From 9e7c8d7172ae3bff16a3c2894b34b51beaceab32 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 3 Jul 2026 04:29:23 +0000 Subject: [PATCH 1/2] chore(deps): Bump the nuget-dependencies group with 21 updates Bumps AWSSDK.SecretsManager from 4.0.5.4 to 4.0.100 Bumps JD.SemanticKernel.Connectors.ClaudeCode from 1.0.34 to 1.0.40 Bumps JD.SemanticKernel.Connectors.GitHubCopilot from 0.1.61 to 0.1.70 Bumps JD.SemanticKernel.Connectors.OpenAICodex from 0.1.30 to 0.1.36 Bumps JD.SemanticKernel.Extensions from 0.1.103 to 0.1.109 Bumps JD.SemanticKernel.Extensions.Mcp from 0.1.103 to 0.1.109 Bumps jetbrains.resharper.globaltools from 2026.1.2 to 2026.1.3 Bumps Markdig from 1.3.0 to 1.3.2 Bumps Meziantou.Analyzer from 3.0.104 to 3.0.117 Bumps Microsoft.NET.Test.Sdk from 18.6.0 to 18.7.0 Bumps Microsoft.OpenApi from 2.7.5 to 3.7.0 Bumps Microsoft.Playwright from 1.60.0 to 1.61.0 Bumps MudBlazor from 9.5.0 to 9.6.0 Bumps Nerdbank.GitVersioning from 3.9.50 to 3.10.85 Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.15.2 to 1.16.0 Bumps OpenTelemetry.Instrumentation.Http from 1.15.1 to 1.16.0 Bumps Spectre.Console from 0.57.0 to 0.57.1 Bumps StackExchange.Redis from 3.0.0 to 3.0.11 Bumps TinyBDD.Xunit from 0.19.23 to 0.19.27 Bumps WorkflowFramework from 1.0.1 to 1.0.4 Bumps YamlDotNet from 18.0.0 to 18.1.0 --- updated-dependencies: - dependency-name: AWSSDK.SecretsManager dependency-version: 4.0.100 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: JD.SemanticKernel.Connectors.ClaudeCode dependency-version: 1.0.40 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: JD.SemanticKernel.Connectors.GitHubCopilot dependency-version: 0.1.70 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: JD.SemanticKernel.Connectors.OpenAICodex dependency-version: 0.1.36 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: JD.SemanticKernel.Extensions dependency-version: 0.1.109 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: JD.SemanticKernel.Extensions.Mcp dependency-version: 0.1.109 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: jetbrains.resharper.globaltools dependency-version: 2026.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Markdig dependency-version: 1.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Meziantou.Analyzer dependency-version: 3.0.117 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: Microsoft.OpenApi dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-dependencies - dependency-name: Microsoft.Playwright dependency-version: 1.61.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: MudBlazor dependency-version: 9.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: Nerdbank.GitVersioning dependency-version: 3.10.85 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: OpenTelemetry.Instrumentation.Http dependency-version: 1.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: Spectre.Console dependency-version: 0.57.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: StackExchange.Redis dependency-version: 3.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: TinyBDD.Xunit dependency-version: 0.19.27 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: WorkflowFramework dependency-version: 1.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: YamlDotNet dependency-version: 18.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies ... Signed-off-by: dependabot[bot] --- .config/dotnet-tools.json | 52 ++++----- Directory.Packages.props | 220 +++++++++++++++++++------------------- 2 files changed, 136 insertions(+), 136 deletions(-) diff --git a/.config/dotnet-tools.json b/.config/dotnet-tools.json index 055221dc..f3b139ba 100644 --- a/.config/dotnet-tools.json +++ b/.config/dotnet-tools.json @@ -1,27 +1,27 @@ -{ - "version": 1, - "isRoot": true, - "tools": { - "jetbrains.resharper.globaltools": { - "version": "2026.1.2", - "commands": [ - "jb" - ], - "rollForward": false - }, - "dotnet-reportgenerator-globaltool": { - "version": "5.5.10", - "commands": [ - "reportgenerator" - ], - "rollForward": false - }, - "husky": { - "version": "0.9.1", - "commands": [ - "husky" - ], - "rollForward": false - } - } +{ + "version": 1, + "isRoot": true, + "tools": { + "jetbrains.resharper.globaltools": { + "version": "2026.1.3", + "commands": [ + "jb" + ], + "rollForward": false + }, + "dotnet-reportgenerator-globaltool": { + "version": "5.5.10", + "commands": [ + "reportgenerator" + ], + "rollForward": false + }, + "husky": { + "version": "0.9.1", + "commands": [ + "husky" + ], + "rollForward": false + } + } } \ No newline at end of file diff --git a/Directory.Packages.props b/Directory.Packages.props index af29cae8..aa93a57f 100644 --- a/Directory.Packages.props +++ b/Directory.Packages.props @@ -1,110 +1,110 @@ - - - true - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + + + true + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + From d99763d260b38525adcbd9ede4127faf8be3c96f Mon Sep 17 00:00:00 2001 From: JerrettDavis Date: Fri, 3 Jul 2026 11:07:36 -0500 Subject: [PATCH 2/2] fix(deps): keep Microsoft.OpenApi on 2.x (3.x breaks .NET 10 source generator) The nuget-dependencies group bumped Microsoft.OpenApi from 2.7.5 to 3.7.0. The .NET 10 Microsoft.AspNetCore.OpenApi (10.0.9) XML-comment source generator emits `IOpenApiMediaType.Example = ...`, which is a writable property in 2.x but became read-only in 3.x, producing CS0200 build failures in JD.AI.Gateway. No Microsoft.AspNetCore.OpenApi release compatible with Microsoft.OpenApi 3.x exists for .NET 10 yet, so the generated code cannot be reconciled. Pin Microsoft.OpenApi to the latest secure 2.x (2.9.0, still above GHSA-v5pm-xwqc-g5wc) and ignore semver-major updates in dependabot until a 3.x-compatible Microsoft.AspNetCore.OpenApi ships. The other 20 group updates are kept. Co-Authored-By: Claude Opus 4.6 --- .github/dependabot.yml | 7 +++++++ Directory.Packages.props | 2 +- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 20471c48..79f9d5b4 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -42,6 +42,13 @@ updates: ignore: - dependency-name: "SixLabors.ImageSharp" update-types: ["version-update:semver-major"] + # Microsoft.OpenApi must stay on 2.x. The .NET 10 Microsoft.AspNetCore.OpenApi + # (10.0.9) XML-comment source generator emits `IOpenApiMediaType.Example = ...`, + # which is writable in 2.x but read-only in 3.x, causing CS0200 build failures. + # No AspNetCore.OpenApi release compatible with Microsoft.OpenApi 3.x exists for + # .NET 10 yet. Revisit once a 3.x-compatible Microsoft.AspNetCore.OpenApi ships. + - dependency-name: "Microsoft.OpenApi" + update-types: ["version-update:semver-major"] - package-ecosystem: "npm" directories: diff --git a/Directory.Packages.props b/Directory.Packages.props index aa93a57f..e43989d0 100644 --- a/Directory.Packages.props +++ b/Directory.Packages.props @@ -52,7 +52,7 @@ - +