chore(deps): Bump HotChocolate.AspNetCore and HotChocolate.Subscriptions.InMemory by dependabot[bot] · Pull Request #932 · Kuestenlogik/Bowire

…ons.InMemory Bumps HotChocolate.AspNetCore from 16.6.8 to 16.7.1 Bumps HotChocolate.Subscriptions.InMemory from 16.6.8 to 16.7.1 --- updated-dependencies: - dependency-name: HotChocolate.AspNetCore dependency-version: 16.7.1 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: HotChocolate.Subscriptions.InMemory dependency-version: 16.7.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-25T12:48:39Z

Labels

The following labels could not be found: nuget. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

github-actions · 2026-10-25T12:50:35Z

Bowire PR report

Section	Status
API schema	🟢 identical
Tests	🟢 1 test passed
Security	🟠 1 error-level finding · not gated (`fail-on-scan: never`)
Perf	🟢 no regression

API schema: schema identical.

Tests: 1/1 passed, 0 failed.

Security

Security scan report — http://127.0.0.1:6000

Findings: 1 high, 1 low

By OWASP API Top 10

Entry	Risk	Findings
API8-2023-SECMISCONF	Security Misconfiguration	2

Findings

[high] Target serves plaintext http://

Rule: BWR-BUILTIN-TLS-001 · OWASP: API8-2023-SECMISCONF — Security Misconfiguration · CVSS: 7.4 · Target: http://127.0.0.1:6000
What to do: Enforce https:// at the load balancer / ingress. Add HSTS (Strict-Transport-Security: max-age=31536000) once https:// is reliable. Submit to the HSTS-preload list for browser-side enforcement.

[low] Version-disclosing header: Server

Rule: BWR-BUILTIN-BANNER-SERVER · OWASP: API8-2023-SECMISCONF — Security Misconfiguration · CVSS: 3.7 · Target: http://127.0.0.1:6000
What to do: Remove or anonymise the Server response header. ASP.NET Core: app.Use((ctx, next) => { ctx.Response.Headers.Remove("Server"); return next(); }). nginx: server_tokens off; (covers Server header). IIS: customize the runtime via web.config .

Perf

Perf: no test moved more than 20% across 1 compared test(s).

_{Generated by bowire — API / test / security / perf impact of this PR.}

dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 25, 2026

github-actions Bot enabled auto-merge (rebase) October 25, 2026 12:48

github-actions Bot merged commit 9868c1c into main Oct 25, 2026
9 checks passed

Navigation Menu

Repository navigation

chore(deps): Bump HotChocolate.AspNetCore and HotChocolate.Subscriptions.InMemory - #932

chore(deps): Bump HotChocolate.AspNetCore and HotChocolate.Subscriptions.InMemory#932
github-actions[bot] merged 1 commit into
mainfrom
dependabot/nuget/multi-9152973c06

dependabot Bot commented on behalf of github Oct 25, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 25, 2026

Uh oh!

github-actions Bot commented Oct 25, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 25, 2026

16.7.1

What's Changed

16.7.0

What's Changed

16.7.0-p.39

What's Changed

16.7.0-p.38

What's Changed

16.7.0-p.36

What's Changed

16.7.0-p.35

What's Changed

16.7.0-p.34

What's Changed

16.7.0-p.33

What's Changed

16.7.0-p.32

What's Changed

16.7.0-p.31

What's Changed

New Contributors

16.7.0-p.30

What's Changed

16.7.0-p.29

What's Changed

16.7.0-p.28

What's Changed

16.7.0-p.27

What's Changed

16.7.0-p.26

What's Changed

16.7.0-p.25

What's Changed

16.7.0-p.24

What's Changed

16.7.0-p.23

What's Changed

New Contributors

16.7.0-p.22

What's Changed

16.7.0-p.21

What's Changed

16.7.0-p.20

What's Changed

16.7.0-p.18

What's Changed

16.7.0-p.17

What's Changed

16.7.0-p.16

What's Changed

16.7.0-p.15

What's Changed

16.7.0-p.14

What's Changed

16.7.0-p.13

What's Changed

16.7.0-p.12

What's Changed

16.7.0-p.11

What's Changed

16.7.0-p.10

What's Changed

16.7.0-p.9

What's Changed

16.7.0-p.8

What's Changed

16.7.0-p.7

What's Changed

16.7.0-p.6

What's Changed

16.7.0-p.5

What's Changed

16.7.0-p.4

What's Changed

16.7.0-p.3

What's Changed

16.7.0-p.2

What's Changed