Bump the dependencies group with 14 updates by dependabot[bot] · Pull Request #81 · guibranco/daftalerts-api

dependabot · 2026-09-29T06:48:14Z

Updated coverlet.collector from 10.0.1 to 10.1.0.

Release notes

Sourced from coverlet.collector's releases.

10.1.0

Improvements

Publish Microsoft.Testing.Platform coverage messages from coverlet.MTP #2019
Implement dynamic exclusion filters for assemblies (Coverlet.MTP) #1946
Replace legacy .sln files with modern .slnx format #1966
coverlet.console: add trace diagnostics and actionable warnings for instrumentation/hit/empty-result failures #2005
Relax auto-property skip logic and improve coverage for records #1941

Fixed

Fix coverlet.MTP does not collect coverage on the .NET Framework portion of a large project #1980 #1967
Fix Regression in branch coverage for lambda expressions #1938
Fix When using "is" with "or" in pattern matching, branch coverage is lower than normal #1979
Fix silent zero coverage on .NET Framework since 8.0.0 #1985 by @tobiwae
Fix Race condition between ProcessExit hit-file write and out-of-proc coverage read causes EndOfStreamException #1987 #1988 by @bkoelman
Fix Regression TypeInitializationException when targeting .NET Framework - Could not load type 'System.Collections.Concurrent.ConcurrentBag #2010
Fix use --config-file CLI arg in coverlet.MTP #2030 by alexthornton1
Fix silently empty coverage for shared-framework assemblies missing from compileLibraries #2032 by @Eljees

Diff between 10.0.1 and 10.1.0

Commits viewable in compare view.

Updated HtmlAgilityPack from 1.12.4 to 1.13.0.

Release notes

Sourced from HtmlAgilityPack's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration.EnvironmentVariables's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Json from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration.Json's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Options's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Options.ConfigurationExtensions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated MimeKit from 4.17.0 to 4.18.1.

Release notes

Sourced from MimeKit's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Moq from 4.20.72 to 4.21.0.

Release notes

Sourced from Moq's releases.

4.21.0 What's Changed

✨ Implemented enhancements

Improve performance of It.Is matcher when used with an expression by compiling only once by @peterder72 in Improve performance of It.Is matcher when used with an expression by compiling only once devlooped/moq#1512
Updated ctor params to support nullable args by @Asafima in Updated ctor params to support nullable args devlooped/moq#1518
Performance improvement for Mocking many large classes by @crinksdr in Performance improvement for Mocking many large classes devlooped/moq#1530

🐛 Fixed bugs

Minor enhancement to avoid null exceptions by @ShirAvneri in Minor enhancement to avoid null exceptions devlooped/moq#1542
Fix #1648 reliably (lazy ValueTask registration + committed harness verification) by @kzu in Fix #1648 reliably (lazy ValueTask registration + committed harness verification) devlooped/moq#1680

🔨 Other

Updated IVerifies.Verifiable method documentation code example by @Asafima in Updated IVerifies.Verifiable method documentation code example devlooped/moq#1528
Bump dependencies by @kzu in Bump dependencies devlooped/moq#1545
Address build warnings by @kzu in Address build warnings devlooped/moq#1546
Enable nullable references in Moq.csproj by @andrewimcclement in Enable nullable references in Moq.csproj devlooped/moq#1535
Bump NuGetizer to 1.4.9 by @kzu with @Copilot in Bump NuGetizer to 1.4.9 devlooped/moq#1684

New Contributors

@peterder72 made their first contribution in Improve performance of It.Is matcher when used with an expression by compiling only once devlooped/moq#1512
@Asafima made their first contribution in Updated ctor params to support nullable args devlooped/moq#1518
@crinksdr made their first contribution in Performance improvement for Mocking many large classes devlooped/moq#1530
@ShirAvneri made their first contribution in Minor enhancement to avoid null exceptions devlooped/moq#1542
@andrewimcclement made their first contribution in Enable nullable references in Moq.csproj devlooped/moq#1535
@kzu with @Copilot made their first contribution in Bump NuGetizer to 1.4.9 devlooped/moq#1684

