Skip to content

deps: Bump Microsoft.Extensions.Configuration and 5 others#59

Merged
JerrettDavis merged 1 commit intomainfrom
dependabot/nuget/src/QuickApiMapper.Host.AppHost/microsoft-c2f0f5f276
Mar 17, 2026
Merged

deps: Bump Microsoft.Extensions.Configuration and 5 others#59
JerrettDavis merged 1 commit intomainfrom
dependabot/nuget/src/QuickApiMapper.Host.AppHost/microsoft-c2f0f5f276

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 16, 2026

Pinned Microsoft.Extensions.Configuration at 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.Extensions.Configuration.Json at 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Configuration.Json's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.Extensions.DependencyInjection at 10.0.5.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.Extensions.Hosting at 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.Extensions.Hosting.Abstractions at 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Hosting.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.Extensions.Http at 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Http's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Microsoft.Extensions.Configuration from 10.0.1 to 10.0.5
Bumps Microsoft.Extensions.Configuration.Json from 10.0.1 to 10.0.5
Bumps Microsoft.Extensions.DependencyInjection from 10.0.1 to 10.0.5
Bumps Microsoft.Extensions.Hosting from 10.0.1 to 10.0.5
Bumps Microsoft.Extensions.Hosting.Abstractions from 10.0.4 to 10.0.5
Bumps Microsoft.Extensions.Http from 10.0.1 to 10.0.5

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.Hosting.Abstractions
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.Http
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions
Copy link
Contributor

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 6 package(s) with unknown licenses.
See the Details below.

License Issues

src/QuickApiMapper.Host.AppHost/QuickApiMapper.Host.AppHost.csproj

PackageVersionLicenseIssue Type
Microsoft.Extensions.Configuration>= 0NullUnknown License
Microsoft.Extensions.Configuration.Json>= 0NullUnknown License
Microsoft.Extensions.DependencyInjection>= 0NullUnknown License
Microsoft.Extensions.Hosting>= 0NullUnknown License
Microsoft.Extensions.Http>= 0NullUnknown License

src/QuickApiMapper.StandardTransformers/QuickApiMapper.StandardTransformers.csproj

PackageVersionLicenseIssue Type
Microsoft.Extensions.Hosting.Abstractions>= 0NullUnknown License
Denied Licenses: GPL-2.0, GPL-3.0, AGPL-3.0

OpenSSF Scorecard

PackageVersionScoreDetails
nuget/Microsoft.Extensions.Configuration >= 0 UnknownUnknown
nuget/Microsoft.Extensions.Configuration.Json >= 0 UnknownUnknown
nuget/Microsoft.Extensions.DependencyInjection >= 0 UnknownUnknown
nuget/Microsoft.Extensions.Hosting >= 0 UnknownUnknown
nuget/Microsoft.Extensions.Http >= 0 UnknownUnknown
nuget/Microsoft.Extensions.Hosting.Abstractions >= 0 UnknownUnknown

Scanned Files

  • src/QuickApiMapper.Host.AppHost/QuickApiMapper.Host.AppHost.csproj
  • src/QuickApiMapper.StandardTransformers/QuickApiMapper.StandardTransformers.csproj

@github-actions
Copy link
Contributor

Test Results

117 tests   117 ✅  5s ⏱️
  2 suites    0 💤
  2 files      0 ❌

Results for commit b931a03.

@github-actions
Copy link
Contributor

🔍 PR Validation Results

Version: 0.0.0-g14a12303a2

📦 Detected NuGet Packages (17)

  • Demo.JsonApi
  • Demo.SoapApi
  • QuickApiMapper.Application
  • QuickApiMapper.Behaviors
  • QuickApiMapper.Contracts
  • QuickApiMapper.CustomTransformers
  • QuickApiMapper.Extensions.RabbitMQ
  • QuickApiMapper.Extensions.ServiceBus
  • QuickApiMapper.Extensions.gRPC
  • QuickApiMapper.Management.Contracts
  • QuickApiMapper.MessageCapture.Abstractions
  • QuickApiMapper.MessageCapture.InMemory
  • QuickApiMapper.Persistence.Abstractions
  • QuickApiMapper.Persistence.PostgreSQL
  • QuickApiMapper.Persistence.SQLite
  • QuickApiMapper.StandardTransformers
  • QuickApiMapper.Tools.Migrator

🚀 Detected Executables (2)

  • QuickApiMapper.Host.AppHost
  • QuickApiMapper.Tools.Migrator

✅ Validation Steps

  • Build solution
  • Run unit tests
  • Run integration tests
  • Dry-run NuGet packaging
  • Dry-run executable publishing

📊 Artifacts

Dry-run artifacts have been uploaded and will be available for 7 days.


This comment was automatically generated by the PR validation workflow.

@JerrettDavis JerrettDavis merged commit 3ac9f7f into main Mar 17, 2026
7 checks passed
@JerrettDavis JerrettDavis deleted the dependabot/nuget/src/QuickApiMapper.Host.AppHost/microsoft-c2f0f5f276 branch March 17, 2026 02:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant