Consolidate dependabot updates: PowerShell 2.0, Caching.Memory 10.0.3, Repository.Api.Client 2.1.96

[Copilot]

Consolidates 3 stacked dependabot PRs (#105, #103, #101) into a single update to avoid merge conflicts and streamline dependency management.

Changes

DevContainer

• PowerShell feature: 1 → 2 in .devcontainer/devcontainer.json

NuGet Packages

Updated across XtremeIdiots.Portal.Web and XtremeIdiots.Portal.Integrations.Forums:

• Microsoft.Extensions.Caching.Memory: 10.0.2 → 10.0.3
• XtremeIdiots.Portal.Repository.Api.Client.V1: 2.1.26 → 2.1.96

Supersedes

Closes #105, #103, #101

Original prompt

There are a bunch of open pull requests from dependentbot for package, action and dependency upgrades. These have unfortunately stacked and there are multiple of them.

I want you to go through the PRs that dependabot has raised, apply all the changes in a single pull request and ensure that any additional changes to support the changes are made and there are no functionality changes etc.

Outcome is that we should be able to close all the additional pull requests as superceded/duplicates and all the project dependencies have been applied.

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
nuget/Microsoft.Extensions.Caching.Memory	10.0.3	🟢 6.9	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy 🟢 10 security policy file detected Packaging ⚠️ -1 packaging workflow not detected License 🟢 10 license file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Signed-Releases ⚠️ -1 no releases found Binary-Artifacts 🟢 10 no binaries found in the repo Fuzzing ⚠️ 0 project is not fuzzed Pinned-Dependencies 🟢 9 dependency not pinned by hash detected -- score normalized to 9 SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities 🟢 9 1 existing vulnerabilities detected
nuget/XtremeIdiots.Portal.Repository.Api.Client.V1	2.1.96	Unknown	Unknown
nuget/Microsoft.Extensions.Caching.Memory	10.0.3	🟢 6.9	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy 🟢 10 security policy file detected Packaging ⚠️ -1 packaging workflow not detected License 🟢 10 license file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Signed-Releases ⚠️ -1 no releases found Binary-Artifacts 🟢 10 no binaries found in the repo Fuzzing ⚠️ 0 project is not fuzzed Pinned-Dependencies 🟢 9 dependency not pinned by hash detected -- score normalized to 9 SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities 🟢 9 1 existing vulnerabilities detected
nuget/XtremeIdiots.Portal.Repository.Api.Client.V1	2.1.96	Unknown	Unknown

Scanned Files

• src/XtremeIdiots.Portal.Integrations.Forums/XtremeIdiots.Portal.Integrations.Forums.csproj
• src/XtremeIdiots.Portal.Web/XtremeIdiots.Portal.Web.csproj

[Copilot]

Pull request overview

This PR consolidates three Dependabot updates (#105, #103, #101) into a single coordinated update to streamline dependency management and avoid merge conflicts. The changes update development tooling and runtime dependencies to their latest patch and major versions.

Changes:

• PowerShell devcontainer feature updated from v1 to v2 (major version bump)
• Microsoft.Extensions.Caching.Memory updated from 10.0.2 to 10.0.3 (patch version)
• XtremeIdiots.Portal.Repository.Api.Client.V1 updated from 2.1.26 to 2.1.96 (70 patch versions)

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
.devcontainer/devcontainer.json	Updates PowerShell feature from v1 to v2 for improved development environment tooling
src/XtremeIdiots.Portal.Web/XtremeIdiots.Portal.Web.csproj	Updates Caching.Memory and Repository API Client packages in main web application
src/XtremeIdiots.Portal.Integrations.Forums/XtremeIdiots.Portal.Integrations.Forums.csproj	Updates Caching.Memory and Repository API Client packages in forums integration library

[github-actions]

🏗️ Terraform Plan

🌍 Environment: dev

✅ Validate — Passed

✅ Plan

✅ No changes. Your infrastructure matches the configuration.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud