Skip to content

Bump Microsoft.OpenApi from 2.13.0 to 3.11.0 - #55

Closed
dependabot[bot] wants to merge 39 commits into
mainfrom
dependabot/nuget/Microsoft.OpenApi-3.11.0
Closed

Bump Microsoft.OpenApi from 2.13.0 to 3.11.0#55
dependabot[bot] wants to merge 39 commits into
mainfrom
dependabot/nuget/Microsoft.OpenApi-3.11.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Pinned Microsoft.OpenApi at 3.11.0.

Release notes

Sourced from Microsoft.OpenApi's releases.

3.11.0

3.11.0 (2026-10-19)

Features

  • document: add GetOperationById to search operations across path… (#​3025) (1dae1ff)

Bug Fixes

  • components-key validation timeouts under load (#​3108) (01d4729)
  • openapi: omit null response descriptions (afd4967)
  • serialization: potential infinite loop when inlining references (c6ef130)
  • serialization: references inlining (#​3124) (c6ef130)

3.10.2

3.10.2 (2026-08-20)

Bug Fixes

3.10.1

3.10.1 (2026-08-19)

Bug Fixes

3.10.0

3.10.0 (2026-08-11)

Features

  • adds deserialization of the example extension (e5a1080)
  • do not ignore multiple types when serializing to 3.0 (#​2960) (ebaf27a)
  • serialize license identifier as extension for earlier versions (d090989)
  • serialize license identifier as extension for earlier versions (60971ba)

Bug Fixes

  • better nullability round-tripping (655c2c8)
  • bound YAML anchor/alias expansion to prevent OOM (billion laughs) (#​3000) (2179326)
  • deserialize metadata url from extension in earlier version (9387b01)
  • marks deprecated properties from the specification as obsolete (787b045)
  • marks deprecated properties from the specification as obsolete (953c22a)
  • schema: serialize compatibility examples from examples list (5d8ec3a)
  • serialize examples as extension in v2/v3 (ff1dbc9)
  • serialize examples as extension in v2/v3 (edf3c67)

3.9.0

3.9.0 (2026-07-15)

Features

Bug Fixes

  • adds explicit error message for invalid json pointers (63fc55d)
  • adds explicit error message for invalid json pointers (bc93efe)
  • default mapping is not being serialized with the correct shape (fe4a25f)
  • differentiate unset value from null value in OpenApiSchema.Const (#​2936) (07b525f)
  • handle nullability more accurately during serialization for 3.0/2.0 (#​2933) (0ace243)
  • validate required properties of security scheme before serialization (#​2952) (f31b192)

3.8.0

3.8.0 (2026-07-03)

Features

  • add JsonConverter for OpenApiSchema System.Text.Json serialization (#​2915) (2f8b3d2)
  • library: support schema keywords on references (434b2f8)
  • library: support schema keywords on references (66a9d04), closes #​2903

Bug Fixes

  • Don't silently skip null assignment to OpenApiDocument.Tags (3764142)
  • handling of nullable enums for 3.0 (#​2920) (beb68f5)
  • library: keep v3 schema references ref-only (c938727)
  • preserve JSON Schema 2020-12 keyword siblings on $ref schemas for OAS 3.1+ (#​2896) (08160c8)
  • use async method for crypto flush (6e675d9)

3.7.0

3.7.0 (2026-06-10)

Features

  • add contains/minContains/maxContains members (78475e3)
  • add contains/minContains/maxContains members (1a974f8)
  • library: add missing json schema properties (9b1aed6)
  • library: add missing json schema properties (82f84e0)

Bug Fixes

  • library: always copy unevaluated properties (4907d1c)
  • library: avoid false circular refs for external schema re-exports (b635242)
  • library: avoid false circular refs for external schema re-exports (7a443c2)
  • library: remove unshipped schema extension fallback (cf54bb3)
  • library: use version-specific schema keyword callbacks (6e22ec6)
  • library: use x-jsonschema schema extensions (eb1891a)

3.6.0

3.6.0 (2026-06-01)

Features

  • reader: remove ParseNode infrastructure (9b4f45b)
  • Significant performance improvements resulting ~40% reduced allocations when parsing JSON descriptions, ~25% for YAML.

