Skip to content

Bump microsoft.openapi.kiota from 1.32.5 to 1.34.1 - #2053

Merged
bkoelman merged 1 commit into
masterfrom
dependabot-nuget-dot-config-microsoft.openapi.kiota-1.34.1
Jul 18, 2026
Merged

Bump microsoft.openapi.kiota from 1.32.5 to 1.34.1#2053
bkoelman merged 1 commit into
masterfrom
dependabot-nuget-dot-config-microsoft.openapi.kiota-1.34.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 10, 2026

Copy link
Copy Markdown
Contributor

Updated microsoft.openapi.kiota from 1.32.5 to 1.34.1.

Release notes

Sourced from microsoft.openapi.kiota's releases.

1.34.1

Added

Changed

  • Reduced the aggressiveness of namespace segment and type name shortening by raising the length threshold to 200 characters, so only names longer than 200 characters are truncated (to a 191-character prefix plus an underscore and 8-character hash). The threshold stays well below the 255 file-system per-component limit to leave room for extensions and language-specific suffixes appended by path segmenters and compilers (e.g. Java nested-class .class files and the extra underscores Python adds when converting names to snake_case).

1.34.0

Changed

Fixed a path traversal vulnerability where workspace consumer identifiers (clientName/pluginName) and workspace configuration keys were used as filesystem path components without containment validation, allowing a crafted name (e.g. junk/../Victim) to overwrite another consumer's cached OpenAPI description. #​7919

Full Changelog: microsoft/kiota@v1.33.0...v1.34.0

1.33.0

Added

Changed

  • Fixed TypeScript generation failing with a file-system error when an API endpoint produces a namespace segment longer than the per-component name limit (e.g. NTFS 255 chars). Oversized TypeScript namespace segments are now shortened (directories only; type names are preserved). #​7901

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---
updated-dependencies:
- dependency-name: microsoft.openapi.kiota
  dependency-version: 1.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jul 10, 2026
@codecov

codecov Bot commented Jul 17, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.96%. Comparing base (538cbf9) to head (a928988).

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #2053   +/-   ##
=======================================
  Coverage   91.96%   91.96%           
=======================================
  Files         438      438           
  Lines       15044    15044           
  Branches     2488     2488           
=======================================
  Hits        13835    13835           
  Misses        755      755           
  Partials      454      454           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@bkoelman
bkoelman merged commit 09baf0b into master Jul 18, 2026
24 of 25 checks passed
@bkoelman
bkoelman deleted the dependabot-nuget-dot-config-microsoft.openapi.kiota-1.34.1 branch July 18, 2026 00:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Development

Successfully merging this pull request may close these issues.

1 participant