Skip to content

Bump Serilog.AspNetCore and 2 others#20

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/ImovelStand.Api/serilog-b9a0b1b965
Closed

Bump Serilog.AspNetCore and 2 others#20
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/ImovelStand.Api/serilog-b9a0b1b965

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 21, 2026

Updated Serilog.AspNetCore from 9.0.0 to 10.0.0.

Release notes

Sourced from Serilog.AspNetCore's releases.

10.0.0

What's Changed

New Contributors

Full Changelog: serilog/serilog-aspnetcore@v9.0.0...v10.0.0

Commits viewable in compare view.

Updated Serilog.Settings.Configuration from 9.0.0 to 10.0.0.

Release notes

Sourced from Serilog.Settings.Configuration's releases.

10.0.0

What's Changed

New Contributors

Full Changelog: serilog/serilog-settings-configuration@v9.0.0...v10.0.0

Commits viewable in compare view.

Updated Serilog.Sinks.Console from 6.0.0 to 6.1.1.

Release notes

Sourced from Serilog.Sinks.Console's releases.

6.1.1

What's Changed

Full Changelog: serilog/serilog-sinks-console@v6.1.0...v6.1.1

6.1.0

  • #​165 - support for {UtcTimestamp} in output templates (@​ManuelRin)
  • #​172, #​173 - switch build to Serilog org standard (@​nblumhardt)

Commits viewable in compare view.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 21, 2026

Labels

The following labels could not be found: backend, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Bumps Serilog.AspNetCore from 9.0.0 to 10.0.0
Bumps Serilog.Settings.Configuration from 9.0.0 to 10.0.0
Bumps Serilog.Sinks.Console from 6.0.0 to 6.1.1

---
updated-dependencies:
- dependency-name: Serilog.AspNetCore
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: serilog
- dependency-name: Serilog.Settings.Configuration
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: serilog
- dependency-name: Serilog.Sinks.Console
  dependency-version: 6.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: serilog
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the serilog group with 3 updates Bump Serilog.AspNetCore and 2 others Apr 22, 2026
@dependabot dependabot Bot force-pushed the dependabot/nuget/ImovelStand.Api/serilog-b9a0b1b965 branch from 609c6bf to b870d33 Compare April 22, 2026 00:03
@gustavograciano
Copy link
Copy Markdown
Owner

Fechando: este PR foi criado quando o projeto tinha apenas a estrutura inicial (Sprint 0). As Sprints 1-14 já foram mergeadas, e o pacote/versão mudou de escopo (ex: EF Core agora está em src/ImovelStand.Infrastructure, não mais só em ImovelStand.Api).

O Dependabot vai re-scanear na próxima janela e abrir PRs frescos contra a base atualizada, já com o diff correto aplicado em todos os projetos que precisam. Obrigado!

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 22, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/nuget/ImovelStand.Api/serilog-b9a0b1b965 branch April 22, 2026 11:28
gustavograciano added a commit that referenced this pull request May 3, 2026
Consolida bumps seguros que estavam em Dependabot PRs obsoletos
(fechados em lote). Principais motivacoes:

- SixLabors.ImageSharp 3.1.5 -> 3.1.12:
  - GHSA-2cmq-823j-5qj8 (high): fix de SixLabors.ImageSharp
  - GHSA-rxmq-m78w-7wmc (moderate): idem

- Runtime patches (sem breaking):
  - Microsoft.AspNetCore.Authentication.JwtBearer 9.0.9 -> 9.0.15
  - Microsoft.AspNetCore.OpenApi 9.0.0 -> 9.0.15
  - Microsoft.EntityFrameworkCore[.Design/.SqlServer/.InMemory] 9.0.9 -> 9.0.15
  - Microsoft.IdentityModel.Tokens 8.14.0 -> 8.14.2
  - System.IdentityModel.Tokens.Jwt 8.14.0 -> 8.14.2

- Infra de config:
  - nuget.config na raiz do repo consolida todos os projetos em
    src/ pra usarem apenas nuget.org (antes Application/Infrastructure/
    Jobs herdavam feed Azure DevOps privado do config global do dev,
    que falha com 401 em maquina sem credenciais)

Validacao: 120 testes passando, build Release 0 warnings.

PRs do Dependabot fechados neste lote (obsoletos contra main atualizado):
- #3 setup-node (gh actions, sem workflow scope)
- #4 cache
- #6 setup-dotnet
- #11 eslint group
- #12 globals
- #13 BCrypt
- #14 axios (caret ja puxava a nova via npm)
- #18 aspnet group (superseded por este commit)
- #19 EF Design (idem)
- #20 Serilog group (Sinks.Seq 9.0.1 nao existe; mantemos 9.0.0)

Major bumps arriscados fechados para review futuro:
- #5 upload-artifact 4->7
- #7 react group
- #8 vite group
- #9 node 20->25-alpine
- #10 dotnet/sdk 9->10
- #15 coverlet 6->10
- #16 dotnet/aspnet 9->10
- #21 Swashbuckle 9->10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant