chore(deps): bump the dependencies group with 5 updates#195
chore(deps): bump the dependencies group with 5 updates#195dependabot[bot] wants to merge 3 commits intomainfrom
Conversation
Bumps coverlet.msbuild from 8.0.0 to 8.0.1 Bumps Microsoft.Bcl.AsyncInterfaces from 10.0.3 to 10.0.5 Bumps System.Diagnostics.DiagnosticSource from 10.0.3 to 10.0.5 Bumps System.Net.Http.Json from 10.0.3 to 10.0.5 Bumps System.Text.Json from 10.0.3 to 10.0.5 --- updated-dependencies: - dependency-name: coverlet.msbuild dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.Bcl.AsyncInterfaces dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: System.Diagnostics.DiagnosticSource dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: System.Net.Http.Json dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: System.Text.Json dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
|
Warning Review the following alerts detected in dependencies. According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.
|
…encies-e8e47b825b
There was a problem hiding this comment.
Pull request overview
This PR updates several NuGet dependencies used by the OpenFGA .NET SDK and its test project, primarily to pick up patch fixes and keep the compatibility package set current for pre-.NET 8 target frameworks.
Changes:
- Bump
System.Diagnostics.DiagnosticSource,System.Net.Http.Json, andSystem.Text.Jsonfrom10.0.3to10.0.5(for TFMs < net8). - Bump
Microsoft.Bcl.AsyncInterfacesfrom10.0.3to10.0.5. - Bump
coverlet.msbuildfrom8.0.0to8.0.1in the test project.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| src/OpenFga.Sdk/OpenFga.Sdk.csproj | Updates compatibility package versions for TFMs < net8 and bumps Microsoft.Bcl.AsyncInterfaces. |
| src/OpenFga.Sdk.Test/OpenFga.Sdk.Test.csproj | Updates compatibility package versions for TFMs < net8 and bumps coverlet.msbuild for test coverage tooling. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
…encies-e8e47b825b
Updated coverlet.msbuild from 8.0.0 to 8.0.1.
Release notes
Sourced from coverlet.msbuild's releases.
8.0.1
Fixed
Improvements
Diff between 8.0.0 and 8.0.1
Commits viewable in compare view.
Updated Microsoft.Bcl.AsyncInterfaces from 10.0.3 to 10.0.5.
Release notes
Sourced from Microsoft.Bcl.AsyncInterfaces's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated System.Diagnostics.DiagnosticSource from 10.0.3 to 10.0.5.
Release notes
Sourced from System.Diagnostics.DiagnosticSource's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated System.Net.Http.Json from 10.0.3 to 10.0.5.
Release notes
Sourced from System.Net.Http.Json's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated System.Text.Json from 10.0.3 to 10.0.5.
Release notes
Sourced from System.Text.Json's releases.
No release notes found for this version range.
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions