Bump Serilog.AspNetCore and 2 others#20
Conversation
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
Bumps Serilog.AspNetCore from 9.0.0 to 10.0.0 Bumps Serilog.Settings.Configuration from 9.0.0 to 10.0.0 Bumps Serilog.Sinks.Console from 6.0.0 to 6.1.1 --- updated-dependencies: - dependency-name: Serilog.AspNetCore dependency-version: 10.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: serilog - dependency-name: Serilog.Settings.Configuration dependency-version: 10.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: serilog - dependency-name: Serilog.Sinks.Console dependency-version: 6.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: serilog ... Signed-off-by: dependabot[bot] <support@github.com>
609c6bf to
b870d33
Compare
|
Fechando: este PR foi criado quando o projeto tinha apenas a estrutura inicial (Sprint 0). As Sprints 1-14 já foram mergeadas, e o pacote/versão mudou de escopo (ex: EF Core agora está em O Dependabot vai re-scanear na próxima janela e abrir PRs frescos contra a base atualizada, já com o diff correto aplicado em todos os projetos que precisam. Obrigado! |
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
Consolida bumps seguros que estavam em Dependabot PRs obsoletos (fechados em lote). Principais motivacoes: - SixLabors.ImageSharp 3.1.5 -> 3.1.12: - GHSA-2cmq-823j-5qj8 (high): fix de SixLabors.ImageSharp - GHSA-rxmq-m78w-7wmc (moderate): idem - Runtime patches (sem breaking): - Microsoft.AspNetCore.Authentication.JwtBearer 9.0.9 -> 9.0.15 - Microsoft.AspNetCore.OpenApi 9.0.0 -> 9.0.15 - Microsoft.EntityFrameworkCore[.Design/.SqlServer/.InMemory] 9.0.9 -> 9.0.15 - Microsoft.IdentityModel.Tokens 8.14.0 -> 8.14.2 - System.IdentityModel.Tokens.Jwt 8.14.0 -> 8.14.2 - Infra de config: - nuget.config na raiz do repo consolida todos os projetos em src/ pra usarem apenas nuget.org (antes Application/Infrastructure/ Jobs herdavam feed Azure DevOps privado do config global do dev, que falha com 401 em maquina sem credenciais) Validacao: 120 testes passando, build Release 0 warnings. PRs do Dependabot fechados neste lote (obsoletos contra main atualizado): - #3 setup-node (gh actions, sem workflow scope) - #4 cache - #6 setup-dotnet - #11 eslint group - #12 globals - #13 BCrypt - #14 axios (caret ja puxava a nova via npm) - #18 aspnet group (superseded por este commit) - #19 EF Design (idem) - #20 Serilog group (Sinks.Seq 9.0.1 nao existe; mantemos 9.0.0) Major bumps arriscados fechados para review futuro: - #5 upload-artifact 4->7 - #7 react group - #8 vite group - #9 node 20->25-alpine - #10 dotnet/sdk 9->10 - #15 coverlet 6->10 - #16 dotnet/aspnet 9->10 - #21 Swashbuckle 9->10
Updated Serilog.AspNetCore from 9.0.0 to 10.0.0.
Release notes
Sourced from Serilog.AspNetCore's releases.
10.0.0
What's Changed
New Contributors
Full Changelog: serilog/serilog-aspnetcore@v9.0.0...v10.0.0
Commits viewable in compare view.
Updated Serilog.Settings.Configuration from 9.0.0 to 10.0.0.
Release notes
Sourced from Serilog.Settings.Configuration's releases.
10.0.0
What's Changed
net10.0SDK and dependencies by @nblumhardt in Update tonet10.0SDK and dependencies serilog/serilog-settings-configuration#462FluentAssertionsby @nblumhardt in RemoveFluentAssertionsserilog/serilog-settings-configuration#464New Contributors
Full Changelog: serilog/serilog-settings-configuration@v9.0.0...v10.0.0
Commits viewable in compare view.
Updated Serilog.Sinks.Console from 6.0.0 to 6.1.1.
Release notes
Sourced from Serilog.Sinks.Console's releases.
6.1.1
What's Changed
Full Changelog: serilog/serilog-sinks-console@v6.1.0...v6.1.1
6.1.0
{UtcTimestamp}in output templates (@ManuelRin)Commits viewable in compare view.