Skip to content

Bump the nuget-minor-patch group with 3 updates - #658

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/nuget/src/Orbit.Infrastructure/nuget-minor-patch-15fa3139f9
Sep 29, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/nuget/src/Orbit.Infrastructure/nuget-minor-patch-15fa3139f9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 29, 2026

Copy link
Copy Markdown
Contributor

Updated AWSSDK.SimpleEmailV2 from 4.0.105 to 4.0.105.1.

Release notes

Sourced from AWSSDK.SimpleEmailV2's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated coverlet.collector from 10.0.1 to 10.1.0.

Release notes

Sourced from coverlet.collector's releases.

10.1.0

Improvements

  • Publish Microsoft.Testing.Platform coverage messages from coverlet.MTP #​2019
  • Implement dynamic exclusion filters for assemblies (Coverlet.MTP) #​1946
  • Replace legacy .sln files with modern .slnx format #​1966
  • coverlet.console: add trace diagnostics and actionable warnings for instrumentation/hit/empty-result failures #​2005
  • Relax auto-property skip logic and improve coverage for records #​1941

Fixed

  • Fix coverlet.MTP does not collect coverage on the .NET Framework portion of a large project #​1980 #​1967
  • Fix Regression in branch coverage for lambda expressions #​1938
  • Fix When using "is" with "or" in pattern matching, branch coverage is lower than normal #​1979
  • Fix silent zero coverage on .NET Framework since 8.0.0 #​1985 by @​tobiwae
  • Fix Race condition between ProcessExit hit-file write and out-of-proc coverage read causes EndOfStreamException #​1987 #​1988 by @​bkoelman
  • Fix Regression TypeInitializationException when targeting .NET Framework - Could not load type 'System.Collections.Concurrent.ConcurrentBag #​2010
  • Fix use --config-file CLI arg in coverlet.MTP #​2030 by alexthornton1
  • Fix silently empty coverage for shared-framework assemblies missing from compileLibraries #​2032 by @​Eljees

Diff between 10.0.1 and 10.1.0

Commits viewable in compare view.

Updated FirebaseAdmin from 3.6.0 to 3.7.0.

Release notes

Sourced from FirebaseAdmin's releases.

3.7.0

New Features

  • feat(fcm): Migrate topic management to FCM v1 REST API (#​546)

Miscellaneous

  • [chore] Release 3.7.0 (#​547)
  • chore(deps): bump firebase/firebase-admin-node/.github/actions/send-email (#​544)
  • chore: Add code owners to require review from firebase-admin-sdk-approvers (#​543)
  • update GitHub Actions to Node 24 versions (#​538)
  • chore(deps): bump actions/setup-dotnet from 5.2.0 to 5.3.0 (#​523)
  • chore(deps): bump firebase/firebase-admin-node/.github/actions/send-email (#​531)
  • Bump System.Security.Cryptography.Xml from 8.0.3 to 9.0.18 (#​532)
  • chore(deps): bump firebase/firebase-admin-node/.github/actions/send-email (#​529)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps AWSSDK.SimpleEmailV2 from 4.0.105 to 4.0.105.1
Bumps coverlet.collector from 10.0.1 to 10.1.0
Bumps FirebaseAdmin from 3.6.0 to 3.7.0

---
updated-dependencies:
- dependency-name: AWSSDK.SimpleEmailV2
  dependency-version: 4.0.105.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: coverlet.collector
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: coverlet.collector
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: coverlet.collector
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: coverlet.collector
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: FirebaseAdmin
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Sep 29, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) September 29, 2026 09:01
@sonarqubecloud

Copy link
Copy Markdown

@thomasluizon

Copy link
Copy Markdown
Owner

@pullfrog review

@pullfrog pullfrog Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ No new issues found.

Reviewed changes in the five project files that update AWS SES, Firebase Admin, and the coverage collector:

  • Email SDK: AWSSDK.SimpleEmailV2 moves to 4.0.105.1; the SES integration still uses the existing send interface.
  • Push SDK: FirebaseAdmin moves to 3.7.0; the app sends token-targeted messages, not topic-management requests affected by the release note.
  • Test coverage: coverlet.collector moves to 10.1.0 in all four test projects; the existing CI unit tests and coverage collection completed successfully.

Pullfrog  | View workflow run | Using GPT Sol | 𝕏

@github-actions
github-actions Bot merged commit eb18808 into main Sep 29, 2026
26 checks passed
@dependabot
dependabot Bot deleted the dependabot/nuget/src/Orbit.Infrastructure/nuget-minor-patch-15fa3139f9 branch September 29, 2026 09:56
thomasluizon added a commit that referenced this pull request Sep 29, 2026
* Bump the nuget-minor-patch group with 3 updates (#658)

Bumps AWSSDK.SimpleEmailV2 from 4.0.105 to 4.0.105.1
Bumps coverlet.collector from 10.0.1 to 10.1.0
Bumps FirebaseAdmin from 3.6.0 to 3.7.0

---
updated-dependencies:
- dependency-name: AWSSDK.SimpleEmailV2
  dependency-version: 4.0.105.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: coverlet.collector
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: coverlet.collector
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: coverlet.collector
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: coverlet.collector
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: FirebaseAdmin
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit eb18808)

* Chore(deps): bump the github-actions group with 5 updates (#657)

Bumps the github-actions group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [github/codeql-action/init](https://github.com/github/codeql-action) | `4.38.1` | `4.38.2` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.38.1` | `4.38.2` |
| [pullfrog/pullfrog](https://github.com/pullfrog/pullfrog) | `0.1.83` | `0.1.84` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `5.1.1` | `6.3.0` |
| [hashicorp/setup-terraform](https://github.com/hashicorp/setup-terraform) | `3.1.2` | `4.0.1` |

Updates `github/codeql-action/init` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@1c5b675...2892aa5)

Updates `github/codeql-action/analyze` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@1c5b675...2892aa5)

Updates `pullfrog/pullfrog` from 0.1.83 to 0.1.84
- [Release notes](https://github.com/pullfrog/pullfrog/releases)
- [Commits](pullfrog/pullfrog@e9f8115...99c5e78)

Updates `aws-actions/configure-aws-credentials` from 5.1.1 to 6.3.0
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](aws-actions/configure-aws-credentials@61815dc...e125382)

Updates `hashicorp/setup-terraform` from 3.1.2 to 4.0.1
- [Release notes](https://github.com/hashicorp/setup-terraform/releases)
- [Changelog](https://github.com/hashicorp/setup-terraform/blob/main/CHANGELOG.md)
- [Commits](hashicorp/setup-terraform@v3.1.2...dfe3c3f)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: pullfrog/pullfrog
  dependency-version: 0.1.84
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: hashicorp/setup-terraform
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit a78ba3a)

* Fix Google sign-in on MCP authorization page (#660)

* Fix MCP Google authorization redirect

* Catalog MCP Google redirect actions

* Style Google redirect link as button

* Preserve calendar tokens during MCP sign-in

* Fix MCP Google redirect review findings

(cherry picked from commit 1d80602)

* Hint audio transcription with account language (#661)

(cherry picked from commit 1f8d762)

* Bind OAuth Google state to the start of sign-in (#962) (#663)

A valid anonymous GET /oauth/authorize used to allocate a pending Google
request in OAuthAuthorizationStore even when the visitor never clicked
Google. The route carried no rate limit and the store carried no capacity
bound, so repeated page views could retain arbitrarily many entries until
the five-minute sweep and exhaust the API's memory.

The authorize page now hands its already-validated MCP parameters straight
to /oauth/google/start, which revalidates the client, the redirect URI and
the PKCE method server side before it allocates anything. A page view
allocates no server state.

The store gains a hard cap on pending Google requests, evicts expired
entries on insert, and refuses a new allocation once the cap is reached.
GoogleStart turns that refusal into the localized "unavailable" message on
the authorize page, where email sign-in stays available.

Both browser routes now carry the DistributedRateLimit("auth") policy.

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
(cherry picked from commit 5dc0a01)

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant