Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[deps] Platform: Update dotnet monorepo #4886

Merged
merged 2 commits into from
Oct 28, 2024
Merged

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 14, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
Microsoft.AspNetCore.Authentication.JwtBearer (source) 8.0.8 -> 8.0.10 age adoption passing confidence
Microsoft.AspNetCore.DataProtection (source) 8.0.8 -> 8.0.10 age adoption passing confidence
Microsoft.AspNetCore.Mvc.Testing (source) 8.0.8 -> 8.0.10 age adoption passing confidence
Microsoft.Extensions.Caching.SqlServer (source) 8.0.8 -> 8.0.10 age adoption passing confidence
Microsoft.Extensions.Caching.StackExchangeRedis (source) 8.0.8 -> 8.0.10 age adoption passing confidence
Microsoft.Extensions.Identity.Stores (source) 8.0.8 -> 8.0.10 age adoption passing confidence
Microsoft.Extensions.TimeProvider.Testing (source) 8.9.1 -> 8.10.0 age adoption passing confidence

Release Notes

dotnet/aspnetcore (Microsoft.AspNetCore.Authentication.JwtBearer)

v8.0.10: .NET 8.0.10

Release

dotnet/extensions (Microsoft.Extensions.TimeProvider.Testing)

v8.10.0: .NET Extensions 8.10.0

8.10.0 packages are no all published in NuGet.org

What's Changed

New Contributors

Full Changelog: dotnet/extensions@v8.8.0...v8.10.0


Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested review from a team and addisonbeck October 14, 2024 01:33
@bitwarden-bot bitwarden-bot changed the title [deps] Platform: Update dotnet monorepo [PM-13561] [deps] Platform: Update dotnet monorepo Oct 14, 2024
@bitwarden-bot
Copy link

Internal tracking:

@renovate renovate bot changed the title [PM-13561] [deps] Platform: Update dotnet monorepo [deps] Platform: Update dotnet monorepo Oct 14, 2024
@renovate renovate bot force-pushed the renovate/dotnet-monorepo branch 2 times, most recently from 89d89d6 to a3c11ef Compare October 28, 2024 09:03
@addisonbeck addisonbeck requested a review from a team as a code owner October 28, 2024 17:03
Copy link
Contributor Author

renovate bot commented Oct 28, 2024

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@addisonbeck
Copy link
Contributor

addisonbeck commented Oct 28, 2024

Upgrade the dotnet monorepo

Tracking

🖌️ Jira ticket(s)

🌳 Development branch(s)

  • server: renovate/dotnet-monorepo

🔀 Pull Request(s)

🔎 What's the dotnet monorepo?

Core tooling for the .NET framework

🧬 Upgrade type

  • Major
  • Minor
  • Patch

v8.0.8 -> v8.0.10

! One package in this bundle (Microsoft.Extensions.TimeProvider.Testing)
is being bumped from v8.9.1 -> 8.10.0

😁/😭 Renovate status

Renovate is not happy about this one. There is a high risk rate, and CI is
broken on the PR.

🚩 Red Flags

  • This upgrade includes a breaking change at all
  • This upgrade includes a breaking change related to our use case of the package
  • Renovate indicates low adoption
  • The updates is very new (less than one week old)
  • Renovate indicates a high risk rate
  • This upgrade is a multi-jump minor or major upgrade
  • This dependency is a bundled dependency (not a dev dependency)
  • This dependency upgrade broke CI
  • The upstream changes to source are difficult to follow

🎬 Verdict

  • This dependency was upgraded with no manual intervention
  • This dependency was upgraded with manual intervention
  • This dependency was not upgraded

🚔 What manual intervention occured?

Renovate appears to have missed a few version bumps.

🧮 Side Effects

I seem to have modified some lines in .csproj files to have unix line
endings.

Copy link
Contributor

@withinfocus withinfocus left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks fine for the DB changes. Seems some content encoding fixes showed up too (good thing).

@addisonbeck addisonbeck merged commit 6cc097e into main Oct 28, 2024
52 checks passed
@addisonbeck addisonbeck deleted the renovate/dotnet-monorepo branch October 28, 2024 17:35
Copy link
Contributor

Logo
Checkmarx One – Scan Summary & Details07d7bde4-7f49-4798-a671-924dfa34014c

New Issues

Severity Issue Source File / Package Checkmarx Insight
MEDIUM CSRF /src/Api/AdminConsole/Controllers/PoliciesController.cs: 58 Attack Vector

Fixed Issues

Severity Issue Source File / Package
MEDIUM CSRF /src/Api/AdminConsole/Controllers/PoliciesController.cs: 59

cyprain-okeke pushed a commit that referenced this pull request Oct 30, 2024
* [deps] Platform: Update dotnet monorepo

* Update patch version on missed monorepo packages

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Addison Beck <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants