From 4364097b406720d808b39503b649736ab6dace34 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 5 Jan 2026 21:01:06 +0000 Subject: [PATCH 01/11] chore(deps): bump dependabot/fetch-metadata from 2.4.0 to 2.5.0 Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) from 2.4.0 to 2.5.0. - [Release notes](https://github.com/dependabot/fetch-metadata/releases) - [Commits](https://github.com/dependabot/fetch-metadata/compare/v2.4.0...v2.5.0) --- updated-dependencies: - dependency-name: dependabot/fetch-metadata dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/auto-merge-dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/auto-merge-dependabot.yml b/.github/workflows/auto-merge-dependabot.yml index 5d5be69be..8e29c9332 100644 --- a/.github/workflows/auto-merge-dependabot.yml +++ b/.github/workflows/auto-merge-dependabot.yml @@ -19,7 +19,7 @@ jobs: steps: - name: Dependabot metadata id: metadata - uses: dependabot/fetch-metadata@v2.4.0 + uses: dependabot/fetch-metadata@v2.5.0 with: github-token: "${{ secrets.GITHUB_TOKEN }}" From b48add37d43caa553fe6f16525e6096daccec5db Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 13 Feb 2026 21:14:45 +0000 Subject: [PATCH 02/11] Bump Microsoft.IdentityModel.Protocols.OpenIdConnect and Microsoft.IdentityModel.Validators Bumps Microsoft.IdentityModel.Protocols.OpenIdConnect from 8.15.0 to 8.16.0 Bumps Microsoft.IdentityModel.Validators from 8.6.1 to 8.16.0 --- updated-dependencies: - dependency-name: Microsoft.IdentityModel.Protocols.OpenIdConnect dependency-version: 8.16.0 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: Microsoft.IdentityModel.Validators dependency-version: 8.16.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj index 921a360fb..68bcbe88e 100644 --- a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj +++ b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj @@ -64,8 +64,8 @@ - - + + From b4a98c775a382fa5c38200ed3da24189dd5ed750 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 10 Mar 2026 21:20:39 +0000 Subject: [PATCH 03/11] Bump System.Net.Http.WinHttpHandler from 6.0.0 to 9.0.14 --- updated-dependencies: - dependency-name: System.Net.Http.WinHttpHandler dependency-version: 9.0.14 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj index 921a360fb..0660a29b5 100644 --- a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj +++ b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj @@ -80,6 +80,6 @@ - + From 73f01e9eebb063ce3ec2f7e7630933098d090530 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 12 Mar 2026 21:18:56 +0000 Subject: [PATCH 04/11] Bump Microsoft.SourceLink.GitHub from 8.0.0 to 10.0.201 --- updated-dependencies: - dependency-name: Microsoft.SourceLink.GitHub dependency-version: 10.0.201 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj index 921a360fb..73c695868 100644 --- a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj +++ b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj @@ -66,7 +66,7 @@ - + From 3d34246c7ad1ca230c7b466e695a6bbc7791f5d0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 16 Mar 2026 21:13:09 +0000 Subject: [PATCH 05/11] chore(deps): bump actions/create-github-app-token from 2 to 3 Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 2 to 3. - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](https://github.com/actions/create-github-app-token/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/project-auto-add.yml | 2 +- .github/workflows/release-please-gha.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/project-auto-add.yml b/.github/workflows/project-auto-add.yml index c592c1b4c..27fe29116 100644 --- a/.github/workflows/project-auto-add.yml +++ b/.github/workflows/project-auto-add.yml @@ -18,7 +18,7 @@ jobs: steps: - name: Generate token id: generate_token - uses: actions/create-github-app-token@v2 + uses: actions/create-github-app-token@v3 with: app-id: ${{ secrets.GRAPHBOT_APP_ID }} private-key: ${{ secrets.GRAPHBOT_APP_PEM }} diff --git a/.github/workflows/release-please-gha.yml b/.github/workflows/release-please-gha.yml index d4cf74c33..195010cc8 100644 --- a/.github/workflows/release-please-gha.yml +++ b/.github/workflows/release-please-gha.yml @@ -23,7 +23,7 @@ jobs: - name: Generate GitHub App token id: app-token - uses: actions/create-github-app-token@v2 + uses: actions/create-github-app-token@v3 with: app-id: ${{ vars.RELEASE_PLEASE_TOKEN_PROVIDER_APP_ID }} private-key: ${{ secrets.RELEASE_PLEASE_TOKEN_PROVIDER_PEM }} From aad7834e51abd8b10576e0031bffadaed09656f5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 17 Mar 2026 21:06:22 +0000 Subject: [PATCH 06/11] Bump coverlet.collector and coverlet.msbuild Bumps coverlet.collector from 6.0.4 to 8.0.1 Bumps coverlet.msbuild from 6.0.4 to 8.0.1 --- updated-dependencies: - dependency-name: coverlet.collector dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: coverlet - dependency-name: coverlet.msbuild dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: coverlet ... Signed-off-by: dependabot[bot] --- .../Microsoft.Graph.DotnetCore.Core.Test.csproj | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tests/Microsoft.Graph.DotnetCore.Core.Test/Microsoft.Graph.DotnetCore.Core.Test.csproj b/tests/Microsoft.Graph.DotnetCore.Core.Test/Microsoft.Graph.DotnetCore.Core.Test.csproj index 8c4f611e9..b0689d6dd 100644 --- a/tests/Microsoft.Graph.DotnetCore.Core.Test/Microsoft.Graph.DotnetCore.Core.Test.csproj +++ b/tests/Microsoft.Graph.DotnetCore.Core.Test/Microsoft.Graph.DotnetCore.Core.Test.csproj @@ -25,11 +25,11 @@ - + runtime; build; native; contentfiles; analyzers; buildtransitive all - + runtime; build; native; contentfiles; analyzers; buildtransitive all From a135734b287529b4127fe681f81a107a03ea7ae3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 19 Mar 2026 21:10:09 +0000 Subject: [PATCH 07/11] Bump Microsoft.Kiota.Abstractions and 6 others Bumps Microsoft.Kiota.Abstractions from 1.21.1 to 1.22.1 Bumps Microsoft.Kiota.Authentication.Azure from 1.21.1 to 1.22.1 Bumps Microsoft.Kiota.Http.HttpClientLibrary from 1.21.1 to 1.22.1 Bumps Microsoft.Kiota.Serialization.Form from 1.21.1 to 1.22.1 Bumps Microsoft.Kiota.Serialization.Json from 1.21.1 to 1.22.1 Bumps Microsoft.Kiota.Serialization.Multipart from 1.21.1 to 1.22.1 Bumps Microsoft.Kiota.Serialization.Text from 1.21.1 to 1.22.1 --- updated-dependencies: - dependency-name: Microsoft.Kiota.Abstractions dependency-version: 1.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: kiota-dependencies - dependency-name: Microsoft.Kiota.Authentication.Azure dependency-version: 1.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: kiota-dependencies - dependency-name: Microsoft.Kiota.Http.HttpClientLibrary dependency-version: 1.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: kiota-dependencies - dependency-name: Microsoft.Kiota.Serialization.Form dependency-version: 1.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: kiota-dependencies - dependency-name: Microsoft.Kiota.Serialization.Json dependency-version: 1.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: kiota-dependencies - dependency-name: Microsoft.Kiota.Serialization.Multipart dependency-version: 1.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: kiota-dependencies - dependency-name: Microsoft.Kiota.Serialization.Text dependency-version: 1.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: kiota-dependencies ... Signed-off-by: dependabot[bot] --- .../Microsoft.Graph.Core.csproj | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj index 921a360fb..969df592f 100644 --- a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj +++ b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj @@ -67,13 +67,13 @@ - - - - - - - + + + + + + + runtime; build; native; contentfiles; analyzers; buildtransitive all From 17c57c2b6fcb49d9fa4cd314a6a0d55baab9a67d Mon Sep 17 00:00:00 2001 From: "Gavin Barron (from Dev Box)" Date: Fri, 17 Apr 2026 16:32:07 -0700 Subject: [PATCH 08/11] Revert Microsoft.SourceLink.GitHub to 8.0.0 (10.x incompatible with net462/netstandard2.0) --- src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj index 4e68404c0..188db2325 100644 --- a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj +++ b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj @@ -66,7 +66,7 @@ - + From 7d7aebb6f55cdf27a5c777ad1be3fe3e80ff5c36 Mon Sep 17 00:00:00 2001 From: Gavin Barron Date: Fri, 17 Apr 2026 17:19:20 -0700 Subject: [PATCH 09/11] fix(security): upgrade .NET SDK to 10.0.202 --- .github/workflows/sonarcloud.yml | 3 ++- .github/workflows/validatePullRequest.yml | 9 +++++++-- global.json | 2 +- pipelines/productionBuild.yml | 4 ++-- src/Microsoft.Graph.Core/global.json | 2 +- .../Microsoft.Graph.DotnetCore.Core.Trimming/global.json | 2 +- 6 files changed, 14 insertions(+), 8 deletions(-) diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml index 97394964d..c155afb42 100644 --- a/.github/workflows/sonarcloud.yml +++ b/.github/workflows/sonarcloud.yml @@ -41,7 +41,8 @@ jobs: uses: actions/setup-dotnet@v5 with: dotnet-version: | - 8.x + 6.x + 10.x - uses: actions/checkout@v6 with: fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis diff --git a/.github/workflows/validatePullRequest.yml b/.github/workflows/validatePullRequest.yml index d7a5d5032..09f822fec 100644 --- a/.github/workflows/validatePullRequest.yml +++ b/.github/workflows/validatePullRequest.yml @@ -23,11 +23,16 @@ jobs: steps: - uses: actions/checkout@v6 - - name: Setup .NET + - name: Setup .NET 6 uses: actions/setup-dotnet@v5 with: dotnet-version: 6.0.x + - name: Setup .NET 10 + uses: actions/setup-dotnet@v5 + with: + dotnet-version: 10.0.x + - name: Setup JDK for android targets uses: actions/setup-java@v5 with: @@ -66,7 +71,7 @@ jobs: - name: Setup .NET uses: actions/setup-dotnet@v5 with: - dotnet-version: 9.x + dotnet-version: 10.x - name: Validate Trimming warnings run: dotnet publish -c Release -r win-x64 /p:TreatWarningsAsErrors=true /warnaserror -f net9.0 diff --git a/global.json b/global.json index 735e54b96..afedd64bf 100644 --- a/global.json +++ b/global.json @@ -1,6 +1,6 @@ { "sdk": { - "version": "6.0.417", /* https://github.com/dotnet/maui/wiki/.NET-7-and-.NET-MAUI */ + "version": "10.0.202", "rollForward": "major" } } \ No newline at end of file diff --git a/pipelines/productionBuild.yml b/pipelines/productionBuild.yml index a059a5c5a..4ad98e244 100644 --- a/pipelines/productionBuild.yml +++ b/pipelines/productionBuild.yml @@ -58,9 +58,9 @@ extends: inputs: version: 6.x - task: UseDotNet@2 - displayName: 'Use .NET 9 for trimming validation' + displayName: 'Use .NET 10 for trimming validation' inputs: - version: 9.x + version: 10.x - task: PowerShell@2 displayName: 'Set Java Home to use Java 11' inputs: diff --git a/src/Microsoft.Graph.Core/global.json b/src/Microsoft.Graph.Core/global.json index 735e54b96..afedd64bf 100644 --- a/src/Microsoft.Graph.Core/global.json +++ b/src/Microsoft.Graph.Core/global.json @@ -1,6 +1,6 @@ { "sdk": { - "version": "6.0.417", /* https://github.com/dotnet/maui/wiki/.NET-7-and-.NET-MAUI */ + "version": "10.0.202", "rollForward": "major" } } \ No newline at end of file diff --git a/tests/Microsoft.Graph.DotnetCore.Core.Trimming/global.json b/tests/Microsoft.Graph.DotnetCore.Core.Trimming/global.json index b81865078..9ebe63cbc 100644 --- a/tests/Microsoft.Graph.DotnetCore.Core.Trimming/global.json +++ b/tests/Microsoft.Graph.DotnetCore.Core.Trimming/global.json @@ -1,6 +1,6 @@ { "sdk": { - "version": "9.0.102", /* https://github.com/dotnet/maui/wiki/.NET-7-and-.NET-MAUI */ + "version": "10.0.202", "rollForward": "major" } } From 22aa370558d7459dca898dc5b2b1756710fae868 Mon Sep 17 00:00:00 2001 From: "Gavin Barron (from Dev Box)" Date: Fri, 17 Apr 2026 17:47:29 -0700 Subject: [PATCH 10/11] fix: downgrade coverlet packages to 6.0.4 for net6.0 compatibility coverlet.collector and coverlet.msbuild v8.0.1 only ship build assets for net8.0, causing 'XPlat Code Coverage' data collector not found errors when running tests on the net6.0 test project. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .../Microsoft.Graph.DotnetCore.Core.Test.csproj | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tests/Microsoft.Graph.DotnetCore.Core.Test/Microsoft.Graph.DotnetCore.Core.Test.csproj b/tests/Microsoft.Graph.DotnetCore.Core.Test/Microsoft.Graph.DotnetCore.Core.Test.csproj index b0689d6dd..8c4f611e9 100644 --- a/tests/Microsoft.Graph.DotnetCore.Core.Test/Microsoft.Graph.DotnetCore.Core.Test.csproj +++ b/tests/Microsoft.Graph.DotnetCore.Core.Test/Microsoft.Graph.DotnetCore.Core.Test.csproj @@ -25,11 +25,11 @@ - + runtime; build; native; contentfiles; analyzers; buildtransitive all - + runtime; build; native; contentfiles; analyzers; buildtransitive all From 07834960c88c0e439199b8dc2d193a9285216d55 Mon Sep 17 00:00:00 2001 From: "release-please-token-provider[bot]" <225477224+release-please-token-provider[bot]@users.noreply.github.com> Date: Wed, 29 Apr 2026 18:41:17 +0000 Subject: [PATCH 11/11] chore(main): release 3.2.6 --- .release-please-manifest.json | 2 +- CHANGELOG.md | 8 ++++++++ src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj | 2 +- 3 files changed, 10 insertions(+), 2 deletions(-) diff --git a/.release-please-manifest.json b/.release-please-manifest.json index d7fc45eb0..05c4afe29 100644 --- a/.release-please-manifest.json +++ b/.release-please-manifest.json @@ -1,3 +1,3 @@ { - ".": "3.2.5" + ".": "3.2.6" } \ No newline at end of file diff --git a/CHANGELOG.md b/CHANGELOG.md index 437840f20..6928e315b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,14 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project does adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## [3.2.6](https://github.com/microsoftgraph/msgraph-sdk-dotnet-core/compare/3.2.5...3.2.6) (2026-04-29) + + +### Bug Fixes + +* downgrade coverlet packages to 6.0.4 for net6.0 compatibility ([22aa370](https://github.com/microsoftgraph/msgraph-sdk-dotnet-core/commit/22aa370558d7459dca898dc5b2b1756710fae868)) +* **security:** upgrade .NET SDK to 10.0.202 ([7d7aebb](https://github.com/microsoftgraph/msgraph-sdk-dotnet-core/commit/7d7aebb6f55cdf27a5c777ad1be3fe3e80ff5c36)) + ## [3.2.5](https://github.com/microsoftgraph/msgraph-sdk-dotnet-core/compare/3.2.4...3.2.5) (2025-12-19) diff --git a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj index 188db2325..990706948 100644 --- a/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj +++ b/src/Microsoft.Graph.Core/Microsoft.Graph.Core.csproj @@ -21,7 +21,7 @@ 35MSSharedLib1024.snk true - 3.2.5 + 3.2.6