Bump the dotnet-patch group with 19 updates by dependabot[bot] · Pull Request #45 · Stack-Duel/server

better nullability round-tripping (7a25659)
bound YAML anchor/alias expansion to prevent OOM (billion laughs) (#3000) (a361360)
bound YAML anchor/alias expansion to prevent OOM (billion laughs) (#3000) (4db9af0)
library: serialize multiple schema types as anyOf/oneOf for OpenAPI 3.0 (6568896)
marks deprecated properties from the specification as obsolete (26aba69)
marks deprecated properties from the specification as obsolete (abc5301)
schema: serialize compatibility examples from examples list (be57a7c)
serialize examples as extension in v2/v3 (d27141b)

2.11.0 2.11.0 (2026-07-15)

Features

adds support for anchor and id external resolution (557bd6a)
adds support for anchor and id external resolution (4138e47)
schema: resolve bare $dynamicRef via $dynamicAnchor index (#2913) (baf8428)
schema: resolve bare $dynamicRef via $dynamicAnchor index (#2913) (a139f83)
support relative URI resolution in $dynamicRef (#2928) (#2945) (6091f5a)
support relative URI resolution in $dynamicRef (#2928) (#2945) (a8688dc)

Bug Fixes

adds explicit error message for invalid json pointers (#2955) (a304e56)
differentiate unset value from null value in OpenApiSchema.Const (#2936) (a8787af)
differentiate unset value from null value in OpenApiSchema.Const (#2936) (e08570f)
handle nullability more accurately during serialization for 3.0/2.0 (#2933) (bc11356)
handle nullability more accurately during serialization for 3.0/2.0 (#2933) (310b6e2)

2.10.0 2.10.0 (2026-07-03)

Features

add JsonConverter for OpenApiSchema System.Text.Json serialization (#2915) (465521b)
library: support schema keywords on references (2749463), closes #2903

Bug Fixes

Don't silently skip null assignment to OpenApiDocument.Tags (#2917) (6a45a82)
handling of nullable enums for 3.0 (#2920) (f4778e0)
library: keep v3 schema references ref-only (8d811c3)
preserve JSON Schema 2020-12 keyword siblings on $ref schemas for OAS 3.1+ (#2896) (fb20d46)
preserve JSON Schema 2020-12 keyword siblings on $ref schemas for OAS 3.1+ (#2896) (c79a83e)
use async method for crypto flush (677b519)

2.9.0 2.9.0 (2026-06-10)

Features

add contains/minContains/maxContains members (fadb422)
library: add missing json schema properties (db41a3c)

Bug Fixes

library: always copy unevaluated properties (3951a31)
library: avoid false circular refs for external schema re-exports (a058913)
library: avoid false circular refs for external schema re-exports (1bace68)
library: merge contains compat members into missing properties (7dc45e1)
library: remove unshipped schema extension fallback (b301827)
library: use version-specific schema keyword callbacks (f93d76a)
library: use x-jsonschema schema extensions (ec04a7f)

2.8.0 2.8.0 (2026-06-01)

Features

reader: remove ParseNode infrastructure (d7c6a9d)
Significant performance improvements resulting ~40% reduced allocations when parsing JSON descriptions, ~25% for YAML.

2.7.6 2.7.6 (2026-05-28)

Bug Fixes

reader: preserve nullable Null flag when type appears after nullable in V3.1/V3.2 deserializers (288e95a)

Commits viewable in compare view.

Updated Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.2 to 10.0.3.

Release notes

Sourced from Npgsql.EntityFrameworkCore.PostgreSQL's releases.

10.0.3 What's Changed

Fix JSON null type mapping on hotfix by @roji in Fix JSON null type mapping on hotfix npgsql/efcore.pg#3856
Fix GIN index detection for views by @roji in Fix GIN index detection for views npgsql/efcore.pg#3880

Full Changelog: npgsql/efcore.pg@v10.0.2...v10.0.3

Commits viewable in compare view.

Updated Scalar.AspNetCore from 2.16.3 to 2.16.20.

Release notes

Sourced from Scalar.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated xunit.runner.visualstudio from 3.1.4 to 3.1.5.

Release notes

Sourced from xunit.runner.visualstudio's releases.

3.1.5

Release notes: https://xunit.net/releases/visualstudio/3.1.5

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

Chores
- Updated centrally managed package versions. These updates affect the application’s underlying platform, API documentation, database integration, and test tooling; no user-facing feature changes are included.

Bumps Asp.Versioning.Mvc from 10.0.0 to 10.0.1 Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.9 to 10.0.14 Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.9 to 10.0.14 Bumps Microsoft.AspNetCore.OpenApi from 10.0.8 to 10.0.14 Bumps Microsoft.AspNetCore.WebUtilities from 10.0.10 to 10.0.14 Bumps Microsoft.EntityFrameworkCore from 10.0.9 to 10.0.14 Bumps Microsoft.EntityFrameworkCore.Design from 10.0.9 to 10.0.14 Bumps Microsoft.EntityFrameworkCore.Relational from 10.0.9 to 10.0.14 Bumps Microsoft.Extensions.Caching.Memory from 10.0.9 to 10.0.14 Bumps Microsoft.Extensions.Configuration.Binder from 10.0.9 to 10.0.14 Bumps Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.9 to 10.0.14 Bumps Microsoft.Extensions.Configuration.Json from 10.0.9 to 10.0.14 Bumps Microsoft.Extensions.Configuration.UserSecrets from 10.0.9 to 10.0.14 Bumps Microsoft.Extensions.Http from 10.0.9 to 10.0.14 Bumps Microsoft.NET.Test.Sdk from 17.14.0 to 17.14.1 Bumps Microsoft.OpenApi from 2.7.5 to 2.12.2 Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.2 to 10.0.3 Bumps Scalar.AspNetCore from 2.16.3 to 2.16.20 Bumps xunit.runner.visualstudio from 3.1.4 to 3.1.5 --- updated-dependencies: - dependency-name: Asp.Versioning.Mvc dependency-version: 10.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-patch - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-patch - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-patch - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-patch - dependency-name: Microsoft.OpenApi dependency-version: 2.12.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-patch - dependency-name: Microsoft.AspNetCore.WebUtilities dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-patch - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-patch - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-patch - dependency-name: Microsoft.EntityFrameworkCore.Relational dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-patch - dependency-name: Microsoft.Extensions.Caching.Memory dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-patch - dependency-name: Microsoft.Extensions.Configuration.Binder dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-patch - dependency-name: Microsoft.Extensions.Configuration.EnvironmentVariables dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-patch - dependency-name: Microsoft.Extensions.Configuration.Json dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-patch - dependency-name: Microsoft.Extensions.Configuration.UserSecrets dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-patch - dependency-name: Microsoft.Extensions.Http dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 17.14.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-patch - dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL dependency-version: 10.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-patch - dependency-name: Scalar.AspNetCore dependency-version: 2.16.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-patch - dependency-name: xunit.runner.visualstudio dependency-version: 3.1.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-26T06:39:06Z

Labels

The following labels could not be found: dependencies, dotnet. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

coderabbitai · 2026-10-26T06:39:19Z

No actionable comments were generated in the recent review.

Recent review info

Run configuration

Source mode: Auto
Repository: Unavailable
Branch: Unavailable
File: No configuration file from this repository applied
Commit: Unavailable
Layers: defaults
Review profile: CHILL
Plan: Advanced
Run ID: 0d8feb28-e8c5-447b-99d8-36658d62bc77

Commits

Reviewing files that changed from the base of the PR and between 44f4432 and a9883a5.

Files selected for processing: 1

Directory.Packages.props

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.

Walkthrough

Centrally managed package versions were updated in Directory.Packages.props. The changes include ASP.NET Core, Entity Framework Core, OpenAPI, PostgreSQL, and test packages.

Changes: Central package version updates

Layer / File(s)	Summary
Update central package versions `Directory.Packages.props`	Versions were updated for ASP.NET Core, Entity Framework Core, OpenAPI, PostgreSQL, and test packages. Other listed package versions remain unchanged.

Priority: Low

Estimated code review effort: 1 (Trivial) | ~4 minutes

Change: Other

Merge Risk: Minimal · up to a9883

The PR updates centrally managed dependency versions without an established compatibility issue.

Architecture risk: Low · up to a9883

The change affects 1 system.

Changed systems: Directory.Packages.props

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

observed — Directory.Packages.props (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

observed — Modified behavior in Directory.Packages.props: Asp.Versioning.Mvc is updated from version 10.0.0 to 10.0.1.
observed — Modified behavior in Directory.Packages.props: Microsoft.OpenApi is updated from 2.7.5 to 2.12.2, and Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.AspNetCore.OpenApi, and Microsoft.AspNetCore.WebUtilities are updated from versions 10.0.9, 10.0.8, and 10.0.10 to 10.0.14.
observed — Modified behavior in Directory.Packages.props: Entity Framework Core, configuration, caching, and HTTP package versions are updated from 10.0.9 to 10.0.14. The test SDK is updated from 17.14.0 to 17.14.1; the unchanged coverlet.collector and Moq versions remain as before.
observed — Modified behavior in Directory.Packages.props: Npgsql.EntityFrameworkCore.PostgreSQL is updated from 10.0.2 to 10.0.3, and Microsoft.AspNetCore.Mvc.Testing from 10.0.9 to 10.0.14.

Pre-merge checks: 5

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly describes the main change: updating 19 .NET package dependencies. It is concise and specific enough for the pull request history.
Linked Issues check		Issue `#2903` is closed and completed. It provides historical context only. No active directly linked issue adds coding requirements to this pull request.
Out of Scope Changes check		The pull request changes only centrally managed package versions in Directory.Packages.props. These changes match the stated dependency-update scope. The summary identifies no unrelated source or publ…
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…

Full details: Out of Scope Changes check

Explanation

The pull request changes only centrally managed package versions in Directory.Packages.props. These changes match the stated dependency-update scope. The summary identifies no unrelated source or public API changes.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Finishing Touches

🧪 Generate unit tests (beta)

Commit to this branch
Create a new PR

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

dependabot Bot requested a review from admclamb as a code owner October 26, 2026 06:39

dependabot Bot mentioned this pull request Oct 26, 2026

Bump the dotnet-patch group with 19 updates #40

Closed

dependabot Bot mentioned this pull request Oct 26, 2026

Bump Asp.Versioning.Mvc and 17 others #44

Closed

This was referenced Oct 26, 2026

Bump Microsoft.OpenApi from 2.7.5 to 3.11.0 #46

Open

Bump Asp.Versioning.Mvc and 17 others #49

Open

Navigation Menu

Repository navigation

Bump the dotnet-patch group with 19 updates - #45

Bump the dotnet-patch group with 19 updates#45
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dotnet-patch-fc0027b598

dependabot Bot commented on behalf of github Oct 26, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 26, 2026

Uh oh!

coderabbitai Bot commented Oct 26, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 26, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

17.14.1

What's Changed

2.12.2

2.12.2 (2026-08-20)

Bug Fixes

2.12.1

2.12.1 (2026-08-19)

Bug Fixes

2.12.0

2.12.0 (2026-08-12)

Features

Bug Fixes

2.11.0

2.11.0 (2026-07-15)

Features

Bug Fixes

2.10.0

2.10.0 (2026-07-03)

Features

Bug Fixes

2.9.0

2.9.0 (2026-06-10)

Features

Bug Fixes

2.8.0

2.8.0 (2026-06-01)

Features

2.7.6

2.7.6 (2026-05-28)

Bug Fixes

10.0.3

What's Changed

3.1.5

Summary by CodeRabbit

Uh oh!

dependabot Bot commented on behalf of github Oct 26, 2026

Labels

Uh oh!

coderabbitai Bot commented Oct 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 26, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Oct 26, 2026 •

edited

Loading