Skip to content

chore(deps): Bump the nuget-dependencies group with 6 updates - #128

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/Hosting/PokManager.AppHost/nuget-dependencies-5545052d2d
Closed

chore(deps): Bump the nuget-dependencies group with 6 updates#128
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/Hosting/PokManager.AppHost/nuget-dependencies-5545052d2d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Updated MessagePack from 3.1.7 to 3.1.8.

Release notes

Sourced from MessagePack's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated MudBlazor from 9.6.0 to 9.7.0.

Release notes

Sourced from MudBlazor's releases.

9.7.0

What's Changed

Breaking Changes

New Features

Bug Fixes

Other Changes

New Contributors

Full Changelog: MudBlazor/MudBlazor@v9.6.0...v9.7.0

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.Runtime from 1.15.1 to 1.16.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.Runtime's releases.

1.16.0

1.16.0-rc.1

  • NuGet: OpenTelemetry.Instrumentation.Process v1.16.0-rc.1

    • Updated semantic conventions to
      v1.42.0.
      (#​4602)

      • Breaking Change: The process.cpu.time metric attribute process.cpu.state
        was renamed to cpu.mode.
      • Added the process.uptime metric.
      • Added the process.windows.handle.count metric (Windows only).
      • Added the process.unix.file_descriptor.count metric (Linux only).

    • Assemblies are now digitally signed using cosign.
      (#​4637)

    • Updated semantic conventions to
      v1.43.0
      and marked package as release candidate.
      (#​4675)

    See CHANGELOG for details.

1.16.0-beta.1

1.16.0-alpha.1

1.15.2

Commits viewable in compare view.

Updated SQLitePCLRaw.lib.e_sqlite3 from 3.50.3 to 3.53.3.

Release notes

Sourced from SQLitePCLRaw.lib.e_sqlite3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated TinyBDD from 0.19.27 to 0.19.28.

Release notes

Sourced from TinyBDD's releases.

0.19.28

What's Changed

Full Changelog: JerrettDavis/TinyBDD@v0.19.27...v0.19.28

Commits viewable in compare view.

Updated TinyBDD.Xunit from 0.19.27 to 0.19.28.

Release notes

Sourced from TinyBDD.Xunit's releases.

0.19.28

What's Changed

Full Changelog: JerrettDavis/TinyBDD@v0.19.27...v0.19.28

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): Bump the nuget-dependencies group with 6 updates
ef1c3ed 
Bumps MessagePack from 3.1.7 to 3.1.8
Bumps MudBlazor from 9.6.0 to 9.7.0
Bumps OpenTelemetry.Instrumentation.Runtime from 1.15.1 to 1.16.0
Bumps SQLitePCLRaw.lib.e_sqlite3 from 3.50.3 to 3.53.3
Bumps TinyBDD from 0.19.27 to 0.19.28
Bumps TinyBDD.Xunit from 0.19.27 to 0.19.28

---
updated-dependencies:
- dependency-name: MessagePack
  dependency-version: 3.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: MudBlazor
  dependency-version: 9.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: OpenTelemetry.Instrumentation.Runtime
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: SQLitePCLRaw.lib.e_sqlite3
  dependency-version: 3.53.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: TinyBDD
  dependency-version: 0.19.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: TinyBDD
  dependency-version: 0.19.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: TinyBDD
  dependency-version: 0.19.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: TinyBDD
  dependency-version: 0.19.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: TinyBDD.Xunit
  dependency-version: 0.19.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: TinyBDD.Xunit
  dependency-version: 0.19.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

github-actions Bot commented Jul 13, 2026

Copy link
Copy Markdown

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 10 package(s) with unknown licenses.
See the Details below.

License Issues

src/Hosting/PokManager.AppHost/PokManager.AppHost.csproj

PackageVersionLicenseIssue Type
MessagePack3.1.8NullUnknown License

src/Hosting/PokManager.ServiceDefaults/PokManager.ServiceDefaults.csproj

PackageVersionLicenseIssue Type
OpenTelemetry.Instrumentation.Runtime1.16.0NullUnknown License

src/Presentation/PokManager.Web/PokManager.Web.csproj

PackageVersionLicenseIssue Type
MudBlazor9.7.0NullUnknown License
SQLitePCLRaw.lib.e_sqlite33.53.3NullUnknown License

tests/PokManager.Application.Tests/PokManager.Application.Tests.csproj

PackageVersionLicenseIssue Type
TinyBDD0.19.28NullUnknown License
TinyBDD.Xunit0.19.28NullUnknown License

tests/PokManager.Domain.Tests/PokManager.Domain.Tests.csproj

PackageVersionLicenseIssue Type
TinyBDD0.19.28NullUnknown License

tests/PokManager.Infrastructure.Tests/PokManager.Infrastructure.Tests.csproj

PackageVersionLicenseIssue Type
TinyBDD0.19.28NullUnknown License
TinyBDD.Xunit0.19.28NullUnknown License

tests/PokManager.Web.Tests/PokManager.Web.Tests.csproj

PackageVersionLicenseIssue Type
TinyBDD0.19.28NullUnknown License
Allowed Licenses: MIT, Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISC, 0BSD

OpenSSF Scorecard

PackageVersionScoreDetails
nuget/MessagePack 3.1.8 UnknownUnknown
nuget/OpenTelemetry.Instrumentation.Runtime 1.16.0 🟢 8.3
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 29 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
License🟢 10license file detected
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
Security-Policy🟢 10security policy file detected
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 23 contributing companies or organizations
nuget/MudBlazor 9.7.0 UnknownUnknown
nuget/SQLitePCLRaw.lib.e_sqlite3 3.53.3 UnknownUnknown
nuget/TinyBDD 0.19.28 UnknownUnknown
nuget/TinyBDD.Xunit 0.19.28 UnknownUnknown
nuget/TinyBDD 0.19.28 UnknownUnknown
nuget/TinyBDD 0.19.28 UnknownUnknown
nuget/TinyBDD.Xunit 0.19.28 UnknownUnknown
nuget/TinyBDD 0.19.28 UnknownUnknown

Scanned Files

  • src/Hosting/PokManager.AppHost/PokManager.AppHost.csproj
  • src/Hosting/PokManager.ServiceDefaults/PokManager.ServiceDefaults.csproj
  • src/Presentation/PokManager.Web/PokManager.Web.csproj
  • tests/PokManager.Application.Tests/PokManager.Application.Tests.csproj
  • tests/PokManager.Domain.Tests/PokManager.Domain.Tests.csproj
  • tests/PokManager.Infrastructure.Tests/PokManager.Infrastructure.Tests.csproj
  • tests/PokManager.Web.Tests/PokManager.Web.Tests.csproj

@dependabot @github

dependabot Bot commented on behalf of github Jul 14, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/nuget/src/Hosting/PokManager.AppHost/nuget-dependencies-5545052d2d branch July 14, 2026 01:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@JerrettDavis