3.5.5

3.5.5 (2026-05-28)

Bug Fixes

  • reader: preserve Null flag when nullable appears before type in V3.0/V3.1/V3.2 deserializers (2b9d7f4)

3.5.4

3.5.4 (2026-05-26)

Bug Fixes

  • library: handle circular schema references (b3cd42b)
  • library: handle circular schema references (91a989f)

3.5.3

3.5.3 (2026-04-27)

Bug Fixes

  • null reference exception for boolean component schemas (f97f91a)
  • null reference exception for boolean component schemas (fe0b50a)
  • schema: support boolean schemas in deserializer for OpenAPI 3.1/3.2 (05b44be)

Performance Improvements

  • schema: optimize boolean schema deserialization (7316e3f)

3.5.2

3.5.2 (2026-04-14)

Bug Fixes

  • hidi: update Microsoft.OpenApi.OData to 3.2.1 (b0a68fb)
  • hidi: update Microsoft.OpenApi.OData to 3.2.1 (8c22ab2), closes #​2811

3.5.1

3.5.1 (2026-03-31)

Bug Fixes

  • security scheme references serialization (a5acb89)

3.5.0

3.5.0 (2026-03-20)

Features

  • library: add Extensions support for schema references in v3.1/v3.2; add SerializeAsV32 with loop detection (9b422bf)

Bug Fixes

  • a bug where path parameter validation would fail if they contained forbidden JSON pointer characters (ef55b2c)
  • a bug where path parameter validation would fail if they contained forbidden JSON pointer characters (4b3164a)
  • double encoding of json pointer for invalid reference rule (b246cd0)
  • encoding of special characters for JSON paths (4c757e1)
  • library: do not emit unevaluatedProperties for non-object schemas (852fb4c)
  • library: do not emit unevaluatedProperties for non-object schemas (19538aa)
  • library: enforce spec-compliant $ref serialization; add Extensions support for schema references in v3.1/v3.2 (9bf61de)
  • potential double encoding of paths (471a61a)

3.4.0

3.4.0 (2026-03-04)

Features

  • library: preserve PatternProperties as x-jsonschema-patternProperties extension for OpenAPI v2/v3.0 serialization (d969fdc)
  • library: Preserve PatternProperties via x-jsonschema-patternProperties extension for OpenAPI v2/v3.0 (16ab5e4)
  • securityscheme: add oauth2MetadataUrl support (OpenAPI 3.2) (4509488)

Bug Fixes

  • implement unevaluatedProperties as schema per JSON Schema 2020-12 (#​2728) (7c13fb3)
  • library: serialize additionalProperties schema in OpenAPI V2 (f3165fa)
  • library: serialize additionalProperties schema in OpenAPI V2 documents (3d07756)
  • optimize parsing V3.1 documents by reducing GetLocation method allocation on hot path(#​2748) (f690681)

3.3.1

3.3.1 (2026-01-22)

Features

Bug Fixes

  • broken binary compatibility due to interface changes in previous version (d96bba7)

3.3.0

3.3.0 (2026-01-21)

Features

  • models: add shared Content interface (9e13b25)
  • models: add shared Content interface (#​2695) (9e13b25)
  • models: support mutualTLS security scheme (a4efdfe)

3.2.0

3.2.0 (2026-01-19)

Features

  • hidi validate command now logs warnings (76a3c0f)
  • hidi validate command now logs warnings (62e7d56)

Bug Fixes

  • discriminator property validation fails any/allOf cases when it shouldn't (fb6cecc)
  • discriminator property validation fails any/allOf cases when it shouldn't (a8fb81c)

3.1.3

3.1.3 (2026-01-16)

Bug Fixes

  • Support custom tag ordering (008576c)
  • Support custom tag ordering (7610d07)

3.1.2

3.1.2 (2026-01-06)

Bug Fixes

  • correct error pointer when extension parser throws OpenApiException (43c75a9)
  • wrap extension parser calls in try-catch to ensure correct error pointers (50b44aa)

3.1.1

3.1.1 (2025-12-18)

Bug Fixes

  • schema: always serialize additionalProperties: false (6651c36)
  • schema: always serialize additionalProperties: false (e36fc95)

3.1.0

3.1.0 (2025-12-17)

Features

  • Add type: "null" downcasting when in oneOf and anyOf for OpenAPI v3 (782cf8d)

3.0.3

3.0.3 (2025-12-16)

Bug Fixes

  • load JSON documents that are preceded by multiple whitespace (6461bac)
  • non-seekable json streams would fail to load as a document (2436d73)
  • reading streams in an asp.net context would cause async exceptions (f9e5248)

3.0.2

3.0.2 (2025-12-08)

Bug Fixes

  • additional properties serialization should not emit a schema in v2 (946cba9)
  • additional properties serialization should not emit booleans in v3.1+ (946cba9)

3.0.1

3.0.1 (2025-11-17)

Bug Fixes

  • empty strings should be quoted in yaml (8d215f9)
  • empty strings should be quoted in yaml (0ca10db)

3.0.0

3.0.0 (2025-11-11)

⚠ BREAKING CHANGES

  • adds support for OpenAPI 3.2.0

Note: Please refer to the upgrade guide for a detailed description of the breaking changes.

Note: ASP.net users should remain on version 1.X for ASP.net < 10, and version 2.X for ASP.net 10, this new major version will be implemented in a future version of ASP.net, more information

Features

  • adds support for OpenAPI 3.2.0 (765a8dd)

Special thanks

Commits viewable in compare view.

cstacklab and others added 30 commits August 31, 2024 08:15
@cstacklab
Initial commit
6c99d7c
@cstacklab
add folder structure
56cd473
@cstacklab
implement basic structure for CleanApiStarter API with PostgreSQL and…
59b5e81 
… OpenTelemetry
@cstacklab
introduce versioned endpoint groups, configuration project, and runti…
d911cc4 
…me defaults for CleanApiStarter API
@cstacklab
implement authentication with Google ID tokens and JWT, refactor data…
937cacf 
… access to use EF Core
@cstacklab
implement pagination and validation for word endpoints, add response …
d411173 
…compression and request ID middleware
@cstacklab
implement project management features including project and task crea…
284be54 
…tion, retrieval, updating, and deletion; add necessary DTOs, validators, and repository interfaces
@cstacklab
add integration and unit testing setup; include test configurations, …
f3ada04 
…helpers, and coverage scripts
@cstacklab
update README.md to enhance project description, features, and usage …
17d2e67 
…instructions; improve clarity on architecture, authentication, and testing
@cstacklab
Merge pull request #2 from cbjpdev/feature/1-basic-structure-busines-…
f198502 
…logic

Feature/1 basic structure busines logic
@cstacklab
update project structure and add template packaging; configure GitHub…
873fbbf 
… Actions for CI, template verification, and NuGet publishing
@cstacklab
refactor template packaging; replace nuspec with csproj for NuGet pac…
1feb398 
…kaging and update related scripts and documentation
@cstacklab
Merge pull request #3 from cbjpdev/feature/1-basic-structure-template…
f1997f4 
…-setup

Update project structure and add template packaging
@cstacklab
update .gitignore to exclude .DS_Store files
8689e08
@cstacklab
refactor integration tests to use xUnit; update PostgreSQL container …
610d1bc 
…version and improve error handling in ProblemDetailsExceptionHandler
@dependabot
Bump actions/setup-dotnet from 4 to 5
29d303a 
Bumps [actions/setup-dotnet](https://github.com/actions/setup-dotnet) from 4 to 5.
- [Release notes](https://github.com/actions/setup-dotnet/releases)
- [Commits](actions/setup-dotnet@v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-dotnet
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Bump actions/checkout from 4 to 6
10911aa 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@cstacklab
remove tracked .DS_Store files
521dcbc
@dependabot
Bump the nuget-minor-and-patch group with 8 updates
42cf1ad 
Bumps dotnet-reportgenerator-globaltool from 5.5.5 to 5.5.10
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.8 to 10.0.9
Bumps Microsoft.Extensions.Configuration.Abstractions from 10.0.8 to 10.0.9
Bumps Microsoft.Extensions.Http.Resilience from 10.6.0 to 10.7.0
Bumps OpenTelemetry from 1.15.3 to 1.16.0
Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.15.3 to 1.16.0
Bumps OpenTelemetry.Extensions.Hosting from 1.15.3 to 1.16.0
Bumps Scalar.AspNetCore from 2.16.1 to 2.16.2

---
updated-dependencies:
- dependency-name: dotnet-reportgenerator-globaltool
  dependency-version: 5.5.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.Extensions.Configuration.Abstractions
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 10.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: OpenTelemetry
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: Scalar.AspNetCore
  dependency-version: 2.16.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@cstacklab
add Scalar.AspNetCore to global usings
a18b799
@cstacklab
Merge pull request #4 from cstacklab/dependabot/github_actions/action…
e0f9496 
…s/setup-dotnet-5

Bump actions/setup-dotnet from 4 to 5
@cstacklab
Merge pull request #5 from cstacklab/dependabot/github_actions/action…
488ad39 
…s/checkout-6

Bump actions/checkout from 4 to 6
@cstacklab
Merge pull request #6 from cstacklab/dependabot/nuget/dot-config/nuge…
2ae256f 
…t-minor-and-patch-9a574b37c2

Bump the nuget-minor-and-patch group with 8 updates
@dependabot
Bump the nuget-minor-and-patch group with 1 update
c88470f 
Bumps Scalar.AspNetCore from 2.16.2 to 2.16.3

---
updated-dependencies:
- dependency-name: Scalar.AspNetCore
  dependency-version: 2.16.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@cstacklab
Merge pull request #7 from cstacklab/dependabot/nuget/nuget-minor-and…
a734b30 
…-patch-c30f424380
@cstacklab
update project references and package versions; add MessagePack depen…
d90ac94 
…dency
@cstacklab
Add single project structure
af3128c
@dependabot
Bump actions/checkout from 6 to 7 (#9)
3ca329e 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the nuget-minor-and-patch group with 2 updates (#10)
04bcc27 
Bumps Aspire.Hosting.AppHost from 13.4.4 to 13.4.5
Bumps Scalar.AspNetCore from 2.16.3 to 2.16.4

---
updated-dependencies:
- dependency-name: Aspire.Hosting.AppHost
  dependency-version: 13.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Scalar.AspNetCore
  dependency-version: 2.16.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump NsDepCop from 2.7.0 to 3.0.0 (#13)
ac1666e 
---
updated-dependencies:
- dependency-name: NsDepCop
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
cstacklab and others added 6 commits July 3, 2026 17:45
@cstacklab
fix openapi vulnerability
be033d7
@dependabot
Bump actions/setup-dotnet from 5 to 6 (#17)
a3341d1 
Bumps [actions/setup-dotnet](https://github.com/actions/setup-dotnet) from 5 to 6.
- [Release notes](https://github.com/actions/setup-dotnet/releases)
- [Commits](actions/setup-dotnet@v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-dotnet
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump github/codeql-action from 4 to 4.37.3 (#23)
1877ace 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4 to 4.37.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v4...v4.37.3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.37.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump Asp.Versioning.Http and 21 others (#38)
226229c 
Bumps Asp.Versioning.Http from 10.0.0 to 10.2.3
Bumps Asp.Versioning.Mvc.ApiExplorer from 10.0.0 to 10.2.1
Bumps Asp.Versioning.OpenApi from 10.0.0-rc.1 to 10.2.3
Bumps Aspire.Hosting.AppHost from 13.4.6 to 13.5.3
Bumps dotnet-reportgenerator-globaltool from 5.5.10 to 5.5.11
Bumps Google.Apis.Auth from 1.75.0 to 1.76.0
Bumps MessagePack from 3.1.7 to 3.1.8
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.9 to 10.0.11
Bumps Microsoft.Extensions.Http.Resilience from 10.7.0 to 10.9.0
Bumps Microsoft.NET.Test.Sdk from 18.6.0 to 18.9.0
Bumps Microsoft.OpenApi from 2.7.5 to 2.12.2
Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.2 to 10.0.3
Bumps NsDepCop from 3.0.0 to 3.1.0
Bumps OpenTelemetry to 1.18.0
Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol to 1.18.0
Bumps OpenTelemetry.Extensions.Hosting to 1.18.0
Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.16.0 to 1.18.0
Bumps OpenTelemetry.Instrumentation.Http from 1.16.0 to 1.18.0
Bumps OpenTelemetry.Instrumentation.Runtime from 1.15.1 to 1.18.0
Bumps Scalar.AspNetCore from 2.16.4 to 2.17.2
Bumps System.IdentityModel.Tokens.Jwt from 8.19.1 to 8.22.0
Bumps Testcontainers.PostgreSql from 4.13.0 to 4.14.0

---
updated-dependencies:
- dependency-name: Asp.Versioning.Http
  dependency-version: 10.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: Asp.Versioning.Mvc.ApiExplorer
  dependency-version: 10.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: Asp.Versioning.OpenApi
  dependency-version: 10.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: Aspire.Hosting.AppHost
  dependency-version: 13.5.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: dotnet-reportgenerator-globaltool
  dependency-version: 5.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Google.Apis.Auth
  dependency-version: 1.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: MessagePack
  dependency-version: 3.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 10.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.OpenApi
  dependency-version: 2.12.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL
  dependency-version: 10.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: NsDepCop
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: OpenTelemetry
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: OpenTelemetry
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: OpenTelemetry.Instrumentation.AspNetCore
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: OpenTelemetry.Instrumentation.Http
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: OpenTelemetry.Instrumentation.Runtime
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: Scalar.AspNetCore
  dependency-version: 2.17.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-version: 8.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: Testcontainers.PostgreSql
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@cstacklab
Migrate to Microsoft.Testing.Platform, bump xunit to 4.0.0, exclude g…
c737329 
…enerated code from CodeQL (#40)

xunit.v3 4.0.0 pulls a newer Microsoft.Testing.Platform chain that hard-errors on
.NET 10 GA when dotnet test runs through the legacy VSTest bridge. Opt in to the
native MTP runner via global.json (test.runner) instead of pinning back to VSTest.

- global.json: add test.runner = Microsoft.Testing.Platform
- Directory.Packages.props: bump xunit.v3 / xunit.v3.extensibility.core /
  xunit.runner.visualstudio to 4.0.0
- build.yml, template.yml: dotnet test now takes --solution (positional solution
  paths are rejected under MTP) and drops /nr:false, which silently breaks
  solution-level test discovery ("Zero tests ran") under the new runner
- codeql.yml: point CodeQL at a config file that excludes generated code
  (obj/**, bin/**) from analysis, since build-mode: manual traces dotnet build
  and CodeQL was flagging build-generated .cs files under obj/

Verified: clean restore/format/build/test locally and via the packaged template
(pack -> install -> instantiate -> restore/build/test), both green, matching the
CI invocation exactly.
@cstacklab
update scalar and test containers (#41)
e99c5d9
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 22, 2026
@dependabot
Bump the nuget-minor-and-patch group with 23 updates (#54)
d2dc1ce 
Bumps Aspire.Hosting.AppHost from 13.5.3 to 13.6.3
Bumps coverlet.collector from 10.0.1 to 10.1.0
Bumps FluentValidation from 12.1.1 to 12.2.0
Bumps FluentValidation.DependencyInjectionExtensions from 12.1.1 to 12.2.0
Bumps Google.Apis.Auth from 1.76.0 to 1.77.0
Bumps MessagePack from 3.1.8 to 3.1.12
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.11 to 10.0.13
Bumps Microsoft.Extensions.Http.Resilience from 10.9.0 to 10.11.0
Bumps Microsoft.NET.Test.Sdk from 18.9.0 to 18.11.0
Bumps Microsoft.OpenApi from 2.12.2 to 2.13.0
Bumps NsDepCop from 3.1.0 to 3.2.0
Bumps OpenTelemetry from 1.18.0 to 1.20.1
Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.18.0 to 1.20.1
Bumps OpenTelemetry.Extensions.Hosting from 1.18.0 to 1.20.1
Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.18.0 to 1.20.1
Bumps OpenTelemetry.Instrumentation.Http from 1.18.0 to 1.20.1
Bumps OpenTelemetry.Instrumentation.Runtime from 1.18.0 to 1.20.1
Bumps Scalar.AspNetCore from 2.17.3 to 2.18.2
Bumps System.IdentityModel.Tokens.Jwt from 8.22.0 to 8.23.0
Bumps Testcontainers.PostgreSql from 4.15.0 to 4.16.0
Bumps xunit.runner.visualstudio from 4.0.0 to 4.0.1
Bumps xunit.v3 from 4.0.0 to 4.0.2
Bumps xunit.v3.extensibility.core from 4.0.0 to 4.0.2

---
updated-dependencies:
- dependency-name: Aspire.Hosting.AppHost
  dependency-version: 13.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: coverlet.collector
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: FluentValidation
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: FluentValidation.DependencyInjectionExtensions
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: Google.Apis.Auth
  dependency-version: 1.77.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: MessagePack
  dependency-version: 3.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 10.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.OpenApi
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: NsDepCop
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: OpenTelemetry
  dependency-version: 1.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: OpenTelemetry.Instrumentation.AspNetCore
  dependency-version: 1.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: OpenTelemetry.Instrumentation.Http
  dependency-version: 1.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: OpenTelemetry.Instrumentation.Runtime
  dependency-version: 1.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: Scalar.AspNetCore
  dependency-version: 2.18.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-version: 8.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: Testcontainers.PostgreSql
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: xunit.runner.visualstudio
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: xunit.v3
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: xunit.v3.extensibility.core
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot dependabot Bot changed the title Bump Microsoft.OpenApi from 2.12.2 to 3.11.0 Bump Microsoft.OpenApi from 2.13.0 to 3.11.0 Oct 26, 2026
@dependabot
dependabot Bot force-pushed the dependabot/nuget/Microsoft.OpenApi-3.11.0 branch from ebd6abc to 5e79999 Compare October 26, 2026 00:45
@dependabot
Bump github/codeql-action from 4.37.3 to 4.39.1 (#53)
d3d8236 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.3 to 4.39.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v4.37.3...v4.39.1)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@cstacklab

cstacklab commented Oct 26, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
Bump Microsoft.OpenApi from 2.13.0 to 3.11.0
8c8fc6d 
---
updated-dependencies:
- dependency-name: Microsoft.OpenApi
  dependency-version: 3.11.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/nuget/Microsoft.OpenApi-3.11.0 branch from 5e79999 to d068b83 Compare October 26, 2026 00:56
@cstacklab cstacklab closed this Oct 29, 2026
@cstacklab
cstacklab force-pushed the dependabot/nuget/Microsoft.OpenApi-3.11.0 branch from d068b83 to 8c8fc6d Compare October 29, 2026 09:50
@dependabot @github

dependabot Bot commented on behalf of github Oct 29, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/nuget/Microsoft.OpenApi-3.11.0 branch October 29, 2026 09:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Add missing keywords support for OpenAPIReference (and JsonSchemaRefernece Update Microsoft.OpenApi.OData to 3.2.1 on main (OpenAPI 3.2)

1 participant

@cstacklab