Bump Microsoft.OpenApi from 2.13.0 to 3.11.0 by dependabot[bot] · Pull Request #216 · SandboxServers/MeridianConsole

dependabot · 2026-10-26T23:26:20Z

Updated Microsoft.OpenApi from 2.13.0 to 3.11.0.

Release notes

Sourced from Microsoft.OpenApi's releases.

3.11.0 3.11.0 (2026-10-19)

Features

document: add GetOperationById to search operations across path… (#3025) (1dae1ff)

Bug Fixes

components-key validation timeouts under load (#3108) (01d4729)
openapi: omit null response descriptions (afd4967)
serialization: potential infinite loop when inlining references (c6ef130)
serialization: references inlining (#3124) (c6ef130)

3.10.2 3.10.2 (2026-08-20)

Bug Fixes

duplicate schema example when serializing to v2 (#3045) (50f5a2b)

3.10.1 3.10.1 (2026-08-19)

Bug Fixes

circular ref guard (#3033) (8018d40)
harden yaml parsing (#3027) (e0d5e9d)

3.10.0 3.10.0 (2026-08-11)

Features

adds deserialization of the example extension (e5a1080)
do not ignore multiple types when serializing to 3.0 (#2960) (ebaf27a)
serialize license identifier as extension for earlier versions (d090989)
serialize license identifier as extension for earlier versions (60971ba)

Bug Fixes

better nullability round-tripping (655c2c8)
bound YAML anchor/alias expansion to prevent OOM (billion laughs) (#3000) (2179326)
deserialize metadata url from extension in earlier version (9387b01)
marks deprecated properties from the specification as obsolete (787b045)
marks deprecated properties from the specification as obsolete (953c22a)
schema: serialize compatibility examples from examples list (5d8ec3a)
serialize examples as extension in v2/v3 (ff1dbc9)
serialize examples as extension in v2/v3 (edf3c67)

3.9.0 3.9.0 (2026-07-15)

Features

adds support for anchor and id external resolution (1591007)
schema: resolve bare $dynamicRef via $dynamicAnchor index (#2913) (eacc2fc)
support relative URI resolution in $dynamicRef (#2928) (#2945) (821053b)

Bug Fixes

adds explicit error message for invalid json pointers (63fc55d)
adds explicit error message for invalid json pointers (bc93efe)
default mapping is not being serialized with the correct shape (fe4a25f)
differentiate unset value from null value in OpenApiSchema.Const (#2936) (07b525f)
handle nullability more accurately during serialization for 3.0/2.0 (#2933) (0ace243)
validate required properties of security scheme before serialization (#2952) (f31b192)

3.8.0 3.8.0 (2026-07-03)

Features

add JsonConverter for OpenApiSchema System.Text.Json serialization (#2915) (2f8b3d2)
library: support schema keywords on references (434b2f8)
library: support schema keywords on references (66a9d04), closes #2903

Bug Fixes

Don't silently skip null assignment to OpenApiDocument.Tags (3764142)
handling of nullable enums for 3.0 (#2920) (beb68f5)
library: keep v3 schema references ref-only (c938727)
preserve JSON Schema 2020-12 keyword siblings on $ref schemas for OAS 3.1+ (#2896) (08160c8)
use async method for crypto flush (6e675d9)

3.7.0 3.7.0 (2026-06-10)

Features

add contains/minContains/maxContains members (78475e3)
add contains/minContains/maxContains members (1a974f8)
library: add missing json schema properties (9b1aed6)
library: add missing json schema properties (82f84e0)

Bug Fixes

library: always copy unevaluated properties (4907d1c)
library: avoid false circular refs for external schema re-exports (b635242)
library: avoid false circular refs for external schema re-exports (7a443c2)
library: remove unshipped schema extension fallback (cf54bb3)
library: use version-specific schema keyword callbacks (6e22ec6)
library: use x-jsonschema schema extensions (eb1891a)

3.6.0 3.6.0 (2026-06-01)

Features

reader: remove ParseNode infrastructure (9b4f45b)
Significant performance improvements resulting ~40% reduced allocations when parsing JSON descriptions, ~25% for YAML.

3.5.5 3.5.5 (2026-05-28)

Bug Fixes

reader: preserve Null flag when nullable appears before type in V3.0/V3.1/V3.2 deserializers (2b9d7f4)

3.5.4 3.5.4 (2026-05-26)

Bug Fixes

library: handle circular schema references (b3cd42b)
library: handle circular schema references (91a989f)

3.5.3 3.5.3 (2026-04-27)

Bug Fixes

null reference exception for boolean component schemas (f97f91a)
null reference exception for boolean component schemas (fe0b50a)
schema: support boolean schemas in deserializer for OpenAPI 3.1/3.2 (05b44be)

Performance Improvements

schema: optimize boolean schema deserialization (7316e3f)

3.5.2 3.5.2 (2026-04-14)

Bug Fixes

hidi: update Microsoft.OpenApi.OData to 3.2.1 (b0a68fb)
hidi: update Microsoft.OpenApi.OData to 3.2.1 (8c22ab2), closes #2811

3.5.1 3.5.1 (2026-03-31)

Bug Fixes

security scheme references serialization (a5acb89)

3.5.0 3.5.0 (2026-03-20)

Features

library: add Extensions support for schema references in v3.1/v3.2; add SerializeAsV32 with loop detection (9b422bf)

Bug Fixes

a bug where path parameter validation would fail if they contained forbidden JSON pointer characters (ef55b2c)
a bug where path parameter validation would fail if they contained forbidden JSON pointer characters (4b3164a)
double encoding of json pointer for invalid reference rule (b246cd0)
encoding of special characters for JSON paths (4c757e1)
library: do not emit unevaluatedProperties for non-object schemas (852fb4c)
library: do not emit unevaluatedProperties for non-object schemas (19538aa)
library: enforce spec-compliant $ref serialization; add Extensions support for schema references in v3.1/v3.2 (9bf61de)
potential double encoding of paths (471a61a)

3.4.0 3.4.0 (2026-03-04)

Features

library: preserve PatternProperties as x-jsonschema-patternProperties extension for OpenAPI v2/v3.0 serialization (d969fdc)
library: Preserve PatternProperties via x-jsonschema-patternProperties extension for OpenAPI v2/v3.0 (16ab5e4)
securityscheme: add oauth2MetadataUrl support (OpenAPI 3.2) (4509488)

Bug Fixes

implement unevaluatedProperties as schema per JSON Schema 2020-12 (#2728) (7c13fb3)
library: serialize additionalProperties schema in OpenAPI V2 (f3165fa)
library: serialize additionalProperties schema in OpenAPI V2 documents (3d07756)
optimize parsing V3.1 documents by reducing GetLocation method allocation on hot path(#2748) (f690681)

3.3.1 3.3.1 (2026-01-22)

Features

models: add shared Content interface (#2695) (338566f)

Bug Fixes

broken binary compatibility due to interface changes in previous version (d96bba7)

3.3.0 3.3.0 (2026-01-21)

Features

models: add shared Content interface (9e13b25)
models: add shared Content interface (#2695) (9e13b25)
models: support mutualTLS security scheme (a4efdfe)

3.2.0 3.2.0 (2026-01-19)

Features

hidi validate command now logs warnings (76a3c0f)
hidi validate command now logs warnings (62e7d56)

Bug Fixes

discriminator property validation fails any/allOf cases when it shouldn't (fb6cecc)
discriminator property validation fails any/allOf cases when it shouldn't (a8fb81c)

3.1.3 3.1.3 (2026-01-16)

Bug Fixes

Support custom tag ordering (008576c)
Support custom tag ordering (7610d07)

3.1.2 3.1.2 (2026-01-06)

Bug Fixes

correct error pointer when extension parser throws OpenApiException (43c75a9)
wrap extension parser calls in try-catch to ensure correct error pointers (50b44aa)

3.1.1 3.1.1 (2025-12-18)

Bug Fixes

schema: always serialize additionalProperties: false (6651c36)
schema: always serialize additionalProperties: false (e36fc95)

3.1.0 3.1.0 (2025-12-17)

Features

Add type: "null" downcasting when in oneOf and anyOf for OpenAPI v3 (782cf8d)

3.0.3 3.0.3 (2025-12-16)

Bug Fixes

load JSON documents that are preceded by multiple whitespace (6461bac)
non-seekable json streams would fail to load as a document (2436d73)
reading streams in an asp.net context would cause async exceptions (f9e5248)

3.0.2 3.0.2 (2025-12-08)

Bug Fixes

additional properties serialization should not emit a schema in v2 (946cba9)
additional properties serialization should not emit booleans in v3.1+ (946cba9)

3.0.1 3.0.1 (2025-11-17)

Bug Fixes

empty strings should be quoted in yaml (8d215f9)
empty strings should be quoted in yaml (0ca10db)

3.0.0 3.0.0 (2025-11-11)

⚠ BREAKING CHANGES

adds support for OpenAPI 3.2.0

Note: Please refer to the upgrade guide for a detailed description of the breaking changes.

Note: ASP.net users should remain on version 1.X for ASP.net < 10, and version 2.X for ASP.net 10, this new major version will be implemented in a future version of ASP.net, more information

Features

adds support for OpenAPI 3.2.0 (765a8dd)

Special thanks

Matthieu Costabello

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

--- updated-dependencies: - dependency-name: Microsoft.OpenApi dependency-version: 3.11.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-26T23:26:28Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

Source mode: Auto
Repository: SandboxServers/MeridianConsole
Branch: main
File: .coderabbit.yaml
Commit: 6967174
Layers: Repository YAML
Review profile: ASSERTIVE
Plan: Advanced
Run ID: f26518dc-25e3-416a-a314-40fc64c71fd4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

…ansitives - NSubstitute 5.3.0 -> 6.2.0 (#217), Refit 9.0.2 -> 16.4.0 (#218), StackExchange.Redis 2.13.17 -> 3.4.20 (#219), SQLitePCLRaw.bundle_e_sqlite3 2.1.14 -> 3.0.5 (#220). No code changes. - OpenTelemetry.Instrumentation.StackExchangeRedis 1.0.0-rc9.15 -> 1.20.1-beta.1: the old pre-release caps StackExchange.Redis below 3. - Turn on CentralPackageTransitivePinningEnabled, so indirect dependencies use the central versions (JWT 8.23, Http.Resilience 10.11 everywhere). Replaces #221's per-project direct references. - Microsoft.Extensions.Http.Polly 10.0.0 -> 10.0.14: pinning exposed that OpenIddict needs >= 10.0.11. - Dependabot: ignore Microsoft.OpenApi majors. Microsoft.AspNetCore.OpenApi 10.x requires Microsoft.OpenApi < 3.0 (#216). Lock files regenerated with --force-evaluate. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE

…transitives (#215) * chore(deps): Microsoft.Graph 6, Test.Sdk 18, prettier-plugin-astro 1 - Microsoft.Graph 5.105.0 -> 6.9.0. Graph.Core 4 floors Microsoft.Kiota.Abstractions at 2.0.0, past GHSA-7j59-v9qr-6fq9, so the direct Kiota pin in Notifications is removed as its comment asked. Replaces #209 and #210 (each failed alone: Graph 6 needs Kiota 2). - Microsoft.NET.Test.Sdk 17.14.1 -> 18.11.0 (#211). - Scope: prettier-plugin-astro 0.14.1 -> 1.1.2 (#213). The new plugin formats .astro markup differently, so the affected files are reformatted (whitespace only). Lock files regenerated with --force-evaluate. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE * chore(deps): eslint-plugin-astro 3.2.1 in Scope Replaces #214. No config change needed; lint is unchanged (0 errors). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE * chore(deps): NSubstitute 6, Refit 16, Redis 3, SQLitePCLRaw 3; pin transitives - NSubstitute 5.3.0 -> 6.2.0 (#217), Refit 9.0.2 -> 16.4.0 (#218), StackExchange.Redis 2.13.17 -> 3.4.20 (#219), SQLitePCLRaw.bundle_e_sqlite3 2.1.14 -> 3.0.5 (#220). No code changes. - OpenTelemetry.Instrumentation.StackExchangeRedis 1.0.0-rc9.15 -> 1.20.1-beta.1: the old pre-release caps StackExchange.Redis below 3. - Turn on CentralPackageTransitivePinningEnabled, so indirect dependencies use the central versions (JWT 8.23, Http.Resilience 10.11 everywhere). Replaces #221's per-project direct references. - Microsoft.Extensions.Http.Polly 10.0.0 -> 10.0.14: pinning exposed that OpenIddict needs >= 10.0.11. - Dependabot: ignore Microsoft.OpenApi majors. Microsoft.AspNetCore.OpenApi 10.x requires Microsoft.OpenApi < 3.0 (#216). Lock files regenerated with --force-evaluate. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

dependabot · 2026-10-26T23:53:45Z

Looks like Microsoft.OpenApi is no longer being updated by Dependabot, so this is no longer needed.

Bump Microsoft.OpenApi from 2.13.0 to 3.11.0

e35bf71

--- updated-dependencies: - dependency-name: Microsoft.OpenApi dependency-version: 3.11.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added .NET Pull requests that update .NET code dependencies labels Oct 26, 2026

Cadacious mentioned this pull request Oct 26, 2026

chore(deps): Graph 6, Redis 3, Refit 16, NSubstitute 6 and more; pin transitives #215

Merged

dependabot Bot closed this Oct 26, 2026

dependabot Bot deleted the dependabot/nuget/Microsoft.OpenApi-3.11.0 branch October 26, 2026 23:53

Navigation Menu

Repository navigation

Bump Microsoft.OpenApi from 2.13.0 to 3.11.0 - #216

Bump Microsoft.OpenApi from 2.13.0 to 3.11.0#216
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/Microsoft.OpenApi-3.11.0

dependabot Bot commented on behalf of github Oct 26, 2026

Uh oh!

coderabbitai Bot commented Oct 26, 2026

Review skipped

Uh oh!

dependabot Bot commented on behalf of github Oct 26, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 26, 2026

3.11.0

3.11.0 (2026-10-19)

Features

Bug Fixes

3.10.2

3.10.2 (2026-08-20)

Bug Fixes

3.10.1

3.10.1 (2026-08-19)

Bug Fixes

3.10.0

3.10.0 (2026-08-11)

Features

Bug Fixes

3.9.0

3.9.0 (2026-07-15)

Features

Bug Fixes

3.8.0

3.8.0 (2026-07-03)

Features

Bug Fixes

3.7.0

3.7.0 (2026-06-10)

Features

Bug Fixes

3.6.0

3.6.0 (2026-06-01)

Features

3.5.5

3.5.5 (2026-05-28)

Bug Fixes

3.5.4

3.5.4 (2026-05-26)

Bug Fixes

3.5.3

3.5.3 (2026-04-27)

Bug Fixes

Performance Improvements

3.5.2

3.5.2 (2026-04-14)

Bug Fixes

3.5.1

3.5.1 (2026-03-31)

Bug Fixes

3.5.0

3.5.0 (2026-03-20)

Features

Bug Fixes

3.4.0

3.4.0 (2026-03-04)

Features

Bug Fixes

3.3.1

3.3.1 (2026-01-22)

Features

Bug Fixes

3.3.0

3.3.0 (2026-01-21)

Features

3.2.0

3.2.0 (2026-01-19)

Features

Bug Fixes

3.1.3

3.1.3 (2026-01-16)

Bug Fixes

3.1.2

3.1.2 (2026-01-06)

Bug Fixes

3.1.1

3.1.1 (2025-12-18)

Bug Fixes

3.1.0

3.1.0 (2025-12-17)

Features

3.0.3

3.0.3 (2025-12-16)