Skip to content

Bump the npm-dependencies group with 4 updates - #70

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/nuget/ShockOsc/npm-dependencies-28cc1c1fde
Open

Bump the npm-dependencies group with 4 updates#70
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/nuget/ShockOsc/npm-dependencies-28cc1c1fde

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.Extensions.Logging from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated MudBlazor from 9.8.0 to 9.10.0.

Release notes

Sourced from MudBlazor's releases.

9.10.0

What's Changed

New Features

Bug Fixes

Accessibility

Performance

9.9.0

What's Changed

Breaking Changes

New Features

Bug Fixes

Performance

Commits viewable in compare view.

Updated OpenShock.Desktop.ModuleBase from 1.2.1 to 1.3.1.

Release notes

Sourced from OpenShock.Desktop.ModuleBase's releases.

1.3.1

Fixed

  • openshock: login links. Clicking "Log in" in the browser
    used to fail in every case: if the app was already running the handoff threw
    before it sent anything, and if it wasn't running the token was parsed and then
    thrown away, so you landed back on the login screen either way.
  • Malformed deep links no longer crash the app. openshock://token/...,
    odd casing and junk links are all handled instead of throwing on startup.
  • Fixed a hang after logging in. Once you were logged in, an internal lock was
    never released, so the next login or logout attempt would wait forever.
  • Login failures now say what went wrong. Instead of a red "Login Failed",
    you get the actual reason, expired token, backend unreachable, an outdated
    client that can't read the server's response, or the backend's own error
    message, plus a Try Again button in the account menu.

Full changelog: OpenShock/Desktop@1.3.0...1.3.1

1.3.0

What's Changed

UI overhaul

  • Reworked the whole dashboard shell around a shared set of layout primitives (PageContainer, SectionCard, LabeledRow, LabeledBlock), so Dashboard, App Settings, Shockers, Debug and Module Manager all follow the same spacing, headings and card styling.
  • Rebuilt the sidebar: cleaner navigation, module entries with proper status, and an empty state when no modules are installed.
  • Hubs are now shown in named groups — your own hubs stay unlabeled, shared ones are attributed to the person they came from — with a redesigned hub status row.

Module resilience

Modules can no longer take down the app:

  • A module that throws during setup or start is marked faulted and disabled. Its sidebar entry stays with an error icon, and its page shows a fault notice instead of half-initialised components.
  • Page and sidebar render errors are contained by error boundaries. The boundary recovers on navigation and caps the error count, so one broken module can't crash the shell.
  • A module component that fails to construct renders a placeholder instead of taking the page with it.
  • Module install and removal are crash-safe: replaced folders are parked in .trash instead of being deleted in place, a failed extract rolls back, failed tasks stay queued for retry, and the memory-mapped module definition is disposed properly.

Fixes & internals

  • Single-instance enforcement now uses a named mutex instead of probing the pipe, which is faster and more reliable at startup.
  • Module UI surface (icon, root component, navigation items) is snapshotted and validated once at load instead of being re-read from the render tree every frame.
  • Dependency updates: MudBlazor 9.9.0, TUnit 1.65.68.

Full Changelog: OpenShock/Desktop@1.2.1...1.3.0

Commits viewable in compare view.

Updated OscQueryLibrary from 1.2.0 to 2.0.1.

Release notes

Sourced from OscQueryLibrary's releases.

2.0.0

The library now works with any OSCQuery app, not just VRChat. The VRChat support is built on top of the new general-purpose parts.

⚠️ Breaking changes

Renames

1.2.0 2.0.0
OscQueryLibrary.OscQueryServer OscQueryLibrary.VRChat.VrOscQueryServer
OscQueryServer.FoundVrcClient VrOscQueryServer.FoundVrClient
OscQueryServer.ParameterUpdateArgs VrOscQueryServer.ParameterUpdateArgs
HostInfo OscQueryHostInfo
HostInfo.OscTransportType OscTransport

OscReceivePort, ParameterUpdate, Start(), RefreshParameters() and Dispose() are unchanged. The constructor takes the same arguments, plus an optional instanceFilter.

Other changes

  • Node, Node<T>, RootNode, AvatarContents, OscParameterNode and OscParameterNodeEnd<T> are merged into a single OscQueryNode, with Find(path) and Descendants().
  • OscQueryHostInfo properties are now optional (nullable). Extensions is a Dictionary<string, bool> (e.g. Extensions["ACCESS"]) instead of HostInfo.ExtensionsNode.
  • Target frameworks are now netstandard2.1, net9.0 and net10.0. net8.0 is dropped.

✨ New

  • OscQueryDiscovery: finds every OSCQuery service (_oscjson._tcp) on the network over mDNS and reads its HOST_INFO. It fires ServiceDiscovered/ServiceLost and drops services that say goodbye or stop responding.
  • OscQueryHttpClient: reads HOST_INFO and the address space of any OSCQuery server.
  • OscQueryHost: serves your own address space over HTTP and advertises it over mDNS. You can swap the tree at runtime, and single-attribute queries (/path?VALUE) work.
  • Multiple VR clients: VrOscQueryServer tracks every client on the network.
    • A client on the same machine is preferred; otherwise the most recently found one is used.
    • VrcClients lists all known clients and CurrentVrClient is the one in use.
    • SelectVrClient pins a specific client.
    • New VrClientDiscovered/VrClientLost events.
    • If the active client leaves or stops responding, the next best one takes over.
  • The instanceFilter parameter lets VrOscQueryServer work with VRChat-compatible apps other than VRChat.
  • OscQueryExplorer: a terminal app that lists every OSCQuery service on the network and shows its live address space.

🐛 Fixes & improvements

  • Every mDNS query now gets a unique ID, and duplicate-message filtering is off. Previously, if another app had queried shortly before, VRChat and other responders built on MeaMod ignored our queries.
  • Services that are advertised but don't answer are retried with backoff (15s, doubling, up to 5 minutes) instead of on every announcement. Health checks drop a service after two failed checks in a row.
  • When a service advertises several addresses, local ones are tried first and the first one that answers is kept.
  • The HTTP timeout is now 10s, down from the 100s default, so a sleeping Quest no longer blocks for long.
  • Requests send a User-Agent and Pragma: no-cache header.
  • The root node matches what VRChat expects, and a new AccessValues enum was added.
  • Dispose no longer throws if the mDNS service isn't running.

📦 Dependencies

  • Serilog 4.4.0, PolySharp 1.16.0, System.Text.Json 10.0.12 (netstandard2.1)

🔧 Other

  • New test suite (TUnit).
  • Packages are published to NuGet automatically when a tag is pushed.

... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the npm-dependencies group with 4 updates
55b6ad7 
Bumps Microsoft.Extensions.Logging from 10.0.11 to 10.0.12
Bumps MudBlazor from 9.8.0 to 9.10.0
Bumps OpenShock.Desktop.ModuleBase from 1.2.1 to 1.3.1
Bumps OscQueryLibrary from 1.2.0 to 2.0.1

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Logging
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: MudBlazor
  dependency-version: 9.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: OpenShock.Desktop.ModuleBase
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: OscQueryLibrary
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Sep 16, 2026
@dependabot dependabot Bot mentioned this pull request Sep 16, 2026
Closed
@coderabbitai

coderabbitai Bot commented Sep 16, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: e3c802b7-f2bb-47c9-8052-6a2379c360eb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants