From f3e43f15cd616a6ceedd49267b9a584deae08e5d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 20 Jul 2026 11:30:34 +0000 Subject: [PATCH 1/3] chore(deps): Bump the nuget-dependencies group with 6 updates Bumps Microsoft.AspNetCore.OpenApi from 10.0.9 to 10.0.10 Bumps Microsoft.EntityFrameworkCore from 10.0.9 to 10.0.10 Bumps Microsoft.EntityFrameworkCore.Design from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Hosting from 10.0.9 to 10.0.10 Bumps Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1 Bumps Microsoft.OpenApi from 2.7.5 to 3.9.0 --- updated-dependencies: - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.Extensions.Hosting dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: Microsoft.OpenApi dependency-version: 3.9.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-dependencies - dependency-name: Microsoft.OpenApi dependency-version: 3.9.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-dependencies ... Signed-off-by: dependabot[bot] --- src/TrainLoop.Api/TrainLoop.Api.csproj | 6 +++--- .../TrainLoop.Infrastructure.csproj | 4 ++-- src/TrainLoop.Worker/TrainLoop.Worker.csproj | 2 +- tests/TrainLoop.Api.Tests/TrainLoop.Api.Tests.csproj | 4 ++-- tests/TrainLoop.Core.Tests/TrainLoop.Core.Tests.csproj | 2 +- 5 files changed, 9 insertions(+), 9 deletions(-) diff --git a/src/TrainLoop.Api/TrainLoop.Api.csproj b/src/TrainLoop.Api/TrainLoop.Api.csproj index e07827d..6d16254 100644 --- a/src/TrainLoop.Api/TrainLoop.Api.csproj +++ b/src/TrainLoop.Api/TrainLoop.Api.csproj @@ -7,12 +7,12 @@ - - + + runtime; build; native; contentfiles; analyzers; buildtransitive all - + diff --git a/src/TrainLoop.Infrastructure/TrainLoop.Infrastructure.csproj b/src/TrainLoop.Infrastructure/TrainLoop.Infrastructure.csproj index 55dd7b7..43e4330 100644 --- a/src/TrainLoop.Infrastructure/TrainLoop.Infrastructure.csproj +++ b/src/TrainLoop.Infrastructure/TrainLoop.Infrastructure.csproj @@ -5,8 +5,8 @@ - - + + runtime; build; native; contentfiles; analyzers; buildtransitive all diff --git a/src/TrainLoop.Worker/TrainLoop.Worker.csproj b/src/TrainLoop.Worker/TrainLoop.Worker.csproj index bd0206b..7e69984 100644 --- a/src/TrainLoop.Worker/TrainLoop.Worker.csproj +++ b/src/TrainLoop.Worker/TrainLoop.Worker.csproj @@ -8,7 +8,7 @@ - + diff --git a/tests/TrainLoop.Api.Tests/TrainLoop.Api.Tests.csproj b/tests/TrainLoop.Api.Tests/TrainLoop.Api.Tests.csproj index bf5f351..3531504 100644 --- a/tests/TrainLoop.Api.Tests/TrainLoop.Api.Tests.csproj +++ b/tests/TrainLoop.Api.Tests/TrainLoop.Api.Tests.csproj @@ -9,8 +9,8 @@ - - + + diff --git a/tests/TrainLoop.Core.Tests/TrainLoop.Core.Tests.csproj b/tests/TrainLoop.Core.Tests/TrainLoop.Core.Tests.csproj index 70b74cf..70a28cd 100644 --- a/tests/TrainLoop.Core.Tests/TrainLoop.Core.Tests.csproj +++ b/tests/TrainLoop.Core.Tests/TrainLoop.Core.Tests.csproj @@ -9,7 +9,7 @@ - + From 9e7bd316a7fea5df71a692deba859b1dd99af3b9 Mon Sep 17 00:00:00 2001 From: JerrettDavis Date: Tue, 21 Jul 2026 12:24:43 -0500 Subject: [PATCH 2/3] fix(deps): pin Microsoft.OpenApi to 2.7.5 to resolve CS0200 with AspNetCore.OpenApi 10.0.10 The nuget-dependencies group bump pulled Microsoft.OpenApi 3.9.0, whose IOpenApiMediaType.Example API changed to read-only, breaking the Microsoft.AspNetCore.OpenApi 10.0.10 source generator (CS0200). Pin Microsoft.OpenApi back to the 2.7.5 line already known to be compatible (previously pinned in #8 for GHSA-v5pm-xwqc-g5wc). Co-Authored-By: Claude Sonnet 5 --- src/TrainLoop.Api/TrainLoop.Api.csproj | 2 +- tests/TrainLoop.Api.Tests/TrainLoop.Api.Tests.csproj | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/TrainLoop.Api/TrainLoop.Api.csproj b/src/TrainLoop.Api/TrainLoop.Api.csproj index 6d16254..a6dfa76 100644 --- a/src/TrainLoop.Api/TrainLoop.Api.csproj +++ b/src/TrainLoop.Api/TrainLoop.Api.csproj @@ -12,7 +12,7 @@ runtime; build; native; contentfiles; analyzers; buildtransitive all - + diff --git a/tests/TrainLoop.Api.Tests/TrainLoop.Api.Tests.csproj b/tests/TrainLoop.Api.Tests/TrainLoop.Api.Tests.csproj index 3531504..e4d1f87 100644 --- a/tests/TrainLoop.Api.Tests/TrainLoop.Api.Tests.csproj +++ b/tests/TrainLoop.Api.Tests/TrainLoop.Api.Tests.csproj @@ -10,7 +10,7 @@ - + From e6399d1522fa56be8de13b6344ee7c50e8934690 Mon Sep 17 00:00:00 2001 From: JerrettDavis Date: Tue, 21 Jul 2026 12:32:56 -0500 Subject: [PATCH 3/3] docs(deps): document Microsoft.OpenApi 2.7.5 pin and ignore 3.x in Dependabot Explain why the pin exists (AspNetCore.OpenApi 10.0.x source generator is incompatible with OpenApi 3.x's read-only IOpenApiMediaType.Example) and add a Dependabot ignore rule so future bumps don't silently reintroduce CS0200. Co-Authored-By: Claude Sonnet 5 --- .github/dependabot.yml | 6 ++++++ src/TrainLoop.Api/TrainLoop.Api.csproj | 8 ++++++++ tests/TrainLoop.Api.Tests/TrainLoop.Api.Tests.csproj | 1 + 3 files changed, 15 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index a02dc81..ad45688 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -39,3 +39,9 @@ updates: nuget-dependencies: patterns: - "*" + ignore: + # Microsoft.OpenApi 3.x breaks Microsoft.AspNetCore.OpenApi 10.0.x source generation + # (CS0200 on IOpenApiMediaType.Example). See TrainLoop.Api.csproj comment. Revisit + # once a stable AspNetCore.OpenApi release supports Microsoft.OpenApi 3.x. + - dependency-name: "Microsoft.OpenApi" + versions: [">=3.0.0"] diff --git a/src/TrainLoop.Api/TrainLoop.Api.csproj b/src/TrainLoop.Api/TrainLoop.Api.csproj index a6dfa76..dc2dffd 100644 --- a/src/TrainLoop.Api/TrainLoop.Api.csproj +++ b/src/TrainLoop.Api/TrainLoop.Api.csproj @@ -12,6 +12,14 @@ runtime; build; native; contentfiles; analyzers; buildtransitive all + diff --git a/tests/TrainLoop.Api.Tests/TrainLoop.Api.Tests.csproj b/tests/TrainLoop.Api.Tests/TrainLoop.Api.Tests.csproj index e4d1f87..3cee11b 100644 --- a/tests/TrainLoop.Api.Tests/TrainLoop.Api.Tests.csproj +++ b/tests/TrainLoop.Api.Tests/TrainLoop.Api.Tests.csproj @@ -10,6 +10,7 @@ +