Bump the nuget-minor-patch group with 3 updates - #658
Merged
github-actions[bot] merged 1 commit intoSep 29, 2026
Merged
github-actions[bot] merged 1 commit into
github-actions[bot] merged 1 commit into
Conversation
Bumps AWSSDK.SimpleEmailV2 from 4.0.105 to 4.0.105.1 Bumps coverlet.collector from 10.0.1 to 10.1.0 Bumps FirebaseAdmin from 3.6.0 to 3.7.0 --- updated-dependencies: - dependency-name: AWSSDK.SimpleEmailV2 dependency-version: 4.0.105.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: coverlet.collector dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: coverlet.collector dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: coverlet.collector dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: coverlet.collector dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: FirebaseAdmin dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
|
Owner
|
@pullfrog review |
There was a problem hiding this comment.
✅ No new issues found.
Reviewed changes in the five project files that update AWS SES, Firebase Admin, and the coverage collector:
- Email SDK:
AWSSDK.SimpleEmailV2moves to4.0.105.1; the SES integration still uses the existing send interface. - Push SDK:
FirebaseAdminmoves to3.7.0; the app sends token-targeted messages, not topic-management requests affected by the release note. - Test coverage:
coverlet.collectormoves to10.1.0in all four test projects; the existing CI unit tests and coverage collection completed successfully.
GPT Sol | 𝕏
dependabot
Bot
deleted the
dependabot/nuget/src/Orbit.Infrastructure/nuget-minor-patch-15fa3139f9
branch
September 29, 2026 09:56
thomasluizon
added a commit
that referenced
this pull request
Sep 29, 2026
* Bump the nuget-minor-patch group with 3 updates (#658) Bumps AWSSDK.SimpleEmailV2 from 4.0.105 to 4.0.105.1 Bumps coverlet.collector from 10.0.1 to 10.1.0 Bumps FirebaseAdmin from 3.6.0 to 3.7.0 --- updated-dependencies: - dependency-name: AWSSDK.SimpleEmailV2 dependency-version: 4.0.105.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: coverlet.collector dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: coverlet.collector dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: coverlet.collector dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: coverlet.collector dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: FirebaseAdmin dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (cherry picked from commit eb18808) * Chore(deps): bump the github-actions group with 5 updates (#657) Bumps the github-actions group with 5 updates: | Package | From | To | | --- | --- | --- | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.38.1` | `4.38.2` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.38.1` | `4.38.2` | | [pullfrog/pullfrog](https://github.com/pullfrog/pullfrog) | `0.1.83` | `0.1.84` | | [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `5.1.1` | `6.3.0` | | [hashicorp/setup-terraform](https://github.com/hashicorp/setup-terraform) | `3.1.2` | `4.0.1` | Updates `github/codeql-action/init` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@1c5b675...2892aa5) Updates `github/codeql-action/analyze` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@1c5b675...2892aa5) Updates `pullfrog/pullfrog` from 0.1.83 to 0.1.84 - [Release notes](https://github.com/pullfrog/pullfrog/releases) - [Commits](pullfrog/pullfrog@e9f8115...99c5e78) Updates `aws-actions/configure-aws-credentials` from 5.1.1 to 6.3.0 - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](aws-actions/configure-aws-credentials@61815dc...e125382) Updates `hashicorp/setup-terraform` from 3.1.2 to 4.0.1 - [Release notes](https://github.com/hashicorp/setup-terraform/releases) - [Changelog](https://github.com/hashicorp/setup-terraform/blob/main/CHANGELOG.md) - [Commits](hashicorp/setup-terraform@v3.1.2...dfe3c3f) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: pullfrog/pullfrog dependency-version: 0.1.84 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: aws-actions/configure-aws-credentials dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: hashicorp/setup-terraform dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (cherry picked from commit a78ba3a) * Fix Google sign-in on MCP authorization page (#660) * Fix MCP Google authorization redirect * Catalog MCP Google redirect actions * Style Google redirect link as button * Preserve calendar tokens during MCP sign-in * Fix MCP Google redirect review findings (cherry picked from commit 1d80602) * Hint audio transcription with account language (#661) (cherry picked from commit 1f8d762) * Bind OAuth Google state to the start of sign-in (#962) (#663) A valid anonymous GET /oauth/authorize used to allocate a pending Google request in OAuthAuthorizationStore even when the visitor never clicked Google. The route carried no rate limit and the store carried no capacity bound, so repeated page views could retain arbitrarily many entries until the five-minute sweep and exhaust the API's memory. The authorize page now hands its already-validated MCP parameters straight to /oauth/google/start, which revalidates the client, the redirect URI and the PKCE method server side before it allocates anything. A page view allocates no server state. The store gains a hard cap on pending Google requests, evicts expired entries on insert, and refuses a new allocation once the cap is reached. GoogleStart turns that refusal into the localized "unavailable" message on the authorize page, where email sign-in stays available. Both browser routes now carry the DistributedRateLimit("auth") policy. Co-authored-by: Claude Opus 5 <noreply@anthropic.com> (cherry picked from commit 5dc0a01) --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.




Updated AWSSDK.SimpleEmailV2 from 4.0.105 to 4.0.105.1.
Release notes
Sourced from AWSSDK.SimpleEmailV2's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated coverlet.collector from 10.0.1 to 10.1.0.
Release notes
Sourced from coverlet.collector's releases.
10.1.0
Improvements
Fixed
Diff between 10.0.1 and 10.1.0
Commits viewable in compare view.
Updated FirebaseAdmin from 3.6.0 to 3.7.0.
Release notes
Sourced from FirebaseAdmin's releases.
3.7.0
New Features
Miscellaneous
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions