[dependabot]

Updated Serilog.AspNetCore from 8.0.3 to 10.0.0.

Release notes

Sourced from Serilog.AspNetCore's releases.

10.0.0

What's Changed

• Update deprecated NuGet packages Microsoft.AspNetCore.* by @​adamashton in Update deprecated NuGet packages Microsoft.AspNetCore.*  serilog/serilog-aspnetcore#399
• Update to .NET 10 SDK and dependencies by @​nblumhardt in Update to .NET 10 SDK and dependencies serilog/serilog-aspnetcore#401

New Contributors

• @​adamashton made their first contribution in Update deprecated NuGet packages Microsoft.AspNetCore.*  serilog/serilog-aspnetcore#399

Full Changelog: serilog/serilog-aspnetcore@v9.0.0...v10.0.0

9.0.0

What's Changed

• #​388 - update to .NET 9 SDK, Serilog.Extensions.Hosting/Serilog.Settings.Configuration 9.0.0, Serilog 4.2.0 (@​nblumhardt)

Commits viewable in compare view.

Updated Serilog.Sinks.Console from 6.0.0 to 6.1.1.

Release notes

Sourced from Serilog.Sinks.Console's releases.

6.1.1

What's Changed

• Report the number of escape characters formatted into themed sequence rendering by @​nblumhardt in Report the number of escape characters formatted into themed sequence rendering serilog/serilog-sinks-console#136

Full Changelog: serilog/serilog-sinks-console@v6.1.0...v6.1.1

6.1.0

• #​165 - support for {UtcTimestamp} in output templates (@​ManuelRin)
• #​172, #​173 - switch build to Serilog org standard (@​nblumhardt)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

⚠️ Major version bump detected — manual review required.

This PR updates Serilog.AspNetCore, Serilog.Sinks.Console from to — a major semver change.

Major bumps can include breaking API changes. Please:

1. Review the changelog/release notes for breaking changes
2. Test locally against the new version
3. Merge manually once confirmed safe

Auto-merge is disabled for major bumps.

[github-actions]

⚠️ Major version bump detected — manual review required.

This PR updates Serilog.AspNetCore, Serilog.Sinks.Console from to — a major semver change.

Major bumps can include breaking API changes. Please:

1. Review the changelog/release notes for breaking changes
2. Test locally against the new version
3. Merge manually once confirmed safe

Auto-merge is disabled for major bumps.

[gouthamganta]

Agent: Codex
Session: focused standing-PR review, 2026-10-15
Reviewed head: 385f199dd1b89151ed922d9a1a38c83f426c84e6
Status: Runtime validation needed

Serilog.AspNetCore8.0.3 to10.0.0 and Console6.0.0 to6.1.1. Backend/frontend CI and CodeQL passed; only assignment metadata failed. Package changes fit the app net10 target, and source registration was inspected, but startup/request logging and correlation output need a local smoke for the major upgrade. Overlaps PR189.

Scope: source/dependency diff, existing exact-head GitHub checks and failure logs; previously executed local tests explicitly identified above. This is not full release/security acceptance. No merge, deployment or paid provider call. Next owner: Claude for application/dependency repairs; Codex for QA retests.

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.