Bump Azure.Core and 14 others by dependabot[bot] · Pull Request #147 · bcgov/pssg-cscp-restitution

dependabot · 2026-10-01T11:43:05Z

Updated Azure.Core from 1.52.0 to 1.63.0.

Release notes

Sourced from Azure.Core's releases.

1.63.0 1.63.0 (2026-09-25)

Features Added

Added mTLS proof-of-possession support to ClientCertificateCredential, including subject name and issuer certificate authentication configured with SendCertificateChain. Proof-of-possession is used by default when requested; first-party applications can opt out by setting the Azure.Identity.EnableClientCertificateMtlsProofOfPossession AppContext switch (or AZURE_IDENTITY_ENABLE_CLIENT_CERTIFICATE_MTLS_POP environment variable) to false.
Added mTLS proof-of-possession support to the managed identity federated identity flow used by configured credentials, covering both managed identity assertion acquisition and client assertion token redemption. It is enabled by default; set EnableMtlsProofOfPossession to false in the credential's JSON configuration to force bearer authentication for both exchanges. On a host that cannot provide a binding certificate, the flow falls back to a bearer token instead of failing, matching the direct managed identity flow.

Breaking Changes

Renamed the experimental ManagedIdentityCredentialOptions.DisableMtlsProofOfPossession property and corresponding configuration setting to EnableMtlsProofOfPossession. mTLS proof-of-possession is enabled by default for direct and configured managed identity when requested and supported. To force bearer authentication, replace DisableMtlsProofOfPossession = true with EnableMtlsProofOfPossession = false in code or credential configuration.

Bugs Fixed

Fixed ModelReaderWriter deserialization of GeoPoint with AzureCoreContext or a generated consumer context throwing because its type builder was not registered.
Fixed DefaultAzureCredential taking up to a minute to continue past managed identity on hosts where IMDS is unavailable. Ordinary chained requests use the short Azure.Core IMDS probe, while proof-of-possession capability discovery passes the same initial IMDS timeout to MSAL so discovery retry delays are canceled and timed-out discovery results are not cached.
Fixed chained managed identity aborting the credential chain when MSAL reports all sources unavailable immediately after a successful initial IMDS probe.
Managed identity mTLS proof-of-possession now requires a KeyGuard-backed host capability and enforces KeyGuard as the minimum binding strength during token acquisition. (#62585)

Commits viewable in compare view.

Updated CSharpier.MsBuild from 1.2.6 to 1.3.0.

Release notes

Sourced from CSharpier.MsBuild's releases.

1.3.0

Breaking Changes

Change xml formatting to return error when it runs into syntax error so it is consistent with c# #1854

Previously CSharpier treated an invalid xml file as a warning instead of an error. This was inconsistent with how it treated c# files.
Invalid c# or xml files are not treated as errors.
The --compilation-errors-as-warnings argument has been renamed to --syntax-errors-as-warnings and can be used to return warnings instead of errors when encountering invalid files.

What's Changed

Feature: Configurable whitespace handling for xml #1790

CSharpier now supports two types of xml whitespace formatting strict or ignore.
By default all xml except xaml or axaml is treated as strict whitespace. See details

Feature: Move closing bracket for xml elements to the same line. #1598

With strict xml whitespace handling, csharpier now keeps the closing bracket for an element on the same line instead of breaking it to a new line.

<!-- input & expected output -->
<ElementWithAttribute Attribute="AttributeValue__________________"
  >TextValue</ElementWithAttribute>

<!-- 1.2.6 -->
<ElementWithAttribute Attribute="AttributeValue__________________"
  >TextValue</ElementWithAttribute
>

Feature: Support for csharpier-ignore with XML formatter #1788

CSharpier now supports csharpier-ignore in xml files. See details

Feature: Add MSBuild transitive and multi-target support #1833

CSharpier.MSBuild can now work as a transitive dependency.

Feature: allow checking formatting with cache #1830

The csharpier check command now supports a --use-cache option.

Feature: remove dependency on Microsoft.AspNetCore.App #1508

Previously CSharpier required that Microsoft.AspNetCore.App be installed. CSharpier has been modified to use an HttpListener when it is run using server to remove the need for this dependency.

Fix: csharpier-ignore comment removes linespaces before block #1867

CSharpier was removing blank lines before csharpier-ignore comments in some cases

// input and expected output
var x = 1;
    
// csharpier-ignore
var y=1;

/// 1.2.6
var x = 1;
// csharpier-ignore
var y=1;
 ... (truncated)

Commits viewable in [compare view](https://github.com/belav/csharpier/compare/1.2.6...1.3.0).
</details>

Updated [Microsoft.AspNetCore.Mvc.NewtonsoftJson](https://github.com/dotnet/dotnet) from 10.0.5 to 10.0.12.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.AspNetCore.Mvc.NewtonsoftJson's releases](https://github.com/dotnet/dotnet/releases)._

No release notes found for this version range.

Commits viewable in [compare view](https://github.com/dotnet/dotnet/commits).
</details>

Updated [Microsoft.AspNetCore.SpaServices.Extensions](https://github.com/dotnet/dotnet) from 10.0.5 to 10.0.12.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.AspNetCore.SpaServices.Extensions's releases](https://github.com/dotnet/dotnet/releases)._

No release notes found for this version range.

Commits viewable in [compare view](https://github.com/dotnet/dotnet/commits).
</details>

Updated [Microsoft.Extensions.Caching.Memory](https://github.com/dotnet/dotnet) from 10.0.2 to 10.0.12.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.Extensions.Caching.Memory's releases](https://github.com/dotnet/dotnet/releases)._

No release notes found for this version range.

Commits viewable in [compare view](https://github.com/dotnet/dotnet/commits).
</details>

Updated [Microsoft.Extensions.Http](https://github.com/dotnet/dotnet) from 10.0.2 to 10.0.12.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.Extensions.Http's releases](https://github.com/dotnet/dotnet/releases)._

No release notes found for this version range.

Commits viewable in [compare view](https://github.com/dotnet/dotnet/commits).
</details>

Updated [Microsoft.OpenApi](https://github.com/Microsoft/OpenAPI.NET) from 2.7.5 to 2.12.2.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.OpenApi's releases](https://github.com/Microsoft/OpenAPI.NET/releases)._

## 2.12.2

## [2.12.2](https://github.com/microsoft/OpenAPI.NET/compare/v2.12.1...v2.12.2) (2026-08-20)


### Bug Fixes

* duplicate schema example when serializing to v2 ([#3046](https://github.com/microsoft/OpenAPI.NET/issues/3046)) ([a6366be](https://github.com/microsoft/OpenAPI.NET/commit/a6366be831a462a1470a4190888b571c3ff12f2c))

## 2.12.1

## [2.12.1](https://github.com/microsoft/OpenAPI.NET/compare/v2.12.0...v2.12.1) (2026-08-19)


### Bug Fixes

* circular ref guard ([#3033](https://github.com/microsoft/OpenAPI.NET/issues/3033)) ([#3039](https://github.com/microsoft/OpenAPI.NET/issues/3039)) ([406e6fd](https://github.com/microsoft/OpenAPI.NET/commit/406e6fd60475a3adfb850b735a59f10afee64c18))
* harden yaml parsing ([#3034](https://github.com/microsoft/OpenAPI.NET/issues/3034)) ([fdc5718](https://github.com/microsoft/OpenAPI.NET/commit/fdc5718a70607aa551ce9a00a03a812d3bc4c582))

## 2.12.0

## [2.12.0](https://github.com/microsoft/OpenAPI.NET/compare/v2.11.0...v2.12.0) (2026-08-12)


### Features

* adds deserialization of the example extension ([095ae3b](https://github.com/microsoft/OpenAPI.NET/commit/095ae3bbdf3c248ba18db17278889cf5a8faf01c))
* serialize license identifier as extension for earlier versions ([d5cdce8](https://github.com/microsoft/OpenAPI.NET/commit/d5cdce83cfc210806afbd8850bb5ebe14eef5116))
* serialize license identifier as extension for earlier versions ([fde38d8](https://github.com/microsoft/OpenAPI.NET/commit/fde38d8bec7af0304b0f522683ccda2d245cd860))


### Bug Fixes

* better nullability round-tripping ([7a25659](https://github.com/microsoft/OpenAPI.NET/commit/7a25659a1cdd544f6b4bcc8bf1ed9797882b5ced))
* bound YAML anchor/alias expansion to prevent OOM (billion laughs) ([#3000](https://github.com/microsoft/OpenAPI.NET/issues/3000)) ([a361360](https://github.com/microsoft/OpenAPI.NET/commit/a3613606a90d86d3e22454890c694fbb854f4bc9))
* bound YAML anchor/alias expansion to prevent OOM (billion laughs) ([#3000](https://github.com/microsoft/OpenAPI.NET/issues/3000)) ([4db9af0](https://github.com/microsoft/OpenAPI.NET/commit/4db9af07d112cdf45170b7a946f956ffe74fa14e))
* **library:** serialize multiple schema types as anyOf/oneOf for OpenAPI 3.0 ([6568896](https://github.com/microsoft/OpenAPI.NET/commit/6568896ccf14380e234bae481a83be2d58d7c0cb))
* marks deprecated properties from the specification as obsolete ([26aba69](https://github.com/microsoft/OpenAPI.NET/commit/26aba69cd9c7ab1ecb8b1c61dd0094d291980af4))
* marks deprecated properties from the specification as obsolete ([abc5301](https://github.com/microsoft/OpenAPI.NET/commit/abc5301a82cb913fea696aa1248a2e17b317ce10))
* **schema:** serialize compatibility examples from examples list ([be57a7c](https://github.com/microsoft/OpenAPI.NET/commit/be57a7c4cf1e4ae2025b987520316420c897cb46))
* serialize examples as extension in v2/v3 ([d27141b](https://github.com/microsoft/OpenAPI.NET/commit/d27141b5203e5895f0fb812b913dd7621274e6a3))

## 2.11.0

## [2.11.0](https://github.com/microsoft/OpenAPI.NET/compare/v2.10.0...v2.11.0) (2026-07-15)


### Features

* adds support for anchor and id external resolution ([557bd6a](https://github.com/microsoft/OpenAPI.NET/commit/557bd6a8ca81e80f9f305aca3396e0e2fb45c09d))
* adds support for anchor and id external resolution ([4138e47](https://github.com/microsoft/OpenAPI.NET/commit/4138e478cc6e8ceb9d371ac3a4848887c80ec16f))
* **schema:** resolve bare $dynamicRef via $dynamicAnchor index ([#2913](https://github.com/microsoft/OpenAPI.NET/issues/2913)) ([baf8428](https://github.com/microsoft/OpenAPI.NET/commit/baf8428f488b0f1de8cb91b29c4f073f808f2ffe))
* **schema:** resolve bare $dynamicRef via $dynamicAnchor index ([#2913](https://github.com/microsoft/OpenAPI.NET/issues/2913)) ([a139f83](https://github.com/microsoft/OpenAPI.NET/commit/a139f83981b251315b55ad9a4d64756a5dead335))
* support relative URI resolution in $dynamicRef ([#2928](https://github.com/microsoft/OpenAPI.NET/issues/2928)) ([#2945](https://github.com/microsoft/OpenAPI.NET/issues/2945)) ([6091f5a](https://github.com/microsoft/OpenAPI.NET/commit/6091f5a799711f822f864ed67995cd518fd30e2e))
* support relative URI resolution in $dynamicRef ([#2928](https://github.com/microsoft/OpenAPI.NET/issues/2928)) ([#2945](https://github.com/microsoft/OpenAPI.NET/issues/2945)) ([a8688dc](https://github.com/microsoft/OpenAPI.NET/commit/a8688dc59ab69060e5413e5ac2f15430bd96e40f))


### Bug Fixes

* adds explicit error message for invalid json pointers ([#2955](https://github.com/microsoft/OpenAPI.NET/issues/2955)) ([a304e56](https://github.com/microsoft/OpenAPI.NET/commit/a304e5646f4ccec388892238ce475945eb2af1b8))
* differentiate unset value from null value in OpenApiSchema.Const ([#2936](https://github.com/microsoft/OpenAPI.NET/issues/2936)) ([a8787af](https://github.com/microsoft/OpenAPI.NET/commit/a8787af57769821ee963be773be0b984a5078402))
* differentiate unset value from null value in OpenApiSchema.Const ([#2936](https://github.com/microsoft/OpenAPI.NET/issues/2936)) ([e08570f](https://github.com/microsoft/OpenAPI.NET/commit/e08570f99174b22e33775920212e478aac14df7c))
* handle nullability more accurately during serialization for 3.0/2.0 ([#2933](https://github.com/microsoft/OpenAPI.NET/issues/2933)) ([bc11356](https://github.com/microsoft/OpenAPI.NET/commit/bc113563d174e6a6b1220b7e58f3b1c12e5a3f6f))
* handle nullability more accurately during serialization for 3.0/2.0 ([#2933](https://github.com/microsoft/OpenAPI.NET/issues/2933)) ([310b6e2](https://github.com/microsoft/OpenAPI.NET/commit/310b6e29b3a17615efd7a38bbf5f73427cdec6e8))

## 2.10.0

## [2.10.0](https://github.com/microsoft/OpenAPI.NET/compare/v2.9.0...v2.10.0) (2026-07-03)


### Features

* add JsonConverter for OpenApiSchema System.Text.Json serialization ([#2915](https://github.com/microsoft/OpenAPI.NET/issues/2915)) ([465521b](https://github.com/microsoft/OpenAPI.NET/commit/465521ba723ea9377d6838395d58e7212d64ece7))
* **library:** support schema keywords on references ([2749463](https://github.com/microsoft/OpenAPI.NET/commit/2749463f1ec1d452ba2334876d32466ea45ee8d1)), closes [#2903](https://github.com/microsoft/OpenAPI.NET/issues/2903)


### Bug Fixes

* Don't silently skip null assignment to OpenApiDocument.Tags ([#2917](https://github.com/microsoft/OpenAPI.NET/issues/2917)) ([6a45a82](https://github.com/microsoft/OpenAPI.NET/commit/6a45a826e095d198605b340c50d46c066eed72ad))
* handling of nullable enums for 3.0 ([#2920](https://github.com/microsoft/OpenAPI.NET/issues/2920)) ([f4778e0](https://github.com/microsoft/OpenAPI.NET/commit/f4778e024e6bf033a4b6c4b90ea6636de712f826))
* **library:** keep v3 schema references ref-only ([8d811c3](https://github.com/microsoft/OpenAPI.NET/commit/8d811c3e76a8963be6e7a605b80c98d0ea0c63a5))
* preserve JSON Schema 2020-12 keyword siblings on $ref schemas for OAS 3.1+ ([#2896](https://github.com/microsoft/OpenAPI.NET/issues/2896)) ([fb20d46](https://github.com/microsoft/OpenAPI.NET/commit/fb20d460ffe95505847da5a6e4c6fc065e41d9d1))
* preserve JSON Schema 2020-12 keyword siblings on $ref schemas for OAS 3.1+ ([#2896](https://github.com/microsoft/OpenAPI.NET/issues/2896)) ([c79a83e](https://github.com/microsoft/OpenAPI.NET/commit/c79a83e74a0a41367c37f050d78d3e0ace838bc0))
* use async method for crypto flush ([677b519](https://github.com/microsoft/OpenAPI.NET/commit/677b5197d9c4f7de2122852ad49d5012f7082e71))

## 2.9.0

## [2.9.0](https://github.com/microsoft/OpenAPI.NET/compare/v2.8.0...v2.9.0) (2026-06-10)


### Features

* add contains/minContains/maxContains members ([fadb422](https://github.com/microsoft/OpenAPI.NET/commit/fadb42225561e150aa99459c0c359c00cf52fb1a))
* **library:** add missing json schema properties ([db41a3c](https://github.com/microsoft/OpenAPI.NET/commit/db41a3c952e651f80a6bbdb7d8aac001031e6dd3))


### Bug Fixes

* **library:** always copy unevaluated properties ([3951a31](https://github.com/microsoft/OpenAPI.NET/commit/3951a310da6056fd7a6852fda129a8ad8583639a))
* **library:** avoid false circular refs for external schema re-exports ([a058913](https://github.com/microsoft/OpenAPI.NET/commit/a058913943d4c197ccf03742f1c67ecc50e11a03))
* **library:** avoid false circular refs for external schema re-exports ([1bace68](https://github.com/microsoft/OpenAPI.NET/commit/1bace6804bc15c22b7665df7c66bed2a4a27bad0))
* **library:** merge contains compat members into missing properties ([7dc45e1](https://github.com/microsoft/OpenAPI.NET/commit/7dc45e14160825f79d5e64e6c9c8ba2a02900bcf))
* **library:** remove unshipped schema extension fallback ([b301827](https://github.com/microsoft/OpenAPI.NET/commit/b30182773fd875fb0a55c1a2bf48018910922ead))
* **library:** use version-specific schema keyword callbacks ([f93d76a](https://github.com/microsoft/OpenAPI.NET/commit/f93d76a4643022fc5d35b3d8ca8078276bbcce4f))
* **library:** use x-jsonschema schema extensions ([ec04a7f](https://github.com/microsoft/OpenAPI.NET/commit/ec04a7fcd43c296602edc15c197dc49cee112472))

## 2.8.0

## [2.8.0](https://github.com/microsoft/OpenAPI.NET/compare/v2.7.6...v2.8.0) (2026-06-01)


### Features

* **reader:** remove ParseNode infrastructure ([d7c6a9d](https://github.com/microsoft/OpenAPI.NET/commit/d7c6a9dbe2da8cccac2a3dcbc5277bf0f20b0aa9))
* Significant performance improvements resulting ~40% reduced allocations when parsing JSON descriptions, ~25% for YAML.

## 2.7.6

## [2.7.6](https://github.com/microsoft/OpenAPI.NET/compare/v2.7.5...v2.7.6) (2026-05-28)


### Bug Fixes

* **reader:** preserve nullable Null flag when type appears after nullable in V3.1/V3.2 deserializers ([288e95a](https://github.com/microsoft/OpenAPI.NET/commit/288e95aa743cb98dc69b44577ae78956f3f1c7c4))

Commits viewable in [compare view](https://github.com/Microsoft/OpenAPI.NET/compare/v2.7.5...v2.12.2).
</details>

Updated [Microsoft.PowerPlatform.Dataverse.Client](https://github.com/microsoft/PowerPlatform-DataverseServiceClient) from 1.2.10 to 1.2.27.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.PowerPlatform.Dataverse.Client's releases](https://github.com/microsoft/PowerPlatform-DataverseServiceClient/releases)._

No release notes found for this version range.

Commits viewable in [compare view](https://github.com/microsoft/PowerPlatform-DataverseServiceClient/commits).
</details>

Updated [Microsoft.PowerPlatform.Dataverse.Client.Dynamics](https://github.com/microsoft/PowerPlatform-DataverseServiceClient) from 1.2.10 to 1.2.27.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.PowerPlatform.Dataverse.Client.Dynamics's releases](https://github.com/microsoft/PowerPlatform-DataverseServiceClient/releases)._

No release notes found for this version range.

Commits viewable in [compare view](https://github.com/microsoft/PowerPlatform-DataverseServiceClient/commits).
</details>

Updated [Serilog](https://github.com/serilog/serilog) from 4.3.1 to 4.4.0.

<details>
<summary>Release notes</summary>

_Sourced from [Serilog's releases](https://github.com/serilog/serilog/releases)._

## 4.4.0

## What's Changed
* Emit SelfLog warning when extra arguments are provided by @matantsach in https://github.com/serilog/serilog/pull/2222
* dont WriteQuotedJsonString for null by @SimonCropp in https://github.com/serilog/serilog/pull/2216
* Pin System.Security.Cryptography.Xml to 8.0.3 in tests by @ArieGato in https://github.com/serilog/serilog/pull/2232
* Route optional interfaces through OptionalInterfaceForwardingSink for restricted sinks by @ArieGato in https://github.com/serilog/serilog/pull/2234
* `SelfMetrics` by @nblumhardt in https://github.com/serilog/serilog/pull/2237

## New Contributors
* @matantsach made their first contribution in https://github.com/serilog/serilog/pull/2222
* @ArieGato made their first contribution in https://github.com/serilog/serilog/pull/2232

**Full Changelog**: https://github.com/serilog/serilog/compare/v4.3.1...v4.4.0

Commits viewable in [compare view](https://github.com/serilog/serilog/compare/v4.3.1...v4.4.0).
</details>

Updated [Swashbuckle.AspNetCore](https://github.com/domaindrivendev/Swashbuckle.AspNetCore) from 10.1.7 to 10.2.3.

<details>
<summary>Release notes</summary>

_Sourced from [Swashbuckle.AspNetCore's releases](https://github.com/domaindrivendev/Swashbuckle.AspNetCore/releases)._

## 10.2.3

## What's Changed

* Bump swagger-ui-dist to 5.32.7 by @dependabot in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/4015

**Full Changelog**: https://github.com/domaindrivendev/Swashbuckle.AspNetCore/compare/v10.2.2...v10.2.3

## 10.2.2

## What's Changed

* Update NuGet packages by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3990
* Set `SOURCE_DATE_EPOCH` by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3997
* Fix `InvalidOperationException` if no route matches by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3999
* Fix empty parameter example not generated by @dldl-cmd in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3932
* Map `[MinLength]`/`[MaxLength]` on dictionary properties to `minProperties`/`maxProperties` by @KitKeen in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3922
* Fix conflicting required+nullable schema when only NonNullableReferen… by @KitKeen in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3912
* Fix `ExposeSwaggerDocumentUrlsRoute` behaviour by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/4000
* Use `NUGET_API_KEY` by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/4006

## New Contributors

* @KitKeen made their first contribution in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3922

**Full Changelog**: https://github.com/domaindrivendev/Swashbuckle.AspNetCore/compare/v10.2.1...v10.2.2


## 10.2.1

## What's Changed

* Update Microsoft.OpenApi to 2.7.5 to pick up fix for GHSA-v5pm-xwqc-g5wc by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3974

**Full Changelog**: https://github.com/domaindrivendev/Swashbuckle.AspNetCore/compare/v10.2.0...v10.2.1


## 10.2.0

## What's Changed

* Add `MapSwaggerUI` and `MapReDoc` to support endpoint routing by @Strepto in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3822
* Bump version to 10.2.0 by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3872
* Bump swagger-ui-dist from 5.32.1 to 5.32.2 by @dependabot in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3883
* Support `HEAD` requests by @snebjorn in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3887
* Use `IAsyncSwaggerProvider` in CLI `tofile` command by @bt-Knodel in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3910
* Pin runner images by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3944
* Disable npm install scripts by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3946
* Bump redoc from 2.5.2 to 2.5.3 by @dependabot in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3967

## New Contributors

* @Strepto made their first contribution in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3822
* @snebjorn made their first contribution in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3887
* @bt-Knodel made their first contribution in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3910

**Full Changelog**: https://github.com/domaindrivendev/Swashbuckle.AspNetCore/compare/v10.1.7...v10.2.0

Commits viewable in [compare view](https://github.com/domaindrivendev/Swashbuckle.AspNetCore/compare/v10.1.7...v10.2.3).
</details>

Updated [Swashbuckle.AspNetCore.Swagger](https://github.com/domaindrivendev/Swashbuckle.AspNetCore) from 10.1.7 to 10.2.3.

<details>
<summary>Release notes</summary>

_Sourced from [Swashbuckle.AspNetCore.Swagger's releases](https://github.com/domaindrivendev/Swashbuckle.AspNetCore/releases)._

## 10.2.3

## What's Changed

* Bump swagger-ui-dist to 5.32.7 by @dependabot in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/4015

**Full Changelog**: https://github.com/domaindrivendev/Swashbuckle.AspNetCore/compare/v10.2.2...v10.2.3

## 10.2.2

## What's Changed

* Update NuGet packages by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3990
* Set `SOURCE_DATE_EPOCH` by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3997
* Fix `InvalidOperationException` if no route matches by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3999
* Fix empty parameter example not generated by @dldl-cmd in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3932
* Map `[MinLength]`/`[MaxLength]` on dictionary properties to `minProperties`/`maxProperties` by @KitKeen in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3922
* Fix conflicting required+nullable schema when only NonNullableReferen… by @KitKeen in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3912
* Fix `ExposeSwaggerDocumentUrlsRoute` behaviour by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/4000
* Use `NUGET_API_KEY` by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/4006

## New Contributors

* @KitKeen made their first contribution in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3922

**Full Changelog**: https://github.com/domaindrivendev/Swashbuckle.AspNetCore/compare/v10.2.1...v10.2.2


## 10.2.1

## What's Changed

* Update Microsoft.OpenApi to 2.7.5 to pick up fix for GHSA-v5pm-xwqc-g5wc by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3974

**Full Changelog**: https://github.com/domaindrivendev/Swashbuckle.AspNetCore/compare/v10.2.0...v10.2.1


## 10.2.0

## What's Changed

* Add `MapSwaggerUI` and `MapReDoc` to support endpoint routing by @Strepto in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3822
* Bump version to 10.2.0 by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3872
* Bump swagger-ui-dist from 5.32.1 to 5.32.2 by @dependabot in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3883
* Support `HEAD` requests by @snebjorn in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3887
* Use `IAsyncSwaggerProvider` in CLI `tofile` command by @bt-Knodel in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3910
* Pin runner images by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3944
* Disable npm install scripts by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3946
* Bump redoc from 2.5.2 to 2.5.3 by @dependabot in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3967

## New Contributors

* @Strepto made their first contribution in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3822
* @snebjorn made their first contribution in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3887
* @bt-Knodel made their first contribution in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3910

**Full Changelog**: https://github.com/domaindrivendev/Swashbuckle.AspNetCore/compare/v10.1.7...v10.2.0

Commits viewable in [compare view](https://github.com/domaindrivendev/Swashbuckle.AspNetCore/compare/v10.1.7...v10.2.3).
</details>

Updated [Swashbuckle.AspNetCore.SwaggerUI](https://github.com/domaindrivendev/Swashbuckle.AspNetCore) from 10.1.7 to 10.2.3.

<details>
<summary>Release notes</summary>

_Sourced from [Swashbuckle.AspNetCore.SwaggerUI's releases](https://github.com/domaindrivendev/Swashbuckle.AspNetCore/releases)._

## 10.2.3

## What's Changed

* Bump swagger-ui-dist to 5.32.7 by @dependabot in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/4015

**Full Changelog**: https://github.com/domaindrivendev/Swashbuckle.AspNetCore/compare/v10.2.2...v10.2.3

## 10.2.2

## What's Changed

* Update NuGet packages by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3990
* Set `SOURCE_DATE_EPOCH` by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3997
* Fix `InvalidOperationException` if no route matches by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3999
* Fix empty parameter example not generated by @dldl-cmd in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3932
* Map `[MinLength]`/`[MaxLength]` on dictionary properties to `minProperties`/`maxProperties` by @KitKeen in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3922
* Fix conflicting required+nullable schema when only NonNullableReferen… by @KitKeen in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3912
* Fix `ExposeSwaggerDocumentUrlsRoute` behaviour by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/4000
* Use `NUGET_API_KEY` by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/4006

## New Contributors

* @KitKeen made their first contribution in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3922

**Full Changelog**: https://github.com/domaindrivendev/Swashbuckle.AspNetCore/compare/v10.2.1...v10.2.2


## 10.2.1

## What's Changed

* Update Microsoft.OpenApi to 2.7.5 to pick up fix for GHSA-v5pm-xwqc-g5wc by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3974

**Full Changelog**: https://github.com/domaindrivendev/Swashbuckle.AspNetCore/compare/v10.2.0...v10.2.1


## 10.2.0

## What's Changed

* Add `MapSwaggerUI` and `MapReDoc` to support endpoint routing by @Strepto in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3822
* Bump version to 10.2.0 by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3872
* Bump swagger-ui-dist from 5.32.1 to 5.32.2 by @dependabot in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3883
* Support `HEAD` requests by @snebjorn in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3887
* Use `IAsyncSwaggerProvider` in CLI `tofile` command by @bt-Knodel in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3910
* Pin runner images by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3944
* Disable npm install scripts by @martincostello in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3946
* Bump redoc from 2.5.2 to 2.5.3 by @dependabot in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3967

## New Contributors

* @Strepto made their first contribution in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3822
* @snebjorn made their first contribution in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3887
* @bt-Knodel made their first contribution in https://github.com/domaindrivendev/Swashbuckle.AspNetCore/pull/3910

**Full Changelog**: https://github.com/domaindrivendev/Swashbuckle.AspNetCore/compare/v10.1.7...v10.2.0

Commits viewable in [compare view](https://github.com/domaindrivendev/Swashbuckle.AspNetCore/compare/v10.1.7...v10.2.3).
</details>

Updated [System.Security.Cryptography.Pkcs](https://github.com/dotnet/dotnet) from 10.0.10 to 10.0.12.

<details>
<summary>Release notes</summary>

_Sourced from [System.Security.Cryptography.Pkcs's releases](https://github.com/dotnet/dotnet/releases)._

No release notes found for this version range.

Commits viewable in [compare view](https://github.com/dotnet/dotnet/commits).
</details>

Updated [System.Security.Cryptography.Xml](https://github.com/dotnet/dotnet) from 10.0.10 to 10.0.12.

<details>
<summary>Release notes</summary>

_Sourced from [System.Security.Cryptography.Xml's releases](https://github.com/dotnet/dotnet/releases)._

No release notes found for this version range.

Commits viewable in [compare view](https://github.com/dotnet/dotnet/commits).
</details>

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions


</details>

Bumps Azure.Core from 1.52.0 to 1.63.0 Bumps CSharpier.MsBuild from 1.2.6 to 1.3.0 Bumps Microsoft.AspNetCore.Mvc.NewtonsoftJson from 10.0.5 to 10.0.12 Bumps Microsoft.AspNetCore.SpaServices.Extensions from 10.0.5 to 10.0.12 Bumps Microsoft.Extensions.Caching.Memory from 10.0.2 to 10.0.12 Bumps Microsoft.Extensions.Http from 10.0.2 to 10.0.12 Bumps Microsoft.OpenApi from 2.7.5 to 2.12.2 Bumps Microsoft.PowerPlatform.Dataverse.Client from 1.2.10 to 1.2.27 Bumps Microsoft.PowerPlatform.Dataverse.Client.Dynamics from 1.2.10 to 1.2.27 Bumps Serilog from 4.3.1 to 4.4.0 Bumps Swashbuckle.AspNetCore from 10.1.7 to 10.2.3 Bumps Swashbuckle.AspNetCore.Swagger from 10.1.7 to 10.2.3 Bumps Swashbuckle.AspNetCore.SwaggerUI from 10.1.7 to 10.2.3 Bumps System.Security.Cryptography.Pkcs from 10.0.10 to 10.0.12 Bumps System.Security.Cryptography.Xml from 10.0.10 to 10.0.12 --- updated-dependencies: - dependency-name: CSharpier.MsBuild dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-safe - dependency-name: Microsoft.Extensions.Caching.Memory dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-safe - dependency-name: Microsoft.Extensions.Http dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-safe - dependency-name: Microsoft.PowerPlatform.Dataverse.Client dependency-version: 1.2.27 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-safe - dependency-name: Microsoft.PowerPlatform.Dataverse.Client.Dynamics dependency-version: 1.2.27 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-safe - dependency-name: System.Security.Cryptography.Pkcs dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-safe - dependency-name: System.Security.Cryptography.Xml dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-safe - dependency-name: Azure.Core dependency-version: 1.63.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-safe - dependency-name: CSharpier.MsBuild dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-safe - dependency-name: Microsoft.AspNetCore.Mvc.NewtonsoftJson dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-safe - dependency-name: Microsoft.AspNetCore.SpaServices.Extensions dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-safe - dependency-name: Microsoft.OpenApi dependency-version: 2.12.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-safe - dependency-name: Serilog dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-safe - dependency-name: Swashbuckle.AspNetCore dependency-version: 10.2.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-safe - dependency-name: Swashbuckle.AspNetCore.Swagger dependency-version: 10.2.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-safe - dependency-name: Swashbuckle.AspNetCore.SwaggerUI dependency-version: 10.2.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-safe ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-01T11:45:10Z

Superseded by #148.

dependabot Bot assigned rohithvarmayadla Oct 1, 2026

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 1, 2026

dependabot Bot closed this Oct 1, 2026

dependabot Bot deleted the dependabot/nuget/Database/nuget-safe-7a0fa5626f branch October 1, 2026 11:45

Navigation Menu

Bump Azure.Core and 14 others - #147

Bump Azure.Core and 14 others#147
dependabot[bot] wants to merge 1 commit into
developmentfrom
dependabot/nuget/Database/nuget-safe-7a0fa5626f

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026

1.63.0

1.63.0 (2026-09-25)

Features Added

Breaking Changes

Bugs Fixed

1.3.0

1.3.0

Breaking Changes

Change xml formatting to return error when it runs into syntax error so it is consistent with c# #​1854

What's Changed

Feature: Configurable whitespace handling for xml #​1790

Feature: Move closing bracket for xml elements to the same line. #​1598

Feature: Support for csharpier-ignore with XML formatter #​1788

Feature: Add MSBuild transitive and multi-target support #​1833

Feature: allow checking formatting with cache #​1830

Feature: remove dependency on Microsoft.AspNetCore.App #​1508

Fix: csharpier-ignore comment removes linespaces before block #​1867

Uh oh!

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Change xml formatting to return error when it runs into syntax error so it is consistent with c# #1854

Feature: Configurable whitespace handling for xml #1790

Feature: Move closing bracket for xml elements to the same line. #1598

Feature: Support for csharpier-ignore with XML formatter #1788

Feature: Add MSBuild transitive and multi-target support #1833

Feature: allow checking formatting with cache #1830

Feature: remove dependency on Microsoft.AspNetCore.App #1508

Fix: csharpier-ignore comment removes linespaces before block #1867