Full Changelog: devlooped/moq@v4.20.72...v4.21.0

8.8.0 Highlights

Add EnableReloadsWithMonitor() accepting custom IOptionsMonitor by @arashzjahangiri in feat(extensions): add EnableReloads overload accepting custom IOptionsMonitor App-vNext/Polly#3140
Return null from FaultGenerator when no fault is generated by @dualfroz in Return null from FaultGenerator when no fault is generated App-vNext/Polly#3220

What's Changed

Update workflow timeout by @martincostello in Update workflow timeout App-vNext/Polly#3106
Set SOURCE_DATE_EPOCH by @martincostello in Set SOURCE_DATE_EPOCH App-vNext/Polly#3115
Use NUGET_API_KEY by @martincostello in Use NUGET_API_KEY App-vNext/Polly#3116
Test refactoring by @martincostello in Test refactoring App-vNext/Polly#3132
Avoid test flakiness by @martincostello in Avoid test flakiness App-vNext/Polly#3134
Group github/codeql-action updates by @martincostello in Group github/codeql-action updates App-vNext/Polly#3147
Fix wrong word in hedging documentation by @latent-9 in Fix wrong word in hedging documentation App-vNext/Polly#3191
OSMF sponsorship notice by @joelhulen in OSMF sponsorship App-vNext/Polly#3194
Fix XML doc comment on PipelineExecutedArguments by @JiuYue0820 in Fix XML doc comment on PipelineExecutedArguments App-vNext/Polly#3201
Update to xunit v3 by @martincostello in Update to xunit v3 App-vNext/Polly#3131
.NET 11 preparation by @martincostello in .NET 11 preparation App-vNext/Polly#3225
Fix flaky test by @martincostello in Fix flaky test App-vNext/Polly#3231

New Contributors

@arashzjahangiri made their first contribution in feat(extensions): add EnableReloads overload accepting custom IOptionsMonitor App-vNext/Polly#3140
@latent-9 made their first contribution in Fix wrong word in hedging documentation App-vNext/Polly#3191
@JiuYue0820 made their first contribution in Fix XML doc comment on PipelineExecutedArguments App-vNext/Polly#3201
@dualfroz made their first contribution in Return null from FaultGenerator when no fault is generated App-vNext/Polly#3220

Full Changelog: App-vNext/Polly@8.7.0...8.8.0

Commits viewable in compare view.

Updated Scalar.AspNetCore from 2.16.11 to 2.17.10.

Release notes

Sourced from Scalar.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps coverlet.collector from 10.0.1 to 10.1.0 Bumps HtmlAgilityPack from 1.12.4 to 1.13.0 Bumps Microsoft.Extensions.Configuration from 10.0.9 to 10.0.12 Bumps Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.9 to 10.0.12 Bumps Microsoft.Extensions.Configuration.Json from 10.0.9 to 10.0.12 Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.9 to 10.0.12 Bumps Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 10.0.9 to 10.0.12 Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.9 to 10.0.12 Bumps Microsoft.Extensions.Options from 10.0.9 to 10.0.12 Bumps Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.9 to 10.0.12 Bumps MimeKit from 4.17.0 to 4.18.1 Bumps Moq from 4.20.72 to 4.21.0 Bumps Polly from 8.7.0 to 8.8.0 Bumps Scalar.AspNetCore from 2.16.11 to 2.17.10 --- updated-dependencies: - dependency-name: coverlet.collector dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: HtmlAgilityPack dependency-version: 1.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: Microsoft.Extensions.Configuration dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.Extensions.Configuration.EnvironmentVariables dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.Extensions.Configuration.Json dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.Extensions.Options dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: MimeKit dependency-version: 4.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: Moq dependency-version: 4.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: Polly dependency-version: 8.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: Scalar.AspNetCore dependency-version: 2.17.10 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-29T06:48:15Z

