Skip to content

Bump the nuget group with 7 updates - #250

Merged
KaliCZ merged 1 commit into
mainfrom
dependabot/nuget/backend/src/Kalandra.Api/nuget-ad49db7d7c
Jul 28, 2026
Merged

Bump the nuget group with 7 updates#250
KaliCZ merged 1 commit into
mainfrom
dependabot/nuget/backend/src/Kalandra.Api/nuget-ad49db7d7c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Updated Marten from 9.17.1 to 9.20.1.

Release notes

Sourced from Marten's releases.

9.20.1

Two real improvements:

  1. Less log noise and faster/cleaner shutdowns at production time
  2. Adjustments to the "high water mark" detection to ignore idle transactions from advisory locks in advancing the high water mark. This was a side effect of the extra work we did in 9.18 to try to stop event skipping from slow transactions

What's Changed

Full Changelog: JasperFx/marten@V9.20.0...V9.20.1

9.20.0

Bug fixes around permutations of the natural key usage, new convenience mechanisms for querying for event store data

What's Changed

Full Changelog: JasperFx/marten@V9.19.0...V9.20.0

9.19.0

Marten 9.19.0 is a maintenance release adopting the coordinated JasperFx / JasperFx.Events 2.35.0 drop, with a new projection side-effect capability and a secondary-store fix.

Event sourcing

  • RaiseSideEffects slice-identity overload — JasperFx.Events 2.35.0 (jasperfx#​561) adds a backwards-compatible aggregation-projection overload RaiseSideEffects(IDocumentOperations operations, TId id, IEventSlice<TDoc> slice). The new id parameter hands you the slice identity even when slice.Snapshot is null because the aggregate was deleted in the same batch — so a MultiStreamProjection can recover the aggregate key to emit a follow-on event or publish a message on deletion. The original two-argument overload is unchanged, and the new one delegates to it by default. Documented with a compiled sample in Side Effects.

Fixes

  • #​5039 — SecondaryStoreConfig.Build threw UriFormatException when a secondary store was registered with a generic marker interface (e.g. AddMartenStore<IMartenStoreMarker<MyContext>>()). A closed generic CLR type name contains a backtick + arity, which is not a valid URI host. The marten:// subject is now sanitized (arity stripped, generic argument names folded in so distinct closed generics still map to distinct subjects).

Dependencies

  • JasperFx / JasperFx.Events / JasperFx.Events.SourceGenerator / JasperFx.SourceGenerator → 2.35.0
  • Weasel.Postgresql / Weasel.Storage → 9.17.0 (unchanged)

Notes

  • The LINQ query-plan cache proposal (#​5013 / #​5018) is not in this release — review surfaced a correctness gap on null filter values; it remains open for a follow-up.
  • #​5001 (running_on_node under managed distribution) is resolved on the Marten side and closed; the node-stamping half ships in the JasperFx 2.35.0 / Wolverine distribution layer.

9.18.0

Marten 9.18.0 focuses on raw-JSON streaming endpoints for ASP.NET Core, server-side LINQ Select() projection, and continued event-store observability work.

ASP.NET Core streaming & pagination

  • StreamPaged<T> — stream a paged JSON envelope (pageNumber/pageSize/totalItemCount/pageCount/hasNextPage/hasPreviousPage/items) in a single round trip via a count(*) OVER() window column (#​5014). Test coverage hardened to pin the camelCase wire contract, page-past-end behavior, and filtered totals (#​5028).
  • StreamPagedByCursor<T> — keyset ("seek") pagination that costs the same regardless of depth, using an opaque continuation cursor (#​5016). Now streams the raw, already-persisted data column byte-identical to StreamMany/StreamPaged (no hydrate + re-serialize) by reading the next cursor's ORDER BY key values off the same reader; a malformed client-supplied cursor now returns a clean 400 instead of a 500 (#​5033).
  • ETag / If-None-Match (304) conditional-request support on StreamOne<T> and StreamAggregate<T> (#​5015). StreamOne<T> now reads the document's mt_version inline in the same single round trip (no follow-up metadata query), and the where T : notnull constraint tightening was reversed (#​5030).

LINQ

  • Simple Select() projections (x => new Dto { A = x.A, B = x.Nested.B }) now translate to a server-side jsonb_build_object(...) expression that is streamable as raw JSON, instead of hydrating the full document and projecting on the client (#​5017). Value-preserving conversions — widening numerics (int→long/decimal), boxing to object, nullable wrapping, enum→integral under EnumStorage.AsInteger — stay translatable and streamable; only lossy/computed conversions fall back (#​5032).
  • DCB tag operators usable in Where() over events (#​5004).
  • AggregateToMany() LINQ operator — run an event query through a multi-stream projection (#​5003).

Event store, projections & daemon

  • Marten.TimescaleDB extension — projection + document hypertables (#​4995).
  • Extended-progression telemetry: batched per-flush heartbeat writes (#​5008); fixed a shutdown telemetry race in extended_progression_batch_write (#​5023); running_on_node write-path regression coverage (#​5001 / #​5007). The cross-repo running_on_node population under Wolverine-managed distribution is completed via JasperFx 2.34.0 + Wolverine.
  • Tenant-scoped event/tag explorer reads — ReadStreamAsync / GetRecentStreamsAsync overrides honor tenancy (#​5020, #​5025), plus a MultiStreamProjection stepthrough via the instrumented fold in EventStoreExplorer (#​5002).
  • HighWaterHealthCheck scoped to owned databases, with per-tenant and ExternallyManaged daemon support (#​4992).
  • Surface JasperFx's application-assembly-reuse warning (GH-3521) at startup (#​5000).

Multi-tenancy & infrastructure

  • Token-capable maintenance connection for tenant database provisioning (#​5006).
  • Docs: connecting to Azure Database for PostgreSQL with Entra ID / managed identity (#​4993).

Dependencies

  • JasperFx / JasperFx.Events 2.34.0, Weasel 9.17.0.

Full changelog: JasperFx/marten@V9.17.0...V9.18.0

Commits viewable in compare view.

Updated ModelContextProtocol from 2.0.0-preview.3 to 2.0.0-rc.2.

Release notes

Sourced from ModelContextProtocol's releases.

2.0.0-rc.2

This second 2.0 release candidate advances the SDK’s 2026-07-28 protocol support, expands Tasks extension conformance tests, strengthens OAuth and transport behavior, and expands 2.0 guidance ahead of general availability.

Thank you to the community for using the preview and release-candidate builds and for sharing feedback and issue reports that shape this release!

Breaking Changes

Refer to the C# SDK Versioning documentation for details on versioning and breaking-change policies.

  1. Align the 2026-07-28 wire protocol and SEP-2575 HTTP statuses #​1752
    • Aligns with protocol adjustment #​3002.
    • DiscoverResult.ServerInfo is removed; read and deserialize Meta[MetaKeys.ServerInfo] instead.
    • On 2026-07-28, replace legacy initialization, ping, logging, and resource-subscription methods with server/discover, _meta log level, and subscriptions/listen.
  2. Validate OAuth authorization state #​1726
    • Custom authorization callback handlers must propagate the redirect state through AuthorizationResult.State, and should return Code, State, and Iss.
  3. Fix SSE session transport shutdown behavior #​1432
    • Handle the underlying transport exception rather than depending on an IOException wrapper.

What's Changed

  • Fix SSE session transport shutdown behavior #​1432 by @​xue-cai (co-authored by @​Copilot)
  • Validate OAuth authorization state #​1726 by @​halter73 (co-authored by @​Copilot)
  • Add configurable Tasks execution modes and complete conformance support #​1741 by @​PranavSenthilnathan (co-authored by @​Copilot)
  • Gate 2026-07-28 result fields by negotiated protocol version #​1753 by @​tarekgh
  • Align the 2026-07-28 wire protocol and SEP-2575 HTTP statuses #​1752 by @​pcarleton (co-authored by @​tarekgh @​Copilot)
  • Reauthorize tools changed by call-tool filters #​1737 by @​PranavSenthilnathan (co-authored by @​Copilot)

Documentation Updates

  • Refine 2.0.0 concept documentation #​1742 by @​jeffhandley (co-authored by @​Copilot)

Test Improvements

  • Resolve test-server paths deterministically #​1735 by @​PranavSenthilnathan (co-authored by @​Copilot)
  • Add MCP Apps NativeAOT coverage #​1711 by @​lntutor
  • Add MCP Apps _meta.ui serialization round-trip tests #​1698 by @​yayayouyou

Repository Infrastructure Updates

  • Bump actions/setup-node from 6.4.0 to 7.0.0 #​1717
  • Bump coverlet.collector from 10.0.0 to 10.0.1 #​1582
  • Bump qs from 6.14.2 to 6.15.2 #​1597
  • Bump actions/setup-dotnet from 5.2.0 to 6.0.0 #​1716
  • Bump danielpalme/ReportGenerator-GitHub-Action from 5.5.5 to 5.5.10 #​1569
  • Bump actions/checkout from 6 to 7 #​1665
  • Rename MCPEXP002 extensibility constants #​1739 by @​arimu1
  • Bump the testing-frameworks group #​1746
  • Bump the serilog-testing group #​1748
  • Bump actions/checkout from 7.0.0 to 7.0.1 #​1745
  • Bump Anthropic from 12.17.0 to 12.39.0 #​1750
  • Bump OpenTelemetry and five other dependencies #​1747
    ... (truncated)

2.0.0-rc.1

2.0.0-rc.1 advances the v2 SDK toward general availability with stronger OAuth conformance, improved dynamic client registration, and expanded Tasks validation.

We remain on-track to release 2.0.0 stable on or before 2026-07-28.

We want to give a big thanks to @​KubaZ2 for reporting the critical, ship-stopping Tasks/HTTP defect in #​1720, fixed by #​1722!

Breaking Changes

Refer to the C# SDK Versioning documentation for details on versioning and breaking change policies.

  1. Remove the preview task-scope helper #​1722

    • McpTasksServerExtensions.CreateMcpTaskScope(...) was removed from the stable surface. This affects only applications built against the v2 preview API; no stable 2.0 release has shipped.
    • There is no stable direct replacement; update affected task-scope integration code for the current Tasks APIs.

  2. Harden OAuth issuer validation #​1605

    • AuthorizationRedirectDelegate now produces MCP9007, which breaks warning-as-error builds; the manual authorization flow now requires the complete redirect URL.
    • Migrate to AuthorizationCallbackHandler and return AuthorizationResult.

  3. Require advertised PKCE S256 support #​1700

    • Authorization servers that omit code_challenge_methods_supported: ["S256"] now cause authentication to fail instead of receiving an inferred default.
    • Correct the authorization-server metadata or use a compliant discovery document.

  4. Send Dynamic Client Registration application types #​1613

    • Unset ApplicationType now sends an inferred application_type instead of omitting it.
    • Set DynamicClientRegistrationOptions.ApplicationType explicitly when the authorization server requires another value.

What's Changed

  • Require advertised PKCE S256 support #​1700 by @​PranavSenthilnathan (co-authored by @​Copilot)
  • Make authorization-provider token caches thread-safe #​1708 by @​tarekgh
  • Send application_type in Dynamic Client Registration requests #​1613 by @​jayaraman-venkatesan (co-authored by @​Copilot)
  • Preserve the original AutoDetect probe status code #​1530 by @​MukundaKatta
  • Return JSON-RPC parse errors for over-nested stdio requests #​1629 by @​adityasingh2400
  • Implement RFC 9207 issuer validation in ClientOAuthProvider #​1605 by @​mikekistler (co-authored by @​halter73 @​Copilot)
  • Reject mismatched initialize protocol versions #​1724 by @​halter73 (co-authored by @​Copilot)
  • Fix OAuth client-ID initialization on cold start #​1705 by @​halter73 (co-authored by @​Copilot)
  • Fix HTTP task-filter composition #​1722 by @​PranavSenthilnathan (co-authored by @​Copilot)
  • Add initial Tasks extension conformance coverage #​1734 by @​PranavSenthilnathan (co-authored by @​Copilot)

Documentation Updates

  • Publish a side-by-side, multi-version documentation site with selectable release/1.x (v1.4.1) and main (v2 preview) content #​1727 by @​jeffhandley (co-authored by @​Copilot)
  • Add Docker-based MCP server deployment guidance #​1423 by @​john-mckillip (co-authored by @​Copilot)
  • Improve v2 conceptual documentation clarity and consistency #​1728 by @​gewarren
  • Improve v1 documentation clarity and consistency, and versioning updates #​1729 by @​jeffhandley (co-authored by @​Copilot)

Test Improvements

  • Expand npm conformance coverage #​1725 by @​halter73 (co-authored by @​Copilot)
  • Extend the in-memory server/discover probe timeout to prevent flaky Windows Debug CI hangs #​1702 by @​PranavSenthilnathan (co-authored by @​halter73 @​Copilot)
    ... (truncated)

Commits viewable in compare view.

Updated ModelContextProtocol.AspNetCore from 2.0.0-preview.3 to 2.0.0-rc.2.

Release notes

Sourced from ModelContextProtocol.AspNetCore's releases.

2.0.0-rc.2

This second 2.0 release candidate advances the SDK’s 2026-07-28 protocol support, expands Tasks extension conformance tests, strengthens OAuth and transport behavior, and expands 2.0 guidance ahead of general availability.

Thank you to the community for using the preview and release-candidate builds and for sharing feedback and issue reports that shape this release!

Breaking Changes

Refer to the C# SDK Versioning documentation for details on versioning and breaking-change policies.

  1. Align the 2026-07-28 wire protocol and SEP-2575 HTTP statuses #​1752
    • Aligns with protocol adjustment #​3002.
    • DiscoverResult.ServerInfo is removed; read and deserialize Meta[MetaKeys.ServerInfo] instead.
    • On 2026-07-28, replace legacy initialization, ping, logging, and resource-subscription methods with server/discover, _meta log level, and subscriptions/listen.
  2. Validate OAuth authorization state #​1726
    • Custom authorization callback handlers must propagate the redirect state through AuthorizationResult.State, and should return Code, State, and Iss.
  3. Fix SSE session transport shutdown behavior #​1432
    • Handle the underlying transport exception rather than depending on an IOException wrapper.

What's Changed

  • Fix SSE session transport shutdown behavior #​1432 by @​xue-cai (co-authored by @​Copilot)
  • Validate OAuth authorization state #​1726 by @​halter73 (co-authored by @​Copilot)
  • Add configurable Tasks execution modes and complete conformance support #​1741 by @​PranavSenthilnathan (co-authored by @​Copilot)
  • Gate 2026-07-28 result fields by negotiated protocol version #​1753 by @​tarekgh
  • Align the 2026-07-28 wire protocol and SEP-2575 HTTP statuses #​1752 by @​pcarleton (co-authored by @​tarekgh @​Copilot)
  • Reauthorize tools changed by call-tool filters #​1737 by @​PranavSenthilnathan (co-authored by @​Copilot)

Documentation Updates

  • Refine 2.0.0 concept documentation #​1742 by @​jeffhandley (co-authored by @​Copilot)

Test Improvements

  • Resolve test-server paths deterministically #​1735 by @​PranavSenthilnathan (co-authored by @​Copilot)
  • Add MCP Apps NativeAOT coverage #​1711 by @​lntutor
  • Add MCP Apps _meta.ui serialization round-trip tests #​1698 by @​yayayouyou

Repository Infrastructure Updates

  • Bump actions/setup-node from 6.4.0 to 7.0.0 #​1717
  • Bump coverlet.collector from 10.0.0 to 10.0.1 #​1582
  • Bump qs from 6.14.2 to 6.15.2 #​1597
  • Bump actions/setup-dotnet from 5.2.0 to 6.0.0 #​1716
  • Bump danielpalme/ReportGenerator-GitHub-Action from 5.5.5 to 5.5.10 #​1569
  • Bump actions/checkout from 6 to 7 #​1665
  • Rename MCPEXP002 extensibility constants #​1739 by @​arimu1
  • Bump the testing-frameworks group #​1746
  • Bump the serilog-testing group #​1748
  • Bump actions/checkout from 7.0.0 to 7.0.1 #​1745
  • Bump Anthropic from 12.17.0 to 12.39.0 #​1750
  • Bump OpenTelemetry and five other dependencies #​1747
    ... (truncated)

2.0.0-rc.1

2.0.0-rc.1 advances the v2 SDK toward general availability with stronger OAuth conformance, improved dynamic client registration, and expanded Tasks validation.

We remain on-track to release 2.0.0 stable on or before 2026-07-28.

We want to give a big thanks to @​KubaZ2 for reporting the critical, ship-stopping Tasks/HTTP defect in #​1720, fixed by #​1722!

Breaking Changes

Refer to the C# SDK Versioning documentation for details on versioning and breaking change policies.

  1. Remove the preview task-scope helper #​1722

    • McpTasksServerExtensions.CreateMcpTaskScope(...) was removed from the stable surface. This affects only applications built against the v2 preview API; no stable 2.0 release has shipped.
    • There is no stable direct replacement; update affected task-scope integration code for the current Tasks APIs.

  2. Harden OAuth issuer validation #​1605

    • AuthorizationRedirectDelegate now produces MCP9007, which breaks warning-as-error builds; the manual authorization flow now requires the complete redirect URL.
    • Migrate to AuthorizationCallbackHandler and return AuthorizationResult.

  3. Require advertised PKCE S256 support #​1700

    • Authorization servers that omit code_challenge_methods_supported: ["S256"] now cause authentication to fail instead of receiving an inferred default.
    • Correct the authorization-server metadata or use a compliant discovery document.

  4. Send Dynamic Client Registration application types #​1613

    • Unset ApplicationType now sends an inferred application_type instead of omitting it.
    • Set DynamicClientRegistrationOptions.ApplicationType explicitly when the authorization server requires another value.

What's Changed

  • Require advertised PKCE S256 support #​1700 by @​PranavSenthilnathan (co-authored by @​Copilot)
  • Make authorization-provider token caches thread-safe #​1708 by @​tarekgh
  • Send application_type in Dynamic Client Registration requests #​1613 by @​jayaraman-venkatesan (co-authored by @​Copilot)
  • Preserve the original AutoDetect probe status code #​1530 by @​MukundaKatta
  • Return JSON-RPC parse errors for over-nested stdio requests #​1629 by @​adityasingh2400
  • Implement RFC 9207 issuer validation in ClientOAuthProvider #​1605 by @​mikekistler (co-authored by @​halter73 @​Copilot)
  • Reject mismatched initialize protocol versions #​1724 by @​halter73 (co-authored by @​Copilot)
  • Fix OAuth client-ID initialization on cold start #​1705 by @​halter73 (co-authored by @​Copilot)
  • Fix HTTP task-filter composition #​1722 by @​PranavSenthilnathan (co-authored by @​Copilot)
  • Add initial Tasks extension conformance coverage #​1734 by @​PranavSenthilnathan (co-authored by @​Copilot)

Documentation Updates

  • Publish a side-by-side, multi-version documentation site with selectable release/1.x (v1.4.1) and main (v2 preview) content #​1727 by @​jeffhandley (co-authored by @​Copilot)
  • Add Docker-based MCP server deployment guidance #​1423 by @​john-mckillip (co-authored by @​Copilot)
  • Improve v2 conceptual documentation clarity and consistency #​1728 by @​gewarren
  • Improve v1 documentation clarity and consistency, and versioning updates #​1729 by @​jeffhandley (co-authored by @​Copilot)

Test Improvements

  • Expand npm conformance coverage #​1725 by @​halter73 (co-authored by @​Copilot)
  • Extend the in-memory server/discover probe timeout to prevent flaky Windows Debug CI hangs #​1702 by @​PranavSenthilnathan (co-authored by @​halter73 @​Copilot)
    ... (truncated)

Commits viewable in compare view.

Updated Sentry.AspNetCore from 6.7.0 to 6.8.0.

Release notes

Sourced from Sentry.AspNetCore's releases.

6.8.0

Features ✨

Logs

  • feat(logs): add log4net integration by @​Flash0ver in #​5172
  • feat(logs): add NLog integration by @​Flash0ver in #​5176

Other

  • feat(serilog): support restrictedToMinimumLevel when configuring Serilog in code by @​jamescrosswell in #​5181
  • Attachments can now be sent with transactions by setting AddToTransactions on SentryAttachment #​5182 by @​jamescrosswell in #​5182
  • Added SentrySdk.RecordTransaction to record already-completed transactions and spans (e.g. replayed through a proxy) #​5333 by @​jamescrosswell in #​5333
  • The Environment set on the Scope now gets synchronized to the native layers (sentry-cocoa and sentry-native) by @​bitsandfoxes in #​5365

Fixes 🐛

  • fix: SentrySpanProcessor no longer leaks spans whose Activity never ends (e.g. aborted requests); the Activity is now held via a WeakReference so orphaned spans are pruned once it is garbage-collected. by @​Ermabo in #​5393
  • The SDK was incorrectly ignoring server rate limits for errors, check-ins, and logs by @​jamescrosswell in #​5412
  • fix: BackpressureMonitor.Dispose() no longer deadlocks on single-threaded targets by @​jamescrosswell in #​5330
  • fix: Create a single TaskBlockingListener per process for CaptureBlockingCalls by @​jamescrosswell in #​5381

Dependencies ⬆️

Deps

  • chore(deps): update CLI to v3.6.1 by @​github-actions in #​5417
  • chore(deps): update Native SDK to v0.15.4 by @​github-actions in #​5416
  • chore(deps): update Cocoa SDK to v9.22.0 by @​github-actions in #​5395
  • chore(deps): update Java SDK to v8.49.0 by @​github-actions in #​5398

Other

  • ci: drop install-zstd workaround by @​jpnurmi in #​5391
  • docs: add Sentry.OpenTelemetry.Exporter to README.md by @​Flash0ver in #​5194
  • meta: Update CODEOWNERS by @​Flash0ver in #​5386

Commits viewable in compare view.

Updated Sentry.OpenTelemetry.Exporter from 6.7.0 to 6.8.0.

Release notes

Sourced from Sentry.OpenTelemetry.Exporter's releases.

6.8.0

Features ✨

Logs

  • feat(logs): add log4net integration by @​Flash0ver in #​5172
  • feat(logs): add NLog integration by @​Flash0ver in #​5176

Other

  • feat(serilog): support restrictedToMinimumLevel when configuring Serilog in code by @​jamescrosswell in #​5181
  • Attachments can now be sent with transactions by setting AddToTransactions on SentryAttachment #​5182 by @​jamescrosswell in #​5182
  • Added SentrySdk.RecordTransaction to record already-completed transactions and spans (e.g. replayed through a proxy) #​5333 by @​jamescrosswell in #​5333
  • The Environment set on the Scope now gets synchronized to the native layers (sentry-cocoa and sentry-native) by @​bitsandfoxes in #​5365

Fixes 🐛

  • fix: SentrySpanProcessor no longer leaks spans whose Activity never ends (e.g. aborted requests); the Activity is now held via a WeakReference so orphaned spans are pruned once it is garbage-collected. by @​Ermabo in #​5393
  • The SDK was incorrectly ignoring server rate limits for errors, check-ins, and logs by @​jamescrosswell in #​5412
  • fix: BackpressureMonitor.Dispose() no longer deadlocks on single-threaded targets by @​jamescrosswell in #​5330
  • fix: Create a single TaskBlockingListener per process for CaptureBlockingCalls by @​jamescrosswell in #​5381

Dependencies ⬆️

Deps

  • chore(deps): update CLI to v3.6.1 by @​github-actions in #​5417
  • chore(deps): update Native SDK to v0.15.4 by @​github-actions in #​5416
  • chore(deps): update Cocoa SDK to v9.22.0 by @​github-actions in #​5395
  • chore(deps): update Java SDK to v8.49.0 by @​github-actions in #​5398

Other

  • ci: drop install-zstd workaround by @​jpnurmi in #​5391
  • docs: add Sentry.OpenTelemetry.Exporter to README.md by @​Flash0ver in #​5194
  • meta: Update CODEOWNERS by @​Flash0ver in #​5386

Commits viewable in compare view.

Updated Supabase.Gotrue from 6.1.0 to 6.2.0.

Release notes

Sourced from Supabase.Gotrue's releases.

6.2.0

6.2.0 (2026-07-22)

Features

  • emit observability via System.Diagnostics and deprecate debug callback (#​140) (7833a16)

Commits viewable in compare view.

Updated Supabase.Storage from 2.4.2 to 2.5.0.

Release notes

Sourced from Supabase.Storage's releases.

2.5.0

2.5.0 (2026-07-23)

Features

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the nuget group with 7 updates
82a4361 
Bumps Marten from 9.17.1 to 9.20.1
Bumps ModelContextProtocol from 2.0.0-preview.3 to 2.0.0-rc.2
Bumps ModelContextProtocol.AspNetCore from 2.0.0-preview.3 to 2.0.0-rc.2
Bumps Sentry.AspNetCore from 6.7.0 to 6.8.0
Bumps Sentry.OpenTelemetry.Exporter from 6.7.0 to 6.8.0
Bumps Supabase.Gotrue from 6.1.0 to 6.2.0
Bumps Supabase.Storage from 2.4.2 to 2.5.0

---
updated-dependencies:
- dependency-name: Marten
  dependency-version: 9.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: ModelContextProtocol
  dependency-version: 2.0.0-rc.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: ModelContextProtocol.AspNetCore
  dependency-version: 2.0.0-rc.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Sentry.AspNetCore
  dependency-version: 6.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Sentry.OpenTelemetry.Exporter
  dependency-version: 6.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Supabase.Gotrue
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Supabase.Storage
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jul 28, 2026
@dependabot
dependabot Bot requested a review from KaliCZ as a code owner July 28, 2026 13:39
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Jul 28, 2026
@KaliCZ
KaliCZ merged commit 4061e44 into main Jul 28, 2026
7 checks passed
@KaliCZ
KaliCZ deleted the dependabot/nuget/backend/src/Kalandra.Api/nuget-ad49db7d7c branch July 28, 2026 14:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@KaliCZ KaliCZ KaliCZ approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@KaliCZ