Skip to content

Bump NodaTime, Npgsql and Npgsql.NodaTime#1062

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/nuget/multi-ca6e9ee3b1
Open

Bump NodaTime, Npgsql and Npgsql.NodaTime#1062
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/nuget/multi-ca6e9ee3b1

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 25, 2025

Bumps NodaTime, Npgsql and Npgsql.NodaTime. These dependencies needed to be updated together.
Updates NodaTime from 3.0.7 to 3.1.9

Commits
  • 30b4b33 Update to TZDB 2023c for release 3.1.9
  • 7036755 Update to TZDB 2023b for release 3.1.8
  • 11bd3f0 Update to TZDB 2023a for release 3.1.7
  • 9c6fab3 Update to TZDB 2022g for release 3.1.6
  • 5187aa7 Update to TZDB 2022f for release 3.1.5
  • 62193e9 Update to TZDB 2022e for release 3.1.4
  • bfd3e3b Update to TZDB 2022d for release 3.1.3
  • d949554 Update to TZDB 2022c for release 3.1.2
  • 7dcbf1f Update to TZDB 2022b for release 3.1.1
  • 0fb4a30 Make tests more lenient for 2022b
  • Additional commits viewable in compare view

Updates Npgsql from 5.0.10 to 8.0.7

Release notes

Sourced from Npgsql's releases.

v8.0.7

v9.0.3 contains several bug fixes.

Full Changelog: npgsql/npgsql@v8.0.6...v8.0.7

v8.0.6

The full list of changes is available here.

Full Changelog: npgsql/npgsql@v8.0.5...v8.0.6

v8.0.5

8.0.5 contains quite a few fixes, everyone is strongly encouraged to upgrade.

The full list of changes is available here.

Full Changelog: npgsql/npgsql@v8.0.4...v8.0.5

v8.0.4

A large number of number of bugs have been fixed, here is the full list.

Full Changelog: npgsql/npgsql@v8.0.3...v8.0.4

v8.0.3

This version contains a high-severity security patch for CVE-2024-32655 everyone is advised to upgrade.

A large number of number of bugs have been fixed, here is the full list.

Thanks to @​paul-gerste-sonarsource for reporting the vulnerability.

v8.0.2

8.0.2 contains quite a few fixes, everyone is strongly encouraged to upgrade.

The full list of changes is available here.

v8.0.1

8.0.1 contains some important fixes discovered after releasing 8.0.0. Everyone is encouraged to upgrade.

The full list of changes is available here.

v8.0.0

See the release notes.

The full list of changes is available here.

v7.0.9

7.0.9 will be the last patch release in the 7.0 version line. It's highly recommended to upgrade to a newer, supported version as soon as possible.

Full Changelog: npgsql/npgsql@v7.0.8...v7.0.9

v7.0.8

... (truncated)

Commits
  • 3cef16f Stop testing on PG12 in CI
  • 992fcbd Bump actions/upload-artifacts to v4
  • ddbb948 Bump version to 8.0.7
  • 61f3a2a Always dispose RemoteCertificate on SslStream (#6022)
  • a13fc41 Tighten SCRAM-SHA-256 SASL check (#6023)
  • 93a7bf0 Fix NETSTANDARD 2.0 compilation after db11575e0233f03d336d56d2be7c5f9c718060c6
  • db11575 Send close_notify TLS alert on connection shutdown (#5995)
  • 9b0f9a3 Add support for postgresql type names with dots (#5971)
  • c4c9d0d Sync CI macos setup to latest main
  • f5a7042 Stop testing on netcoreapp3.1 (doesn't work on modern mac)
  • Additional commits viewable in compare view

Updates Npgsql.NodaTime from 5.0.4 to 8.0.7

Release notes

Sourced from Npgsql.NodaTime's releases.

v8.0.7

v9.0.3 contains several bug fixes.

Full Changelog: npgsql/npgsql@v8.0.6...v8.0.7

v8.0.6

The full list of changes is available here.

Full Changelog: npgsql/npgsql@v8.0.5...v8.0.6

v8.0.5

8.0.5 contains quite a few fixes, everyone is strongly encouraged to upgrade.

The full list of changes is available here.

Full Changelog: npgsql/npgsql@v8.0.4...v8.0.5

v8.0.4

A large number of number of bugs have been fixed, here is the full list.

Full Changelog: npgsql/npgsql@v8.0.3...v8.0.4

v8.0.3

This version contains a high-severity security patch for CVE-2024-32655 everyone is advised to upgrade.

A large number of number of bugs have been fixed, here is the full list.

Thanks to @​paul-gerste-sonarsource for reporting the vulnerability.

v8.0.2

8.0.2 contains quite a few fixes, everyone is strongly encouraged to upgrade.

The full list of changes is available here.

v8.0.1

8.0.1 contains some important fixes discovered after releasing 8.0.0. Everyone is encouraged to upgrade.

The full list of changes is available here.

v8.0.0

See the release notes.

The full list of changes is available here.

v7.0.9

7.0.9 will be the last patch release in the 7.0 version line. It's highly recommended to upgrade to a newer, supported version as soon as possible.

Full Changelog: npgsql/npgsql@v7.0.8...v7.0.9

v7.0.8

... (truncated)

Commits
  • 3cef16f Stop testing on PG12 in CI
  • 992fcbd Bump actions/upload-artifacts to v4
  • ddbb948 Bump version to 8.0.7
  • 61f3a2a Always dispose RemoteCertificate on SslStream (#6022)
  • a13fc41 Tighten SCRAM-SHA-256 SASL check (#6023)
  • 93a7bf0 Fix NETSTANDARD 2.0 compilation after db11575e0233f03d336d56d2be7c5f9c718060c6
  • db11575 Send close_notify TLS alert on connection shutdown (#5995)
  • 9b0f9a3 Add support for postgresql type names with dots (#5971)
  • c4c9d0d Sync CI macos setup to latest main
  • f5a7042 Stop testing on netcoreapp3.1 (doesn't work on modern mac)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [NodaTime](https://github.com/nodatime/nodatime), [Npgsql](https://github.com/npgsql/npgsql) and [Npgsql.NodaTime](https://github.com/npgsql/npgsql). These dependencies needed to be updated together.

Updates `NodaTime` from 3.0.7 to 3.1.9
- [Release notes](https://github.com/nodatime/nodatime/releases)
- [Commits](nodatime/nodatime@3.0.7...3.1.9)

Updates `Npgsql` from 5.0.10 to 8.0.7
- [Release notes](https://github.com/npgsql/npgsql/releases)
- [Commits](npgsql/npgsql@v5.0.10...v8.0.7)

Updates `Npgsql.NodaTime` from 5.0.4 to 8.0.7
- [Release notes](https://github.com/npgsql/npgsql/releases)
- [Commits](npgsql/npgsql@v5.0.4...v8.0.7)

---
updated-dependencies:
- dependency-name: NodaTime
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Npgsql
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Npgsql.NodaTime
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .net code 📦 dependencies Pull requests that update a dependency file labels Feb 25, 2025
@github-actions github-actions bot added this to the v6.2.1 milestone Feb 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

.NET Pull requests that update .net code 📦 dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant