Skip to content

deps(nuget): Bump the dotnet-minor-patch group with 2 updates - #2772

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/nuget/backend/dotnet-minor-patch-4c78d61e9c
Open

deps(nuget): Bump the dotnet-minor-patch group with 2 updates#2772
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/nuget/backend/dotnet-minor-patch-4c78d61e9c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Updated Sentry.AspNetCore from 6.9.0 to 6.10.0.

Release notes

Sourced from Sentry.AspNetCore's releases.

6.10.0

Features ✨

  • feat: Logs sent via SentrySdk.Logger no longer require EnableLogs by @​jamescrosswell in #​5512
  • feat: SentryOptions.EnableMetrics is obsolete and ignored by @​jamescrosswell in #​5509

Fixes 🐛

  • fix: Prevent managed exceptions from leaking as NSExceptions, resulting in duplicate exception capture on iOS by @​jpnurmi in #​5525
  • fix(profiling): release the EventPipe session when the SDK shuts down by @​jamescrosswell in #​5470
  • fix: Memory leak in Sentry.Profiling due to EventLog interning tables growing indefinitely by @​jamescrosswell in #​5503
  • fix: Attachments not being sent properly when Spotlight is enabled by @​XAN9xXx in #​5511
  • fix: Heap dump files are now deleted from disk once they have been sent to Sentry by @​XAN9xXx in #​5481
  • fix: populate sentry.sdk.name and sentry.sdk.version for console apps by @​zkasuran in #​5483

Dependencies ⬆️

Deps

  • chore(deps): update Java SDK to v8.54.0 by @​github-actions in #​5517
  • chore(deps): update Cocoa SDK to v9.26.1 by @​github-actions in #​5516
  • chore(deps): update CLI to v3.7.0 by @​github-actions in #​5520
  • chore(deps): update Native SDK to v0.16.4 by @​github-actions in #​5508
  • chore(deps): update Java SDK to v8.53.0 by @​github-actions in #​5484

Other

  • deps: update perfview (removes the .il suffix from profile module names) by @​jamescrosswell in #​5502

Commits viewable in compare view.

Updated Testcontainers.PostgreSql from 4.14.0 to 4.15.0.

Release notes

Sourced from Testcontainers.PostgreSql's releases.

4.15.0

What's Changed

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​45594466.

🚀 Features

  • feat: Add options to the Docker Compose up and down command (#​1759) @​HofmeisterAn
  • feat: Add QuestDB module (#​1618) @​FortuneN, @​HofmeisterAn
  • feat: Add Compose support (#​1750) @​HofmeisterAn
  • fix(Couchbase): Treat an already provisioned cluster as configured (#​1736) @​arnelirobles, @​HofmeisterAn
  • feat: Retry transient Docker image pull failures (#​1734) @​thomhurst, @​HofmeisterAn
  • chore(deps): Split Dependabot NuGet jobs and bump test dependencies (#​1746) @​HofmeisterAn
  • feat(MongoDb): Resolve the MongoDb shell file path once (#​1745) @​HofmeisterAn

🐛 Bug Fixes

  • fix: Detach from the container output before stopping or removing it (#​1755) @​HofmeisterAn
  • fix(GCloud): Bump test image version (#​1752) @​HofmeisterAn

📖 Documentation

  • docs: Update CONTRIBUTING.md (#​1744) @​HofmeisterAn

🧹 Housekeeping

  • chore: Improve null check, test typing, and IDE settings (#​1757) @​HofmeisterAn
  • fix(GCloud): Bump test image version (#​1752) @​HofmeisterAn
  • chore: Resolve Sonar findings (#​1751) @​HofmeisterAn
  • chore(deps): Revert Dependabot NuGet jobs (#​1748) @​HofmeisterAn
  • feat: Prepare next release cycle (4.15.0) (#​1742) @​HofmeisterAn

📦 Dependency Updates

  • chore(deps): Bump mkdocs-material from 9.7.2 to 9.7.7 (#​1758) @​dependabot[bot]
  • chore(deps): Bump the actions group with 5 updates (#​1754) @​dependabot[bot]
  • chore(deps): Bump the actions group across 1 directory with 7 updates (#​1747) @​dependabot[bot]
  • chore(deps): Revert Dependabot NuGet jobs (#​1748) @​HofmeisterAn
  • chore(deps): Split Dependabot NuGet jobs and bump test dependencies (#​1746) @​HofmeisterAn

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Sentry.AspNetCore from 6.9.0 to 6.10.0
Bumps Testcontainers.PostgreSql from 4.14.0 to 4.15.0

---
updated-dependencies:
- dependency-name: Sentry.AspNetCore
  dependency-version: 6.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-patch
- dependency-name: Testcontainers.PostgreSql
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added backend Primary implementation impact in .NET API/domain/application/infrastructure. dependencies Dependency version updates (Dependabot or manual hygiene). labels Sep 7, 2026

@Chris0Jeky Chris0Jeky left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Independent Terra High review at 1b3bccb: no confirmed HIGH/CRITICAL blocker in the two central-package version changes.

Sentry remains disabled by default and requires explicit enablement plus a nonblank DSN. SendDefaultPii stays false and existing scrubbers remain; Taskdeck has no EnableMetrics/EnableLogs setting or SentrySdk.Logger caller affected by these release notes. Testcontainers is test-only and uses the stable PostgreSQL builder API, with Docker execution gated.

Current hosted restore/build/test checks are green. The coordinator still owes the repository-required full-solution command at this package head before merging; no local full suite or Docker run is claimed by this review. No fix commit or further review round is needed unless that proving check finds a defect.

@Chris0Jeky Chris0Jeky moved this from Pending to Review in Taskdeck Execution Sep 7, 2026
@Chris0Jeky

Copy link
Copy Markdown
Owner

Full required local backend verification completed at exact head 1b3bccb:

dotnet test backend/Taskdeck.sln -c Release -m:1 returned exit 0: Domain 1,603; Application 4,189; API 2,851 passed / 4 skipped; CLI 243; Architecture 28 passed / 1 skipped; Integration 36. Total 8,950 passed / 5 skipped. Independent Terra source review previously found no HIGH/CRITICAL defect. No live provider or production runtime was exercised.

backend/Directory.Packages.props is explicitly in ci/policy.v1.json controlPaths. The ADR-0066 maintainer-review gate therefore remains applicable; this is not an agent-merge approval. I am bringing the branch onto current main and will qualify the changed integration scope and hosted head before requesting that review.

@Chris0Jeky

Copy link
Copy Markdown
Owner

Current-base verification: GitHub updated this PR to f97e220 against main 0cebd93. The PR diff is still exactly the two reviewed package version changes; the Sentry startup/configuration and Testcontainers harness were unchanged by the base merge. A rebuilt focused API run covering current Chat, Capture, transcript triage, and observability tests passed 62/62 at the new head. Earlier full solution proof remains 8,950 passed / 5 skipped at 1b3bccb; it is not relabeled as a full-suite run at f97e220. Hosted current-head qualification is pending, as is the required maintainer control-path review. No live Sentry delivery, live LLM call, or new Docker runtime claim is made.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backend Primary implementation impact in .NET API/domain/application/infrastructure. dependencies Dependency version updates (Dependabot or manual hygiene).

Projects

Status: Review

Development

Successfully merging this pull request may close these issues.

1 participant