Skip to content

Bump the all-updates group with 6 updates - #36

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/MX.Platform.Status.App/all-updates-e4b05f280f
Open

Bump the all-updates group with 6 updates#36
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/MX.Platform.Status.App/all-updates-e4b05f280f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 13, 2026

Copy link
Copy Markdown
Contributor

Updated Azure.Security.KeyVault.Secrets from 4.11.0 to 4.11.1.

Release notes

Sourced from Azure.Security.KeyVault.Secrets's releases.

4.11.1

4.11.1 (2026-09-02)

Bugs Fixed

  • Fixed an issue in the challenge-based authentication policy where a cached authentication challenge, and the access token acquired for it, could be reused for a request to a different Key Vault or Managed HSM endpoint. The policy now resolves the challenge per request endpoint, ensuring a token acquired for one vault is never attached to a request to another.

Commits viewable in compare view.

Updated GitHubJwt from 0.0.5 to 0.0.6.

Release notes

Sourced from GitHubJwt's releases.

0.0.6

  • Added issued_at time offset to account for clock desync between client and server (#​60)
  • Updated dependencies

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.UserSecrets from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration.UserSecrets's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.9.0 to 18.10.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.10.0

What's Changed

Full Changelog: microsoft/vstest@v18.9.0...v18.10.0

Commits viewable in compare view.

Updated NSubstitute from 5.3.0 to 6.2.0.

Release notes

Sourced from NSubstitute's releases.

6.2.0

NSubstitute v6.2.0

This release improves generic call matching (#​989, #​974, #​990). Thanks to @​zvirja and @​JMolenkamp for fixes this.
We've also switched to using trusted nuget publishing linked to GitHub Releases. (#​987, @​zvirja)

What's Changed

Full Changelog: nsubstitute/NSubstitute@v6.1.0...v6.2.0

6.1.0

NSubstitute v6.1.0

This release reverts nullability support introduced in 6.0. This change caused a number of problems for callers (#​973, #​976), and trying to resolve these (#​976) revealed the need for more fundamental changes to NSubstitute to effectively support this. As a result, nullability is again disabled for public API. Huge thanks to @​jdb0123, @​Romfos, and @​Moha-sami for their PRs addressing this, and thanks for all those who raised issues. We also humbly award @​zvirja with one unlimited "I told you so" pass to use as he sees fit.

What's Changed

New Contributors

Full Changelog: nsubstitute/NSubstitute@v6.0.0...v6.1.0

6.0.0

ℹ️ No changes from Release Candidate 1.

NSubstitute v6.0.0

From RC1 notes:

  • [NEW] ArgMatchers.Matching predicate matcher as an alternative to Is(Expression<Predicate<T>>. (.NET6 and above.)
  • [UPDATE] Improved support for custom argument matchers. Arg.Is now accepts arg matchers.
  • [UPDATE][BREAKING] Update target frameworks: .NET8, .NET Standard 2.0
  • [UPDATE][BREAKING] Remove legacy obsolete API
  • [UPDATE][BREAKING] Mark as obsolete api CompatArg with pre c# 7.0 support
  • [UPDATE][BREAKING] Nullability is enabled for public api for .NET 8+ TFMs
  • [UPDATE] Migrate documentation to docfx platform and update samples to NUnit 4
  • [NEW] Added NuGet Package README file.

Full change list

6.0.0-rc.1

NSubstitute v6.0.0 Release Candidate 1

Due to the large number of changes in this release, we wanted to start with a release candidate to ensure we've correctly captured breaking changes.

  • [NEW] ArgMatchers.Matching predicate matcher as an alternative to Is(Expression<Predicate<T>>. (.NET6 and above.)
  • [UPDATE] Improved support for custom argument matchers. Arg.Is now accepts arg matchers.
  • [UPDATE][BREAKING] Update target frameworks: .NET8, .NET Standard 2.0
  • [UPDATE][BREAKING] Remove legacy obsolete API
  • [UPDATE][BREAKING] Mark as obsolete api CompatArg with pre c# 7.0 support
  • [UPDATE][BREAKING] Nullability is enabled for public api for .NET 8+ TFMs
  • [UPDATE] Migrate documentation to docfx platform and update samples to NUnit 4
  • [NEW] Added NuGet Package README file.

Full change list

Commits viewable in compare view.

Updated System.ServiceModel.Syndication from 10.0.11 to 10.0.12.

Release notes

Sourced from System.ServiceModel.Syndication's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the all-updates group with 6 updates
cbaf857 
Bumps Azure.Security.KeyVault.Secrets from 4.11.0 to 4.11.1
Bumps GitHubJwt from 0.0.5 to 0.0.6
Bumps Microsoft.Extensions.Configuration.UserSecrets from 10.0.11 to 10.0.12
Bumps Microsoft.NET.Test.Sdk from 18.9.0 to 18.10.0
Bumps NSubstitute from 5.3.0 to 6.2.0
Bumps System.ServiceModel.Syndication from 10.0.11 to 10.0.12

---
updated-dependencies:
- dependency-name: Azure.Security.KeyVault.Secrets
  dependency-version: 4.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: GitHubJwt
  dependency-version: 0.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: Microsoft.Extensions.Configuration.UserSecrets
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: NSubstitute
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-updates
- dependency-name: System.ServiceModel.Syndication
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Sep 13, 2026
@dependabot dependabot Bot mentioned this pull request Sep 13, 2026
Closed
@github-actions github-actions Bot added the run-prd-plan Run prd Terraform plan label Sep 13, 2026
@github-actions

github-actions Bot commented Sep 13, 2026

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
nuget/Azure.Security.KeyVault.Secrets 4.11.1 UnknownUnknown
nuget/GitHubJwt 0.0.6 UnknownUnknown
nuget/Microsoft.Extensions.Configuration.UserSecrets 10.0.12 UnknownUnknown
nuget/System.ServiceModel.Syndication 10.0.12 UnknownUnknown
nuget/Microsoft.NET.Test.Sdk 18.10.0 🟢 5.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 7Found 22/28 approved changesets -- score normalized to 7
Security-Policy🟢 10security policy file detected
Binary-Artifacts⚠️ 0binaries present in source code
License🟢 10license file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 10all dependencies are pinned
Branch-Protection⚠️ 1branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/NSubstitute 6.2.0 🟢 5.6
Details
CheckScoreReason
Maintained🟢 1019 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Packaging🟢 10packaging workflow detected
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • src/MX.Platform.Status.App/MX.Platform.Status.App.csproj
  • src/MX.Platform.Status.Tests/MX.Platform.Status.Tests.csproj

@github-actions

github-actions Bot commented Sep 13, 2026

Copy link
Copy Markdown

Dependabot Auto-Merge Policy

Auto-merge is currently blocked by policy for this pull request.

  • Reason: Dependabot auto-merge is blocked for update type: version-update:semver-major. Manual review required. Added run-prd-plan label.
  • Policy code: blocked_update_type
  • Update type: version-update:semver-major
  • Dependencies: Azure.Security.KeyVault.Secrets, GitHubJwt, Microsoft.Extensions.Configuration.UserSecrets, Microsoft.NET.Test.Sdk, NSubstitute, System.ServiceModel.Syndication
  • Label added by policy: run-prd-plan

Next action: manual review and merge is required.

This comment is maintained automatically by the dependabot-policy action.

@dependabot
dependabot Bot deployed to Development September 13, 2026 08:21 Active
@github-actions

github-actions Bot commented Sep 13, 2026

Copy link
Copy Markdown

🏗️ Terraform Plan

🌍 Environment: dev

✅ Validate — Passed

✅ Plan

Count
➕ Add 15
📋 Resource Details
Action Resource
➕ Create azurerm_application_insights.ai
➕ Create azurerm_key_vault.kv
➕ Create azurerm_key_vault_secret.github_app_pem
➕ Create azurerm_key_vault_secret.webhook_secret
➕ Create azurerm_linux_function_app.app
➕ Create azurerm_role_assignment.app_to_keyvault
➕ Create azurerm_role_assignment.app_to_storage_blob
➕ Create azurerm_service_plan.sp
➕ Create azurerm_static_web_app.swa
➕ Create azurerm_static_web_app_function_app_registration.api
➕ Create azurerm_storage_account.sa
➕ Create azurerm_storage_container.func_content
➕ Create azurerm_storage_container.history
➕ Create azurerm_storage_container.stale_cache
➕ Create random_id.environment_id

@sonarqubecloud

sonarqubecloud Bot commented Sep 13, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@frasermolyneux frasermolyneux

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code run-prd-plan Run prd Terraform plan

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@frasermolyneux