Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 20, 2024

Bumps the all group in /Backend with 6 updates:

Package From To
CsvHelper 32.0.2 32.0.3
Microsoft.AspNetCore.Authentication.JwtBearer 8.0.4 8.0.5
Microsoft.AspNetCore.OpenApi 8.0.4 8.0.5
Swashbuckle.AspNetCore 6.5.0 6.6.1
System.IdentityModel.Tokens.Jwt 7.5.1 7.5.2
Microsoft.AspNetCore.Mvc.Testing 8.0.4 8.0.5

Updates CsvHelper from 32.0.2 to 32.0.3

Commits

Updates Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.4 to 8.0.5

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

.NET 8.0.5

Release

Commits
  • c9e3996 Merged PR 39207: [internal/release/8.0] Updated Version.Details.xml - replace...
  • 1681d9a Merged PR 39048: [internal/release/8.0] Update dependencies from dnceng/inter...
  • b5c1ba3 Merged PR 39041: [internal/release/8.0] Update dependencies from dnceng/inter...
  • 582b2e3 Merged PR 38666: [internal/release/8.0] Update dependencies from dnceng/inter...
  • 4fb5420 Merge in 'release/8.0' changes
  • d65b2f0 [release/8.0] Update Wix version (#55101)
  • eac2e5a Update dependencies from https://github.com/dotnet/arcade build 20240404.3 (#...
  • 90f8928 Merged PR 38780: Fix Abort lock
  • 1002bb7 Merge in 'release/8.0' changes
  • fa6339e Merge pull request #55034 from vseanreesermsft/internal-merge-8.0-2024-04-09-...
  • Additional commits viewable in compare view

Updates Microsoft.AspNetCore.OpenApi from 8.0.4 to 8.0.5

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

.NET 8.0.5

Release

Commits
  • c9e3996 Merged PR 39207: [internal/release/8.0] Updated Version.Details.xml - replace...
  • 1681d9a Merged PR 39048: [internal/release/8.0] Update dependencies from dnceng/inter...
  • b5c1ba3 Merged PR 39041: [internal/release/8.0] Update dependencies from dnceng/inter...
  • 582b2e3 Merged PR 38666: [internal/release/8.0] Update dependencies from dnceng/inter...
  • 4fb5420 Merge in 'release/8.0' changes
  • d65b2f0 [release/8.0] Update Wix version (#55101)
  • eac2e5a Update dependencies from https://github.com/dotnet/arcade build 20240404.3 (#...
  • 90f8928 Merged PR 38780: Fix Abort lock
  • 1002bb7 Merge in 'release/8.0' changes
  • fa6339e Merge pull request #55034 from vseanreesermsft/internal-merge-8.0-2024-04-09-...
  • Additional commits viewable in compare view

Updates Swashbuckle.AspNetCore from 6.5.0 to 6.6.1

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

v6.6.1

What's Changed

... (truncated)

Commits

Updates System.IdentityModel.Tokens.Jwt from 7.5.1 to 7.5.2

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

7.5.2

Bug Fixes:

Fundamentals:

Performance Improvements:

  • In .NET 6 or greater, use a temporary buffer to reduce intermediate allocation in VerifyRsa/VerifyECDsa. See PR #2589 for more details. By @​eerhardt
  • Reduce allocations in ValidateSignature by using a collection expression instead of new List<SecurityKey> { key }, to optimize for the single element case. See PR #2586 for more details. By @​eerhardt
  • Remove Task allocation in AadIssuerValidator. See PR #2584 for more details. By @​eerhardt
Changelog

Sourced from System.IdentityModel.Tokens.Jwt's changelog.

7.5.2

Bug Fixes:

Fundamentals:

  • App Context Switches in Identity Model 7x are now documented here.

Performance Improvements:

  • In .NET 6 or greater, use a temporary buffer to reduce intermediate allocation in VerifyRsa/VerifyECDsa. See PR #2589 for more details.
  • Reduce allocations in ValidateSignature by using a collection expression instead of new List<SecurityKey> { key }, to optimize for the single element case. See PR #2586 for more details.
  • Remove Task allocation in AadIssuerValidator. See PR #2584 for more details.
Commits

Updates Microsoft.AspNetCore.Mvc.Testing from 8.0.4 to 8.0.5

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

.NET 8.0.5

Release

Commits
  • c9e3996 Merged PR 39207: [internal/release/8.0] Updated Version.Details.xml - replace...
  • 1681d9a Merged PR 39048: [internal/release/8.0] Update dependencies from dnceng/inter...
  • b5c1ba3 Merged PR 39041: [internal/release/8.0] Update dependencies from dnceng/inter...
  • 582b2e3 Merged PR 38666: [internal/release/8.0] Update dependencies from dnceng/inter...
  • 4fb5420 Merge in 'release/8.0' changes
  • d65b2f0 [release/8.0] Update Wix version (#55101)
  • eac2e5a Update dependencies from https://github.com/dotnet/arcade build 20240404.3 (#...
  • 90f8928 Merged PR 38780: Fix Abort lock
  • 1002bb7 Merge in 'release/8.0' changes
  • fa6339e Merge pull request #55034 from vseanreesermsft/internal-merge-8.0-2024-04-09-...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group in /Backend with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [CsvHelper](https://github.com/JoshClose/CsvHelper) | `32.0.2` | `32.0.3` |
| [Microsoft.AspNetCore.Authentication.JwtBearer](https://github.com/dotnet/aspnetcore) | `8.0.4` | `8.0.5` |
| [Microsoft.AspNetCore.OpenApi](https://github.com/dotnet/aspnetcore) | `8.0.4` | `8.0.5` |
| [Swashbuckle.AspNetCore](https://github.com/domaindrivendev/Swashbuckle.AspNetCore) | `6.5.0` | `6.6.1` |
| [System.IdentityModel.Tokens.Jwt](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet) | `7.5.1` | `7.5.2` |
| [Microsoft.AspNetCore.Mvc.Testing](https://github.com/dotnet/aspnetcore) | `8.0.4` | `8.0.5` |


Updates `CsvHelper` from 32.0.2 to 32.0.3
- [Commits](JoshClose/CsvHelper@32.0.2...32.0.3)

Updates `Microsoft.AspNetCore.Authentication.JwtBearer` from 8.0.4 to 8.0.5
- [Release notes](https://github.com/dotnet/aspnetcore/releases)
- [Changelog](https://github.com/dotnet/aspnetcore/blob/main/docs/ReleasePlanning.md)
- [Commits](dotnet/aspnetcore@v8.0.4...v8.0.5)

Updates `Microsoft.AspNetCore.OpenApi` from 8.0.4 to 8.0.5
- [Release notes](https://github.com/dotnet/aspnetcore/releases)
- [Changelog](https://github.com/dotnet/aspnetcore/blob/main/docs/ReleasePlanning.md)
- [Commits](dotnet/aspnetcore@v8.0.4...v8.0.5)

Updates `Swashbuckle.AspNetCore` from 6.5.0 to 6.6.1
- [Release notes](https://github.com/domaindrivendev/Swashbuckle.AspNetCore/releases)
- [Commits](domaindrivendev/Swashbuckle.AspNetCore@v6.5.0...v6.6.1)

Updates `System.IdentityModel.Tokens.Jwt` from 7.5.1 to 7.5.2
- [Release notes](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases)
- [Changelog](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/dev/CHANGELOG.md)
- [Commits](AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@7.5.1...7.5.2)

Updates `Microsoft.AspNetCore.Mvc.Testing` from 8.0.4 to 8.0.5
- [Release notes](https://github.com/dotnet/aspnetcore/releases)
- [Changelog](https://github.com/dotnet/aspnetcore/blob/main/docs/ReleasePlanning.md)
- [Commits](dotnet/aspnetcore@v8.0.4...v8.0.5)

---
updated-dependencies:
- dependency-name: CsvHelper
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: Swashbuckle.AspNetCore
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels May 20, 2024
@FSchiltz FSchiltz merged commit 1b5b798 into main May 20, 2024
@FSchiltz FSchiltz deleted the dependabot/nuget/Backend/all-a32e734825 branch May 20, 2024 13:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant