From 4364097b406720d808b39503b649736ab6dace34 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 5 Jan 2026 21:01:06 +0000 Subject: [PATCH 1/9] chore(deps): bump dependabot/fetch-metadata from 2.4.0 to 2.5.0 Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) from 2.4.0 to 2.5.0. - [Release notes](https://github.com/dependabot/fetch-metadata/releases) - [Commits](https://github.com/dependabot/fetch-metadata/compare/v2.4.0...v2.5.0) --- updated-dependencies: - dependency-name: dependabot/fetch-metadata dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/auto-merge-dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/auto-merge-dependabot.yml b/.github/workflows/auto-merge-dependabot.yml index 5d5be69be..8e29c9332 100644 --- a/.github/workflows/auto-merge-dependabot.yml +++ b/.github/workflows/auto-merge-dependabot.yml @@ -19,7 +19,7 @@ jobs: steps: - name: Dependabot metadata id: metadata - uses: dependabot/fetch-metadata@v2.4.0 + uses: dependabot/fetch-metadata@v2.5.0 with: github-token: "${{ secrets.GITHUB_TOKEN }}" From b48add37d43caa553fe6f16525e6096daccec5db Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 13 Feb 2026 21:14:45 +0000 Subject: [PATCH 2/9] Bump Microsoft.IdentityModel.Protocols.OpenIdConnect and Microsoft.IdentityModel.Validators Bumps Microsoft.IdentityModel.Protocols.OpenIdConnect from 8.15.0 to 8.16.0 Bumps Microsoft.IdentityModel.Validators from 8.6.1 to 8.16.0 --- updated-dependencies: - dependency-name: Microsoft.IdentityModel.Protocols.OpenIdConnect dependency-version: 8.16.0 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: Microsoft.IdentityModel.Validators dependency-version: 8.16.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj index 921a360fb..68bcbe88e 100644 --- a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj +++ b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj @@ -64,8 +64,8 @@ - - + + From b4a98c775a382fa5c38200ed3da24189dd5ed750 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 10 Mar 2026 21:20:39 +0000 Subject: [PATCH 3/9] Bump System.Net.Http.WinHttpHandler from 6.0.0 to 9.0.14 --- updated-dependencies: - dependency-name: System.Net.Http.WinHttpHandler dependency-version: 9.0.14 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj index 921a360fb..0660a29b5 100644 --- a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj +++ b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj @@ -80,6 +80,6 @@ - + From 73f01e9eebb063ce3ec2f7e7630933098d090530 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 12 Mar 2026 21:18:56 +0000 Subject: [PATCH 4/9] Bump Microsoft.SourceLink.GitHub from 8.0.0 to 10.0.201 --- updated-dependencies: - dependency-name: Microsoft.SourceLink.GitHub dependency-version: 10.0.201 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj index 921a360fb..73c695868 100644 --- a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj +++ b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj @@ -66,7 +66,7 @@ - + From 3d34246c7ad1ca230c7b466e695a6bbc7791f5d0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 16 Mar 2026 21:13:09 +0000 Subject: [PATCH 5/9] chore(deps): bump actions/create-github-app-token from 2 to 3 Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 2 to 3. - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](https://github.com/actions/create-github-app-token/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/project-auto-add.yml | 2 +- .github/workflows/release-please-gha.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/project-auto-add.yml b/.github/workflows/project-auto-add.yml index c592c1b4c..27fe29116 100644 --- a/.github/workflows/project-auto-add.yml +++ b/.github/workflows/project-auto-add.yml @@ -18,7 +18,7 @@ jobs: steps: - name: Generate token id: generate_token - uses: actions/create-github-app-token@v2 + uses: actions/create-github-app-token@v3 with: app-id: ${{ secrets.GRAPHBOT_APP_ID }} private-key: ${{ secrets.GRAPHBOT_APP_PEM }} diff --git a/.github/workflows/release-please-gha.yml b/.github/workflows/release-please-gha.yml index d4cf74c33..195010cc8 100644 --- a/.github/workflows/release-please-gha.yml +++ b/.github/workflows/release-please-gha.yml @@ -23,7 +23,7 @@ jobs: - name: Generate GitHub App token id: app-token - uses: actions/create-github-app-token@v2 + uses: actions/create-github-app-token@v3 with: app-id: ${{ vars.RELEASE_PLEASE_TOKEN_PROVIDER_APP_ID }} private-key: ${{ secrets.RELEASE_PLEASE_TOKEN_PROVIDER_PEM }} From aad7834e51abd8b10576e0031bffadaed09656f5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 17 Mar 2026 21:06:22 +0000 Subject: [PATCH 6/9] Bump coverlet.collector and coverlet.msbuild Bumps coverlet.collector from 6.0.4 to 8.0.1 Bumps coverlet.msbuild from 6.0.4 to 8.0.1 --- updated-dependencies: - dependency-name: coverlet.collector dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: coverlet - dependency-name: coverlet.msbuild dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: coverlet ... Signed-off-by: dependabot[bot] --- .../Microsoft.Graph.DotnetCore.Core.Test.csproj | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tests/Microsoft.Graph.DotnetCore.Core.Test/Microsoft.Graph.DotnetCore.Core.Test.csproj b/tests/Microsoft.Graph.DotnetCore.Core.Test/Microsoft.Graph.DotnetCore.Core.Test.csproj index 8c4f611e9..b0689d6dd 100644 --- a/tests/Microsoft.Graph.DotnetCore.Core.Test/Microsoft.Graph.DotnetCore.Core.Test.csproj +++ b/tests/Microsoft.Graph.DotnetCore.Core.Test/Microsoft.Graph.DotnetCore.Core.Test.csproj @@ -25,11 +25,11 @@ - + runtime; build; native; contentfiles; analyzers; buildtransitive all - + runtime; build; native; contentfiles; analyzers; buildtransitive all From a135734b287529b4127fe681f81a107a03ea7ae3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 19 Mar 2026 21:10:09 +0000 Subject: [PATCH 7/9] Bump Microsoft.Kiota.Abstractions and 6 others Bumps Microsoft.Kiota.Abstractions from 1.21.1 to 1.22.1 Bumps Microsoft.Kiota.Authentication.Azure from 1.21.1 to 1.22.1 Bumps Microsoft.Kiota.Http.HttpClientLibrary from 1.21.1 to 1.22.1 Bumps Microsoft.Kiota.Serialization.Form from 1.21.1 to 1.22.1 Bumps Microsoft.Kiota.Serialization.Json from 1.21.1 to 1.22.1 Bumps Microsoft.Kiota.Serialization.Multipart from 1.21.1 to 1.22.1 Bumps Microsoft.Kiota.Serialization.Text from 1.21.1 to 1.22.1 --- updated-dependencies: - dependency-name: Microsoft.Kiota.Abstractions dependency-version: 1.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: kiota-dependencies - dependency-name: Microsoft.Kiota.Authentication.Azure dependency-version: 1.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: kiota-dependencies - dependency-name: Microsoft.Kiota.Http.HttpClientLibrary dependency-version: 1.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: kiota-dependencies - dependency-name: Microsoft.Kiota.Serialization.Form dependency-version: 1.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: kiota-dependencies - dependency-name: Microsoft.Kiota.Serialization.Json dependency-version: 1.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: kiota-dependencies - dependency-name: Microsoft.Kiota.Serialization.Multipart dependency-version: 1.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: kiota-dependencies - dependency-name: Microsoft.Kiota.Serialization.Text dependency-version: 1.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: kiota-dependencies ... Signed-off-by: dependabot[bot] --- .../Microsoft.Graph.Core.csproj | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj index 921a360fb..969df592f 100644 --- a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj +++ b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj @@ -67,13 +67,13 @@ - - - - - - - + + + + + + + runtime; build; native; contentfiles; analyzers; buildtransitive all From 17c57c2b6fcb49d9fa4cd314a6a0d55baab9a67d Mon Sep 17 00:00:00 2001 From: "Gavin Barron (from Dev Box)" Date: Fri, 17 Apr 2026 16:32:07 -0700 Subject: [PATCH 8/9] Revert Microsoft.SourceLink.GitHub to 8.0.0 (10.x incompatible with net462/netstandard2.0) --- src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj index 4e68404c0..188db2325 100644 --- a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj +++ b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj @@ -66,7 +66,7 @@ - + From 22aa370558d7459dca898dc5b2b1756710fae868 Mon Sep 17 00:00:00 2001 From: "Gavin Barron (from Dev Box)" Date: Fri, 17 Apr 2026 17:47:29 -0700 Subject: [PATCH 9/9] fix: downgrade coverlet packages to 6.0.4 for net6.0 compatibility coverlet.collector and coverlet.msbuild v8.0.1 only ship build assets for net8.0, causing 'XPlat Code Coverage' data collector not found errors when running tests on the net6.0 test project. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .../Microsoft.Graph.DotnetCore.Core.Test.csproj | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tests/Microsoft.Graph.DotnetCore.Core.Test/Microsoft.Graph.DotnetCore.Core.Test.csproj b/tests/Microsoft.Graph.DotnetCore.Core.Test/Microsoft.Graph.DotnetCore.Core.Test.csproj index b0689d6dd..8c4f611e9 100644 --- a/tests/Microsoft.Graph.DotnetCore.Core.Test/Microsoft.Graph.DotnetCore.Core.Test.csproj +++ b/tests/Microsoft.Graph.DotnetCore.Core.Test/Microsoft.Graph.DotnetCore.Core.Test.csproj @@ -25,11 +25,11 @@ - + runtime; build; native; contentfiles; analyzers; buildtransitive all - + runtime; build; native; contentfiles; analyzers; buildtransitive all