Bump MediatR and 7 others by dependabot[bot] · Pull Request #232 · cmu-sei/Blueprint.Api

This release improves generic call matching (#989, #974, #990). Thanks to @zvirja and @JMolenkamp for fixes this.
We've also switched to using trusted nuget publishing linked to GitHub Releases. (#987, @zvirja)

What's Changed

Add trusted nuget publish by @zvirja in Add trusted nuget publish nsubstitute/NSubstitute#987
fix: Stop using return-type assignability for generic call matching by @zvirja in fix: Stop using return-type assignability for generic call matching nsubstitute/NSubstitute#989
Remove skip-duplicate option from NuGet push command by @zvirja in Remove skip-duplicate option from NuGet push command nsubstitute/NSubstitute#988
Add tag trigger for release pipeline by @zvirja in Add tag trigger for release pipeline nsubstitute/NSubstitute#991
Fix broken comparison of the generic methods by @zvirja in Fix broken comparison of the generic methods nsubstitute/NSubstitute#990
Support C# 13 params collections in argument matching by @zvirja in Support C# 13 params collections in argument matching nsubstitute/NSubstitute#993
Add tests for nullable Task by @zvirja in Add tests for nullable Task nsubstitute/NSubstitute#994

Full Changelog: nsubstitute/NSubstitute@v6.1.0...v6.2.0

6.1.0

NSubstitute v6.1.0

This release reverts nullability support introduced in 6.0. This change caused a number of problems for callers (#973, #976), and trying to resolve these (#976) revealed the need for more fundamental changes to NSubstitute to effectively support this. As a result, nullability is again disabled for public API. Huge thanks to @jdb0123, @Romfos, and @Moha-sami for their PRs addressing this, and thanks for all those who raised issues. We also humbly award @zvirja with one unlimited "I told you so" pass to use as he sees fit.

What's Changed

Add new argument matcher for comparing objects by reference by @Wer-Wolf in Add new argument matcher for comparing objects by reference nsubstitute/NSubstitute#963
Revert nullability changes in Revert nullability changes nsubstitute/NSubstitute#985

New Contributors

@Wer-Wolf made their first contribution in Add new argument matcher for comparing objects by reference nsubstitute/NSubstitute#963

Full Changelog: nsubstitute/NSubstitute@v6.0.0...v6.1.0

Commits viewable in compare view.

Updated swashbuckle.aspnetcore.cli from 10.0.1 to 10.3.1.

Release notes

Sourced from swashbuckle.aspnetcore.cli's releases.

10.3.1 What's Changed

Remove Swashbuckle.AspNetCore.ApiTesting.Xunit by @martincostello in Remove Swashbuckle.AspNetCore.ApiTesting.Xunit domaindrivendev/Swashbuckle.AspNetCore#4188
Migrate to xunit v3 by @martincostello in Migrate to xunit v3 domaindrivendev/Swashbuckle.AspNetCore#4189
Normalize line endings by @martincostello in Normalize line endings domaindrivendev/Swashbuckle.AspNetCore#4190
Update .git-blame-ignore-revs by @martincostello in Update .git-blame-ignore-revs domaindrivendev/Swashbuckle.AspNetCore#4191
Fix AmbiguousMatchException for [FromQuery] by @SENESO in Fix AmbiguousMatchException for [FromQuery] domaindrivendev/Swashbuckle.AspNetCore#4209
Avoid deadlock when a schema filter depends on ISerializerDataContractResolver by @DevKaurav-14 in Avoid deadlock when a schema filter depends on ISerializerDataContractResolver domaindrivendev/Swashbuckle.AspNetCore#4210
Fix tests by @martincostello in Fix tests domaindrivendev/Swashbuckle.AspNetCore#4214

Deprecations

[!IMPORTANT]
Swashbuckle.AspNetCore.ApiTesting.Xunit depended on Xunit v2, which is no longer supported.

The package has been removed and no further versions will be released.

New Contributors

@SENESO made their first contribution in Fix AmbiguousMatchException for [FromQuery] domaindrivendev/Swashbuckle.AspNetCore#4209
@DevKaurav-14 made their first contribution in Avoid deadlock when a schema filter depends on ISerializerDataContractResolver domaindrivendev/Swashbuckle.AspNetCore#4210

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.3.0...v10.3.1

10.3.0 What's Changed

Change nullability handling for schemas with anyOf, allOf, oneOf or type = null by @ldeluigi in Change nullability handling for schemas with anyOf, allOf, oneOf or type = null domaindrivendev/Swashbuckle.AspNetCore#3976
Handle leading slash on route prefix during index.html GET by @superstator in Handle leading slash on route prefix during index.html GET domaindrivendev/Swashbuckle.AspNetCore#4084
Move NRT handling to DataContractResolver by @desjoerd in Move NRT handling to DataContractResolver domaindrivendev/Swashbuckle.AspNetCore#3998
Clarify nullable behaviour by @martincostello in Clarify nullable behaviour domaindrivendev/Swashbuckle.AspNetCore#4094
Fix review issues for caching and encoding by @martincostello in Fix review issues for caching and encoding domaindrivendev/Swashbuckle.AspNetCore#4093
Support multiple response types per status code by @DeagleGross in Support multiple response types per status code domaindrivendev/Swashbuckle.AspNetCore#4100
Add coverage for AddServer across multiple documents by @RaphaelFakhri in Add coverage for AddServer across multiple documents domaindrivendev/Swashbuckle.AspNetCore#4115
Fix Swagger sort key fallback for empty endpoint tags metadata by @AleksaMCode in Fix Swagger sort key fallback for empty endpoint tags metadata domaindrivendev/Swashbuckle.AspNetCore#4125
Fix parameter matching to consider location when names collide by @nonsoikem in Fix parameter matching to consider location when names collide domaindrivendev/Swashbuckle.AspNetCore#4126
Emit form encoding for properties of a complex form parameter by @RaphaelFakhri in Fix #3169: emit form encoding for properties of a complex form parameter domaindrivendev/Swashbuckle.AspNetCore#4128
Keep a property's own summary when comments come from several XML files by @RaphaelFakhri in Fix #3240: keep a property's own summary when comments come from several XML files domaindrivendev/Swashbuckle.AspNetCore#4129
Strip query string from relative document URLs in Swagger UI by @GabeSilvaDev in Strip query string from relative document URLs in Swagger UI domaindrivendev/Swashbuckle.AspNetCore#4152
Document that System.Text.Json ignores [EnumMember] by @RaphaelFakhri in Document that System.Text.Json ignores [EnumMember] domaindrivendev/Swashbuckle.AspNetCore#4127
Drop the regex route constraint from the default Swagger route by @RaphaelFakhri in Fix #2951: drop the regex route constraint from the default Swagger route domaindrivendev/Swashbuckle.AspNetCore#4130
Serialize custom values in the UI ConfigObject.AdditionalItems by @RaphaelFakhri in Fix #3153: serialize custom values in the UI ConfigObject AdditionalItems domaindrivendev/Swashbuckle.AspNetCore#4132
Use Minimal APIs JSON options when MVC is not registered by @RaphaelFakhri in Use Minimal APIs JSON options when MVC is not registered domaindrivendev/Swashbuckle.AspNetCore#4116
Resolve enum contracts against the underlying type under source generation by @RaphaelFakhri in Fix #3217: resolve enum contracts against the underlying type under source generation domaindrivendev/Swashbuckle.AspNetCore#4131

New Contributors

@ldeluigi made their first contribution in Change nullability handling for schemas with anyOf, allOf, oneOf or type = null domaindrivendev/Swashbuckle.AspNetCore#3976
@superstator made their first contribution in Handle leading slash on route prefix during index.html GET domaindrivendev/Swashbuckle.AspNetCore#4084
@desjoerd made their first contribution in Move NRT handling to DataContractResolver domaindrivendev/Swashbuckle.AspNetCore#3998
@RaphaelFakhri made their first contribution in Add coverage for AddServer across multiple documents domaindrivendev/Swashbuckle.AspNetCore#4115
@AleksaMCode made their first contribution in Fix Swagger sort key fallback for empty endpoint tags metadata domaindrivendev/Swashbuckle.AspNetCore#4125
@nonsoikem made their first contribution in Fix parameter matching to consider location when names collide domaindrivendev/Swashbuckle.AspNetCore#4126
@GabeSilvaDev made their first contribution in Strip query string from relative document URLs in Swagger UI domaindrivendev/Swashbuckle.AspNetCore#4152
@JulianThoms made their first contribution in Add regression tests for nullable dynamic properties domaindrivendev/Swashbuckle.AspNetCore#4182

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.3...v10.3.0

10.2.3 What's Changed

Bump swagger-ui-dist to 5.32.7 by @dependabot in Bump swagger-ui-dist from 5.32.6 to 5.32.7 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#4015

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.2...v10.2.3

10.2.2 What's Changed

Update NuGet packages by @martincostello in Update NuGet packages domaindrivendev/Swashbuckle.AspNetCore#3990
Set SOURCE_DATE_EPOCH by @martincostello in Set SOURCE_DATE_EPOCH domaindrivendev/Swashbuckle.AspNetCore#3997
Fix InvalidOperationException if no route matches by @martincostello in Fix InvalidOperationException if no route matches domaindrivendev/Swashbuckle.AspNetCore#3999
Fix empty parameter example not generated by @dldl-cmd in Fix empty parameter example not generated domaindrivendev/Swashbuckle.AspNetCore#3932
Map [MinLength]/[MaxLength] on dictionary properties to minProperties/maxProperties by @KitKeen in Map [MinLength]/[MaxLength] on dictionary properties to minProperties / maxProperties domaindrivendev/Swashbuckle.AspNetCore#3922
Fix conflicting required+nullable schema when only NonNullableReferen… by @KitKeen in Fix conflicting required+nullable schema when only NonNullableReferen… domaindrivendev/Swashbuckle.AspNetCore#3912
Fix ExposeSwaggerDocumentUrlsRoute behaviour by @martincostello in Fix ExposeSwaggerDocumentUrlsRoute behaviour domaindrivendev/Swashbuckle.AspNetCore#4000
Use NUGET_API_KEY by @martincostello in Use NUGET_API_KEY domaindrivendev/Swashbuckle.AspNetCore#4006

New Contributors

@KitKeen made their first contribution in Map [MinLength]/[MaxLength] on dictionary properties to minProperties / maxProperties domaindrivendev/Swashbuckle.AspNetCore#3922

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.1...v10.2.2

10.2.1 What's Changed

Update Microsoft.OpenApi to 2.7.5 to pick up fix for GHSA-v5pm-xwqc-g5wc by @martincostello in Update Microsoft.OpenApi to 2.7.5 domaindrivendev/Swashbuckle.AspNetCore#3974

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.0...v10.2.1

10.2.0 What's Changed

Add MapSwaggerUI and MapReDoc to support endpoint routing by @Strepto in Add MapSwaggerUI and MapReDoc to support endpoint routing domaindrivendev/Swashbuckle.AspNetCore#3822
Bump version to 10.2.0 by @martincostello in Bump version to 10.2.0 domaindrivendev/Swashbuckle.AspNetCore#3872
Bump swagger-ui-dist from 5.32.1 to 5.32.2 by @dependabot in Bump swagger-ui-dist from 5.32.1 to 5.32.2 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3883
Support HEAD requests by @snebjorn in Support HEAD requests domaindrivendev/Swashbuckle.AspNetCore#3887
Use IAsyncSwaggerProvider in CLI tofile command by @bt-Knodel in Use IAsyncSwaggerProvider in CLI tofile command domaindrivendev/Swashbuckle.AspNetCore#3910
Pin runner images by @martincostello in Pin runner images domaindrivendev/Swashbuckle.AspNetCore#3944
Disable npm install scripts by @martincostello in Disable npm install scripts domaindrivendev/Swashbuckle.AspNetCore#3946
Bump redoc from 2.5.2 to 2.5.3 by @dependabot in Bump redoc from 2.5.2 to 2.5.3 in /src/Swashbuckle.AspNetCore.ReDoc domaindrivendev/Swashbuckle.AspNetCore#3967

New Contributors

@Strepto made their first contribution in Add MapSwaggerUI and MapReDoc to support endpoint routing domaindrivendev/Swashbuckle.AspNetCore#3822
@snebjorn made their first contribution in Support HEAD requests domaindrivendev/Swashbuckle.AspNetCore#3887
@bt-Knodel made their first contribution in Use IAsyncSwaggerProvider in CLI tofile command domaindrivendev/Swashbuckle.AspNetCore#3910

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.7...v10.2.0

10.1.7 What's Changed

Support custom data type for DataTypeAttribute by @tayfunyuksel in Support custom data type for DataTypeAttribute domaindrivendev/Swashbuckle.AspNetCore#3868

New Contributors

@tayfunyuksel made their first contribution in Support custom data type for DataTypeAttribute domaindrivendev/Swashbuckle.AspNetCore#3868

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.6...v10.1.7

10.1.6 What's Changed

Fix handling of duplicate enum values for dictionaries by @martincostello in Fix handling of duplicate enum values for dictionaries domaindrivendev/Swashbuckle.AspNetCore#3839
Log exception when app fails to start in CLI by @ODukhno in Log exception when app fails to start in CLI domaindrivendev/Swashbuckle.AspNetCore#3853
Fix missing OpenAPI 3.1 $ref properties by @martincostello in Fix missing OpenAPI 3.1 $ref properties domaindrivendev/Swashbuckle.AspNetCore#3859
Add description for OpenAPI schema references by @martincostello in Add description for OpenAPI schema references domaindrivendev/Swashbuckle.AspNetCore#3860

New Contributors

@ODukhno made their first contribution in Log exception when app fails to start in CLI domaindrivendev/Swashbuckle.AspNetCore#3853

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.5...v10.1.6

10.1.5 What's Changed

Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI by @dependabot in Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3814
Migrate to actions/attest by @martincostello in Migrate to actions/attest domaindrivendev/Swashbuckle.AspNetCore#3815
Disable secrets-outside-env audit by @martincostello in Disable secrets-outside-env audit domaindrivendev/Swashbuckle.AspNetCore#3823
Update zizmor to 1.23.1 by @martincostello in Update zizmor to 1.23.1 domaindrivendev/Swashbuckle.AspNetCore#3825
Fix null examples by @jgarciadelanoceda in Fix nullExamples domaindrivendev/Swashbuckle.AspNetCore#3803
Bump dependencies by @martincostello in Bump dependencies domaindrivendev/Swashbuckle.AspNetCore#3835

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.4...v10.1.5

10.1.4 What's Changed

Bump swagger-ui-dist from 5.31.0 to 5.31.1 in /src/Swashbuckle.AspNetCore.SwaggerUI by @dependabot in Bump swagger-ui-dist from 5.31.0 to 5.31.1 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3792
Return null on example, as it was with OpenApiNull before by @jgarciadelanoceda in Return null on example, as it was with OpenApiNull before domaindrivendev/Swashbuckle.AspNetCore#3793

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.3...v10.1.4

10.1.3 What's Changed

Fix null examples being represented as the string "null" by @jgarciadelanoceda in Fix null examples being represented as the string null domaindrivendev/Swashbuckle.AspNetCore#3788

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.2...v10.1.3

10.1.2 What's Changed

Fix browser caching behaviour by @martincostello in Fix browser caching behaviour domaindrivendev/Swashbuckle.AspNetCore#3772
Fix document URL serialization by @martincostello in Fix document URL serialization domaindrivendev/Swashbuckle.AspNetCore#3773

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.1...v10.1.2

10.1.1 What's Changed

Add cache headers to document URLs endpoint by @Copilot and @martincostello in Add cache headers to document URLs endpoint domaindrivendev/Swashbuckle.AspNetCore#3766

New Contributors

@Copilot made their first contribution in Add cache headers to document URLs endpoint domaindrivendev/Swashbuckle.AspNetCore#3766

Full Changelog:

domaindrivendev/Swashbuckle.AspNetCore@v10.1.0...v10.1.1

10.1.0 What's Changed

New Contributors

@markuspalme made their first contribution in Add clarifying example in migration guide to v10 domaindrivendev/Swashbuckle.AspNetCore#3672
@John-Paul-R made their first contribution in fix(SchemaGenerator): exclude inherited properties only when base add… domaindrivendev/Swashbuckle.AspNetCore#3692

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.0.1...v10.1.0

Commits viewable in compare view.

Updated System.Text.Json from 10.0.0 to 10.0.14.

Release notes

Sourced from System.Text.Json's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Testcontainers.PostgreSql from 4.15.0 to 4.16.0.

Release notes

Sourced from Testcontainers.PostgreSql's releases.

4.16.0

What's Changed

Huge thanks to everyone for your contributions and feedback 🧡.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #54051351.

🚀 Features

feat: Add common WithSsl builder API and support it in Azurite (#1788) @aleksandarMilev, @HofmeisterAn
feat: Add BuildKit support for image builds via sidecar container (#1761) @george-petrakis, @HofmeisterAn
feat(Elasticsearch): Add OTLP and certificate support (#1774) @HofmeisterAn

🐛 Bug Fixes

fix(PostgreSql): Support SSL with Alpine images and non-root users (#1790) @HofmeisterAn
fix: Do not pull base image with unresolved platform variable (#1787) @HofmeisterAn
fix(Kafka): Default to KRaft for Confluent Platform 8.x images (#1775) @arnelirobles, @HofmeisterAn
fix(Kafka): Drop the trailing comma from advertised listeners (#1772) @arnelirobles, @HofmeisterAn
fix: Prevent Docker ignore patterns from matching path prefixes (#1768) @Benziza, @HofmeisterAn

📖 Documentation

docs: Complete builder API tables and align heading casing (#1778) @HofmeisterAn
docs: Explain how builder configurations combine (#1770) @arnelirobles, @HofmeisterAn

🧹 Housekeeping

fix: Regenerate expired test certificates (#1786) @zcsizmadia
chore: Resolve Sonar findings (#1776) @HofmeisterAn
chore: Remove Minio module (#1769) @HofmeisterAn
chore: Publish NuGet packages with Trusted Publishing (OIDC) (#1763) @HofmeisterAn
feat: Prepare next release cycle (4.16.0) (#1762) @HofmeisterAn

📦 Dependency Updates

chore(deps): Bump the actions group with 5 updates (#1781) @dependabot[bot]

Commits viewable in compare view.

Bumps MediatR from 12.4.1 to 12.5.0 Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.13 to 10.0.14 Bumps Microsoft.AspNetCore.SignalR.Client from 10.0.13 to 10.0.14 Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.0 to 10.0.3 Bumps NSubstitute from 6.0.0 to 6.2.0 Bumps swashbuckle.aspnetcore.cli from 10.0.1 to 10.3.1 Bumps System.Text.Json from 10.0.0 to 10.0.14 Bumps Testcontainers.PostgreSql from 4.15.0 to 4.16.0 --- updated-dependencies: - dependency-name: MediatR dependency-version: 12.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.AspNetCore.SignalR.Client dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL dependency-version: 10.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: NSubstitute dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: swashbuckle.aspnetcore.cli dependency-version: 10.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: System.Text.Json dependency-version: 10.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Testcontainers.PostgreSql dependency-version: 4.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-11-05T13:54:33Z

Superseded by #239.

dependabot Bot requested a review from a team as a code owner November 4, 2026 14:05

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Nov 4, 2026

dependabot Bot force-pushed the dependabot/nuget/dot-config/minor-and-patch-988b3a216d branch from 3ca3f3a to b24b65a Compare November 5, 2026 13:48

dependabot Bot closed this Nov 5, 2026

dependabot Bot deleted the dependabot/nuget/dot-config/minor-and-patch-988b3a216d branch November 5, 2026 13:54

Navigation Menu

Repository navigation

Bump MediatR and 7 others - #232

Bump MediatR and 7 others#232
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/minor-and-patch-988b3a216d

dependabot Bot commented on behalf of github Nov 4, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Nov 5, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

12.5.0

What's Changed

New Contributors

10.0.3

What's Changed

10.0.2

What's Changed

6.2.0

NSubstitute v6.2.0

What's Changed

6.1.0

NSubstitute v6.1.0

What's Changed

New Contributors

10.3.1

What's Changed

Deprecations

New Contributors

10.3.0

What's Changed

New Contributors

10.2.3

What's Changed

10.2.2

What's Changed

New Contributors

10.2.1

What's Changed

10.2.0

What's Changed

New Contributors

10.1.7

What's Changed

New Contributors

10.1.6

What's Changed

New Contributors

10.1.5

What's Changed

10.1.4

What's Changed

10.1.3

What's Changed

10.1.2

What's Changed

10.1.1

What's Changed

New Contributors

10.1.0

What's Changed

New Features

Bug Fixes

Miscellaneous

New Contributors

4.16.0

What's Changed

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

📦 Dependency Updates

Uh oh!

dependabot Bot commented on behalf of github Nov 5, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Nov 4, 2026 •

edited

Loading