Skip to content

chore(deps): Bump the nuget-minor-e-patch group with 15 updates - #825

Merged
marceloterra1983 merged 2 commits into
mainfrom
dependabot/nuget/nuget-minor-e-patch-7f0577e8f1
Aug 26, 2026
Merged

chore(deps): Bump the nuget-minor-e-patch group with 15 updates#825
marceloterra1983 merged 2 commits into
mainfrom
dependabot/nuget/nuget-minor-e-patch-7f0577e8f1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 26, 2026

Copy link
Copy Markdown
Contributor

Updated Google.Protobuf from 3.35.1 to 3.36.0.

Release notes

Sourced from Google.Protobuf's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Grpc.AspNetCore from 2.80.0 to 2.83.0.

Release notes

Sourced from Grpc.AspNetCore's releases.

2.83.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.80.0...v2.83.0

2.83.0-pre1

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.80.0...v2.83.0-pre1

Commits viewable in compare view.

Updated Grpc.AspNetCore.HealthChecks from 2.80.0 to 2.83.0.

Release notes

Sourced from Grpc.AspNetCore.HealthChecks's releases.

2.83.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.80.0...v2.83.0

2.83.0-pre1

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.80.0...v2.83.0-pre1

Commits viewable in compare view.

Updated Grpc.Core.Api from 2.80.0 to 2.83.0.

Release notes

Sourced from Grpc.Core.Api's releases.

2.83.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.80.0...v2.83.0

2.83.0-pre1

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.80.0...v2.83.0-pre1

Commits viewable in compare view.

Updated Grpc.Net.Client from 2.80.0 to 2.83.0.

Release notes

Sourced from Grpc.Net.Client's releases.

2.83.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.80.0...v2.83.0

2.83.0-pre1

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.80.0...v2.83.0-pre1

Commits viewable in compare view.

Updated Grpc.Tools from 2.80.0 to 2.83.0.

Release notes

Sourced from Grpc.Tools's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.Certificate from 9.0.1 to 9.0.19.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.Certificate's releases.

9.0.19

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.18...v9.0.19

9.0.18

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.17...v9.0.18

9.0.17

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.16...v9.0.17

9.0.16

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.15...v9.0.16

9.0.15

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.14...v9.0.15

9.0.14

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.13...v9.0.14

9.0.13

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.12...v9.0.13)

9.0.12

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.11...v9.0.12

9.0.11

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.10...v9.0.11

9.0.10

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.9...v9.0.10

9.0.9

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.8...v9.0.9

9.0.7

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.6...v9.0.7

9.0.6

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61622)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues.

Dependency Updates

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61762)
    Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project.
  • Update dependencies from dotnet/arcade (#​61714)
    Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools.
  • Update dependencies from dotnet/extensions (#​61571)
    Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries.
  • Update dependencies from dotnet/extensions (#​61877)
    Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes.
  • Update dependencies from dotnet/arcade (#​61892)
    Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes.

Miscellaneous

  • Update branding to 9.0.6 (#​61831)
    Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase.
  • Merging internal commits for release/9.0 (#​61925)
    Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v9.0.5...v9.0.6

9.0.5

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.4...v9.0.5

9.0.4

Release

What's Changed

Description has been truncated

@dependabot
chore(deps): Bump the nuget-minor-e-patch group with 15 updates
f47fb8f 
Bumps Google.Protobuf from 3.35.1 to 3.36.0
Bumps Grpc.AspNetCore from 2.80.0 to 2.83.0
Bumps Grpc.AspNetCore.HealthChecks from 2.80.0 to 2.83.0
Bumps Grpc.Core.Api from 2.80.0 to 2.83.0
Bumps Grpc.Net.Client from 2.80.0 to 2.83.0
Bumps Grpc.Tools from 2.80.0 to 2.83.0
Bumps Microsoft.AspNetCore.Authentication.Certificate from 9.0.1 to 9.0.19
Bumps Microsoft.Extensions.Hosting.Systemd from 9.0.1 to 9.0.19
Bumps Microsoft.Extensions.Hosting.WindowsServices from 9.0.1 to 9.0.19
Bumps Microsoft.Extensions.Logging.Abstractions from 9.0.1 to 9.0.19
Bumps Parquet.Net from 5.0.2 to 5.6.1
Bumps Roslynator.Analyzers from 4.12.9 to 4.16.1
Bumps SonarAnalyzer.CSharp from 10.4.0.108396 to 10.33.0.1635
Bumps System.IO.Pipelines from 9.0.1 to 9.0.19
Bumps xunit.runner.visualstudio from 3.1.4 to 3.1.5

---
updated-dependencies:
- dependency-name: Google.Protobuf
  dependency-version: 3.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-e-patch
- dependency-name: Grpc.AspNetCore
  dependency-version: 2.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-e-patch
- dependency-name: Grpc.AspNetCore.HealthChecks
  dependency-version: 2.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-e-patch
- dependency-name: Grpc.Core.Api
  dependency-version: 2.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-e-patch
- dependency-name: Grpc.Net.Client
  dependency-version: 2.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-e-patch
- dependency-name: Grpc.Tools
  dependency-version: 2.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-e-patch
- dependency-name: Microsoft.AspNetCore.Authentication.Certificate
  dependency-version: 9.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-e-patch
- dependency-name: Microsoft.Extensions.Hosting.Systemd
  dependency-version: 9.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-e-patch
- dependency-name: Microsoft.Extensions.Hosting.WindowsServices
  dependency-version: 9.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-e-patch
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 9.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-e-patch
- dependency-name: Parquet.Net
  dependency-version: 5.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-e-patch
- dependency-name: Roslynator.Analyzers
  dependency-version: 4.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-e-patch
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.33.0.1635
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-e-patch
- dependency-name: System.IO.Pipelines
  dependency-version: 9.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-e-patch
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-e-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 26, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, nuget. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@marceloterra1983
marceloterra1983 enabled auto-merge (squash) August 26, 2026 00:54
ProfitBridge Terminal Fixture @claude
chore(deps): regenera locks travados pelo bump central (#825)
779746f 
Directory.Packages.props subiu Roslynator.Analyzers e outras versoes centrais,
mas os packages.lock.json continuavam presos as antigas — RestoreLockedMode
rejeita a inconsistencia. dotnet restore --force-evaluate reconciliou os 5
locks afetados; build e restore travado confirmados limpos.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@marceloterra1983
marceloterra1983 merged commit 99195d6 into main Aug 26, 2026
9 checks passed
@marceloterra1983
marceloterra1983 deleted the dependabot/nuget/nuget-minor-e-patch-7f0577e8f1 branch August 26, 2026 01:18
@marceloterra1983 marceloterra1983 mentioned this pull request Aug 27, 2026
Merged
marceloterra1983 added a commit that referenced this pull request Aug 27, 2026
@marceloterra1983 ProfitBridge Terminal Fixture @claude
chore(deps): regenera os 3 locks que o bump do #825 deixou para trás (#…
8b2bab6 
…863)

* feat(dev): portão fail-closed do grafo no PreToolUse e semeadura de worktree

Sem consulta ao grafo nos últimos 30 min (mtime de graphify-out/cache/
last_query_stamp), o 1º Read/Grep/Glob — e Bash leitor — que alcança src/,
docs/surfaces/ ou docs/architecture/*.md é negado com a mensagem de triagem:
graphify para arquitetura, Serena para símbolo. Serena (mcp__serena__*) e
graphify query|path|explain nunca bloqueiam. Grep/Glob sem path contam como
raiz. O deny é stat/mtime puro no merge .py e não depende do binário.

Motivação medida: aviso no início da conversa não gruda (3/307 sessões);
o nudge do hook converteu 12% (30/241, 25-26/08); Serena estava em 1/502.

- pin do binário migra do script para ~/.config/profitbridge/graphify.pin
  (regravado pelo upgrade diário em ~/ops); pin quebrado avisa e o deny
  continua — nunca degrada em silêncio
- com carimbo fresco o nudge oficial é suprimido (anti-saturação)
- hooks/post-checkout: worktree nova recebe graph.json+manifest.json do
  checkout primário (sem cache/ — nasce sem carimbo de propósito) +
  graphify update em background + config Serena de
  serena-project-template.yml (csharp+typescript+python, triagem no
  initial_prompt, modos não-interativos)
- docs: AGENTS.md/CLAUDE.md/GRAPHIFY.md trocam a regra do "3º arquivo"
  pelo deny no 1º; incorpora docs/knowledge/SERENA.md e index.md do #855
  (supersede aquele PR) com a triagem e a isenção do Serena

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(dev): portão do grafo em todo agente e doutor de manutenção

O portão cobria só o Claude Code: Codex, Grok e Cursor liam src/ sem passar
por ele. O guard passa a falar os três dialetos de recusa — permissionDecision
(Claude Code), {"decision":"deny"} (Grok/Cursor) e exit 2 + stderr, que todos
honram — e classifica a chamada pelo FORMATO da entrada, não pelo nome da
ferramenta, que diverge entre agentes (Read/read_file, Bash/run_terminal_command).

Codex: mecanismo provado com hook: PreToolUse Blocked. Fica inerte até o dono
aprovar o hook uma vez; sem trusted_hash o Codex o ignora em silêncio, e o
doutor detecta exatamente esse estado. Grok: instalado, protocolo documentado,
NÃO verificado (a CLI não inicia neste host).

Adesão é versionar o guard, não usar graphify: qlmed/app usa graphify e segue
livre. O lançador em ~/ops não contém política — acha o repo e delega.

Serena continua disponível e nunca obrigatório, e agora é isento por nome: o
heurístico de varredura casava com find_symbol e bloqueava justamente a
ferramenta que esta política manda usar. Edit/Write também isentos, para a
política ser a mesma em todo agente.

graphify-serena-doctor.sh verifica pin, hooks, grafo, config do Serena em todos
os checkouts e a triagem nos documentos; --fix repara o reparável (encontrou e
consertou 4 defeitos reais na primeira execução) e reporta o que exige uma
pessoa. Cron diário 06:41.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* docs(knowledge): Codex passa de mecanismo provado a portão verificado

O hook foi aprovado no codex interativo e a entrada pre_tool_use ficou gravada
no config.toml. Reteste sem --dangerously-bypass-hook-trust: hook: PreToolUse
Blocked, comando não executado. Doutor: 39 ok, 0 quebrados.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* chore(deps): regenera os 3 locks que o bump do #825 deixou para trás

O #825 subiu Roslynator 4.12.9→4.16.1 e SonarAnalyzer 10.4.0.108396→10.33.0.1635
no Directory.Packages.props e atualizou 19 dos 24 ficheiros de lock. Estes três
ficaram com as versões antigas, inconsistentes com o props já commitado — e
qualquer restore os regenerava, deixando o checkout compartilhado permanentemente
sujo e fazendo o cron de sincronização pular o pull a cada 30 minutos.

Conteúdo idêntico ao que o restore produz; nenhuma versão escolhida à mão.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: ProfitBridge Terminal Fixture <fixture@profitbridge.invalid>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@marceloterra1983