Skip to content

Bump Microsoft.OpenApi and Microsoft.OpenApi.Readers - #3830

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/tools/OpenApiInfoGenerator/OpenApiInfoGenerator/multi-441ab03a9d
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/tools/OpenApiInfoGenerator/OpenApiInfoGenerator/multi-441ab03a9d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.OpenApi from 1.6.14 to 1.6.30.

Release notes

Sourced from Microsoft.OpenApi's releases.

1.6.30

1.6.30 (2026-08-13)

Bug Fixes

  • readers: bound YAML anchor/alias expansion to prevent OOM (billion laughs) (1f9aea9)

1.6.29

1.6.29 (2026-04-14)

Bug Fixes

  • hidi: update Microsoft.OpenApi.OData to 1.7.6 (11ba851)
  • hidi: update Microsoft.OpenApi.OData to 1.7.6 (f596327), closes #​2813

1.6.28

1.6.28 (2025-10-06)

Bug Fixes

  • Improve server creation and URL handling logic to maintain port (a15c50e)
  • missing deserialization for header content property in 3.0 (7c65a49)
  • missing deserialization for header content property in 3.0 (e256d29)

1.6.27

1.6.27 (2025-10-02)

Bug Fixes

  • typo in encoding allow reserved deserialization (6eeca52)
  • typo in encoding allow reserved deserialization (3fadb7d)

1.6.26

1.6.26 (2025-09-19)

Bug Fixes

  • OpenApiEncoding explode default value when using form style (09b5a28)

1.6.25

1.6.25 (2025-08-22)

Bug Fixes

  • missing examples when one example is with an empty array. (4697af4)

1.6.24

1.6.24 (2025-04-01)

Bug Fixes

  • a flaky behaviour for format property serialization (e072790)
  • a flaky behaviour for format property serialization (4d06f86)
  • null reference on alternate keys during hidi transform (17247ed)
  • null reference on alternate keys during hidi transform (55f0f54)

Commits viewable in compare view.

Updated Microsoft.OpenApi.Readers from 1.6.14 to 1.6.30.

Release notes

Sourced from Microsoft.OpenApi.Readers's releases.

1.6.30

1.6.30 (2026-08-13)

Bug Fixes

  • readers: bound YAML anchor/alias expansion to prevent OOM (billion laughs) (1f9aea9)

1.6.29

1.6.29 (2026-04-14)

Bug Fixes

  • hidi: update Microsoft.OpenApi.OData to 1.7.6 (11ba851)
  • hidi: update Microsoft.OpenApi.OData to 1.7.6 (f596327), closes #​2813

1.6.28

1.6.28 (2025-10-06)

Bug Fixes

  • Improve server creation and URL handling logic to maintain port (a15c50e)
  • missing deserialization for header content property in 3.0 (7c65a49)
  • missing deserialization for header content property in 3.0 (e256d29)

1.6.27

1.6.27 (2025-10-02)

Bug Fixes

  • typo in encoding allow reserved deserialization (6eeca52)
  • typo in encoding allow reserved deserialization (3fadb7d)

1.6.26

1.6.26 (2025-09-19)

Bug Fixes

  • OpenApiEncoding explode default value when using form style (09b5a28)

1.6.25

1.6.25 (2025-08-22)

Bug Fixes

  • missing examples when one example is with an empty array. (4697af4)

1.6.24

1.6.24 (2025-04-01)

Bug Fixes

  • a flaky behaviour for format property serialization (e072790)
  • a flaky behaviour for format property serialization (4d06f86)
  • null reference on alternate keys during hidi transform (17247ed)
  • null reference on alternate keys during hidi transform (55f0f54)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps Microsoft.OpenApi from 1.6.14 to 1.6.30
Bumps Microsoft.OpenApi.Readers from 1.6.14 to 1.6.30

---
updated-dependencies:
- dependency-name: Microsoft.OpenApi
  dependency-version: 1.6.30
  dependency-type: direct:production
- dependency-name: Microsoft.OpenApi.Readers
  dependency-version: 1.6.30
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 19, 2026 06:59
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 19, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update Microsoft.OpenApi.OData to 1.7.6 on support/v1 (OpenAPI 3.0)

0 participants