Skip to content

Bump the major-minor-patch group with 7 updates#115

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/nuget/source/AAS.TwinEngine.DataEngine.ModuleTests/develop/major-minor-patch-a1cf33389b
Closed

Bump the major-minor-patch group with 7 updates#115
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/nuget/source/AAS.TwinEngine.DataEngine.ModuleTests/develop/major-minor-patch-a1cf33389b

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 20, 2026

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Updated JsonSchema.Net from 7.3.4 to 9.2.1.

Release notes

Sourced from JsonSchema.Net's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.7 to 10.0.8.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.7 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http from 10.0.7 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.Http's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Resilience from 10.5.0 to 10.6.0.

Release notes

Sourced from Microsoft.Extensions.Http.Resilience's releases.

10.6.0

Version 10.6.0 stabilizes the response continuation token and background-response APIs in Microsoft.Extensions.AI.Abstractions. Most other AI work for May shipped in 10.5.1; this monthly release rolls those changes up alongside dependency updates and a small Resource Monitoring cleanup.

Experimental API Changes

Now Stable

  • ResponseContinuationToken and background-response APIs are now stable (previously MEAI001) #​7512

What's Changed

AI

  • Stabilize ResponseContinuationToken / background-response APIs #​7512 by @​jozkee (co-authored by @​Copilot)

Repository Infrastructure Updates

  • Update version to 10.6.0 #​7458 by @​jeffhandley
  • [main] Update dependencies from dotnet/arcade #​7451
  • Bump follow-redirects from 1.15.11 to 1.16.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript/azure-devops-report/tasks/PublishAIEvaluationReport #​7469
  • Merge release/10.5 into main #​7470 by @​jeffhandley
  • Bump microsoft.visualstudio.slngen.tool from 12.0.13 to 12.0.32 #​7484
  • Bump postcss from 8.5.9 to 8.5.12 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7494
  • Bump dotnet-reportgenerator-globaltool from 5.5.7 to 5.5.9 #​7504
  • Rename release-notes skill to write-release-notes #​7511 by @​jeffhandley (co-authored by @​Copilot)

Acknowledgements

  • @​wtgodbe @​tarekgh @​peterwald @​JeremyLikness @​eiriktsarpalis @​ericstj @​evgenyfedorov2 reviewed pull requests

Full Changelog: dotnet/extensions@v10.5.2...v10.6.0

10.5.2

This patch release ships a single fix to Microsoft.Extensions.VectorData.Abstractions, correcting StorageName resolution when external serialization is enabled. Microsoft.Extensions.VectorData.ConformanceTests, Microsoft.Extensions.AI.Abstractions, Microsoft.Extensions.AI, and Microsoft.Extensions.AI.OpenAI are published alongside it for version coherency — they contain no code changes from 10.5.1.

Packages in this release

Package Version
Microsoft.Extensions.VectorData.Abstractions 10.5.2
Microsoft.Extensions.VectorData.ConformanceTests 10.5.2
Microsoft.Extensions.AI.Abstractions 10.5.2
Microsoft.Extensions.AI 10.5.2
Microsoft.Extensions.AI.OpenAI 10.5.2

What's Changed

Microsoft.Extensions.VectorData.Abstractions

  • Minor fixes to MEVD.Abstractions: correct StorageName behavior when external serialization is enabled, and disable a warning for net462. (by @​roji in #​7475)

Full Changelog: dotnet/extensions@v10.5.1...v10.5.2

10.5.1

Version 10.5.1 of the Microsoft.Extensions.AI packages stabilizes CodeInterpreter, WebSearch, and ImageGeneration tool content types. The release adds new experimental tool search and OpenAI request policy hooks. And the OpenTelemetry gen-ai semantic conventions are updated to align with v1.41.

The 'aiagent-webapi' project template in Microsoft.Agents.AI.ProjectTemplates is updated to align with v1.3.0 of Agent Framework, updating the OpenTelemetry dependencies within the template projects as well.

Packages in this release

Package Version
Microsoft.Extensions.AI 10.5.1
Microsoft.Extensions.AI.Abstractions 10.5.1
Microsoft.Extensions.AI.OpenAI 10.5.1
Microsoft.Extensions.AI.Templates 10.5.1-preview.3.26251.3
Microsoft.Agents.AI.ProjectTemplates 1.3.0-preview.1.26251.3

Experimental API Changes

Now Stable

The following types previously emitted the MEAI001 experimental diagnostic and are now stable.

  • CodeInterpreter and WebSearch tool content types are now stable #​7493
    • CodeInterpreterToolCallContent
    • CodeInterpreterToolResultContent
    • WebSearchToolCallContent
    • WebSearchToolResultContent
  • ImageGeneration tool content types and tool are now stable #​7476
    • ImageGenerationToolCallContent
    • ImageGenerationToolResultContent
    • HostedImageGenerationTool
    • ImageGenerationOptions
    • ImageGenerationResponseFormat (the Hosted enum value remains experimental)
    • IImageGenerator and the rest of the image generation infrastructure also remain experimental

New Experimental APIs

The following new APIs emit the MEAI001 experimental diagnostic.

  • New experimental API: HostedToolSearchTool with DeferredTools for tool-search-driven deferred tool loading #​7471
  • New experimental API: OpenAIRequestPolicies extension hook for appending System.ClientModel.PipelinePolicy instances to outgoing OpenAI requests #​7495

Breaking Changes to Experimental APIs

  • WebSearchToolResultContent.Results was renamed to Outputs as part of the stabilization in #​7493, aligning with CodeInterpreterToolResultContent.Outputs. The original Results property was included in version 10.4.0 and 10.5.0; this is a binary breaking change and consumers need to update to consume the updated property.

    WebSearchToolResultContent content = ...;
    - IList<AIContent>? items = content.Results;
    + IList<AIContent>? items = content.Outputs;

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.7 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated System.Text.Json from 10.0.7 to 10.0.8.

Release notes

Sourced from System.Text.Json's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps JsonSchema.Net from 7.3.4 to 9.2.1
Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.7 to 10.0.8
Bumps Microsoft.Extensions.DependencyInjection from 10.0.7 to 10.0.8
Bumps Microsoft.Extensions.Http from 10.0.7 to 10.0.8
Bumps Microsoft.Extensions.Http.Resilience from 10.5.0 to 10.6.0
Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.7 to 10.0.8
Bumps System.Text.Json from 10.0.7 to 10.0.8

---
updated-dependencies:
- dependency-name: JsonSchema.Net
  dependency-version: 9.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-minor-patch
- dependency-name: JsonSchema.Net
  dependency-version: 9.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-minor-patch
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: major-minor-patch
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: major-minor-patch
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: major-minor-patch
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: major-minor-patch
- dependency-name: Microsoft.Extensions.Http
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: major-minor-patch
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 10.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: major-minor-patch
- dependency-name: System.Text.Json
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: major-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels May 20, 2026
@sonarqubecloud
Copy link
Copy Markdown

@github-actions
Copy link
Copy Markdown

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 80 package(s) with unknown licenses.
See the Details below.

License Issues

source/AAS.TwinEngine.DataEngine/AAS.TwinEngine.DataEngine.csproj

PackageVersionLicenseIssue Type
JsonSchema.Net9.2.1NullUnknown License
Microsoft.Extensions.AmbientMetadata.Application10.6.0NullUnknown License
Microsoft.Extensions.Compliance.Abstractions10.6.0NullUnknown License
Microsoft.Extensions.DependencyInjection10.0.8NullUnknown License
Microsoft.Extensions.DependencyInjection.AutoActivation10.6.0NullUnknown License
Microsoft.Extensions.Diagnostics.ExceptionSummarization10.6.0NullUnknown License
Microsoft.Extensions.Http.Diagnostics10.6.0NullUnknown License
Microsoft.Extensions.Http.Resilience10.6.0NullUnknown License
Microsoft.Extensions.Resilience10.6.0NullUnknown License
Microsoft.Extensions.Telemetry10.6.0NullUnknown License
Microsoft.Extensions.Telemetry.Abstractions10.6.0NullUnknown License
System.Text.Json10.0.8NullUnknown License
Humanizer.Core3.0.10NullUnknown License

source/AAS.TwinEngine.Plugin.TestPlugin.PlaywrightTests/AAS.TwinEngine.Plugin.TestPlugin.PlaywrightTests.csproj

PackageVersionLicenseIssue Type
Microsoft.AspNetCore.Mvc.Testing10.0.8NullUnknown License
Microsoft.AspNetCore.TestHost10.0.8NullUnknown License
Microsoft.Extensions.Configuration10.0.8NullUnknown License
Microsoft.Extensions.Configuration.Abstractions10.0.8NullUnknown License
Microsoft.Extensions.Configuration.Binder10.0.8NullUnknown License
Microsoft.Extensions.Configuration.CommandLine10.0.8NullUnknown License
Microsoft.Extensions.Configuration.EnvironmentVariables10.0.8NullUnknown License
Microsoft.Extensions.Configuration.FileExtensions10.0.8NullUnknown License
Microsoft.Extensions.Configuration.Json10.0.8NullUnknown License
Microsoft.Extensions.Configuration.UserSecrets10.0.8NullUnknown License
Microsoft.Extensions.DependencyInjection10.0.8NullUnknown License
Microsoft.Extensions.DependencyInjection.Abstractions10.0.8NullUnknown License
Microsoft.Extensions.DependencyModel10.0.8NullUnknown License
Microsoft.Extensions.Diagnostics10.0.8NullUnknown License
Microsoft.Extensions.Diagnostics.Abstractions10.0.8NullUnknown License
Microsoft.Extensions.FileProviders.Abstractions10.0.8NullUnknown License
Microsoft.Extensions.FileProviders.Physical10.0.8NullUnknown License
Microsoft.Extensions.FileSystemGlobbing10.0.8NullUnknown License
Microsoft.Extensions.Hosting10.0.8NullUnknown License
Microsoft.Extensions.Hosting.Abstractions10.0.8NullUnknown License
Microsoft.Extensions.Logging10.0.8NullUnknown License
Microsoft.Extensions.Logging.Abstractions10.0.8NullUnknown License
Microsoft.Extensions.Logging.Configuration10.0.8NullUnknown License
Microsoft.Extensions.Logging.Console10.0.8NullUnknown License
Microsoft.Extensions.Logging.Debug10.0.8NullUnknown License
Microsoft.Extensions.Logging.EventLog10.0.8NullUnknown License
Microsoft.Extensions.Logging.EventSource10.0.8NullUnknown License
Microsoft.Extensions.Options10.0.8NullUnknown License
Microsoft.Extensions.Options.ConfigurationExtensions10.0.8NullUnknown License
Microsoft.Extensions.Primitives10.0.8NullUnknown License
System.Diagnostics.EventLog10.0.8NullUnknown License

source/AAS.TwinEngine.Plugin.TestPlugin.UnitTests/AAS.TwinEngine.Plugin.TestPlugin.UnitTests.csproj

PackageVersionLicenseIssue Type
Microsoft.Extensions.DependencyInjection.Abstractions10.0.8NullUnknown License
Microsoft.Extensions.Logging.Abstractions10.0.8NullUnknown License

source/AAS.TwinEngine.Plugin.TestPlugin/AAS.TwinEngine.Plugin.TestPlugin.csproj

PackageVersionLicenseIssue Type
JsonSchema.Net9.2.1NullUnknown License
Microsoft.Extensions.DependencyInjection10.0.8NullUnknown License
Humanizer.Core3.0.10NullUnknown License

source/AAS.TwinEngine.DataEngine.ModuleTests/AAS.TwinEngine.DataEngine.ModuleTests.csproj

PackageVersionLicenseIssue Type
Microsoft.AspNetCore.Mvc.Testing10.0.8NullUnknown License
Microsoft.AspNetCore.TestHost10.0.8NullUnknown License
Microsoft.Extensions.Configuration10.0.8NullUnknown License
Microsoft.Extensions.Configuration.Abstractions10.0.8NullUnknown License
Microsoft.Extensions.Configuration.Binder10.0.8NullUnknown License
Microsoft.Extensions.Configuration.CommandLine10.0.8NullUnknown License
Microsoft.Extensions.Configuration.EnvironmentVariables10.0.8NullUnknown License
Microsoft.Extensions.Configuration.FileExtensions10.0.8NullUnknown License
Microsoft.Extensions.Configuration.Json10.0.8NullUnknown License
Microsoft.Extensions.Configuration.UserSecrets10.0.8NullUnknown License
Microsoft.Extensions.DependencyInjection10.0.8NullUnknown License
Microsoft.Extensions.DependencyInjection.Abstractions10.0.8NullUnknown License
Microsoft.Extensions.DependencyModel10.0.8NullUnknown License
Microsoft.Extensions.Diagnostics10.0.8NullUnknown License
Microsoft.Extensions.Diagnostics.Abstractions10.0.8NullUnknown License
Microsoft.Extensions.FileProviders.Abstractions10.0.8NullUnknown License
Microsoft.Extensions.FileProviders.Physical10.0.8NullUnknown License
Microsoft.Extensions.FileSystemGlobbing10.0.8NullUnknown License
Microsoft.Extensions.Hosting10.0.8NullUnknown License
Microsoft.Extensions.Hosting.Abstractions10.0.8NullUnknown License
Microsoft.Extensions.Logging10.0.8NullUnknown License
Microsoft.Extensions.Logging.Abstractions10.0.8NullUnknown License
Microsoft.Extensions.Logging.Configuration10.0.8NullUnknown License
Microsoft.Extensions.Logging.Console10.0.8NullUnknown License
Microsoft.Extensions.Logging.Debug10.0.8NullUnknown License
Microsoft.Extensions.Logging.EventLog10.0.8NullUnknown License
Microsoft.Extensions.Logging.EventSource10.0.8NullUnknown License
Microsoft.Extensions.Options10.0.8NullUnknown License
Microsoft.Extensions.Options.ConfigurationExtensions10.0.8NullUnknown License
Microsoft.Extensions.Primitives10.0.8NullUnknown License
System.Diagnostics.EventLog10.0.8NullUnknown License
Allowed Licenses: Apache-1.0, Apache-1.1, Apache-2.0, BSL-1.0, BSD-1-Clause, BSD-2-Clause, BSD-2-Clause-FreeBSD, BSD-2-Clause-NetBSD, BSD-3-Clause, BSD-3-Clause-Clear, BSD-3-Clause-No-Nuclear-License, BSD-3-Clause-No-Nuclear-License-2014, BSD-3-Clause-No-Nuclear-Warranty, BSD-3-Clause-Open-MPI, BSD-4-Clause, BSD-Protection, BSD-Source-Code, BSD-3-Clause-Attribution, 0BSD, BSD-2-Clause-Patent, BSD-4-Clause-UC, MIT-CMU, CC-BY-3.0, CC-BY-SA-1.0, CC-BY-SA-2.0, CC-BY-SA-2.5, CC-BY-SA-3.0, CC-BY-SA-4.0, CC0-1.0, WTFPL, MIT-enna, MIT-feh, ISC, JSON, BSD-3-Clause-LBNL, MITNFA, MIT, MIT-0, UPL-1.0, NCSA, X11, Xerox, BlueOak-1.0.0, CC-BY-4.0, MS-PL, PostgreSQL, Python-2.0, SSPL-1.0, OFL-1.1, Unlicense, Unicode-DFS-2016, Unicode-3.0
Excluded from license check: pkg:nuget/AasCore.Aas3_0, pkg:nuget/AasCore.Aas3.Package

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
nuget/Humanizer.Core 3.0.10 🟢 5.2
Details
CheckScoreReason
Code-Review🟢 9Found 28/30 approved changesets -- score normalized to 9
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 9license file detected
Fuzzing⚠️ 0project is not fuzzed
Security-Policy⚠️ 0security policy file not detected
Branch-Protection⚠️ 3branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST🟢 10SAST tool is run on all commits
nuget/Json.More.Net 3.0.1 UnknownUnknown
nuget/JsonPointer.Net 7.0.1 UnknownUnknown
nuget/JsonSchema.Net 9.2.1 UnknownUnknown
nuget/Microsoft.Extensions.AmbientMetadata.Application 10.6.0 🟢 6.7
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/Microsoft.Extensions.Compliance.Abstractions 10.6.0 🟢 6.7
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/Microsoft.Extensions.DependencyInjection 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.DependencyInjection.AutoActivation 10.6.0 🟢 6.7
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/Microsoft.Extensions.Diagnostics.ExceptionSummarization 10.6.0 🟢 6.7
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/Microsoft.Extensions.Http 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Http.Diagnostics 10.6.0 🟢 6.7
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/Microsoft.Extensions.Http.Resilience 10.6.0 🟢 6.7
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/Microsoft.Extensions.Resilience 10.6.0 🟢 6.7
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/Microsoft.Extensions.Telemetry 10.6.0 🟢 6.7
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/Microsoft.Extensions.Telemetry.Abstractions 10.6.0 🟢 6.7
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/System.Text.Json 10.0.8 UnknownUnknown
nuget/Microsoft.AspNetCore.Mvc.Testing 10.0.8 UnknownUnknown
nuget/Microsoft.AspNetCore.TestHost 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Configuration 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Configuration.Abstractions 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Configuration.Binder 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Configuration.CommandLine 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Configuration.EnvironmentVariables 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Configuration.FileExtensions 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Configuration.Json 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Configuration.UserSecrets 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.DependencyInjection 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.DependencyInjection.Abstractions 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.DependencyModel 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Diagnostics 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Diagnostics.Abstractions 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.FileProviders.Abstractions 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.FileProviders.Physical 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.FileSystemGlobbing 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Hosting 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Hosting.Abstractions 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Logging 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Logging.Abstractions 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Logging.Configuration 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Logging.Console 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Logging.Debug 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Logging.EventLog 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Logging.EventSource 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Options 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Options.ConfigurationExtensions 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Primitives 10.0.8 UnknownUnknown
nuget/System.Diagnostics.EventLog 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.DependencyInjection.Abstractions 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Logging.Abstractions 10.0.8 UnknownUnknown
nuget/Humanizer.Core 3.0.10 🟢 5.2
Details
CheckScoreReason
Code-Review🟢 9Found 28/30 approved changesets -- score normalized to 9
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 9license file detected
Fuzzing⚠️ 0project is not fuzzed
Security-Policy⚠️ 0security policy file not detected
Branch-Protection⚠️ 3branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST🟢 10SAST tool is run on all commits
nuget/Json.More.Net 3.0.1 UnknownUnknown
nuget/JsonPointer.Net 7.0.1 UnknownUnknown
nuget/JsonSchema.Net 9.2.1 UnknownUnknown
nuget/Microsoft.Extensions.DependencyInjection 10.0.8 UnknownUnknown
nuget/Microsoft.AspNetCore.Mvc.Testing 10.0.8 UnknownUnknown
nuget/Microsoft.AspNetCore.TestHost 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Configuration 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Configuration.Abstractions 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Configuration.Binder 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Configuration.CommandLine 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Configuration.EnvironmentVariables 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Configuration.FileExtensions 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Configuration.Json 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Configuration.UserSecrets 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.DependencyInjection 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.DependencyInjection.Abstractions 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.DependencyModel 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Diagnostics 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Diagnostics.Abstractions 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.FileProviders.Abstractions 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.FileProviders.Physical 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.FileSystemGlobbing 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Hosting 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Hosting.Abstractions 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Logging 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Logging.Abstractions 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Logging.Configuration 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Logging.Console 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Logging.Debug 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Logging.EventLog 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Logging.EventSource 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Options 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Options.ConfigurationExtensions 10.0.8 UnknownUnknown
nuget/Microsoft.Extensions.Primitives 10.0.8 UnknownUnknown
nuget/System.Diagnostics.EventLog 10.0.8 UnknownUnknown

Scanned Files

  • source/AAS.TwinEngine.DataEngine.ModuleTests/AAS.TwinEngine.DataEngine.ModuleTests.csproj
  • source/AAS.TwinEngine.DataEngine/AAS.TwinEngine.DataEngine.csproj
  • source/AAS.TwinEngine.Plugin.TestPlugin.PlaywrightTests/AAS.TwinEngine.Plugin.TestPlugin.PlaywrightTests.csproj
  • source/AAS.TwinEngine.Plugin.TestPlugin.UnitTests/AAS.TwinEngine.Plugin.TestPlugin.UnitTests.csproj
  • source/AAS.TwinEngine.Plugin.TestPlugin/AAS.TwinEngine.Plugin.TestPlugin.csproj

@mm-psy
Copy link
Copy Markdown
Contributor

mm-psy commented May 20, 2026

@dependabot recreate

@mm-psy
Copy link
Copy Markdown
Contributor

mm-psy commented May 20, 2026

This PR looks broken. There's already a new one. #117

@mm-psy mm-psy closed this May 20, 2026
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 20, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/nuget/source/AAS.TwinEngine.DataEngine.ModuleTests/develop/major-minor-patch-a1cf33389b branch May 20, 2026 13:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant