Bump Microsoft.Extensions.Configuration and Microsoft.Extensions.Configuration.EnvironmentVariables

[dependabot]

Updated Microsoft.Extensions.Configuration from 10.0.6 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.6 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.Configuration.EnvironmentVariables's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes.}

[codacy-production]

Pull Request Overview

While this PR is technically 'up to standards' according to Codacy, it introduces a significant version synchronization risk. The update focuses solely on the Configuration and EnvironmentVariables packages, creating a mismatch with other Microsoft.Extensions dependencies (such as Hosting, Logging, and UserSecrets) which remain on version 10.0.6.

In the .NET ecosystem, these libraries are designed to be used as a synchronized suite. Mixing patch versions can lead to runtime assembly load conflicts or unexpected behavior due to shared internal dependencies. It is strongly recommended to update all related Microsoft.Extensions packages to version 10.0.8 simultaneously.

About this PR

• Performing a partial update of the Microsoft.Extensions suite is risky. These libraries often share internal components; mixing versions (e.g., 10.0.8 for Configuration and 10.0.6 for Logging) can lead to diamond dependency issues or runtime exceptions that are not always caught during compilation.

Test suggestions

• Verify successful project compilation with the updated package versions.
• Ensure environment variable configuration provider correctly loads values at runtime with version 10.0.8.

Prompt proposal for missing tests

Consider implementing these tests if applicable:
1. Verify successful project compilation with the updated package versions.
2. Ensure environment variable configuration provider correctly loads values at runtime with version 10.0.8.

_{TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback}

[codacy-production]

_{🟡 MEDIUM RISK}

Suggestion: Updating only a subset of the Microsoft.Extensions packages to 10.0.8 while leaving others (such as Hosting, Logging, and UserSecrets) at 10.0.6 can lead to runtime assembly version mismatches. These packages are designed to be used as a synchronized suite. Try running the following prompt in your coding agent: > Update all other Microsoft.Extensions and Microsoft.Extensions.Hosting packages in Directory.Packages.props to version 10.0.8.

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.