chore(deps): bump dotnet/aspnet from 9.0 to 10.0 in /Services/AuthApi/Planora.Auth.Api#71
Conversation
Bumps dotnet/aspnet from 9.0 to 10.0. --- updated-dependencies: - dependency-name: dotnet/aspnet dependency-version: '10.0' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
dependabot
Bot
added
the
dependencies
Applies the Dependabot dotnet/sdk and dotnet/aspnet 9->10 image bumps as a real
framework migration (a net9 app cannot run on the aspnet:10.0 runtime, so a
tag-only change would ship broken containers). .NET 10 is LTS; .NET 9 was STS.
WHAT changed:
- TargetFramework net9.0 -> net10.0 in Directory.Build.props and all 32 .csproj.
- Runtime-aligned Microsoft.* packages 9.0.15 -> 10.0.8 (EF Core, ASP.NET Core,
Extensions.*, Diagnostics.HealthChecks.*, Mvc.Testing); Npgsql EF provider
9.0.4 -> 10.0.2.
- Dropped explicit System.Text.Json / System.Text.Encodings.Web references: they
are framework-provided in net10 and the 10.0.7 pin was a downgrade from the
framework's 10.0.8 (fixed NU1605). Removed the unused Microsoft.AspNetCore.OpenApi
reference from all 6 service APIs (the app uses Swashbuckle; that package pulled
Microsoft.OpenApi v2 and broke Swashbuckle 6.9.0 -> CS7069). NU1510 (package
pruning advisory) kept as a non-blocking warning, matching the repo's existing
advisory policy.
- API deprecations promoted to errors under -warnaserror, fixed:
* ForwardedHeadersOptions.KnownNetworks -> KnownIPNetworks (gateway, ASPDEPR005).
* Rfc2898DeriveBytes ctor -> static Rfc2898DeriveBytes.Pbkdf2 (Auth PasswordHasher,
SYSLIB0060). Output is byte-identical (same salt, 100k iterations, SHA-512,
UTF-8), so existing stored password hashes still verify.
- All 7 service Dockerfiles + the Migrator runtime image -> dotnet 10.0 tags.
- actions/setup-dotnet pinned to 10.0.x across every workflow.
- Docs (README, architecture, codebase-map, deployment, development, getting-started,
overview, ARCHITECTURE) updated to .NET 10; CHANGELOG entry added.
HOW verified: dotnet build -warnaserror is clean (0 errors) and all 791 backend
tests pass on net10.0 (SDK 10.0.300, runtime 10.0.8).
Security: password hashing parameters and output are unchanged; only the obsolete
API was swapped for its supported static equivalent.
Refs: #67, #69, #71, #72, #73, #74, #75, #76, #77, #78, #79
|
Applied on |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
dependabot
Bot
deleted the
dependabot/docker/Services/AuthApi/Planora.Auth.Api/dotnet/aspnet-10.0
branch
1 participant
Bumps dotnet/aspnet from 9.0 to 10.0.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)