Skip to content

Revert previous MessagePack pin and move MessagePack.NodaTime to 3.5.5#729

Open
renovate[bot] wants to merge 5 commits into
masterfrom
renovate/all-minor-patch
Open

Revert previous MessagePack pin and move MessagePack.NodaTime to 3.5.5#729
renovate[bot] wants to merge 5 commits into
masterfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Jun 12, 2026

Copy link
Copy Markdown
Contributor

This PR replaces the previous dependency pinning commit by reverting it, then upgrades MessagePack.NodaTime to 3.5.5. Lock files are regenerated so transitive resolution reflects the fixed dependency graph.

  • Dependency baseline reset

    • Reverted the last commit (fix(deps): pin messagepack to secure patch) to remove the prior lock-file/package state.
  • Central package upgrade

    • Updated central package management to:
      • MessagePack.NodaTime 3.5.43.5.5 in Directory.Packages.props.
  • Lock-file realignment

    • Refreshed all impacted packages.lock.json files across src/, tests/, and samples/ so resolved versions match central package constraints.
  • Transitive dependency outcome

    • Updated lock files now resolve:
      • MessagePack.NodaTime = 3.5.5
      • transitive MessagePack = 3.1.7
<!-- Directory.Packages.props -->
<PackageVersion Include="MessagePack.NodaTime" Version="3.5.5" />

@renovate renovate Bot requested a review from a team as a code owner June 12, 2026 22:52
@renovate renovate Bot enabled auto-merge June 12, 2026 22:52
@renovate

renovate Bot commented Jun 12, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: samples/Ark.ReferenceProject/Ark.Reference.Common/packages.lock.json, samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Common/packages.lock.json, samples/Ark.ReferenceProject/Core/Ark.Reference.Core.API/packages.lock.json, samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Application/packages.lock.json, samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Tests/packages.lock.json, samples/Ark.ReferenceProject/Core/Ark.Reference.Core.WebInterface/packages.lock.json, samples/Ark.ResourceWatcher/Ark.ResourceWatcher.Sample.Tests/packages.lock.json, samples/Ark.ResourceWatcher/Ark.ResourceWatcher.Sample/packages.lock.json, samples/LinuxWebJobHosting/packages.lock.json, samples/ProblemDetailsSample/packages.lock.json, samples/Test.SingletonBackgroundService/packages.lock.json, samples/TestLinkGenerator/packages.lock.json, samples/TestReceiver/packages.lock.json, samples/TestWorker/packages.lock.json, samples/WebApplicationDemo/packages.lock.json, tests/WebApplicationDemo.Tests/packages.lock.json, src/aspnetcore/Ark.Tools.AspNetCore.ApplicationInsights/packages.lock.json, src/aspnetcore/Ark.Tools.AspNetCore/packages.lock.json, src/aspnetcore/Ark.Tools.AspNetCore.Auth0/packages.lock.json, src/aspnetcore/Ark.Tools.AspNetCore.BasicAuthAuth0Proxy/packages.lock.json, src/aspnetcore/Ark.Tools.AspNetCore.BasicAuthAzureActiveDirectoryProxy/packages.lock.json, src/aspnetcore/Ark.Tools.AspNetCore.CommaSeparatedParameters/packages.lock.json, src/aspnetcore/Ark.Tools.AspNetCore.HealthChecks/packages.lock.json, src/aspnetcore/Ark.Tools.AspNetCore.MessagePack/packages.lock.json, src/aspnetcore/Ark.Tools.AspNetCore.NestedStartup/packages.lock.json, src/aspnetcore/Ark.Tools.AspNetCore.RavenDb/packages.lock.json, src/aspnetcore/Ark.Tools.AspNetCore.Swashbuckle/packages.lock.json, src/common/Ark.Tasks/packages.lock.json, src/common/Ark.Tools.Activity/packages.lock.json, src/common/Ark.Tools.ApplicationInsights.HostedService/packages.lock.json, src/resourcewatcher/Ark.Tools.ResourceWatcher.ApplicationInsights/packages.lock.json, src/resourcewatcher/Ark.Tools.ResourceWatcher.WorkerHost.Hosting/packages.lock.json, src/common/Ark.Tools.ApplicationInsights/packages.lock.json, src/common/Ark.Tools.NLog/packages.lock.json, src/common/Ark.Tools.Authorization/packages.lock.json, src/common/Ark.Tools.Solid.Authorization/packages.lock.json, src/common/Ark.Tools.FtpClient.ArxOne/packages.lock.json, src/common/Ark.Tools.FtpClient.Core/packages.lock.json, src/common/Ark.Tools.FtpClient.FluentFtp/packages.lock.json, src/common/Ark.Tools.FtpClient.FtpProxy/packages.lock.json, src/common/Ark.Tools.FtpClient.SftpClient/packages.lock.json, src/resourcewatcher/Ark.Tools.ResourceWatcher.WorkerHost.Ftp/packages.lock.json, src/common/Ark.Tools.NLog.Configuration/packages.lock.json, src/common/Ark.Tools.NLog.ConfigurationManager/packages.lock.json, src/common/Ark.Tools.Outbox.SqlServer/packages.lock.json, src/common/Ark.Tools.Solid/packages.lock.json, src/common/Ark.Tools.RavenDb/packages.lock.json, src/common/Ark.Tools.EventSourcing.RavenDb/packages.lock.json, src/common/Ark.Tools.RavenDb.Auditing/packages.lock.json, src/common/Ark.Tools.Rebus/packages.lock.json, src/common/Ark.Tools.EventSourcing.Rebus/packages.lock.json, src/common/Ark.Tools.Outbox.Rebus/packages.lock.json, src/common/Ark.Tools.Solid.FluentValidaton/packages.lock.json, src/common/Ark.Tools.Solid.SimpleInjector/packages.lock.json, src/common/Ark.Tools.Sql.Oracle/packages.lock.json, tests/Ark.Tools.Sql.Oracle.Tests/packages.lock.json, src/common/Ark.Tools.Sql.SqlServer/packages.lock.json, src/resourcewatcher/Ark.Tools.ResourceWatcher.Sql/packages.lock.json, src/resourcewatcher/Ark.Tools.ResourceWatcher.WorkerHost.Sql/packages.lock.json, tests/Ark.Tools.ResourceWatcher.Tests/packages.lock.json, src/resourcewatcher/Ark.Tools.ResourceWatcher/packages.lock.json, src/resourcewatcher/Ark.Tools.ResourceWatcher.Testing/packages.lock.json, src/resourcewatcher/Ark.Tools.ResourceWatcher.WorkerHost/packages.lock.json, src/common/Ark.Tools.Auth0/packages.lock.json, src/common/Ark.Tools.Core/packages.lock.json, src/common/Ark.Tools.EventSourcing/packages.lock.json, src/common/Ark.Tools.EventSourcing.SimpleInjector/packages.lock.json, src/common/Ark.Tools.Nodatime/packages.lock.json, src/common/Ark.Tools.Nodatime.Dapper/packages.lock.json, src/common/Ark.Tools.Nodatime.Json/packages.lock.json, src/common/Ark.Tools.NewtonsoftJson/packages.lock.json, src/common/Ark.Tools.Http/packages.lock.json, src/common/Ark.Tools.Reqnroll/packages.lock.json, src/common/Ark.Tools.Nodatime.SystemTextJson/packages.lock.json, src/common/Ark.Tools.SystemTextJson/packages.lock.json, tests/Ark.Tools.Nodatime.Tests/packages.lock.json, src/common/Ark.Tools.Outbox/packages.lock.json, src/common/Ark.Tools.Sql/packages.lock.json, tests/Ark.Tools.Core.Reflection.Tests/packages.lock.json, tests/Ark.Tools.Core.Tests/packages.lock.json, src/common/Ark.Tools.Hosting/packages.lock.json, src/common/Ark.Tools.SimpleInjector/packages.lock.json
  [Ark.Tools] Replaced PackageReference with ProjectReference for: Ark.Tools.Reqnroll
  [Ark.Tools] Replaced PackageReference with ProjectReference for: Ark.Tools.Reqnroll
  Determining projects to restore...
  [Ark.Tools] Replaced PackageReference with ProjectReference for: Ark.Tools.NLog.Configuration;Ark.Tools.Nodatime;Ark.Tools.Solid.SimpleInjector;Ark.Tools.Rebus;Ark.Tools.Http;Ark.Tools.Sql.SqlServer;Ark.Tools.SystemTextJson;Ark.Tools.Solid.Authorization;Ark.Tools.Solid.FluentValidaton
  [Ark.Tools] Replaced PackageReference with ProjectReference for: Ark.Tools.Outbox.Rebus;Ark.Tools.Outbox.SqlServer;Ark.Tools.Outbox;Ark.Tools.Rebus;Ark.Tools.Solid.SimpleInjector;Ark.Tools.Sql;Ark.Tools.Sql.SqlServer
  [Ark.Tools] Replaced PackageReference with ProjectReference for: Ark.Tools.AspNetCore
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.SystemTextJson/Ark.Tools.SystemTextJson.csproj (in 5.45 sec).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Sql/Ark.Tools.Sql.csproj (in 15 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Sql.SqlServer/Ark.Tools.Sql.SqlServer.csproj (in 5.02 sec).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Solid/Ark.Tools.Solid.csproj (in 72 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Solid.SimpleInjector/Ark.Tools.Solid.SimpleInjector.csproj (in 134 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Solid.FluentValidaton/Ark.Tools.Solid.FluentValidaton.csproj (in 90 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Solid.Authorization/Ark.Tools.Solid.Authorization.csproj (in 36 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.SimpleInjector/Ark.Tools.SimpleInjector.csproj (in 10 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Reqnroll/Ark.Tools.Reqnroll.csproj (in 1.74 sec).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Rebus/Ark.Tools.Rebus.csproj (in 2.8 sec).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Outbox/Ark.Tools.Outbox.csproj (in 31 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Outbox.SqlServer/Ark.Tools.Outbox.SqlServer.csproj (in 344 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Outbox.Rebus/Ark.Tools.Outbox.Rebus.csproj (in 63 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Nodatime/Ark.Tools.Nodatime.csproj (in 11 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Nodatime.SystemTextJson/Ark.Tools.Nodatime.SystemTextJson.csproj (in 10 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Nodatime.Json/Ark.Tools.Nodatime.Json.csproj (in 11 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Nodatime.Dapper/Ark.Tools.Nodatime.Dapper.csproj (in 15 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.NewtonsoftJson/Ark.Tools.NewtonsoftJson.csproj (in 11 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.NLog/Ark.Tools.NLog.csproj (in 36 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.NLog.Configuration/Ark.Tools.NLog.Configuration.csproj (in 1.4 sec).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Http/Ark.Tools.Http.csproj (in 261 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Hosting/Ark.Tools.Hosting.csproj (in 224 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Core/Ark.Tools.Core.csproj (in 7 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Authorization/Ark.Tools.Authorization.csproj (in 25 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.ApplicationInsights/Ark.Tools.ApplicationInsights.csproj (in 15 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/aspnetcore/Ark.Tools.AspNetCore/Ark.Tools.AspNetCore.csproj (in 8.86 sec).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/aspnetcore/Ark.Tools.AspNetCore.Swashbuckle/Ark.Tools.AspNetCore.Swashbuckle.csproj (in 34 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/aspnetcore/Ark.Tools.AspNetCore.NestedStartup/Ark.Tools.AspNetCore.NestedStartup.csproj (in 5 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/aspnetcore/Ark.Tools.AspNetCore.MessagePack/Ark.Tools.AspNetCore.MessagePack.csproj (in 8 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/aspnetcore/Ark.Tools.AspNetCore.HealthChecks/Ark.Tools.AspNetCore.HealthChecks.csproj (in 22 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/aspnetcore/Ark.Tools.AspNetCore.CommaSeparatedParameters/Ark.Tools.AspNetCore.CommaSeparatedParameters.csproj (in 4 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/aspnetcore/Ark.Tools.AspNetCore.Auth0/Ark.Tools.AspNetCore.Auth0.csproj (in 6 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/aspnetcore/Ark.Tools.AspNetCore.ApplicationInsights/Ark.Tools.AspNetCore.ApplicationInsights.csproj (in 20 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.WebInterface/Ark.Reference.Core.WebInterface.csproj (in 5.4 sec).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Tests/Ark.Reference.Core.Tests.csproj (in 12.81 sec).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Database/Ark.Reference.Core.Database.sqlproj (in 14 ms).
/tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Common/Ark.Reference.Core.Common.csproj : error NU1903: Warning As Error: Package 'MessagePack' 3.1.4 has a known high severity vulnerability, https://github.com/advisories/GHSA-hv8m-jj95-wg3x [/tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Tests/Ark.Reference.Core.Tests.csproj]
  Failed to restore /tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Common/Ark.Reference.Core.Common.csproj (in 203 ms).
/tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Application/Ark.Reference.Core.Application.csproj : error NU1903: Warning As Error: Package 'MessagePack' 3.1.4 has a known high severity vulnerability, https://github.com/advisories/GHSA-hv8m-jj95-wg3x [/tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Tests/Ark.Reference.Core.Tests.csproj]
  Failed to restore /tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Application/Ark.Reference.Core.Application.csproj (in 84 ms).
/tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.API/Ark.Reference.Core.API.csproj : error NU1903: Warning As Error: Package 'MessagePack' 3.1.4 has a known high severity vulnerability, https://github.com/advisories/GHSA-hv8m-jj95-wg3x [/tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Tests/Ark.Reference.Core.Tests.csproj]
  Failed to restore /tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.API/Ark.Reference.Core.API.csproj (in 73 ms).
/tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Ark.Reference.Common/Ark.Reference.Common.csproj : error NU1903: Warning As Error: Package 'MessagePack' 3.1.4 has a known high severity vulnerability, https://github.com/advisories/GHSA-hv8m-jj95-wg3x [/tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Tests/Ark.Reference.Core.Tests.csproj]
  Failed to restore /tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Ark.Reference.Common/Ark.Reference.Common.csproj (in 66 ms).

File name: samples/Ark.ReferenceProject/Ark.Reference.Common/packages.lock.json, samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Common/packages.lock.json, samples/Ark.ReferenceProject/Core/Ark.Reference.Core.API/packages.lock.json, samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Application/packages.lock.json, samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Tests/packages.lock.json, samples/Ark.ReferenceProject/Core/Ark.Reference.Core.WebInterface/packages.lock.json
  [Ark.Tools] Replaced PackageReference with ProjectReference for: Ark.Tools.Reqnroll
  [Ark.Tools] Replaced PackageReference with ProjectReference for: Ark.Tools.Reqnroll
  Determining projects to restore...
  [Ark.Tools] Replaced PackageReference with ProjectReference for: Ark.Tools.NLog.Configuration;Ark.Tools.Nodatime;Ark.Tools.Solid.SimpleInjector;Ark.Tools.Rebus;Ark.Tools.Http;Ark.Tools.Sql.SqlServer;Ark.Tools.SystemTextJson;Ark.Tools.Solid.Authorization;Ark.Tools.Solid.FluentValidaton
  [Ark.Tools] Replaced PackageReference with ProjectReference for: Ark.Tools.Outbox.Rebus;Ark.Tools.Outbox.SqlServer;Ark.Tools.Outbox;Ark.Tools.Rebus;Ark.Tools.Solid.SimpleInjector;Ark.Tools.Sql;Ark.Tools.Sql.SqlServer
  [Ark.Tools] Replaced PackageReference with ProjectReference for: Ark.Tools.AspNetCore
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.SystemTextJson/Ark.Tools.SystemTextJson.csproj (in 419 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Sql/Ark.Tools.Sql.csproj (in 19 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Sql.SqlServer/Ark.Tools.Sql.SqlServer.csproj (in 99 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Solid/Ark.Tools.Solid.csproj (in 36 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Solid.SimpleInjector/Ark.Tools.Solid.SimpleInjector.csproj (in 113 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Solid.FluentValidaton/Ark.Tools.Solid.FluentValidaton.csproj (in 27 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Solid.Authorization/Ark.Tools.Solid.Authorization.csproj (in 29 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.SimpleInjector/Ark.Tools.SimpleInjector.csproj (in 16 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Reqnroll/Ark.Tools.Reqnroll.csproj (in 69 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Rebus/Ark.Tools.Rebus.csproj (in 151 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Outbox/Ark.Tools.Outbox.csproj (in 18 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Outbox.SqlServer/Ark.Tools.Outbox.SqlServer.csproj (in 43 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Outbox.Rebus/Ark.Tools.Outbox.Rebus.csproj (in 104 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Nodatime/Ark.Tools.Nodatime.csproj (in 12 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Nodatime.SystemTextJson/Ark.Tools.Nodatime.SystemTextJson.csproj (in 14 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Nodatime.Json/Ark.Tools.Nodatime.Json.csproj (in 16 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Nodatime.Dapper/Ark.Tools.Nodatime.Dapper.csproj (in 14 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.NewtonsoftJson/Ark.Tools.NewtonsoftJson.csproj (in 21 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.NLog/Ark.Tools.NLog.csproj (in 24 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.NLog.Configuration/Ark.Tools.NLog.Configuration.csproj (in 60 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Http/Ark.Tools.Http.csproj (in 42 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Hosting/Ark.Tools.Hosting.csproj (in 61 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Core/Ark.Tools.Core.csproj (in 22 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Authorization/Ark.Tools.Authorization.csproj (in 106 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.ApplicationInsights/Ark.Tools.ApplicationInsights.csproj (in 34 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/aspnetcore/Ark.Tools.AspNetCore/Ark.Tools.AspNetCore.csproj (in 335 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/aspnetcore/Ark.Tools.AspNetCore.Swashbuckle/Ark.Tools.AspNetCore.Swashbuckle.csproj (in 26 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/aspnetcore/Ark.Tools.AspNetCore.NestedStartup/Ark.Tools.AspNetCore.NestedStartup.csproj (in 12 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/aspnetcore/Ark.Tools.AspNetCore.MessagePack/Ark.Tools.AspNetCore.MessagePack.csproj (in 15 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/aspnetcore/Ark.Tools.AspNetCore.HealthChecks/Ark.Tools.AspNetCore.HealthChecks.csproj (in 32 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/aspnetcore/Ark.Tools.AspNetCore.CommaSeparatedParameters/Ark.Tools.AspNetCore.CommaSeparatedParameters.csproj (in 12 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/aspnetcore/Ark.Tools.AspNetCore.Auth0/Ark.Tools.AspNetCore.Auth0.csproj (in 15 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/aspnetcore/Ark.Tools.AspNetCore.ApplicationInsights/Ark.Tools.AspNetCore.ApplicationInsights.csproj (in 34 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.WebInterface/Ark.Reference.Core.WebInterface.csproj (in 184 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Tests/Ark.Reference.Core.Tests.csproj (in 312 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Database/Ark.Reference.Core.Database.sqlproj (in 3 ms).
/tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Common/Ark.Reference.Core.Common.csproj : error NU1903: Warning As Error: Package 'MessagePack' 3.1.4 has a known high severity vulnerability, https://github.com/advisories/GHSA-hv8m-jj95-wg3x [/tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Tests/Ark.Reference.Core.Tests.csproj]
  Failed to restore /tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Common/Ark.Reference.Core.Common.csproj (in 120 ms).
/tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Application/Ark.Reference.Core.Application.csproj : error NU1903: Warning As Error: Package 'MessagePack' 3.1.4 has a known high severity vulnerability, https://github.com/advisories/GHSA-hv8m-jj95-wg3x [/tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Tests/Ark.Reference.Core.Tests.csproj]
  Failed to restore /tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Application/Ark.Reference.Core.Application.csproj (in 81 ms).
/tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.API/Ark.Reference.Core.API.csproj : error NU1903: Warning As Error: Package 'MessagePack' 3.1.4 has a known high severity vulnerability, https://github.com/advisories/GHSA-hv8m-jj95-wg3x [/tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Tests/Ark.Reference.Core.Tests.csproj]
  Failed to restore /tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.API/Ark.Reference.Core.API.csproj (in 58 ms).
/tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Ark.Reference.Common/Ark.Reference.Common.csproj : error NU1903: Warning As Error: Package 'MessagePack' 3.1.4 has a known high severity vulnerability, https://github.com/advisories/GHSA-hv8m-jj95-wg3x [/tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Tests/Ark.Reference.Core.Tests.csproj]
  Failed to restore /tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ReferenceProject/Ark.Reference.Common/Ark.Reference.Common.csproj (in 55 ms).

File name: samples/Ark.ResourceWatcher/Ark.ResourceWatcher.Sample.Tests/packages.lock.json, samples/Ark.ResourceWatcher/Ark.ResourceWatcher.Sample/packages.lock.json
  [Ark.Tools] Replaced PackageReference with ProjectReference for: Ark.Tools.Reqnroll;Ark.Tools.ResourceWatcher.Testing
  [Ark.Tools] Replaced PackageReference with ProjectReference for: Ark.Tools.Reqnroll;Ark.Tools.ResourceWatcher.Testing
  Determining projects to restore...
  [Ark.Tools] Replaced PackageReference with ProjectReference for: Ark.Tools.Http;Ark.Tools.NLog;Ark.Tools.ResourceWatcher.WorkerHost.Hosting
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/resourcewatcher/Ark.Tools.ResourceWatcher/Ark.Tools.ResourceWatcher.csproj (in 1 sec).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/resourcewatcher/Ark.Tools.ResourceWatcher.WorkerHost/Ark.Tools.ResourceWatcher.WorkerHost.csproj (in 21 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/resourcewatcher/Ark.Tools.ResourceWatcher.WorkerHost.Hosting/Ark.Tools.ResourceWatcher.WorkerHost.Hosting.csproj (in 525 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/resourcewatcher/Ark.Tools.ResourceWatcher.Testing/Ark.Tools.ResourceWatcher.Testing.csproj (in 34 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/resourcewatcher/Ark.Tools.ResourceWatcher.ApplicationInsights/Ark.Tools.ResourceWatcher.ApplicationInsights.csproj (in 146 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.SystemTextJson/Ark.Tools.SystemTextJson.csproj (in 37 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.SimpleInjector/Ark.Tools.SimpleInjector.csproj (in 17 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Reqnroll/Ark.Tools.Reqnroll.csproj (in 67 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Nodatime/Ark.Tools.Nodatime.csproj (in 17 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Nodatime.SystemTextJson/Ark.Tools.Nodatime.SystemTextJson.csproj (in 19 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Nodatime.Json/Ark.Tools.Nodatime.Json.csproj (in 20 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.NewtonsoftJson/Ark.Tools.NewtonsoftJson.csproj (in 20 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.NLog/Ark.Tools.NLog.csproj (in 46 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.NLog.Configuration/Ark.Tools.NLog.Configuration.csproj (in 43 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Http/Ark.Tools.Http.csproj (in 36 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Hosting/Ark.Tools.Hosting.csproj (in 29 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.Core/Ark.Tools.Core.csproj (in 15 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.ApplicationInsights/Ark.Tools.ApplicationInsights.csproj (in 22 ms).
  Restored /tmp/renovate/repos/github/ARKlab/Ark.Tools/src/common/Ark.Tools.ApplicationInsights.HostedService/Ark.Tools.ApplicationInsights.HostedService.csproj (in 35 ms).
/tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ResourceWatcher/Ark.ResourceWatcher.Sample/Ark.ResourceWatcher.Sample.csproj : error NU1903: Warning As Error: Package 'MessagePack' 3.1.4 has a known high severity vulnerability, https://github.com/advisories/GHSA-hv8m-jj95-wg3x [/tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ResourceWatcher/Ark.ResourceWatcher.Sample.Tests/Ark.ResourceWatcher.Sample.Tests.csproj]
  Failed to restore /tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ResourceWatcher/Ark.ResourceWatcher.Sample/Ark.ResourceWatcher.Sample.csproj (in 191 ms).
/tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ResourceWatcher/Ark.ResourceWatcher.Sample.Tests/Ark.ResourceWatcher.Sample.Tests.csproj : error NU1903: Warning As Error: Package 'MessagePack' 3.1.4 has a known high severity vulnerability, https://github.com/advisories/GHSA-hv8m-jj95-wg3x
  Failed to restore /tmp/renovate/repos/github/ARKlab/Ark.Tools/samples/Ark.ResourceWatcher/Ark.ResourceWatcher.Sample.Tests/Ark.ResourceWatcher.Sample.Tests.csproj (in 105 ms).

@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from 8f463bd to d4af04a Compare June 13, 2026 14:33
@renovate renovate Bot changed the title chore(deps): update all non-major dependencies to 3.0.103 chore(deps): update all non-major dependencies Jun 13, 2026
AndreaCuneo
AndreaCuneo previously approved these changes Jun 13, 2026
@AndreaCuneo

Copy link
Copy Markdown
Contributor

@copilot fix ci issues

Co-authored-by: AndreaCuneo <5227688+AndreaCuneo@users.noreply.github.com>
auto-merge was automatically disabled June 13, 2026 16:40

Head branch was pushed to by a user without write access

Copilot AI commented Jun 13, 2026

Copy link
Copy Markdown
Contributor

@copilot fix ci issues

Addressed in c608180. Updated the affected packages.lock.json files so locked-mode restore succeeds again; local locked-mode restore, dotnet build --no-restore --configuration Debug, and dotnet test --no-build --no-restore --configuration Debug all pass.

Copilot AI requested a review from AndreaCuneo June 13, 2026 16:40
@renovate

renovate Bot commented Jun 13, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@AndreaCuneo

Copy link
Copy Markdown
Contributor

@copilot CI workflows still fails. investigate and fix

Co-authored-by: AndreaCuneo <5227688+AndreaCuneo@users.noreply.github.com>

Copilot AI commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

@copilot CI workflows still fails. investigate and fix

Fixed in 9ef7672.

I investigated CI logs and the failing restore step was due to NU1903 on transitive MessagePack 3.1.4. I pinned MessagePack directly in Ark.Tools.Http and refreshed the affected packages.lock.json files so locked-mode restore resolves to MessagePack 3.1.7. Local dotnet restore --force-evaluate, dotnet build --no-restore, and dotnet test --no-build now pass.

Copilot AI changed the title chore(deps): update all non-major dependencies chore(deps): update all non-major dependencies and pin secure messagepack Jun 22, 2026
Copilot AI and others added 2 commits June 22, 2026 07:41
This reverts commit 9ef7672.

Co-authored-by: AndreaCuneo <5227688+AndreaCuneo@users.noreply.github.com>
Co-authored-by: AndreaCuneo <5227688+AndreaCuneo@users.noreply.github.com>
Copilot AI changed the title chore(deps): update all non-major dependencies and pin secure messagepack Revert previous MessagePack pin and move MessagePack.NodaTime to 3.5.5 Jun 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants