Skip to content

Comments

Bump Consul, Ocelot and Ocelot.Provider.Consul#1663

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/generators/dotnetcore/templates/dotnetcore/src/main/multi-776e1fff2c
Open

Bump Consul, Ocelot and Ocelot.Provider.Consul#1663
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/generators/dotnetcore/templates/dotnetcore/src/main/multi-776e1fff2c

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 8, 2026

Updated Consul from 1.7.14.7 to 1.7.14.9.

Release notes

Sourced from Consul's releases.

1.7.14.9

What's Changed

Full Changelog: G-Research/consuldotnet@v1.7.14.8...v1.7.14.9

1.7.14.8

What's Changed

New Contributors

Full Changelog: G-Research/consuldotnet@v1.7.14.7...v1.7.14.8

Commits viewable in compare view.

Updated Ocelot from 24.0.0 to 24.1.0.

Release notes

Sourced from Ocelot's releases.

24.1.0

Summer-Autumn 2025 (version 24.1) aka Globality release

Milestone: Summer'25
Codenamed: Globality
Read the Docs: Ocelot 24.1 with PDF

ℹ️ About

In this minor release, the Ocelot team put the spotlight on the Configuration feature as part of their semi-annual 2025 effort, with a particular focus on the Global Configuration Schema. This release enhances support for global configurations across both routing modes: the classic static Routing and the service discovery-based Dynamic Routing.

The updated documentation highlights the deprecation of certain options through multiple notes and warnings. This deprecation process will be completed in the upcoming .NET 10 release. With the [Obsolete] attributes in place, C# developers will notice several warnings in the build logs during compilation.

On top of that, this release brings a great enhancement to the Kubernetes provider, also known as the Ocelot.Provider.Kubernetes package.

🆕 What's New?

Configuration: The "Dynamic routing global configuration" feature has been redesigned by @​raman-m and contributors.

This update brings changes to the Dynamic Route Schema and Global Configuration Schema, while the Route Schema stays the same apart from deprecation updates. All work was coordinated under issue #​585, which addressed the challenges of configuring Ocelot's most popular features globally before version 24.1, when dynamic routing gained global configuration partial support, but static routing mostly lacked it. A key outcome of #​585 is the ability to override global configuration options within the DynamicRoutes collection. This ongoing issue will continue to require attention, as adapting static route global configurations for dynamic routing is complex and, in some cases, impossible. This will be a challenge for future Ocelot releases and the community.

Kubernetes: The "Kubernetes provider based on watch requests" feature by @​kick2nick in PR #​2174. ⭐

The Ocelot.Provider.Kubernetes package now features a new WatchKube provider for Kubernetes service discovery. This provider is a great fit for high-load environments where the older Kube and PollKube providers struggle to handle heavy traffic, often leading to increased log errors, HTTP 500 issues, and potential Ocelot instance failures. WatchKube is the next step in the evolution of these providers, leveraging the reactive capabilities of the KubeClient API. For guidance on choosing the right provider for your Kubernetes setup, check out the "Comparing providers" section in the documentation.

Configuration: The "Routing default timeout" feature by @​hogwartsdeveloper in PR #​2073.

In the past, the Timeout setting in the Route Schema didn't actually stop requests, defaulting instead to a fixed 90 seconds. Custom timeouts were handled using the Quality of Service Timeout strategy, and this only applied if Polly and the Ocelot.Provider.Polly package were used. Now, the Timeout option (in seconds) can be set at the route, global, and QoS levels. The Global Configuration Schema and Dynamic Route Schema also include the new Timeout setting, making it possible to configure default timeouts for dynamic routing as well.

Quality of Service: The "FailureRatio and SamplingDuration parameters of Polly V8 circuit-breaker" feature by @​RaynaldM in PR #​2081.

Starting with version 24.1, two new parameters in QoSOptions, FailureRatio and SamplingDuration, let you fine-tune the behavior of the Circuit Breaker strategy. Both can be configured globally, even with dynamic routing.
Please note that DurationOfBreak, ExceptionsAllowedBeforeBreaking, and TimeoutValue are now deprecated in 24.1, so check the QoSOptions Schema documentation for details.

🆙 What's Updated?

Configuration: Several File-model options have been deprecated by @​raman-m.

The updated docs now highlight these deprecated options with multiple notes and warnings. The v24.1 deprecation process will wrap up in the upcoming .NET 10 release. Due to the Obsolete attributes, C# developers will notice several build warnings during compilation.
... (truncated)

24.0.1

Ocelot.Administration.IdentityServer4 version 24.0.1

Ocelot release: 24.0.0
Ocelot.Administration.IdentityServer4 release: 24.0.1
NuGet package: Ocelot.Administration.IdentityServer4.24.0.1

❗ Breaking Changes

The Ocelot.Administration extension package has been renamed to Ocelot.Administration.IdentityServer4

Feature: Administration

All IdentityServer4-related vulnerabilities (issue #​2218) were addressed. The Ocelot.Administration source code has been moved out of the Ocelot repository (pull request #​2274) and transferred to the Ocelot.Administration.IdentityServer4 repository.

Currently, the Administration feature is solely based on the IdentityServer4 package, whose repository was archived by its owner on July 31, 2024. In this release, the Ocelot team deprecated the Ocelot.Administration.IdentityServer4 extension package after the current Ocelot v24.0 release; however, the repository is/will not be archived, allowing for potential patches in the future.

Note: In upcoming releases, the Ocelot team plans to utilize the ASP.NET Core Identity framework for Administration feature development and in Ocelot's acceptance testing project to align with .NET industry standards. As a result, the IdentityServer4 library is intended to be replaced with ASP.NET Core Identity, which also supports Bearer tokens, commonly known as JwtBearerHandler from the Microsoft.AspNetCore.Authentication.JwtBearer namespace.

Commits viewable in compare view.

Updated Ocelot.Provider.Consul from 24.0.0 to 24.1.0.

Release notes

Sourced from Ocelot.Provider.Consul's releases.

24.1.0

Summer-Autumn 2025 (version 24.1) aka Globality release

Milestone: Summer'25
Codenamed: Globality
Read the Docs: Ocelot 24.1 with PDF

ℹ️ About

In this minor release, the Ocelot team put the spotlight on the Configuration feature as part of their semi-annual 2025 effort, with a particular focus on the Global Configuration Schema. This release enhances support for global configurations across both routing modes: the classic static Routing and the service discovery-based Dynamic Routing.

The updated documentation highlights the deprecation of certain options through multiple notes and warnings. This deprecation process will be completed in the upcoming .NET 10 release. With the [Obsolete] attributes in place, C# developers will notice several warnings in the build logs during compilation.

On top of that, this release brings a great enhancement to the Kubernetes provider, also known as the Ocelot.Provider.Kubernetes package.

🆕 What's New?

Configuration: The "Dynamic routing global configuration" feature has been redesigned by @​raman-m and contributors.

This update brings changes to the Dynamic Route Schema and Global Configuration Schema, while the Route Schema stays the same apart from deprecation updates. All work was coordinated under issue #​585, which addressed the challenges of configuring Ocelot's most popular features globally before version 24.1, when dynamic routing gained global configuration partial support, but static routing mostly lacked it. A key outcome of #​585 is the ability to override global configuration options within the DynamicRoutes collection. This ongoing issue will continue to require attention, as adapting static route global configurations for dynamic routing is complex and, in some cases, impossible. This will be a challenge for future Ocelot releases and the community.

Kubernetes: The "Kubernetes provider based on watch requests" feature by @​kick2nick in PR #​2174. ⭐

The Ocelot.Provider.Kubernetes package now features a new WatchKube provider for Kubernetes service discovery. This provider is a great fit for high-load environments where the older Kube and PollKube providers struggle to handle heavy traffic, often leading to increased log errors, HTTP 500 issues, and potential Ocelot instance failures. WatchKube is the next step in the evolution of these providers, leveraging the reactive capabilities of the KubeClient API. For guidance on choosing the right provider for your Kubernetes setup, check out the "Comparing providers" section in the documentation.

Configuration: The "Routing default timeout" feature by @​hogwartsdeveloper in PR #​2073.

In the past, the Timeout setting in the Route Schema didn't actually stop requests, defaulting instead to a fixed 90 seconds. Custom timeouts were handled using the Quality of Service Timeout strategy, and this only applied if Polly and the Ocelot.Provider.Polly package were used. Now, the Timeout option (in seconds) can be set at the route, global, and QoS levels. The Global Configuration Schema and Dynamic Route Schema also include the new Timeout setting, making it possible to configure default timeouts for dynamic routing as well.

Quality of Service: The "FailureRatio and SamplingDuration parameters of Polly V8 circuit-breaker" feature by @​RaynaldM in PR #​2081.

Starting with version 24.1, two new parameters in QoSOptions, FailureRatio and SamplingDuration, let you fine-tune the behavior of the Circuit Breaker strategy. Both can be configured globally, even with dynamic routing.
Please note that DurationOfBreak, ExceptionsAllowedBeforeBreaking, and TimeoutValue are now deprecated in 24.1, so check the QoSOptions Schema documentation for details.

🆙 What's Updated?

Configuration: Several File-model options have been deprecated by @​raman-m.

The updated docs now highlight these deprecated options with multiple notes and warnings. The v24.1 deprecation process will wrap up in the upcoming .NET 10 release. Due to the Obsolete attributes, C# developers will notice several build warnings during compilation.
... (truncated)

24.0.1

Ocelot.Administration.IdentityServer4 version 24.0.1

Ocelot release: 24.0.0
Ocelot.Administration.IdentityServer4 release: 24.0.1
NuGet package: Ocelot.Administration.IdentityServer4.24.0.1

❗ Breaking Changes

The Ocelot.Administration extension package has been renamed to Ocelot.Administration.IdentityServer4

Feature: Administration

All IdentityServer4-related vulnerabilities (issue #​2218) were addressed. The Ocelot.Administration source code has been moved out of the Ocelot repository (pull request #​2274) and transferred to the Ocelot.Administration.IdentityServer4 repository.

Currently, the Administration feature is solely based on the IdentityServer4 package, whose repository was archived by its owner on July 31, 2024. In this release, the Ocelot team deprecated the Ocelot.Administration.IdentityServer4 extension package after the current Ocelot v24.0 release; however, the repository is/will not be archived, allowing for potential patches in the future.

Note: In upcoming releases, the Ocelot team plans to utilize the ASP.NET Core Identity framework for Administration feature development and in Ocelot's acceptance testing project to align with .NET industry standards. As a result, the IdentityServer4 library is intended to be replaced with ASP.NET Core Identity, which also supports Bearer tokens, commonly known as JwtBearerHandler from the Microsoft.AspNetCore.Authentication.JwtBearer namespace.

Commits viewable in compare view.

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps Consul from 1.7.14.7 to 1.7.14.9
Bumps Ocelot from 24.0.0 to 24.1.0
Bumps Ocelot.Provider.Consul from 24.0.0 to 24.1.0

---
updated-dependencies:
- dependency-name: Consul
  dependency-version: 1.7.14.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Ocelot
  dependency-version: 24.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Ocelot.Provider.Consul
  dependency-version: 24.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Jan 8, 2026
@sonarqubecloud
Copy link

sonarqubecloud bot commented Jan 8, 2026

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants