Skip to content

[Backend] Dependency updates for April 2025#3711

Merged
imnasnainaec merged 18 commits intomasterfrom
backend-deps-2025-05
Apr 7, 2025
Merged

[Backend] Dependency updates for April 2025#3711
imnasnainaec merged 18 commits intomasterfrom
backend-deps-2025-05

Conversation

@imnasnainaec
Copy link
Collaborator

@imnasnainaec imnasnainaec commented Apr 7, 2025

This change is Reviewable

dependabot bot and others added 18 commits April 1, 2025 12:13
Bumps [OpenTelemetry.Exporter.OpenTelemetryProtocol](https://github.com/open-telemetry/opentelemetry-dotnet) from 1.11.1 to 1.11.2.
- [Release notes](https://github.com/open-telemetry/opentelemetry-dotnet/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-dotnet/blob/main/RELEASENOTES.md)
- [Commits](open-telemetry/opentelemetry-dotnet@core-1.11.1...core-1.11.2)

---
updated-dependencies:
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [OpenTelemetry.Extensions.Hosting](https://github.com/open-telemetry/opentelemetry-dotnet) from 1.11.1 to 1.11.2.
- [Release notes](https://github.com/open-telemetry/opentelemetry-dotnet/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-dotnet/blob/main/RELEASENOTES.md)
- [Commits](open-telemetry/opentelemetry-dotnet@core-1.11.1...core-1.11.2)

---
updated-dependencies:
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [MongoDB.Driver](https://github.com/mongodb/mongo-csharp-driver) from 3.2.1 to 3.3.0.
- [Release notes](https://github.com/mongodb/mongo-csharp-driver/releases)
- [Commits](mongodb/mongo-csharp-driver@v3.2.1...v3.3.0)

---
updated-dependencies:
- dependency-name: MongoDB.Driver
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [OpenTelemetry.Exporter.Console](https://github.com/open-telemetry/opentelemetry-dotnet) from 1.11.1 to 1.11.2.
- [Release notes](https://github.com/open-telemetry/opentelemetry-dotnet/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-dotnet/blob/main/RELEASENOTES.md)
- [Commits](open-telemetry/opentelemetry-dotnet@core-1.11.1...core-1.11.2)

---
updated-dependencies:
- dependency-name: OpenTelemetry.Exporter.Console
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…yModel.Tokens and System.IdentityModel.Tokens.Jwt

Bumps [Microsoft.AspNetCore.Authentication.JwtBearer](https://github.com/dotnet/aspnetcore), [Microsoft.IdentityModel.Tokens](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet) and [System.IdentityModel.Tokens.Jwt](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet). These dependencies needed to be updated together.

Updates `Microsoft.AspNetCore.Authentication.JwtBearer` from 8.0.13 to 8.0.14
- [Release notes](https://github.com/dotnet/aspnetcore/releases)
- [Changelog](https://github.com/dotnet/aspnetcore/blob/main/docs/ReleasePlanning.md)
- [Commits](dotnet/aspnetcore@v8.0.13...v8.0.14)

Updates `Microsoft.IdentityModel.Tokens` from 8.6.0 to 7.1.2
- [Release notes](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases)
- [Changelog](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/dev/CHANGELOG.md)
- [Commits](AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.6.0...7.1.2)

Updates `System.IdentityModel.Tokens.Jwt` from 8.6.0 to 7.1.2
- [Release notes](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases)
- [Changelog](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/dev/CHANGELOG.md)
- [Commits](AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.6.0...7.1.2)

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Microsoft.IdentityModel.Tokens
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [Microsoft.NET.Test.Sdk](https://github.com/microsoft/vstest) from 17.11.1 to 17.13.0.
- [Release notes](https://github.com/microsoft/vstest/releases)
- [Changelog](https://github.com/microsoft/vstest/blob/main/docs/releases.md)
- [Commits](microsoft/vstest@v17.11.1...v17.13.0)

---
updated-dependencies:
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [OpenTelemetry.Instrumentation.Http](https://github.com/open-telemetry/opentelemetry-dotnet-contrib) from 1.10.0 to 1.11.1.
- [Release notes](https://github.com/open-telemetry/opentelemetry-dotnet-contrib/releases)
- [Commits](open-telemetry/opentelemetry-dotnet-contrib@Exporter.Geneva-1.10.0...Resources.AWS-1.11.1)

---
updated-dependencies:
- dependency-name: OpenTelemetry.Instrumentation.Http
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [OpenTelemetry.Instrumentation.AspNetCore](https://github.com/open-telemetry/opentelemetry-dotnet-contrib) from 1.11.0 to 1.11.1.
- [Release notes](https://github.com/open-telemetry/opentelemetry-dotnet-contrib/releases)
- [Commits](open-telemetry/opentelemetry-dotnet-contrib@Resources.AWS-1.11.0...Resources.AWS-1.11.1)

---
updated-dependencies:
- dependency-name: OpenTelemetry.Instrumentation.AspNetCore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [coverlet.collector](https://github.com/coverlet-coverage/coverlet) from 6.0.2 to 6.0.4.
- [Release notes](https://github.com/coverlet-coverage/coverlet/releases)
- [Commits](coverlet-coverage/coverlet@v6.0.2...v6.0.4)

---
updated-dependencies:
- dependency-name: coverlet.collector
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…emetry.Exporter.OpenTelemetryProtocol-1.11.2' into backend-deps-2025-05
…emetry.Extensions.Hosting-1.11.2' into backend-deps-2025-05
…emetry.Exporter.Console-1.11.2' into backend-deps-2025-05
…icrosoft.NET.Test.Sdk-17.13.0' into backend-deps-2025-05
…penTelemetry.Instrumentation.Http-1.11.1' into backend-deps-2025-05
…penTelemetry.Instrumentation.AspNetCore-1.11.1' into backend-deps-2025-05
…overlet.collector-6.0.4' into backend-deps-2025-05
@imnasnainaec imnasnainaec added backend dependencies Pull requests that update a dependency file labels Apr 7, 2025
@imnasnainaec imnasnainaec self-assigned this Apr 7, 2025
@github-actions
Copy link

github-actions bot commented Apr 7, 2025

⚠️ Commit Message Format Issues ⚠️
commit d46f8c8853:
3: B1 Line exceeds max length (94>80): "Bumps coverlet.collector from 6.0.2 to 6.0.4."
5: B1 Line exceeds max length (82>80): "- Commits"

commit cc6a912f1d:
3: B1 Line exceeds max length (135>80): "Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.11.0 to 1.11.1."
4: B1 Line exceeds max length (90>80): "- Release notes"
5: B1 Line exceeds max length (127>80): "- Commits"

commit 654781a39e:
3: B1 Line exceeds max length (129>80): "Bumps OpenTelemetry.Instrumentation.Http from 1.10.0 to 1.11.1."
4: B1 Line exceeds max length (90>80): "- Release notes"
5: B1 Line exceeds max length (129>80): "- Commits"

commit be2ae0982b:
3: B1 Line exceeds max length (92>80): "Bumps Microsoft.NET.Test.Sdk from 17.11.1 to 17.13.0."

commit 7c58bd7390:
1: T1 Title exceeds max length (118>72): "Bump Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.IdentityModel.Tokens and System.IdentityModel.Tokens.Jwt"
3: B1 Line exceeds max length (386>80): "Bumps Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.IdentityModel.Tokens and System.IdentityModel.Tokens.Jwt. These dependencies needed to be updated together."
7: B1 Line exceeds max length (85>80): "- Changelog"
11: B1 Line exceeds max length (112>80): "- Release notes"
12: B1 Line exceeds max length (121>80): "- Changelog"
13: B1 Line exceeds max length (119>80): "- Commits"
16: B1 Line exceeds max length (112>80): "- Release notes"
17: B1 Line exceeds max length (121>80): "- Changelog"
18: B1 Line exceeds max length (119>80): "- Commits"

commit 00019d6f49:
3: B1 Line exceeds max length (117>80): "Bumps OpenTelemetry.Exporter.Console from 1.11.1 to 1.11.2."
4: B1 Line exceeds max length (82>80): "- Release notes"
5: B1 Line exceeds max length (95>80): "- Changelog"
6: B1 Line exceeds max length (101>80): "- Commits"

commit 0848cf6f75:
3: B1 Line exceeds max length (91>80): "Bumps MongoDB.Driver from 3.2.1 to 3.3.0."
5: B1 Line exceeds max length (83>80): "- Commits"

commit d9b3f34cc7:
3: B1 Line exceeds max length (119>80): "Bumps OpenTelemetry.Extensions.Hosting from 1.11.1 to 1.11.2."
4: B1 Line exceeds max length (82>80): "- Release notes"
5: B1 Line exceeds max length (95>80): "- Changelog"
6: B1 Line exceeds max length (101>80): "- Commits"

commit 221afca077:
3: B1 Line exceeds max length (131>80): "Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.11.1 to 1.11.2."
4: B1 Line exceeds max length (82>80): "- Release notes"
5: B1 Line exceeds max length (95>80): "- Changelog"
6: B1 Line exceeds max length (101>80): "- Commits"

@imnasnainaec imnasnainaec marked this pull request as ready for review April 7, 2025 13:47
@codecov
Copy link

codecov bot commented Apr 7, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 73.25%. Comparing base (86de43d) to head (9fb4fbe).
Report is 38 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #3711   +/-   ##
=======================================
  Coverage   73.25%   73.25%           
=======================================
  Files         285      285           
  Lines       10631    10631           
  Branches     1323     1323           
=======================================
  Hits         7788     7788           
  Misses       2451     2451           
  Partials      392      392           
Flag Coverage Δ
backend 82.81% <ø> (ø)
frontend 65.77% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Copy link
Contributor

@jasonleenaylor jasonleenaylor left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:lgtm:

Reviewed 2 of 2 files at r1, all commit messages.
Reviewable status: :shipit: complete! all files reviewed, all discussions resolved (waiting on @imnasnainaec)

@imnasnainaec imnasnainaec merged commit 1b297e7 into master Apr 7, 2025
17 of 18 checks passed
@imnasnainaec imnasnainaec deleted the backend-deps-2025-05 branch April 7, 2025 17:48
@imnasnainaec
Copy link
Collaborator Author

Oops, that should have been "for April 2025".

@imnasnainaec imnasnainaec changed the title [Backend] Dependency updates for May 2025 [Backend] Dependency updates for April 2025 Apr 8, 2025
andracc pushed a commit that referenced this pull request Apr 22, 2025
* Bump OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.11.1 to 1.11.2 in /Backend
* Bump OpenTelemetry.Extensions.Hosting from 1.11.1 to 1.11.2 in /Backend
* Bump MongoDB.Driver from 3.2.1 to 3.3.0 in /Backend
* Bump OpenTelemetry.Exporter.Console from 1.11.1 to 1.11.2 in /Backend
* Bump Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.13 to 8.0.14 in /Backend
* Bump OpenTelemetry.Instrumentation.Http from 1.10.0 to 1.11.1 in /Backen
* Bump OpenTelemetry.Instrumentation.AspNetCore from 1.11.0 to 1.11.1 in /Backend
* Bump Microsoft.NET.Test.Sdk from 17.11.1 to 17.13.0 in /Backend.Tests
* Bump coverlet.collector from 6.0.2 to 6.0.4 in /Backend.Tests

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backend dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants