Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Oct 29, 2025

Updated Cratis.Applications from 17.7.0 to 17.20.5.

Release notes

Sourced from Cratis.Applications's releases.

17.20.5

Fixed

  • Fixed the cookie name in the backend from .cratis.identity to .cratis-identity which is what the frontend expects and we have documented.

17.20.4

Fixed

  • Fixed the way the .cratis.identity cookie is identified. It was not trimming the strings properly and sometimes didn't find it.

17.20.3

Fixed

  • Taking out claims from the IdentityProviderResult. They were never accessible in the frontend and it was never designed for this. With too many claims, the cookie size quickly exceeds the maximum of 4096 bytes.

17.20.2

Fixed

  • Adding missing .cratis.identity cookie for the IdentityProviderEndpoint handler. This was originally designed to be the responsibility of a reverse proxy (ingress), but that is a misplaced responsibility.

17.20.1

Note: Forget about the UpsertItem() extension method released just a few minutes ago. Use the new Upsert().
we chose to do a patch for this, rather than a major - since the breaking change was minutes away.

Fixed

  • Name of UpsertItem() for upserting was wrong and the extension method was in the wrong namesapce. It now sits in Microsoft.EntityFrameworkCore namespace.

17.20.0

Added

  • Adding an extension for EntityFramework DbSet<> for upserting an entity.

17.19.1

Fixed

  • Fixing the database type resolver extension method for EntityFramework to ignore casing, as connection strings aren't really strict on casing for the keys in it.

17.19.0

Added

  • When using .UseDatabaseFromConnectionString() or methods that configure an EntityFramework DbContext from connection string, it will not for Sqlite ensure that the path exists. This allows you to have a path with a directory that does not necessarily exist and it will create it automatically.

17.18.5

Fixed

  • Adding missing .EnableRetryOnFailure() for MS-SQL and PostgreSQL when using the EF Core extension .UseDatabaseFromConnectionString().

17.18.4

Fixed

  • EntityFramework: Only apply converters to entities that either is part of the DbContext as a DbSet<> or is owned by an entity that is. By owned, this means there is an explicit relationship defined.

17.18.3

Fixed

  • Identity provider was locked to the Microsoft Identity approach for no good reason. Fixing this so that it can be used with any authentication provider just basing itself on the ClaimsPrincipal on the request.

17.18.2

Fixed

  • Don't define an entity if it does not have any properties that matches the converters we have (Guid, ConceptAs, Json) for Entity Framework. If we call .Entity() for an entity, it gets promoted as an entity - while we really don't want that for every type.

17.18.1

Fixed

  • For EntityFramework converters we now skip types that are owned by other entities.

17.18.0

Added

  • Extension methods for registering types and converters for Guid, ConceptAs<> properties and Json properties for EntityBuilder and not just ModelBuilder for entity framework scenarios.

17.17.0

Added

  • The ability to augment all HTTP requests with additional cookies (Commands, Queries, Identity) through a callback that is configured in the <ApplicationModel/> context. See the documentation for more details.

17.16.6

Nothing new - just fixing build error for version that was overridden by dependabot

17.16.5

Fixed

  • Upgrading package dependencies.

17.16.4

Fixed

  • The registration of read model DbContext were wrong, it discovered all DbContext types and registered them, while it should've just discovered ReadModelDbContext types.

17.16.3

Fixed

  • Fixed how Queries are counted as distinct. Instead of just the QueryName, it now includes the read model type as part of this internally. This means two different read models can have queries with the same name, e.g. generic names like "All", "ById" or similar.

17.16.2

Changed

  • Updated dependencies

Fixed

  • Correct handling of Task and ValueTask in model bound handlers

17.16.1

Fixed

  • Fixing automatic Guid conversion for Entity Framework to not do concept types that show up as entity types.
  • Fixing ConceptAs<> conversion to treat ConceptAs<Guid> types specifically - to get consistency with regular Guids.

17.16.0

Added

  • Adding support for a normalized Guid representation for databases like Sqlite - this gives consistent behavior in storage, queries and relationships.
  • Automatic hookup of properties with Guid as type when using BaseDbContext.

Fixed

  • Fixed the column type for Sqlite for Guid for migrators - it was supposed to be BLOB but was TEXT. Note that you might need a migration for this.

17.15.2

Fixed

  • Adding the missing defaultValue parameter for column extensions for migration builders.

17.15.1

Fixed

  • Fixed so that we add the search params (Query parameters) for ObservableQueries for the connection. This was a regression.

17.15.0

Added

  • Adding static helper methods to ValidationResult for easily creating an error or warning.

17.14.5

Fixed

  • Oversight in the 17.4.0 release; adding the command to the ICommandContextValuesProvider.

17.14.4

Fixed

  • Removing newlines for the CratisProxiesOutputPath property in the ProxyGenerator Build .targets file. The newlines caused the proxy generator to fail.

17.14.3

Fixed

  • Fixes the CratisProxiesOutputPath if it has a \ at the end for Windows. Windows will treat this as an escape character and keep the quote that sits there, making the rest of the command line arguments be in this one argument.

17.14.2

Fixed

  • Adding debug info to ProxyGenerator to find a problem with paths.

17.14.1

Fixed

  • Fixing the ProxyGenerator to normalize paths coming in, this way it will have the correct slashes for the target operating system. This problem comes from the fact that the .props file is assuming Unix - which is fine, its easier to fix it in code rather than poluting the XML.

17.14.0

Added

  • CommandContext now holds a Response property for those commands returning a response. This can for instance be leveraged by command value response handlers.
  • Making the command pipeline much more flexible by allowing tuples with more than 2 values. If one of the values does not have a value handler, it will become the response as part of the CommandResult. (#​1241)
  • Making it possible for all command handlers to return a response both if you have a OneOf scenario or not. If there is no value handler for the value returned, this will then become the response as part of the CommandResult.

17.13.0

Added

  • Support for extensible values that can be provided to a CommandContext.
  • Added implementation of AuthorizationFilter for Commands and Queries, honoring the [Authorize] attribute. Commands are on the type level, while queries support both the type level and individual performers - such as the model bound performers.

Fixed

  • Fixing so that TenantId is available on all requests, not just controller action based.
  • Fixing so that CorrelationId is available on all requests, not just controller action based.

17.12.4

Fixed

  • Explicitly telling the response serializer which CommandResult type to serialize to so that we get the Response property when there is a response value.

17.12.3

Fixed

  • TypeScript generated commands now generate correctly for the requestParamters property.

17.12.2

Fixed

  • Fixing the check for document in the UrlsHelper

17.12.1

Fixed

  • Fixing the TypeScript UrlHelpers to not use document if document is undefined.

17.12.0

Added

  • Adding a property on <ApplicationModel/> to configure the origin - which is where to find the APIs (e.g. http://localhost:5000).
  • Adding functionality to Command, Query, ObservableQuery for setting the origin for APIs.

17.11.3

Fixes

  • Makes the ProxyGenerator work with paths that have space in them (#​974)

17.11.2

Fixed

  • Fixed the constraint for AddDbContextWithConnectionString() extension method to be just DbContext and not BaseDbContext which it should've been.

17.11.1

Fixed

  • Due to an oversight, the different DbContext setup extension methods missed making the options Action be optional.

17.11.0

Added

  • Adding more column types for Entity Framework migration scenarios for multi database support.

17.10.0

Added

  • ICommandContextAccessor for getting access to the current CommandContextwhen doing work that is part of the command pipeline.
  • For convenience; making it possible to take a dependency directly to CommandContext which will resolve through the new ICommandContextAccessor

17.9.7

Fixed

  • Fixing a problem where the properties on a command was not recursively validated.

17.9.6

Fixed

  • Making React, React-Dom and React-Router-Dom peer dependencies supporting 18 and 19 of React. Rather than fixed version dependencies. Increasing compatibility.
  • Moving DevDependencies to the root package.json, to maintain the same versions in one place.

17.9.5

Fixed

  • Putting in the missing query parameters for the route template for model bound queries.
  • Internal naming consistency; parameters are for the metadata, while arguments are the instances of parameters. This was all over the place.

17.9.4

Fixed

  • Fixing how queries that are a collection (IEnumerable<>) of a read model gets identified. They were skipped.

17.9.3

Fixed

  • Fixing so that the model bound queries are actually being generated. They were just halfway being created.

17.9.2

Fixed

  • For Model Bound queries, the Proxy Generator now recognizes the correct Task<> and IEnumerable<> types from the context of the assembly it is working with.

17.9.1

Fixed

  • Setting .NET 8 specific versions forMicrosoft.Extensions.Hosting and Microsoft.Extensions.Logging. This was an oversight.

17.9.0

Added

  • Introducing a new extensible approach to creating queries, not just limited to ASP.NET Controllers.
  • Adding a new model bound query approach - defining queries inline on a read model as static method. Read the documentation for more details. Made available as HTTP endpoints with routing by convention.
[ReadModel]
public record DebitAccount(AccountId Id, AccountName Name, CustomerId Owner, decimal Balance)
{
    public static IEnumerable<DebitAccount> GetActiveAccounts(IMongoCollection<DebitAccount> collection) =>
        collection.Find(account => account.IsActive);
}

17.8.2

Fixed

  • Added missing call to the .MapIdentityProvider() which comes with the application model.

17.8.1

Fixed

  • Adding missing hookup for EFCore Migrations that has columns of type Json. It will now automatically add the correct constraint for the database type for these columns to ensure it is valid JSON that gets inserted.

17.8.0

Added

  • Adding Guid column type for use when defining a Db schema, typically for EF Core migrations.
  • Adding DateTimeOffset column type for use when defining a Db schema, typically for EF Core migrations.

17.7.2

Fixed

  • All commands are now mapped to a group with the prefix configured and the tag Commands and also exposed to OpenAPI.

17.7.1

Fixed

  • Adding ./ for import paths that are deep linked for types generated by the ProxyGenerator.

Commits viewable in compare view.

Updated Cratis.Fundamentals from 7.0.0 to 7.2.1.

Release notes

Sourced from Cratis.Fundamentals's releases.

7.2.1

Fixed

  • Upgrading 3rd party dependencies.

7.2.0

Added

  • Static class AwaitableHelpers with AwaitIfNeeded method that can be used on a Task, Task<T>, ValueTask or ValueTask<T> to await and get the result.

Changed

  • Updated dependencies across the board

7.1.0

Added

  • Added a IsDelegate() extension method for Type.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 9.0.9 to 9.0.10.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

9.0.10

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.9...v9.0.10

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps Cratis.Applications from 17.7.0 to 17.20.5
Bumps Cratis.Fundamentals from 7.0.0 to 7.2.1
Bumps Microsoft.AspNetCore.OpenApi from 9.0.9 to 9.0.10

---
updated-dependencies:
- dependency-name: Cratis.Applications
  dependency-version: 17.20.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Cratis.Fundamentals
  dependency-version: 7.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 9.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 29, 2025
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Oct 29, 2025

Superseded by #271.

@dependabot dependabot bot closed this Oct 29, 2025
@dependabot dependabot bot deleted the dependabot/nuget/multi-40e6d03eed branch October 29, 2025 07:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant