️ Architecture Review Summary
💡 Fallback Recommendation: Overall Assessment: NEEDS_ATTENTION (API Configuration Issue) Falling back to basic static analysis... Overall Assessment: BLOCKING_ISSUES Automated architectural analysis powered by OpenAI GPT-4 |
Updated Aspire.Hosting from 13.0.0 to 13.1.0.
Release notes
Sourced from Aspire.Hosting's releases.
13.1.0
We are excited to share that our 13.1.0 release of Aspire has shipped! All of the packages are available in NuGet.org now. Head over to https://aspire.dev/whats-new/aspire-13-1/ to find what's new in 13.1.0!
What's Changed
ExcludeFromMcp()resource extension by @JamesNK in AddExcludeFromMcp()resource extension dotnet/aspire#12515aspire updatecommand by @Copilot in Add CLI self-update prompts toaspire updatecommand dotnet/aspire#12395CertificateAuthorityCollectionResourceby @danegsta in Add missing namespace toCertificateAuthorityCollectionResourcedotnet/aspire#12639... (truncated)
13.0.2
This patch is updating our Project Templates for our Python starter app to ensure we depend on the latest version of React. This is out of an abundance of caution, as we don't depend on any of the react packages that were flagged as vulnerable in GHSA-fv66-9v8q-g76r.
What's Changed
Full Changelog: dotnet/aspire@v13.0.1...v13.0.2
13.0.1
What's Changed
Full Changelog: dotnet/aspire@v13.0.0...v13.0.1
Commits viewable in compare view.
Updated Aspire.Hosting.PostgreSQL from 13.0.0 to 13.1.0.
Release notes
Sourced from Aspire.Hosting.PostgreSQL's releases.
13.1.0
We are excited to share that our 13.1.0 release of Aspire has shipped! All of the packages are available in NuGet.org now. Head over to https://aspire.dev/whats-new/aspire-13-1/ to find what's new in 13.1.0!
What's Changed
ExcludeFromMcp()resource extension by @JamesNK in AddExcludeFromMcp()resource extension dotnet/aspire#12515aspire updatecommand by @Copilot in Add CLI self-update prompts toaspire updatecommand dotnet/aspire#12395CertificateAuthorityCollectionResourceby @danegsta in Add missing namespace toCertificateAuthorityCollectionResourcedotnet/aspire#12639... (truncated)
13.0.2
This patch is updating our Project Templates for our Python starter app to ensure we depend on the latest version of React. This is out of an abundance of caution, as we don't depend on any of the react packages that were flagged as vulnerable in GHSA-fv66-9v8q-g76r.
What's Changed
Full Changelog: dotnet/aspire@v13.0.1...v13.0.2
13.0.1
What's Changed
Full Changelog: dotnet/aspire@v13.0.0...v13.0.1
Commits viewable in compare view.
Updated Aspire.Hosting.Redis from 13.0.0 to 13.1.0.
Release notes
Sourced from Aspire.Hosting.Redis's releases.
13.1.0
We are excited to share that our 13.1.0 release of Aspire has shipped! All of the packages are available in NuGet.org now. Head over to https://aspire.dev/whats-new/aspire-13-1/ to find what's new in 13.1.0!
What's Changed
ExcludeFromMcp()resource extension by @JamesNK in AddExcludeFromMcp()resource extension dotnet/aspire#12515aspire updatecommand by @Copilot in Add CLI self-update prompts toaspire updatecommand dotnet/aspire#12395CertificateAuthorityCollectionResourceby @danegsta in Add missing namespace toCertificateAuthorityCollectionResourcedotnet/aspire#12639... (truncated)
13.0.2
This patch is updating our Project Templates for our Python starter app to ensure we depend on the latest version of React. This is out of an abundance of caution, as we don't depend on any of the react packages that were flagged as vulnerable in GHSA-fv66-9v8q-g76r.
What's Changed
Full Changelog: dotnet/aspire@v13.0.1...v13.0.2
13.0.1
What's Changed
Full Changelog: dotnet/aspire@v13.0.0...v13.0.1
Commits viewable in compare view.
Updated Aspire.Npgsql from 13.0.0 to 13.1.0.
Release notes
Sourced from Aspire.Npgsql's releases.
13.1.0
We are excited to share that our 13.1.0 release of Aspire has shipped! All of the packages are available in NuGet.org now. Head over to https://aspire.dev/whats-new/aspire-13-1/ to find what's new in 13.1.0!
What's Changed
ExcludeFromMcp()resource extension by @JamesNK in AddExcludeFromMcp()resource extension dotnet/aspire#12515aspire updatecommand by @Copilot in Add CLI self-update prompts toaspire updatecommand dotnet/aspire#12395CertificateAuthorityCollectionResourceby @danegsta in Add missing namespace toCertificateAuthorityCollectionResourcedotnet/aspire#12639... (truncated)
13.0.2
This patch is updating our Project Templates for our Python starter app to ensure we depend on the latest version of React. This is out of an abundance of caution, as we don't depend on any of the react packages that were flagged as vulnerable in GHSA-fv66-9v8q-g76r.
What's Changed
Full Changelog: dotnet/aspire@v13.0.1...v13.0.2
13.0.1
What's Changed
Full Changelog: dotnet/aspire@v13.0.0...v13.0.1
Commits viewable in compare view.
Updated Aspire.StackExchange.Redis.DistributedCaching from 13.0.0 to 13.1.0.
Release notes
Sourced from Aspire.StackExchange.Redis.DistributedCaching's releases.
13.1.0
We are excited to share that our 13.1.0 release of Aspire has shipped! All of the packages are available in NuGet.org now. Head over to https://aspire.dev/whats-new/aspire-13-1/ to find what's new in 13.1.0!
What's Changed
ExcludeFromMcp()resource extension by @JamesNK in AddExcludeFromMcp()resource extension dotnet/aspire#12515aspire updatecommand by @Copilot in Add CLI self-update prompts toaspire updatecommand dotnet/aspire#12395CertificateAuthorityCollectionResourceby @danegsta in Add missing namespace toCertificateAuthorityCollectionResourcedotnet/aspire#12639... (truncated)
13.0.2
This patch is updating our Project Templates for our Python starter app to ensure we depend on the latest version of React. This is out of an abundance of caution, as we don't depend on any of the react packages that were flagged as vulnerable in GHSA-fv66-9v8q-g76r.
What's Changed
Full Changelog: dotnet/aspire@v13.0.1...v13.0.2
13.0.1
What's Changed
Full Changelog: dotnet/aspire@v13.0.0...v13.0.1
Commits viewable in compare view.
Updated dbup-postgresql from 6.0.3 to 6.1.5.
Release notes
Sourced from dbup-postgresql's releases.
6.1.5
What's Changed
Full Changelog: DbUp/dbup-postgresql@6.1.2...6.1.5
6.1.2
What's Changed
New Contributors
Full Changelog: DbUp/dbup-postgresql@6.0.3...6.1.2
Commits viewable in compare view.
Updated FluentAssertions from 7.0.0 to 7.2.0.
Release notes
Sourced from FluentAssertions's releases.
7.2.0
What's Changed
Improvements
Fixes
Others
Full Changelog: fluentassertions/fluentassertions@7.1.0...7.2.0
7.1.0
What's Changed
Improvements
Others
Full Changelog: fluentassertions/fluentassertions@7.0.0...7.1.0
Commits viewable in compare view.
Updated NetEscapades.AspNetCore.SecurityHeaders from 1.1.0 to 1.3.1.
Release notes
Sourced from NetEscapades.AspNetCore.SecurityHeaders's releases.
1.3.1
Changes in 1.3.1
Fixes:
WithHashTagHelper()using incorrect tag helper hashes forstyle-src,style-src-attr, andstyle-scr-elemCSP directives (#279)Breaking Changes:
WithHashTagHelper()onCustomDirectiveBuilderorDefaultSourceDirectiveBuilder- technically breaking, but really a bug (#279)Changes in 1.3.0:
Features:
OverInsecureHttp()andOverInsecureWs()scheme sources to CSP builders #273Changes in 1.2.0:
Features:
child-srctoContent-Security-Policy#259AddSecurityHeadersPolicies()for registering named polices #250Fixes:
Changes in 1.1.0
Features:
AddRange()toSourceCollection#240, #242 (Thanks @rankobp)X-Frame-Options ALLOW-FROMwith correct method nameAddFrameOptionsAllowFrom()#244Changes in 1.0.0
This marks the first major release of the NetEscapades.AspNetCore.SecurityHeaders. For simplicity, all the changes since 0.24.0 are included below.
Breaking Changes:
X-XSS-Protectionfrom default headers and mark obsolete #168cross-origin-opener-policy: same-originto default headers #184Feature-Policyas obsolete #187Expect-CTas obsolete #197HttpContext.GetNonce()#198DefaultSecureDirectives()for permissions policy #203 (Thanks damienbod!)AddDefaultSecurityHeaders()andAddDefaultApiSecurityHeaders()#204 (Thanks damienbod!)Features:
... (truncated)
1.3.0
Changes in 1.3.0:
Features:
OverInsecureHttp()andOverInsecureWs()scheme sources to CSP builders #273Changes in 1.2.0:
Features:
child-srctoContent-Security-Policy#259AddSecurityHeadersPolicies()for registering named polices #250Fixes:
Changes in 1.1.0
Features:
AddRange()toSourceCollection#240, #242 (Thanks @rankobp)X-Frame-Options ALLOW-FROMwith correct method nameAddFrameOptionsAllowFrom()#244Changes in 1.0.0
This marks the first major release of the NetEscapades.AspNetCore.SecurityHeaders. For simplicity, all the changes since 0.24.0 are included below.
Breaking Changes:
X-XSS-Protectionfrom default headers and mark obsolete #168cross-origin-opener-policy: same-originto default headers #184Feature-Policyas obsolete #187Expect-CTas obsolete #197HttpContext.GetNonce()#198DefaultSecureDirectives()for permissions policy #203 (Thanks damienbod!)AddDefaultSecurityHeaders()andAddDefaultApiSecurityHeaders()#204 (Thanks damienbod!)Features:
HeaderPolicyCollectionjust before it is applied, customizing per request #174, #185Content-Security-Policyidempotent to avoid duplicates #169AddDefaultApiSecurityHeaders()for adding default headers to APIs #183, #184AddPermissionsPolicyWithRecommendedDirectives()andPermissionsPolicyBuilder.AddDefaultSecureDirectives()for adding securePermissions-Policydirectives in bulk #183, #184IServiceProviderwhen configuring aSecurityHeaderPolicyBuilder#200... (truncated)
1.2.0
Changes in 1.2.0:
Features:
child-srctoContent-Security-Policy#259AddSecurityHeadersPolicies()for registering named polices #250Fixes:
Changes in 1.1.0
Features:
AddRange()toSourceCollection#240, #242 (Thanks @rankobp)X-Frame-Options ALLOW-FROMwith correct method nameAddFrameOptionsAllowFrom()#244Changes in 1.0.0
This marks the first major release of the NetEscapades.AspNetCore.SecurityHeaders. For simplicity, all the changes since 0.24.0 are included below.
Breaking Changes:
X-XSS-Protectionfrom default headers and mark obsolete #168cross-origin-opener-policy: same-originto default headers #184Feature-Policyas obsolete #187Expect-CTas obsolete #197HttpContext.GetNonce()#198DefaultSecureDirectives()for permissions policy #203 (Thanks damienbod!)AddDefaultSecurityHeaders()andAddDefaultApiSecurityHeaders()#204 (Thanks damienbod!)Features:
HeaderPolicyCollectionjust before it is applied, customizing per request #174, #185Content-Security-Policyidempotent to avoid duplicates #169AddDefaultApiSecurityHeaders()for adding default headers to APIs #183, #184AddPermissionsPolicyWithRecommendedDirectives()andPermissionsPolicyBuilder.AddDefaultSecureDirectives()for adding securePermissions-Policydirectives in bulk #183, #184IServiceProviderwhen configuring aSecurityHeaderPolicyBuilder#200Build updates:
... (truncated)
Commits viewable in compare view.
Updated NetTopologySuite from 2.5.0 to 2.6.0.
Release notes
Sourced from NetTopologySuite's releases.
2.6.0
Release of Milestone: 2.6
This includes everything added to JTS 1.20.0. For details, see the JTS release documentation for this version: https://github.com/locationtech/jts/releases/tag/1.20.0
Other changes include:
NetTopologySuite.Geometries.Utilities.Extracter, which includes our own strongly-typed spin on the other extracters found in this namespace.srsDimensionwhen reading GML.NetTopologySuite.Geometries.GeometryCollectionnow implementsSystem.Collections.Generic.IReadOnlyList<Geometry>.System.Memorypackage reference.NetTopologySuite.Index.Strtreeindexes.System.Memorypackage reference to 4.6.0 so that .NET Standard 2.0 consumers debugging into this will see a link to the currently maintained version of this "slow span" package.Commits viewable in compare view.
Updated Npgsql from 9.0.2 to 9.0.4.
Release notes
Sourced from Npgsql's releases.
9.0.4
v9.0.4 contains several minor bug fixes.
Milestone issues
Full Changelog: npgsql/npgsql@v9.0.3...v9.0.4
9.0.3
v9.0.3 contains several minor bug fixes.
Milestone issues
Full Changelog: npgsql/npgsql@v9.0.2...v9.0.3
Commits viewable in compare view.
Updated Npgsql.NetTopologySuite from 9.0.2 to 9.0.4.
Release notes
Sourced from Npgsql.NetTopologySuite's releases.
9.0.4
v9.0.4 contains several minor bug fixes.
Milestone issues
Full Changelog: npgsql/npgsql@v9.0.3...v9.0.4
9.0.3
v9.0.3 contains several minor bug fixes.
Milestone issues
Full Changelog: npgsql/npgsql@v9.0.2...v9.0.3
Commits viewable in compare view.
Updated Npgsql.OpenTelemetry from 9.0.4 to 10.0.0.
Release notes
Sourced from Npgsql.OpenTelemetry's releases.
10.0.0
See the release notes.
The full list of changes is available here.
What's Changed
... (truncated)
10.0.0-rc.1
Commits viewable in compare view.
Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.12.0 to 1.14.0.
Release notes
Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.
1.14.0
For highlights and announcements pertaining to this release see: Release Notes > 1.14.0.
The following changes are from the previous release 1.14.0-rc.1.
NuGet: OpenTelemetry v1.14.0
Breaking Change NuGet packages now use the Sigstore bundle format
(
.sigstore.json) for digital signatures instead of separate signature(
.sig) and certificate (.pem) files. This requires cosign 3.0 or laterfor verification. See the Digital signing
section for updated verification instructions.
(#6623)
Update to stable versions for .NET 10.0 NuGet packages.
(#6667)
Update
Microsoft.Extensions.*dependencies to10.0.0for .NET Frameworkand .NET Standard.
(#6667)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.14.0
Breaking Change NuGet packages now use the Sigstore bundle format
(
.sigstore.json) for digital signatures instead of separate signature(
.sig) and certificate (.pem) files. This requires cosign 3.0 or laterfor verification. See the Digital signing
section for updated verification instructions.
(#6623)
Update
System.Diagnostics.DiagnosticSourcedependency to10.0.0for all target frameworks.
(#6667)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.14.0
Breaking Change NuGet packages now use the Sigstore bundle format
(
.sigstore.json) for digital signatures instead of separate signature(
.sig) and certificate (.pem) files. This requires cosign 3.0 or laterfor verification. See the Digital signing
section for updated verification instructions.
(#6623)
Update to stable versions for .NET 10.0 NuGet packages.
(#6667)
Update
Microsoft.Extensions.*dependencies to10.0.0for .NET Framework... (truncated)
1.14.0-rc.1
The following changes are from the previous release 1.13.1.
NuGet: OpenTelemetry v1.14.0-rc.1
Breaking Change When targeting
net8.0, the package now depends on version8.0.0of theMicrosoft.Extensions.DependencyInjection.Abstractions,Microsoft.Extensions.Diagnostics.AbstractionsandMicrosoft.Extensions.Logging.ConfigurationNuGet packages.(#6327)
Add support for .NET 10.0.
(#6307)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.14.0-rc.1
Add support for .NET 10.0.
(#6307)
Update
System.Diagnostics.DiagnosticSourcedependency to10.0.0for all target frameworks.
([#6307](https://github.com/open-telemetry/opentelemetry-dotnet/pull/...
Description has been truncated