Labels

The following labels could not be found: .NET, dependencies, packages. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

guibranco

Automatically approved by gstraccini[bot]

coderabbitai · 2026-09-29T06:48:33Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: cd3a7ba4-53cb-48c3-9e7a-f1649935e40b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

socket-security · 2026-09-29T06:48:44Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	microsoft.extensions.logging.abstractions@10.0.9 ⏵ 10.0.12
	microsoft.extensions.dependencyinjection.abstractions@10.0.9 ⏵ 10.0.12
	microsoft.extensions.options@10.0.9 ⏵ 10.0.12
	microsoft.extensions.configuration@10.0.9 ⏵ 10.0.12
	microsoft.extensions.configuration.environmentvariables@10.0.9 ⏵ 10.0.12
	microsoft.extensions.configuration.json@10.0.9 ⏵ 10.0.12
	microsoft.extensions.options.configurationextensions@10.0.9 ⏵ 10.0.12
	microsoft.extensions.diagnostics.healthchecks.entityframeworkcore@10.0.9 ⏵ 10.0.12
	scalar.aspnetcore@2.16.11 ⏵ 2.17.10
	mimekit@4.17.0 ⏵ 4.18.1
	polly@8.7.0 ⏵ 8.8.0
	htmlagilitypack@1.12.4 ⏵ 1.13.0

View full report

socket-security · 2026-09-29T06:48:46Z

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.

Priority	Alert (click "▶" to expand/collapse)	Action
	System shell access: nuget `polly.core` Location: Package overview From: src/DaftAlerts.Infrastructure/DaftAlerts.Infrastructure.csproj → `nuget/polly@8.8.0` → `nuget/polly.core@8.8.0` ℹ Read more on: This package \| This alert \| What is shell access? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore nuget/polly.core@8.8.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Block
	Dynamic code execution: nuget `polly.core` Location: Package overview From: src/DaftAlerts.Infrastructure/DaftAlerts.Infrastructure.csproj → `nuget/polly@8.8.0` → `nuget/polly.core@8.8.0` ℹ Read more on: This package \| This alert \| What is dynamic code execution? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Avoid packages that use dynamic code execution like eval(), since this could potentially execute any code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore nuget/polly.core@8.8.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Block
	Dynamic code execution: nuget `polly` Location: Package overview From: src/DaftAlerts.Infrastructure/DaftAlerts.Infrastructure.csproj → `nuget/polly@8.8.0` ℹ Read more on: This package \| This alert \| What is dynamic code execution? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Avoid packages that use dynamic code execution like eval(), since this could potentially execute any code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore nuget/polly@8.8.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Block

View full report

sonarqubecloud · 2026-09-29T06:50:02Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot Bot assigned guibranco Sep 29, 2026

dependabot Bot added the nuget label Sep 29, 2026

guibranco enabled auto-merge (squash) September 29, 2026 06:48

gstraccini Bot added the ☑️ auto-merge Automatic merging of pull requests (gstraccini-bot) label Sep 29, 2026

Merge branch 'main' into dependabot/nuget/dependencies-cd9587fc44

17e87ac

gstraccini Bot approved these changes Sep 29, 2026

View reviewed changes

gstraccini Bot added the 🤖 bot Automated processes or integrations label Sep 29, 2026

guibranco approved these changes Sep 29, 2026

View reviewed changes

Navigation Menu

Bump the dependencies group with 14 updates - #81

Bump the dependencies group with 14 updates#81
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/nuget/dependencies-cd9587fc44

dependabot Bot commented on behalf of github Sep 29, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 29, 2026

Uh oh!

guibranco left a comment

Uh oh!

coderabbitai Bot commented Sep 29, 2026 •

edited

Loading

Review skipped

Uh oh!

socket-security Bot commented Sep 29, 2026

Uh oh!

socket-security Bot commented Sep 29, 2026

Uh oh!

sonarqubecloud Bot commented Sep 29, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 29, 2026

10.1.0

Improvements

Fixed

4.21.0

What's Changed

✨ Implemented enhancements

🐛 Fixed bugs

🔨 Other

New Contributors

Sponsors

8.8.0

Highlights

What's Changed

New Contributors

Uh oh!

dependabot Bot commented on behalf of github Sep 29, 2026

Labels

Uh oh!

guibranco left a comment

Choose a reason for hiding this comment

Uh oh!

coderabbitai Bot commented Sep 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

socket-security Bot commented Sep 29, 2026

Uh oh!

socket-security Bot commented Sep 29, 2026

Uh oh!

sonarqubecloud Bot commented Sep 29, 2026

Quality Gate passed

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

coderabbitai Bot commented Sep 29, 2026 •

edited

Loading