Skip to content

Package updates#1694

Merged
bart-vmware merged 9 commits into
mainfrom
package-updates
May 12, 2026
Merged

Package updates#1694
bart-vmware merged 9 commits into
mainfrom
package-updates

Conversation

@bart-vmware
Copy link
Copy Markdown
Member

@bart-vmware bart-vmware commented May 12, 2026

Description

Updates non-exposed dependencies, with one exception:

Microsoft.IdentityModel.Protocols.OpenIdConnect and Microsoft.IdentityModel.Tokens are bumped to the next minor version (from v8.14 to v8.15) to fix log sanitization to avoid leaking sensitive data.

Updated the Steeltoe way profile in SonarCloud to match updated Sonar rules.

Full code cleanup run at: https://github.com/SteeltoeOSS/Steeltoe/actions/runs/25734614936.

Full branch coverage dropped slightly, presumably due to bugfixes in Coverlet.
Before:
image
After:
image

Quality checklist

  • Your code complies with our Coding Style.
  • You've updated unit and/or integration tests for your change, where applicable.
  • You've updated documentation for your change, where applicable.
    If your change affects other repositories, such as Documentation, Samples and/or MainSite, add linked PRs here.
  • There's an open issue for the PR that you are making. If you'd like to propose a new feature or change, please open an issue to discuss the change or find an existing issue.
  • You've added required license files and/or file headers (explaining where the code came from with proper attribution), where code is copied from StackOverflow, a blog, or OSS.

@bart-vmware bart-vmware added this to the 4.2.0 milestone May 12, 2026
@bart-vmware bart-vmware added ReleaseLine/4.x Identified as a feature/fix for the 4.x release line Component/Security Issues related to Steeltoe Security components (not app-sec) labels May 12, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 12, 2026

Summary - All Code Coverage (ubuntu-latest)

Line coverage Branch coverage

Assembly Line coverage Branch coverage
Steeltoe.Bootstrap.AutoConfiguration 97.4% 100%
Steeltoe.Common 86.3% 78%
Steeltoe.Common.Certificates 97.2% 85.9%
Steeltoe.Common.Hosting 83.5% 65%
Steeltoe.Common.Http 98.7% 83.3%
Steeltoe.Common.Logging 81.1% 56.2%
Steeltoe.Common.Net 64.5% 66.6%
Steeltoe.Configuration.Abstractions 96.5% 92.8%
Steeltoe.Configuration.CloudFoundry 98.3% 93.9%
Steeltoe.Configuration.ConfigServer 91.3% 88%
Steeltoe.Configuration.Encryption 97.6% 92.4%
Steeltoe.Configuration.Kubernetes.ServiceBindings 95.1% 89.3%
Steeltoe.Configuration.Placeholder 93.8% 84.7%
Steeltoe.Configuration.RandomValue 93.2% 90%
Steeltoe.Configuration.SpringBoot 98.3% 95%
Steeltoe.Connectors 94.5% 90.7%
Steeltoe.Connectors.EntityFrameworkCore 79.7% 65.3%
Steeltoe.Discovery.Configuration 96.3% 75%
Steeltoe.Discovery.Consul 91.5% 91.3%
Steeltoe.Discovery.Eureka 91.1% 84.2%
Steeltoe.Discovery.HttpClients 89.9% 94.2%
Steeltoe.Logging.Abstractions 99.4% 97.1%
Steeltoe.Logging.DynamicConsole 100% 96.1%
Steeltoe.Logging.DynamicSerilog 99.1% 95.4%
Steeltoe.Management.Abstractions 100% 100%
Steeltoe.Management.Endpoint 96.1% 90%
Steeltoe.Management.Prometheus 95.8% 91.6%
Steeltoe.Management.Tasks 95.2% 80%
Steeltoe.Management.Tracing 100% 75%
Steeltoe.Security.Authentication.JwtBearer 98.1% 96.1%
Steeltoe.Security.Authentication.OpenIdConnect 76% 58.3%
Steeltoe.Security.Authorization.Certificate 96.7% 75%
Steeltoe.Security.DataProtection.Redis 100% ****

@bart-vmware bart-vmware marked this pull request as ready for review May 12, 2026 13:08
@bart-vmware bart-vmware requested a review from TimHess May 12, 2026 13:09
@sonarqubecloud
Copy link
Copy Markdown

@bart-vmware bart-vmware merged commit 044c1f1 into main May 12, 2026
25 checks passed
@bart-vmware bart-vmware deleted the package-updates branch May 12, 2026 15:02
bart-vmware added a commit to SteeltoeOSS/Samples that referenced this pull request May 21, 2026
bart-vmware added a commit to SteeltoeOSS/Samples that referenced this pull request May 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Component/Security Issues related to Steeltoe Security components (not app-sec) ReleaseLine/4.x Identified as a feature/fix for the 4.x release line

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants