Skip to content

Update NuGet packages; pin ImageSharp and Stripe.net - #1473

Merged
ardalis merged 1 commit into
mainfrom
chore/update-packages-pin-imagesharp
Oct 2, 2026
Merged

ardalis merged 1 commit into
mainfrom
chore/update-packages-pin-imagesharp

Conversation

@ardalis

@ardalis ardalis commented Oct 2, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Bumps ASP.NET Core/EF Core to 10.0.12, NSubstitute 6.2.0, xunit.runner.visualstudio 4.0.0, Microsoft.NET.Test.Sdk 18.10.1, coverlet 10.1.0, Dapper, Markdig, altcover.
  • Pins SixLabors.ImageSharp to [2.1.13]: the last Apache-2.0 release. 3.0+ is under the Six Labors Split License.
  • Pins Stripe.net to [52.2.0]: 53.0.0 targets a newer Stripe API version, and EventUtility.ConstructEvent rejects webhook events from other API versions. With 53, all 7 webhook endpoint tests returned BadRequest, which would make production webhooks fail the same way as Fix Stripe webhook endpoints returning 500s to Stripe #1463. Upgrade Stripe.net only together with the webhook endpoint API version in the Stripe dashboard.
  • Dependabot now ignores ImageSharp >= 3.0.0 and Stripe.net major updates.
  • Fixes an ambiguous Returns(null) call that NSubstitute 6.2 rejects.

dotnet outdated skips exact-range ([x.y.z]) pins, so dotnet outdated -u leaves both packages alone.

Test plan

  • dotnet build: 0 warnings, 0 errors
  • dotnet test: UnitTests 154/154, Tests 104/104, FunctionalTests 3/3

🤖 Generated with Claude Code

- Bump ASP.NET Core/EF Core to 10.0.12, NSubstitute 6.2.0, xunit.runner.visualstudio 4.0.0,
  Microsoft.NET.Test.Sdk 18.10.1, coverlet 10.1.0, Dapper, Markdig, altcover
- Pin SixLabors.ImageSharp to [2.1.13], the last Apache-2.0 release (3.0+ is Split License)
- Pin Stripe.net to [52.2.0]; 53.x targets a new Stripe API version, so webhook
  ConstructEvent would reject events from the currently configured endpoint version
- Dependabot: ignore ImageSharp >= 3.0.0 and Stripe.net major updates
- Fix ambiguous NSubstitute Returns(null) call surfaced by NSubstitute 6.2

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
{
_memberRepository.FirstOrDefaultAsync(Arg.Any<MemberByUserIdSpec>(), Arg.Any<CancellationToken>())
.Returns(null);
.Returns((Member?)null);
@ardalis
ardalis merged commit ca2b406 into main Oct 2, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants