Skip to content

Dependency report — outdated & vulnerable packages #87

Description

@github-actions

Generated by .github/workflows/dependency-report.yml on 2026-09-01 10:46 UTC for commit fc7adcc.

This issue is updated in place every run — it exists instead of Dependabot version PRs.
Bump the versions locally, then commit. Known CVEs are also tracked under Security → Dependabot alerts and gated in CI.

NuGet — vulnerable

No known NuGet vulnerabilities. ✅

NuGet — outdated (top-level)

Package Resolved Latest
Cocoar.Configuration 6.1.0 6.1.1
Cocoar.Configuration.AspNetCore 6.1.0 6.1.1
Cocoar.JsEval.Engine 4.1.0 5.0.0
Cocoar.JsEval.Linq 4.1.0 5.0.0
Cocoar.JsEval.TsDefinition 4.1.0 5.0.0
Cocoar.JsEval.TypeScript 4.1.0 5.0.0
Cocoar.SignalARRR.Server 5.0.0-beta.3 5.0.0
Marten 9.23.0 9.30.0
Marten.AspNetCore 9.23.0 9.30.0
Microsoft.AspNetCore.Authentication.JwtBearer 10.0.10 10.0.11
Microsoft.AspNetCore.Authentication.OpenIdConnect 10.0.10 10.0.11
Microsoft.AspNetCore.Mvc.Testing 10.0.10 10.0.11
Microsoft.AspNetCore.OpenApi 10.0.10 10.0.11
Microsoft.Extensions.DependencyInjection.Abstractions 10.0.10 10.0.11
Microsoft.IdentityModel.Tokens 8.19.2 8.22.0
Microsoft.NET.Test.Sdk 18.8.1 18.9.0
Microsoft.OpenApi 2.7.5 3.10.2
Microsoft.SourceLink.GitHub 10.0.301 10.0.400
OpenIddict 7.6.0 7.6.1
OpenIddict.Abstractions 7.6.0 7.6.1
OpenIddict.AspNetCore 7.6.0 7.6.1
OpenIddict.Server 7.6.0 7.6.1
OpenIddict.Server.AspNetCore 7.6.0 7.6.1
OpenIddict.Validation 7.6.0 7.6.1
OpenTelemetry.Exporter.OpenTelemetryProtocol 1.17.0 1.18.0
OpenTelemetry.Exporter.Prometheus.AspNetCore 1.17.0-beta.1 Not found at the sources
OpenTelemetry.Extensions.Hosting 1.17.0 1.18.0
OpenTelemetry.Instrumentation.AspNetCore 1.17.0 1.18.0
OpenTelemetry.Instrumentation.Http 1.17.0 1.18.0
OpenTelemetry.Instrumentation.Runtime 1.17.0 1.18.0
Quartz.Extensions.Hosting 3.18.2 3.20.0
Testcontainers 4.13.0 4.14.0
Testcontainers.PostgreSql 4.13.0 4.14.0
WolverineFx.Marten 6.27.1 6.31.0
WolverineFx.RuntimeCompilation 6.27.1 6.31.0
xunit.runner.visualstudio 3.1.5 4.0.0
xunit.v3 3.2.2 4.0.0

pnpm — outdated (src/frontend-vue)

Package Current Wanted Latest Type
@cocoar/signalarrr 5.0.0-beta.3 5.0.0-beta.3 5.0.0 dependencies
@cocoar/vue-data-grid 3.0.0 3.0.0 3.1.0 dependencies
@cocoar/vue-fragment-parser 3.0.0 3.0.0 3.1.0 dependencies
@cocoar/vue-localization 3.0.0 3.0.0 3.1.0 dependencies
@cocoar/vue-page-builder 3.0.0 3.0.0 3.1.0 dependencies
@cocoar/vue-script-editor 3.0.0 3.0.0 3.1.0 dependencies
@cocoar/vue-ui 3.0.0 3.0.0 3.1.0 dependencies
@fontsource-variable/fraunces 5.2.9 5.2.9 5.3.0 dependencies
@fontsource-variable/instrument-sans 5.2.8 5.2.8 5.3.0 dependencies
@playwright/test 1.61.1 1.61.1 1.62.1 devDependencies
@tailwindcss/vite 4.3.2 4.3.2 4.3.3 devDependencies
@vitejs/plugin-vue 6.0.7 6.0.7 6.0.8 devDependencies
monaco-editor 0.55.1 0.55.1 0.56.0 dependencies
otplib 13.4.1 13.4.1 13.5.0 devDependencies
pinia 3.0.4 3.0.4 4.0.3 dependencies
tailwindcss 4.3.2 4.3.2 4.3.3 devDependencies
typescript 6.0.3 6.0.3 7.0.2 devDependencies
vite 8.1.2 8.1.2 8.2.2 devDependencies
vue 3.5.39 3.5.39 3.5.42 dependencies
vue-router 5.1.0 5.1.0 5.3.0 dependencies
vue-tsc 3.3.6 3.3.6 3.3.11 devDependencies

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions