Skip to content

Bump the nuget-all group with 3 updates#14

Merged
mkaraki merged 1 commit into
masterfrom
dependabot/nuget/Diffcord/nuget-all-958ba1eac5
Jul 21, 2026
Merged

Bump the nuget-all group with 3 updates#14
mkaraki merged 1 commit into
masterfrom
dependabot/nuget/Diffcord/nuget-all-958ba1eac5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor

Updated Discord.Net from 3.19.1 to 3.20.1.

Release notes

Sourced from Discord.Net's releases.

3.20.1

[3.20.1] - 2026-06-07

This release fixes a regression introduced in 3.20.0

Fixed

  • #​3276 Handle null VoiceChannel in SocketVoiceState constructor (61ed916)

Full Changelog: discord-net/Discord.Net@3.20.0...3.20.1

3.20.0

[3.20.0] - 2026-06-06

This release brings support for checkboxes and checkbox/radio groups in modals, and also covers the "new" message search endpoint.

Breaking changes

  • SelectMenuOptionAttribute from the Interaction Framework was renamed to EnumOptionAttribute.

Added

  • #​3232 IF modal radio buttons, and checkboxes (c95fbf6)
  • #​3268 add support for getting messages from a guild (with filters) (31fed25)
  • #​3255 add missing audit log action types (4476eea)
  • #​3265 Add GET voice-state REST wrappers (13d83da)

Fixed

  • #​3258 propagate parent module attributes to child commands (cbc61d9)
  • #​3263 strip RTP padding before DAVE decrypt (RFC 3550 В§5.1) (1a843fb)
  • #​3256 Add empty payload check (6527e71)
  • #​3264 Fix reference to PreCompiledLambdas/UseCompiledLambda (763aa79)
  • #​3271 fix for #​3269 (9abfbfd)
  • #​3272 Fix default array converter in modals & add docs for checkboxes/radio groups (527764c)

Misc

  • #​3254 user global_name description (05af64b)
  • #​3257 feat(Core): add missing JSON error codes (4272ae1)
  • #​3259 refactor(Core): rename JSON error code (504e1db)
  • #​3261 Message call data timestamp nullability (5a328a0)
  • #​3266 Add play audio sample (4d8b0bc)

New Contributors

Full Changelog: discord-net/Discord.Net@3.19.1...3.20.0

Commits viewable in compare view.

Updated DotNetEnv from 3.1.1 to 3.2.0.

Release notes

Sourced from DotNetEnv's releases.

3.2.0

  • Switch parsing to Superpower (from Sprache)
  • Fix utf8 parsing
  • Interpolated variables parsing

Commits viewable in compare view.

Updated YamlDotNet from 16.3.0 to 18.1.0.

Release notes

Sourced from YamlDotNet's releases.

18.1.0

What's Changed

New Contributors

Full Changelog: aaubry/YamlDotNet@v18.0.0...v18.1.0

Breaking

  • Maximum depth of yaml files is now 130 by default. If you need higher you will need to adjust the maximum yaml depth. Going above 130 runs the risk of stack overflow exceptions when any exception happens inside of the deserialization

18.0.0

What's Changed

  • Add a parse method wrapper and caching to fix AoT compilation by @​EdwardCooke in Add a parse method wrapper and caching to fix AoT compilation aaubry/YamlDotNet#1103
    BREAKING CHANGE This is a breaking change in the TypeInspectorSkeleton class and the ITypeInspector interface by adding 2 methods . Quick fix to resolve those breaking changes in your own custom TypeInspector is to return false on the HasParseMethod method and return null or throw an exception on the Parse method.

Full Changelog: aaubry/YamlDotNet@v17.1.0...v18.0.0

17.1.0

What's Changed

  • Security improvements by @​EdwardCooke in Security improvements aaubry/YamlDotNet#1102
    There was a potential breaking change for large yaml files in the MergingParser. You may need to specify the optional parameter for maximum events to be processed. It default to 100k events which is a very large yaml file.

Full Changelog: aaubry/YamlDotNet@v17.0.0...v17.1.0

17.0.0

What's Changed

New Contributors

Full Changelog: aaubry/YamlDotNet@v16.3.0...v17.0.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Discord.Net from 3.19.1 to 3.20.1
Bumps DotNetEnv from 3.1.1 to 3.2.0
Bumps YamlDotNet from 16.3.0 to 18.1.0

---
updated-dependencies:
- dependency-name: Discord.Net
  dependency-version: 3.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: DotNetEnv
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: YamlDotNet
  dependency-version: 18.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-all
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jul 1, 2026
@github-actions

github-actions Bot commented Jul 1, 2026

Copy link
Copy Markdown

Overview

Image reference ghcr.io/mkaraki/diffcord:master ghcr.io/mkaraki/diffcord:pr-14
- digest eb750cd34c50 a117f2aeec17
- tag master pr-14
- provenance c122475 ed37f6b
- vulnerabilities critical: 2 high: 14 medium: 7 low: 3 critical: 0 high: 0 medium: 0 low: 0
- platform linux/amd64 linux/amd64
- size 48 MB 62 MB (+14 MB)
- packages 36 42 (+6)
Environment Variables (1 changes)
  • ± 1 changed
  • 3 unchanged
 DOTNET_RUNNING_IN_CONTAINER=true
-DOTNET_VERSION=10.0.4
+DOTNET_VERSION=10.0.8
 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
 SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt
Labels (7 changes)
  • + 1 added
  • ± 6 changed
  • 17 unchanged
-com.docker.dhi.chain-id=sha256:99dbbbed333f93ef9cb6839518fc54028bf33c606617a722e226ecaa1058cc9b
+com.docker.dhi.chain-id=sha256:f02a5a6f4b70736d9db2fee4d6bdb2099f73f3ed6153c02091ab7b58ca655a9e
 com.docker.dhi.compliance=cis
-com.docker.dhi.created=2026-03-15T06:28:38Z
+com.docker.dhi.created=2026-05-14T11:23:45Z
 com.docker.dhi.date.end-of-life=2028-11-14
 com.docker.dhi.date.release=2025-11-11
 com.docker.dhi.definition=image/dotnet/alpine-3.22/10
 com.docker.dhi.distro=alpine-3.22
+com.docker.dhi.entitlement=public
 com.docker.dhi.flavor=
 com.docker.dhi.name=dhi/dotnet
 com.docker.dhi.package-manager=
 com.docker.dhi.shell=
 com.docker.dhi.title=.NET 10.x Runtime
 com.docker.dhi.url=https://dhi.io/catalog/dotnet
 com.docker.dhi.variant=runtime
-com.docker.dhi.version=10.0.4-alpine3.22
+com.docker.dhi.version=10.0.8-alpine3.22
-org.opencontainers.image.created=2026-04-01T17:37:57.629Z
+org.opencontainers.image.created=2026-07-01T07:18:42.170Z
 org.opencontainers.image.description=Log message deletion and update in Discord
 org.opencontainers.image.licenses=
-org.opencontainers.image.revision=c1224759f131b9249922d0d818b87b0309954f41
+org.opencontainers.image.revision=ed37f6bb1dfbcff4c4db4ee2678f3fd859b66d61
 org.opencontainers.image.source=https://github.com/mkaraki/Diffcord
 org.opencontainers.image.title=Diffcord
 org.opencontainers.image.url=https://github.com/mkaraki/Diffcord
-org.opencontainers.image.version=master
+org.opencontainers.image.version=pr-14
Policies (0 improved, 0 worsened, 3 missing data)
Policy Name ghcr.io/mkaraki/diffcord:master ghcr.io/mkaraki/diffcord:pr-14 Change Standing
Default non-root user ❓ No data
No AGPL v3 licenses ❓ No data
No fixable critical or high vulnerabilities ❓ No data
No high-profile vulnerabilities ❓ No data
No outdated base images ❓ No data ❓ No data
No unapproved base images ❓ No data ❓ No data
SonarQube quality gates passed ❓ No data ❓ No data
Supply chain attestations ❓ No data ⚠️ 2
Packages and Vulnerabilities (29 package changes and 16 vulnerability changes)
  • ➕ 7 packages added
  • ➖ 1 packages removed
  • ♾️ 21 packages changed
  • 14 packages unchanged
  • ✔️ 16 vulnerabilities removed
Changes for packages of type apk (15 changes)
Package Version
ghcr.io/mkaraki/diffcord:master
Version
ghcr.io/mkaraki/diffcord:pr-14
alpine-baselayout 3.7.0-r0
brotli 1.1.0-r2
ca-certificates 20260413-r0
♾️ ca-certificates-bundle 20250911-r0 20260413-r0
♾️ dotnet-host 10.0.4-r0 10.0.8-r0
♾️ dotnet10-hostfxr 10.0.4-r0 10.0.8-r0
♾️ dotnet10-runtime 10.0.4-r0 10.0.8-r0
gcc 14.2.0-r6
icu 76.1-r1
♾️ libcrypto3 3.5.5-r0 3.5.7-r0
♾️ libssl3 3.5.5-r0 3.5.7-r0
critical: 2 high: 13 medium: 0 low: 0
Removed vulnerabilities (15):
  • critical : CVE--2026--31789
  • critical : CVE--2026--34182
  • high : CVE--2026--45447
  • high : CVE--2026--7383
  • high : CVE--2026--28387
  • high : CVE--2026--9076
  • high : CVE--2026--45445
  • high : CVE--2026--42764
  • high : CVE--2026--34183
  • high : CVE--2026--34180
  • high : CVE--2026--31790
  • high : CVE--2026--28390
  • high : CVE--2026--28389
  • high : CVE--2026--28388
  • high : CVE--2026--34181
♾️ musl 1.2.5-r10 1.2.5-r12
critical: 0 high: 1 medium: 0 low: 0
Removed vulnerabilities (1):
  • high : CVE--2026--40200
openssl 3.5.7-r0
♾️ tzdata 2026a-r0 2026b-r0
♾️ zlib 1.3.1-r2 1.3.2-r0
Changes for packages of type docker (1 changes)
Package Version
ghcr.io/mkaraki/diffcord:master
Version
ghcr.io/mkaraki/diffcord:pr-14
♾️ dotnet 10.0.4-alpine3.22 10.0.8-alpine3.22
Changes for packages of type nuget (13 changes)
Package Version
ghcr.io/mkaraki/diffcord:master
Version
ghcr.io/mkaraki/diffcord:pr-14
♾️ Discord.Net 3.19.1 3.20.1
♾️ Discord.Net.Commands 3.19.1 3.20.1
♾️ Discord.Net.Core 3.19.1 3.20.1
♾️ Discord.Net.Dave 3.19.1 3.20.1
♾️ Discord.Net.Interactions 3.19.1 3.20.1
♾️ Discord.Net.Rest 3.19.1 3.20.1
♾️ Discord.Net.WebSocket 3.19.1 3.20.1
♾️ Discord.Net.Webhook 3.19.1 3.20.1
♾️ DotNetEnv 3.1.1 3.2.0
♾️ Microsoft.NETCore.App.Runtime.alpine.3.24-x64 10.0.4 10.0.8
Sprache 2.3.1
Superpower 3.0.0
♾️ YamlDotNet 16.3.0 18.1.0

@github-actions

github-actions Bot commented Jul 1, 2026

Copy link
Copy Markdown

🔍 Vulnerabilities of ghcr.io/mkaraki/diffcord:pr-14

📦 Image Reference ghcr.io/mkaraki/diffcord:pr-14
digestsha256:a117f2aeec17e8b4b3a2ef946e80736d08210290b3067a7877aaf052c67b0b41
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size62 MB
packages42

@github-actions

github-actions Bot commented Jul 1, 2026

Copy link
Copy Markdown

🔍 Vulnerabilities of ghcr.io/mkaraki/diffcord:pr-14

📦 Image Reference ghcr.io/mkaraki/diffcord:pr-14
digestsha256:a117f2aeec17e8b4b3a2ef946e80736d08210290b3067a7877aaf052c67b0b41
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size62 MB
packages42

@mkaraki
mkaraki merged commit fc7ccac into master Jul 21, 2026
4 checks passed
@dependabot
dependabot Bot deleted the dependabot/nuget/Diffcord/nuget-all-958ba1eac5 branch July 21, 2026 05:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant