Skip to content

Bump the nuget-minor-patch group with 8 updates #160

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Sev7eNup merged 2 commits into from
Aug 9, 2026
Merged

Bump the nuget-minor-patch group with 8 updates #160

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
a98848a
Bump the nuget-minor-patch group with 8 updates
dependabot[bot] Aug 7, 2026
19702ac
chore(deps): keep the Spectre family on 0.55.0 and close the ignore-r…
Sev7eNup Aug 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 10 additions & 6 deletions .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,15 +17,19 @@ updates:
day: monday
open-pull-requests-limit: 1
# Known-incompatible upgrades, each verified against this codebase — do not re-offer:
# Microsoft.OpenApi 3.x breaks the OpenAPI pipeline; Spectre.Console 0.57.x breaks the
# CLI rendering stack. Revisit deliberately, not via routine bumps.
# Microsoft.OpenApi 3.x breaks the OpenAPI pipeline. Spectre.Console must move as a
# FAMILY: Spectre.Console.Cli's stable line stops at 0.55.0 and pins Spectre.Console to
# its own version, so any bump of the other packages pairs a newer core with a CLI built
# against 0.55 — on a 0.x library that is a real risk (see the comment in
# Directory.Packages.props). The wildcard and the 0.56.0 floor are both deliberate: the
# previous rule named only Spectre.Console and Spectre.Console.Json at >=0.57.0, which
# let a grouped run bump the core to 0.56.0 and Spectre.Console.Testing to 0.57.2 while
# the CLI stayed at 0.55.0. Lift this when Spectre.Console.Cli 1.0 ships.
ignore:
- dependency-name: "Microsoft.OpenApi"
versions: [">=3.0.0"]
- dependency-name: "Spectre.Console"
versions: [">=0.57.0"]
- dependency-name: "Spectre.Console.Json"
versions: [">=0.57.0"]
- dependency-name: "Spectre.Console*"
versions: [">=0.56.0"]
groups:
nuget-minor-patch:
patterns:
Expand Down
10 changes: 5 additions & 5 deletions Directory.Packages.props
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -66,7 +66,7 @@
The 3.x line ships SQLite 3.50.4+ (via SourceGear.sqlite3) and closes the CVE —
referenced directly by every project that references a *Sqlite package so the
transitive graph resolves to the fixed native build. -->
<PackageVersion Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.4" />
<PackageVersion Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.5" />
</ItemGroup>

<!-- Remote execution / scheduling -->
Expand All @@ -76,8 +76,8 @@
<PackageVersion Include="System.Management.Automation" Version="7.6.4" />
<!-- Quartz + Quartz.Extensions.Hosting pinned to the same version so the Cron evaluator
(Data, maintenance windows) and the scheduler host (Scheduler) never drift. -->
<PackageVersion Include="Quartz" Version="3.19.0" />
<PackageVersion Include="Quartz.Extensions.Hosting" Version="3.19.0" />
<PackageVersion Include="Quartz" Version="3.19.1" />
<PackageVersion Include="Quartz.Extensions.Hosting" Version="3.19.1" />
</ItemGroup>

<!-- Serilog logging -->
Expand Down Expand Up @@ -129,7 +129,7 @@
2.9.0 is still 2.x so Swashbuckle's Models namespace stays compatible — do NOT take
Microsoft.OpenApi 3.x while Swashbuckle 10.x asks for the 2.x surface.
Also forced in Api.Tests over WireMock.Net.OpenApiParser's 2.4.1. -->
<PackageVersion Include="Microsoft.OpenApi" Version="2.9.0" />
<PackageVersion Include="Microsoft.OpenApi" Version="2.11.0" />
</ItemGroup>

<!-- Security-pinned floors over vulnerable transitives -->
Expand Down Expand Up @@ -178,7 +178,7 @@
<!-- 2.x asks for Scriban.Signed 7.2.5 itself, so the forced floor that used to sit here
for GHSA-24c8-4792-22hx is gone — keeping it would only cap a future Scriban bump
that WireMock wants. The Microsoft.OpenApi floor above is still load-bearing. -->
<PackageVersion Include="WireMock.Net" Version="2.13.0" />
<PackageVersion Include="WireMock.Net" Version="2.14.0" />
<PackageVersion Include="NBomber" Version="6.*" />
<PackageVersion Include="NBomber.Http" Version="6.*" />
</ItemGroup>
Expand Down
Loading