Skip to content

Bump AasCore.Aas3_0 and 26 others#27

Closed
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/nuget/source/AAS.TwinEngine.DataEngine.ModuleTests/develop/major-minor-patch-43f1ea197e
Closed

Bump AasCore.Aas3_0 and 26 others#27
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/nuget/source/AAS.TwinEngine.DataEngine.ModuleTests/develop/major-minor-patch-43f1ea197e

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 30, 2026 •
edited
Loading

Updated AasCore.Aas3_0 from 1.0.4 to 1.0.5.

Release notes

Sourced from AasCore.Aas3_0's releases.

1.0.5

This is a patch release that propagates a fix for references index constraint
where indices in references were erroneously assumed to be positive integers.

Commits viewable in compare view.

Updated Asp.Versioning.Mvc from 8.1.0 to 8.1.1.

Release notes

Sourced from Asp.Versioning.Mvc's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated coverlet.collector from 6.0.0 to 6.0.4.

Release notes

Sourced from coverlet.collector's releases.

6.0.4

Fixed

  • Fix empty coverage report when using include and exclude filters #​1726

Diff between 6.0.3 and 6.0.4

6.0.3

Fixed

Improvements

  • Cache the regex used in InstrumentationHelper #​1693
  • Enable dotnetTool integration tests for linux #​660

Diff between 6.0.2 and 6.0.3

6.0.2

Fixed

  • Threshold-stat triggers error #​1634
  • Fixed coverlet collector 6.0.1 requires dotnet sdk 8 #​1625
  • Type initializer errors after updating from 6.0.0 to 6.0.1 #​1629
  • Exception when multiple exclude-by-attribute filters specified #​1624

Improvements

  • More concise options to specify multiple parameters in coverlet.console #​1624

Diff between 6.0.1 and 6.0.2

6.0.1

Fixed

Improvements

Diff between 6.0.0 and 6.0.1

Commits viewable in compare view.

Updated Cronos from 0.11.0 to 0.11.1.

Release notes

Sourced from Cronos's releases.

0.11.1

Release Notes

  • Fixed – Make CronExpression equality operators accept null without triggering nullable warnings (#​87 by @​Nechepso).

Commits viewable in compare view.

Updated FluentValidation from 12.0.0 to 12.1.1.

Release notes

Sourced from FluentValidation's releases.

12.1.0

Release notes

Please read the upgrade guide if you are moving from 11.x to 12.x

Changes in 12.1.0

  • Add Tamil language (#​2334)
  • Add Telugu language (#​2333)
  • Fixes to Japanese translations (#​2340)

Changes in 12.0.0

  • Drops support for netstandard2.0, netstandard2.1, .net 5, .net 6 and .net 7. Minimum supported platform is now .net 8.
  • Add support for dependent rules for custom rules (#​2170)
  • Removes deprecated DI extensions
  • Removes deprecated transform methods (#​2027)
  • Remove the ability to disable the root-model null check (#​2069)
  • Use Zomp.SyncMethodGenerator to clean up internal sync/async code paths and increase performance (#​2136)
  • Add Serbian (Cyrillic) language; rename existing Serbian to Serbian (Latin) (#​2283)

Downloads

Binaries can be downloaded from nuget:

Commits viewable in compare view.

Updated FluentValidation.DependencyInjectionExtensions from 12.0.0 to 12.1.1.

Release notes

Sourced from FluentValidation.DependencyInjectionExtensions's releases.

12.1.0

Release notes

Please read the upgrade guide if you are moving from 11.x to 12.x

Changes in 12.1.0

  • Add Tamil language (#​2334)
  • Add Telugu language (#​2333)
  • Fixes to Japanese translations (#​2340)

Changes in 12.0.0

  • Drops support for netstandard2.0, netstandard2.1, .net 5, .net 6 and .net 7. Minimum supported platform is now .net 8.
  • Add support for dependent rules for custom rules (#​2170)
  • Removes deprecated DI extensions
  • Removes deprecated transform methods (#​2027)
  • Remove the ability to disable the root-model null check (#​2069)
  • Use Zomp.SyncMethodGenerator to clean up internal sync/async code paths and increase performance (#​2136)
  • Add Serbian (Cyrillic) language; rename existing Serbian to Serbian (Latin) (#​2283)

Downloads

Binaries can be downloaded from nuget:

Commits viewable in compare view.

Updated JsonSchema.Net from 7.3.4 to 8.0.5.

Release notes

Sourced from JsonSchema.Net's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 8.0.20 to 8.0.23.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

8.0.23

Release

What's Changed

https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs

8.0.22

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.21...v8.0.22

8.0.21

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.20...v8.0.21

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 9.0.7 to 10.0.2.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

10.0.0-preview.6.25358.103

You can build .NET 10.0 Preview 6 from the repository by cloning the release tag v10.0.0-preview.6.25358.103 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.5.25277.114

You can build .NET 10.0 Preview 5 from the repository by cloning the release tag v10.0.0-preview.5.25277.114 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.4.25258.110

You can build .NET 10.0 Preview 4 from the repository by cloning the release tag v10.0.0-preview.4.25258.110 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.3.25171.5

You can build .NET 10.0 Preview 3 from the repository by cloning the release tag v10.0.0-preview.3.25171.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.2.25163.2

You can build .NET 10.0 Preview 2 from the repository by cloning the release tag v10.0.0-preview.2.25163.2 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.1.25080.5

You can build .NET 10.0 Preview 1 from the repository by cloning the release tag v10.0.0-preview.1.25080.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.113

You can build .NET 9.0 from the repository by cloning the release tag v9.0.113 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.112

You can build .NET 9.0 from the repository by cloning the release tag v9.0.112 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.111

You can build .NET 9.0 from the repository by cloning the release tag v9.0.111 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.110

You can build .NET 9.0 from the repository by cloning the release tag v9.0.110 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.109

You can build .NET 9.0 from the repository by cloning the release tag v9.0.109 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.101

You can build .NET 9.0 from the repository by cloning the release tag v9.0.101 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

Commits viewable in compare view.

Updated Microsoft.Extensions.Http from 9.0.7 to 10.0.2.

Release notes

Sourced from Microsoft.Extensions.Http's releases.

10.0.0-preview.6.25358.103

You can build .NET 10.0 Preview 6 from the repository by cloning the release tag v10.0.0-preview.6.25358.103 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.5.25277.114

You can build .NET 10.0 Preview 5 from the repository by cloning the release tag v10.0.0-preview.5.25277.114 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.4.25258.110

You can build .NET 10.0 Preview 4 from the repository by cloning the release tag v10.0.0-preview.4.25258.110 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.3.25171.5

You can build .NET 10.0 Preview 3 from the repository by cloning the release tag v10.0.0-preview.3.25171.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.2.25163.2

You can build .NET 10.0 Preview 2 from the repository by cloning the release tag v10.0.0-preview.2.25163.2 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.1.25080.5

You can build .NET 10.0 Preview 1 from the repository by cloning the release tag v10.0.0-preview.1.25080.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.113

You can build .NET 9.0 from the repository by cloning the release tag v9.0.113 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.112

You can build .NET 9.0 from the repository by cloning the release tag v9.0.112 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.111

You can build .NET 9.0 from the repository by cloning the release tag v9.0.111 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.110

You can build .NET 9.0 from the repository by cloning the release tag v9.0.110 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.109

You can build .NET 9.0 from the repository by cloning the release tag v9.0.109 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.101

You can build .NET 9.0 from the repository by cloning the release tag v9.0.101 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Resilience from 9.7.0 to 10.2.0.

Release notes

Sourced from Microsoft.Extensions.Http.Resilience's releases.

10.2.0

What's Changed

New Contributors

Full Changelog: dotnet/extensions@v10.1...v10.2.0

10.1.0

What's Changed

10.0.0

What's Changed

9.10.0

What's Changed

New Contributors

9.9.0

Highlights

AI

  • Abstractions for remote MCP servers; response/approval flow support via new experimental types
  • Function approvals via new experimental types (e.g., ApprovalRequiredAIFunction, user input/approval request & response content).
  • Reasoning text streaming for OpenAI Responses ChatClient streaming.
  • AIFunction split into a base class to improve extensibility.
  • IChatReducer moved to Microsoft.Extensions.AI.Abstractions.
  • Updated to OpenAI 2.4.0 and genai standard convention 1.37.
  • Coalescing logic now treats ChatMessage.Role changes as new messages.
  • GetResponseAsync<T> now reads only the last message (bug fix).
  • OpenTelemetry ChatClient/EmbeddingGenerator logs raw additional properties (no key mangling).
  • Fixed empty annotated text chunk handling in streaming with OpenAI Assistants.

Telemetry & Diagnostics

  • HTTP diagnostics log query string params with proper redaction (emitted on url.query).
  • server.address telemetry emits host only (per OpenTelemetry semantic conventions).
  • Heuristics added to detect well-known model hosts.
  • Resource monitoring can consider Environment.CpuUsage.

New Contributors

Full Changelog: dotnet/extensions@v9.8.0...v9.9.0

9.8.0

What's Changed

9.7.2

Packages Released

What's Changed

  • Target .NET 8 for more stable runtime requirement by @​joelverhagen in #​6617

Full Changelog: dotnet/extensions@v9.7.1...v9.7.2

9.7.1

Packages Released

What's Changed

Full Changelog: dotnet/extensions@v9.7.0...v9.7.1

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 17.8.0 to 18.0.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.0.1

What's Changed

Fixing an issue with loading covrun64.dll on systems that have .NET 10 SDK installed: https://learn.microsoft.com/en-us/dotnet/core/compatibility/sdk/10.0/code-coverage-dynamic-native-instrumentation

Internal changes

Full Changelog: microsoft/vstest@v18.0.0...v18.0.1

18.0.0

What's Changed

Description has been truncated

@dependabot
Bump AasCore.Aas3_0 and 26 others
e3cef96 
Bumps AasCore.Aas3_0 from 1.0.4 to 1.0.5
Bumps Asp.Versioning.Mvc from 8.1.0 to 8.1.1
Bumps coverlet.collector from 6.0.0 to 6.0.4
Bumps Cronos from 0.11.0 to 0.11.1
Bumps FluentValidation from 12.0.0 to 12.1.1
Bumps FluentValidation.DependencyInjectionExtensions from 12.0.0 to 12.1.1
Bumps JsonSchema.Net from 7.3.4 to 8.0.5
Bumps Microsoft.AspNetCore.Mvc.Testing from 8.0.20 to 8.0.23
Bumps Microsoft.Extensions.DependencyInjection from 9.0.7 to 10.0.2
Bumps Microsoft.Extensions.Http from 9.0.7 to 10.0.2
Bumps Microsoft.Extensions.Http.Resilience from 9.7.0 to 10.2.0
Bumps Microsoft.NET.Test.Sdk from 17.8.0 to 18.0.1
Bumps MongoDB.Driver from 3.4.0 to 3.6.0
Bumps NSwag.AspNetCore from 14.4.0 to 14.6.3
Bumps OpenTelemetry from 1.12.0 to 1.15.0
Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.12.0 to 1.15.0
Bumps OpenTelemetry.Extensions.Hosting from 1.12.0 to 1.15.0
Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.12.0 to 1.15.0
Bumps OpenTelemetry.Instrumentation.Http from 1.12.0 to 1.15.0
Bumps Polly.Core from 8.6.2 to 8.6.5
Bumps Serilog.AspNetCore from 9.0.0 to 10.0.0
Bumps Serilog.Sinks.Console from 6.0.0 to 6.1.1
Bumps Swashbuckle.AspNetCore from 9.0.3 to 10.1.0
Bumps System.Text.Json from 9.0.9 to 10.0.2
Bumps TngTech.ArchUnitNET.xUnit from 0.11.2 to 0.13.2
Bumps xunit from 2.5.3 to 2.9.3
Bumps xunit.runner.visualstudio from 2.5.3 to 3.1.5

---
updated-dependencies:
- dependency-name: AasCore.Aas3_0
  dependency-version: 1.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: major-minor-patch
- dependency-name: Asp.Versioning.Mvc
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: major-minor-patch
- dependency-name: Cronos
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: major-minor-patch
- dependency-name: JsonSchema.Net
  dependency-version: 8.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-minor-patch
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-minor-patch
- dependency-name: Microsoft.Extensions.Http
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-minor-patch
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-minor-patch
- dependency-name: MongoDB.Driver
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: NSwag.AspNetCore
  dependency-version: 14.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: OpenTelemetry
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: OpenTelemetry.Instrumentation.AspNetCore
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: OpenTelemetry.Instrumentation.Http
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: Polly.Core
  dependency-version: 8.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: major-minor-patch
- dependency-name: Serilog.AspNetCore
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-minor-patch
- dependency-name: Serilog.Sinks.Console
  dependency-version: 6.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-minor-patch
- dependency-name: System.Text.Json
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-minor-patch
- dependency-name: coverlet.collector
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: major-minor-patch
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 8.0.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: major-minor-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-minor-patch
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-minor-patch
- dependency-name: coverlet.collector
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: major-minor-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-minor-patch
- dependency-name: TngTech.ArchUnitNET.xUnit
  dependency-version: 0.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-minor-patch
- dependency-name: Asp.Versioning.Mvc
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: major-minor-patch
- dependency-name: FluentValidation
  dependency-version: 12.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: FluentValidation.DependencyInjectionExtensions
  dependency-version: 12.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: JsonSchema.Net
  dependency-version: 8.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-minor-patch
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-minor-patch
- dependency-name: NSwag.AspNetCore
  dependency-version: 14.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: OpenTelemetry
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: OpenTelemetry.Instrumentation.AspNetCore
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: OpenTelemetry.Instrumentation.Http
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: Serilog.AspNetCore
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-minor-patch
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jan 30, 2026
@github-actions
Copy link

github-actions bot commented Jan 30, 2026

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ✅ 0 package(s) with unknown licenses.
  • ⚠️ 8 packages with OpenSSF Scorecard issues.
See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA e3cef96.
Ensure that dependencies are being submitted on PR branches. Re-running this action after a short time may resolve the issue. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
nuget/Microsoft.AspNetCore.Mvc.Testing 8.0.23 🟢 6.1
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
Code-Review🟢 8Found 8/10 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Binary-Artifacts🟢 9binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Vulnerabilities🟢 64 existing vulnerabilities detected
nuget/Microsoft.NET.Test.Sdk 18.0.1 ⚠️ 4.8
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 26 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 4Found 8/19 approved changesets -- score normalized to 4
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Binary-Artifacts⚠️ 0binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities🟢 91 existing vulnerabilities detected
nuget/coverlet.collector 6.0.4 🟢 5.5
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Binary-Artifacts🟢 7binaries present in source code
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy⚠️ 0security policy file not detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 9SAST tool detected but not run on all commits
nuget/xunit 2.9.3 ⚠️ 4.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 26 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 3/30 approved changesets -- score normalized to 1
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
License🟢 9license file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Security-Policy⚠️ 0security policy file not detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/xunit.runner.visualstudio 3.1.5 UnknownUnknown
nuget/Microsoft.NET.Test.Sdk 18.0.1 ⚠️ 4.8
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 26 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 4Found 8/19 approved changesets -- score normalized to 4
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Binary-Artifacts⚠️ 0binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities🟢 91 existing vulnerabilities detected
nuget/TngTech.ArchUnitNET.xUnit 0.13.2 UnknownUnknown
nuget/coverlet.collector 6.0.4 🟢 5.5
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Binary-Artifacts🟢 7binaries present in source code
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy⚠️ 0security policy file not detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 9SAST tool detected but not run on all commits
nuget/xunit 2.9.3 ⚠️ 4.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 26 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 3/30 approved changesets -- score normalized to 1
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
License🟢 9license file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Security-Policy⚠️ 0security policy file not detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/xunit.runner.visualstudio 3.1.5 UnknownUnknown
nuget/AasCore.Aas3_0 1.0.5 UnknownUnknown
nuget/Asp.Versioning.Mvc 8.1.1 UnknownUnknown
nuget/Cronos 0.11.1 UnknownUnknown
nuget/JsonSchema.Net 8.0.5 UnknownUnknown
nuget/Microsoft.Extensions.DependencyInjection 10.0.2 UnknownUnknown
nuget/Microsoft.Extensions.Http 10.0.2 UnknownUnknown
nuget/Microsoft.Extensions.Http.Resilience 10.2.0 🟢 7
Details
CheckScoreReason
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 10no binaries found in the repo
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
nuget/MongoDB.Driver 3.6.0 🟢 5.4
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection⚠️ 1branch protection is not maximal on development and all release branches
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/NSwag.AspNetCore 14.6.3 ⚠️ 3.1
Details
CheckScoreReason
Code-Review⚠️ 4Found 12/30 approved changesets -- score normalized to 4
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 99 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 9
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Binary-Artifacts🟢 6binaries present in source code
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 010 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/OpenTelemetry 1.15.0 🟢 8.3
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Maintained🟢 1030 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 9SAST tool detected but not run on all commits
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Fuzzing⚠️ 0project is not fuzzed
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Packaging🟢 10packaging workflow detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 36 contributing companies or organizations
nuget/OpenTelemetry.Exporter.OpenTelemetryProtocol 1.15.0 🟢 8.3
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Maintained🟢 1030 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 9SAST tool detected but not run on all commits
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Fuzzing⚠️ 0project is not fuzzed
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Packaging🟢 10packaging workflow detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 36 contributing companies or organizations
nuget/OpenTelemetry.Extensions.Hosting 1.15.0 🟢 8.3
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Maintained🟢 1030 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 9SAST tool detected but not run on all commits
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Fuzzing⚠️ 0project is not fuzzed
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Packaging🟢 10packaging workflow detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 36 contributing companies or organizations
nuget/OpenTelemetry.Instrumentation.AspNetCore 1.15.0 🟢 8.3
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Vulnerabilities🟢 100 existing vulnerabilities detected
CII-Best-Practices🟢 5badge detected: Passing
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
License🟢 10license file detected
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Security-Policy🟢 10security policy file detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 22 contributing companies or organizations
nuget/OpenTelemetry.Instrumentation.Http 1.15.0 🟢 8.3
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Vulnerabilities🟢 100 existing vulnerabilities detected
CII-Best-Practices🟢 5badge detected: Passing
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
License🟢 10license file detected
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Security-Policy🟢 10security policy file detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 22 contributing companies or organizations
nuget/Polly.Core 8.6.5 🟢 7.8
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 0Found 0/1 approved changesets -- score normalized to 0
Dependency-Update-Tool🟢 10update tool detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
License🟢 10license file detected
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST🟢 10SAST tool is run on all commits
Fuzzing⚠️ 0project is not fuzzed
Packaging🟢 10packaging workflow detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 25 contributing companies or organizations
nuget/Serilog.AspNetCore 10.0.0 🟢 5
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 55 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 5
Code-Review⚠️ 3Found 5/15 approved changesets -- score normalized to 3
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
License🟢 10license file detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/Serilog.Sinks.Console 6.1.1 UnknownUnknown
nuget/Swashbuckle.AspNetCore 10.1.0 🟢 7.8
Details
CheckScoreReason
Code-Review⚠️ 0Found 0/4 approved changesets -- score normalized to 0
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 55 contributing companies or organizations
nuget/System.Text.Json 10.0.2 UnknownUnknown
nuget/Asp.Versioning.Mvc 8.1.1 UnknownUnknown
nuget/FluentValidation 12.1.1 ⚠️ 4.6
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 4Found 14/30 approved changesets -- score normalized to 4
Maintained🟢 810 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 8
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
License🟢 10license file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/FluentValidation.DependencyInjectionExtensions 12.1.1 ⚠️ 4.6
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 4Found 14/30 approved changesets -- score normalized to 4
Maintained🟢 810 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 8
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
License🟢 10license file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/JsonSchema.Net 8.0.5 UnknownUnknown
nuget/Microsoft.Extensions.DependencyInjection 10.0.2 UnknownUnknown
nuget/NSwag.AspNetCore 14.6.3 ⚠️ 3.1
Details
CheckScoreReason
Code-Review⚠️ 4Found 12/30 approved changesets -- score normalized to 4
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 99 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 9
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Binary-Artifacts🟢 6binaries present in source code
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 010 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/OpenTelemetry 1.15.0 🟢 8.3
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Maintained🟢 1030 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 9SAST tool detected but not run on all commits
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Fuzzing⚠️ 0project is not fuzzed
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Packaging🟢 10packaging workflow detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 36 contributing companies or organizations
nuget/OpenTelemetry.Exporter.OpenTelemetryProtocol 1.15.0 🟢 8.3
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Maintained🟢 1030 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 9SAST tool detected but not run on all commits
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Fuzzing⚠️ 0project is not fuzzed
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Packaging🟢 10packaging workflow detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 36 contributing companies or organizations
nuget/OpenTelemetry.Extensions.Hosting 1.15.0 🟢 8.3
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Maintained🟢 1030 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 9SAST tool detected but not run on all commits
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Fuzzing⚠️ 0project is not fuzzed
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Packaging🟢 10packaging workflow detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 36 contributing companies or organizations
nuget/OpenTelemetry.Instrumentation.AspNetCore 1.15.0 🟢 8.3
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Vulnerabilities🟢 100 existing vulnerabilities detected
CII-Best-Practices🟢 5badge detected: Passing
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
License🟢 10license file detected
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Security-Policy🟢 10security policy file detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 22 contributing companies or organizations
nuget/OpenTelemetry.Instrumentation.Http 1.15.0 🟢 8.3
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Vulnerabilities🟢 100 existing vulnerabilities detected
CII-Best-Practices🟢 5badge detected: Passing
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
License🟢 10license file detected
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Security-Policy🟢 10security policy file detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 22 contributing companies or organizations
nuget/Serilog.AspNetCore 10.0.0 🟢 5
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 55 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 5
Code-Review⚠️ 3Found 5/15 approved changesets -- score normalized to 3
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
License🟢 10license file detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/Swashbuckle.AspNetCore 10.1.0 🟢 7.8
Details
CheckScoreReason
Code-Review⚠️ 0Found 0/4 approved changesets -- score normalized to 0
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 55 contributing companies or organizations

Scanned Files

  • source/AAS.TwinEngine.DataEngine.ModuleTests/AAS.TwinEngine.DataEngine.ModuleTests.csproj
  • source/AAS.TwinEngine.DataEngine.UnitTests/AAS.TwinEngine.DataEngine.UnitTests.csproj
  • source/AAS.TwinEngine.DataEngine/AAS.TwinEngine.DataEngine.csproj
  • source/AAS.TwinEngine.Plugin.TestPlugin/AAS.TwinEngine.Plugin.TestPlugin.csproj

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Feb 6, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Feb 6, 2026
@dependabot dependabot bot deleted the dependabot/nuget/source/AAS.TwinEngine.DataEngine.ModuleTests/develop/major-minor-patch-43f1ea197e branch February 6, 2026 15:08
mm-psy added a commit that referenced this pull request Feb 10, 2026
@mm-psy @mm-kgi
@mm-hsh @HolgerSantelmann @rkg-mm
Release/v0.0.3 (#24)
826e516 
* Add dependency-review (#3)

* Add dependency-review

* Fix branch

* Add Scorecard supply-chain security (#2)

* Create docker-publish.yml (#7)

* Create dotnet (#6)

* Create dotnet.yml

* Add comment

* Test

* Test

* Enhance CI workflow with code coverage reporting and PR comments

* Fix wrong test run

* Refactor CI workflow to improve test result handling and add module test execution

* Enhance CI workflow by combining test and coverage reports, and updating paths for coverage files

* Enhance Submodel Element request handling(#8)

* Add dependabot-version-updates (#4)

* Add dependabot-version-updates

* Enhancement of DataEngine Implementation  (#12)

* Added example folder With Dpp-plugin  (#13)

* Restructure Dockerfile for improved build process and clarity (#14)

* Added Test Plugin and Example for 3 submodels using Test plugin (#11)

* #182: Test plugin review results (#17)

* #182: Rename of folder

* #182: Refinement of apiCollection Readmes and environments

* #182: Also rename of Aas.TwinEngine.Plugin.TestPlugin to AAS.TwinEngine.Plugin.TestPlugin in files

* Remove obsolete test project files and add new project files for Plugin testing

* Remove obsolete test project files and add new project files for Plugin testing

* #182: Rename of projects

* #182: Readme refined

* #182: Refinement of readme

* #182: Icons removed from readme

---------

Co-authored-by: Kevalkumar <kgi@mm-software.com>

* Add codeql (#5)

* Create codeql.yml

* Update branches

* Enhancement of DataEngine Implementation (#18)

* Add hotfix develop release branches to actions (#15)

* Update dependency-review.yml

* Update dotnet.yml

* Update docker-publish.yml

* Update docker-publish.yml to refine branch triggers and enhance Docker metadata extraction

* Fix image name

* Add manually trigger a workflow

* #257: Enhancement TestPlugin to verify access SubmodelElement inside a SubmodelCollection within a SubmodelList (#19)

* README.md with detailed DataEngine overview and feature descriptions (#22)

* Refactor SyncShellDescriptorsAsync to log errors and return instead of throwing exceptions for null checks (#20)

* Generate SBOM for Container & application (#23)

* Generate SBOM for application dependencies

* Generate Container SBOM and extract App SBOM. Push both to Artifacts.

* Pin actions by hash and ensure app path casing aligns with Dockerfile

* Exclude SBOM generation from PR runs

* Add groups dependabot (#24)

* Enhance example-Docker setup  (#16)

* Add manual trigger capability to .NET pipeline (#21)

* Merge main branch and resolved the security issue (#27)

* Dev fix trivy (#22)

* Fix image reference extraction for Trivy SBOM generation in Docker publish workflow

* Add step to extract first image tag for Trivy scanning in Docker publish workflow

* Dev fix trivy + tag rework (#23)

* Fix image reference extraction for Trivy SBOM generation in Docker publish workflow

* Add step to extract first image tag for Trivy scanning in Docker publish workflow

* Fix manual trigger value format in Docker publish workflow

* Fix tag generation logic for Docker image based on branch conditions

* Enhance tag generation logic for Docker image by adding priority to develop branch tags

* Fix tag generation logic for non-develop and non-release branches in Docker publish workflow

---------

Co-authored-by: Kevalkumar Ghelani <kgi@mm-software.com>
Co-authored-by: Hardi Shah <hsh@mm-software.com>
Co-authored-by: mm-hsn <hsn@mm-software.com>
Co-authored-by: rkg-mm <12029804+rkg-mm@users.noreply.github.com>
mm-psy added a commit that referenced this pull request Feb 10, 2026
@mm-psy @mm-kgi
@mm-hsh @HolgerSantelmann @rkg-mm
Test Playding (#36)
fbf4712 
* Add dependency-review (#3)

* Add dependency-review

* Fix branch

* Add Scorecard supply-chain security (#2)

* Create docker-publish.yml (#7)

* Create dotnet (#6)

* Create dotnet.yml

* Add comment

* Test

* Test

* Enhance CI workflow with code coverage reporting and PR comments

* Fix wrong test run

* Refactor CI workflow to improve test result handling and add module test execution

* Enhance CI workflow by combining test and coverage reports, and updating paths for coverage files

* Enhance Submodel Element request handling(#8)

* Add dependabot-version-updates (#4)

* Add dependabot-version-updates

* Enhancement of DataEngine Implementation  (#12)

* Added example folder With Dpp-plugin  (#13)

* Restructure Dockerfile for improved build process and clarity (#14)

* Added Test Plugin and Example for 3 submodels using Test plugin (#11)

* #182: Test plugin review results (#17)

* #182: Rename of folder

* #182: Refinement of apiCollection Readmes and environments

* #182: Also rename of Aas.TwinEngine.Plugin.TestPlugin to AAS.TwinEngine.Plugin.TestPlugin in files

* Remove obsolete test project files and add new project files for Plugin testing

* Remove obsolete test project files and add new project files for Plugin testing

* #182: Rename of projects

* #182: Readme refined

* #182: Refinement of readme

* #182: Icons removed from readme

---------

Co-authored-by: Kevalkumar <kgi@mm-software.com>

* Add codeql (#5)

* Create codeql.yml

* Update branches

* Enhancement of DataEngine Implementation (#18)

* Add hotfix develop release branches to actions (#15)

* Update dependency-review.yml

* Update dotnet.yml

* Update docker-publish.yml

* Update docker-publish.yml to refine branch triggers and enhance Docker metadata extraction

* Fix image name

* Add manually trigger a workflow

* #257: Enhancement TestPlugin to verify access SubmodelElement inside a SubmodelCollection within a SubmodelList (#19)

* README.md with detailed DataEngine overview and feature descriptions (#22)

* Refactor SyncShellDescriptorsAsync to log errors and return instead of throwing exceptions for null checks (#20)

* Generate SBOM for Container & application (#23)

* Generate SBOM for application dependencies

* Generate Container SBOM and extract App SBOM. Push both to Artifacts.

* Pin actions by hash and ensure app path casing aligns with Dockerfile

* Exclude SBOM generation from PR runs

* Add groups dependabot (#24)

* Enhance example-Docker setup  (#16)

* Add manual trigger capability to .NET pipeline (#21)

* Merge main branch and resolved the security issue (#27)

* Dev fix trivy (#22)

* Fix image reference extraction for Trivy SBOM generation in Docker publish workflow

* Add step to extract first image tag for Trivy scanning in Docker publish workflow

* Dev fix trivy + tag rework (#23)

* Fix image reference extraction for Trivy SBOM generation in Docker publish workflow

* Add step to extract first image tag for Trivy scanning in Docker publish workflow

* Fix manual trigger value format in Docker publish workflow

* Fix tag generation logic for Docker image based on branch conditions

* Enhance tag generation logic for Docker image by adding priority to develop branch tags

* Fix tag generation logic for non-develop and non-release branches in Docker publish workflow

* Psy test playwright (#35)

* Resolved container app errors related to AAS registry endpoint (#33)

* Fix :  TestPlugin : 404 - file entries (#34)

* feat: Update Docker publish workflow for tag handling (#32)

* Update Docker publish workflow for tag handling

* Update .github/workflows/docker-publish.yml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Clean up docker-publish.yml by removing empty line

Removed an empty line before the Export Application SBOM step.

* Add comment for priority setting

* Add clarifying comment to Docker tag rule for non-develop, non-release branches (exclude tags and PRs)

* Update tag extraction for Trivy scanning to prioritize highest tag

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Revert "feat: Update Docker publish workflow for tag handling (#32)" (#38)

This reverts commit a36238e.

* feat: Pin nugetcommand (#36)

* feat: Update Docker publish workflow for tag handling (#39)

* Update Docker publish workflow for tag handling

* Update .github/workflows/docker-publish.yml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Clean up docker-publish.yml by removing empty line

Removed an empty line before the Export Application SBOM step.

* Add comment for priority setting

* Add clarifying comment to Docker tag rule for non-develop, non-release branches (exclude tags and PRs)

* Update tag extraction for Trivy scanning to prioritize highest tag

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* #129: Created initial structure of C# Playwright API tests for TestPlugin

* #129: Added Environment.GetEnvironmentVariable("BASE_URL") to ApiTestBase

* #129: FluentAssertions removed and replaced usage by xunit Assert

* #129: Health test added

* #129: Unneeded configuration removed

* #129: Refinment of tests

* #129: Refinement of rest api test

* #129: String comparison refined

* #129: Throws argument null excepion of response is null

* #129: Set copy always for GetSubmodelDescriptorById_Reliability_Expected.json

* workflow_dispatch added to dependency-review (#41)

* #185: Workflow for plaaywright tests added

* Revert "workflow_dispatch added to dependency-review (#41)" (#43)

This reverts commit 4e5d5fc.

* fix: Update condition for publishing Playwright test results

---------

Co-authored-by: Kevalkumar Ghelani <kgi@mm-software.com>
Co-authored-by: Hardi Shah <hsh@mm-software.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: mm-hsn <hsn@mm-software.com>

---------

Co-authored-by: Kevalkumar Ghelani <kgi@mm-software.com>
Co-authored-by: Hardi Shah <hsh@mm-software.com>
Co-authored-by: mm-hsn <hsn@mm-software.com>
Co-authored-by: rkg-mm <12029804+rkg-mm@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
mm-psy added a commit that referenced this pull request Feb 17, 2026
@mm-psy @mm-kgi
@mm-hsh @HolgerSantelmann @rkg-mm @dependabot
Develop (#42)
4a570b9 
* Add dependency-review (#3)

* Add dependency-review

* Fix branch

* Add Scorecard supply-chain security (#2)

* Create docker-publish.yml (#7)

* Create dotnet (#6)

* Create dotnet.yml

* Add comment

* Test

* Test

* Enhance CI workflow with code coverage reporting and PR comments

* Fix wrong test run

* Refactor CI workflow to improve test result handling and add module test execution

* Enhance CI workflow by combining test and coverage reports, and updating paths for coverage files

* Enhance Submodel Element request handling(#8)

* Add dependabot-version-updates (#4)

* Add dependabot-version-updates

* Enhancement of DataEngine Implementation  (#12)

* Added example folder With Dpp-plugin  (#13)

* Restructure Dockerfile for improved build process and clarity (#14)

* Added Test Plugin and Example for 3 submodels using Test plugin (#11)

* #182: Test plugin review results (#17)

* #182: Rename of folder

* #182: Refinement of apiCollection Readmes and environments

* #182: Also rename of Aas.TwinEngine.Plugin.TestPlugin to AAS.TwinEngine.Plugin.TestPlugin in files

* Remove obsolete test project files and add new project files for Plugin testing

* Remove obsolete test project files and add new project files for Plugin testing

* #182: Rename of projects

* #182: Readme refined

* #182: Refinement of readme

* #182: Icons removed from readme

---------

Co-authored-by: Kevalkumar <kgi@mm-software.com>

* Add codeql (#5)

* Create codeql.yml

* Update branches

* Enhancement of DataEngine Implementation (#18)

* Add hotfix develop release branches to actions (#15)

* Update dependency-review.yml

* Update dotnet.yml

* Update docker-publish.yml

* Update docker-publish.yml to refine branch triggers and enhance Docker metadata extraction

* Fix image name

* Add manually trigger a workflow

* #257: Enhancement TestPlugin to verify access SubmodelElement inside a SubmodelCollection within a SubmodelList (#19)

* README.md with detailed DataEngine overview and feature descriptions (#22)

* Refactor SyncShellDescriptorsAsync to log errors and return instead of throwing exceptions for null checks (#20)

* Generate SBOM for Container & application (#23)

* Generate SBOM for application dependencies

* Generate Container SBOM and extract App SBOM. Push both to Artifacts.

* Pin actions by hash and ensure app path casing aligns with Dockerfile

* Exclude SBOM generation from PR runs

* Add groups dependabot (#24)

* Enhance example-Docker setup  (#16)

* Add manual trigger capability to .NET pipeline (#21)

* Merge main branch and resolved the security issue (#27)

* Dev fix trivy (#22)

* Fix image reference extraction for Trivy SBOM generation in Docker publish workflow

* Add step to extract first image tag for Trivy scanning in Docker publish workflow

* Dev fix trivy + tag rework (#23)

* Fix image reference extraction for Trivy SBOM generation in Docker publish workflow

* Add step to extract first image tag for Trivy scanning in Docker publish workflow

* Fix manual trigger value format in Docker publish workflow

* Fix tag generation logic for Docker image based on branch conditions

* Enhance tag generation logic for Docker image by adding priority to develop branch tags

* Fix tag generation logic for non-develop and non-release branches in Docker publish workflow

* Psy test playwright (#35)

* Resolved container app errors related to AAS registry endpoint (#33)

* Fix :  TestPlugin : 404 - file entries (#34)

* feat: Update Docker publish workflow for tag handling (#32)

* Update Docker publish workflow for tag handling

* Update .github/workflows/docker-publish.yml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Clean up docker-publish.yml by removing empty line

Removed an empty line before the Export Application SBOM step.

* Add comment for priority setting

* Add clarifying comment to Docker tag rule for non-develop, non-release branches (exclude tags and PRs)

* Update tag extraction for Trivy scanning to prioritize highest tag

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Revert "feat: Update Docker publish workflow for tag handling (#32)" (#38)

This reverts commit a36238e.

* feat: Pin nugetcommand (#36)

* feat: Update Docker publish workflow for tag handling (#39)

* Update Docker publish workflow for tag handling

* Update .github/workflows/docker-publish.yml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Clean up docker-publish.yml by removing empty line

Removed an empty line before the Export Application SBOM step.

* Add comment for priority setting

* Add clarifying comment to Docker tag rule for non-develop, non-release branches (exclude tags and PRs)

* Update tag extraction for Trivy scanning to prioritize highest tag

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* #129: Created initial structure of C# Playwright API tests for TestPlugin

* #129: Added Environment.GetEnvironmentVariable("BASE_URL") to ApiTestBase

* #129: FluentAssertions removed and replaced usage by xunit Assert

* #129: Health test added

* #129: Unneeded configuration removed

* #129: Refinment of tests

* #129: Refinement of rest api test

* #129: String comparison refined

* #129: Throws argument null excepion of response is null

* #129: Set copy always for GetSubmodelDescriptorById_Reliability_Expected.json

* workflow_dispatch added to dependency-review (#41)

* #185: Workflow for plaaywright tests added

* Revert "workflow_dispatch added to dependency-review (#41)" (#43)

This reverts commit 4e5d5fc.

* fix: Update condition for publishing Playwright test results

---------

Co-authored-by: Kevalkumar Ghelani <kgi@mm-software.com>
Co-authored-by: Hardi Shah <hsh@mm-software.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: mm-hsn <hsn@mm-software.com>

* Bump the major-minor-patch group across 1 directory with 7 updates (#39)

Bumps the major-minor-patch group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.1` | `6.0.2` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.11.1` | `3.12.0` |
| [docker/login-action](https://github.com/docker/login-action) | `3.6.0` | `3.7.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `6.0.0` |
| [actions/setup-dotnet](https://github.com/actions/setup-dotnet) | `5.0.1` | `5.1.0` |
| [dorny/test-reporter](https://github.com/dorny/test-reporter) | `2.3.0` | `2.5.0` |
| [marocchino/sticky-pull-request-comment](https://github.com/marocchino/sticky-pull-request-comment) | `2.9.0` | `2.9.4` |



Updates `actions/checkout` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@8e8c483...de0fac2)

Updates `docker/setup-buildx-action` from 3.11.1 to 3.12.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@e468171...8d2750c)

Updates `docker/login-action` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@5e57cd1...c94ce9f)

Updates `actions/upload-artifact` from 4.6.2 to 6.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4.6.2...b7c566a)

Updates `actions/setup-dotnet` from 5.0.1 to 5.1.0
- [Release notes](https://github.com/actions/setup-dotnet/releases)
- [Commits](actions/setup-dotnet@2016bd2...baa11fb)

Updates `dorny/test-reporter` from 2.3.0 to 2.5.0
- [Release notes](https://github.com/dorny/test-reporter/releases)
- [Changelog](https://github.com/dorny/test-reporter/blob/main/CHANGELOG.md)
- [Commits](dorny/test-reporter@fe45e95...b082adf)

Updates `marocchino/sticky-pull-request-comment` from 2.9.0 to 2.9.4
- [Release notes](https://github.com/marocchino/sticky-pull-request-comment/releases)
- [Commits](marocchino/sticky-pull-request-comment@331f8f5...7737449)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: major-minor-patch
- dependency-name: docker/setup-buildx-action
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: docker/login-action
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: actions/upload-artifact
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-minor-patch
- dependency-name: actions/setup-dotnet
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: dorny/test-reporter
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-patch
- dependency-name: marocchino/sticky-pull-request-comment
  dependency-version: 2.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: major-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Kevalkumar Ghelani <kgi@mm-software.com>
Co-authored-by: Hardi Shah <hsh@mm-software.com>
Co-authored-by: mm-hsn <hsn@mm-software.com>
Co-authored-by: rkg-mm <12029804+rkg-mm@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants

Comments