chore: Bump the minor-and-patch group with 2 updates

[dependabot]

Updated ReactiveUI from 23.2.27 to 23.2.28.

Release notes

Sourced from ReactiveUI's releases.

23.2.28

🔏 23.2.28 — consolidated, re-signed release

This is the recommended 23.x release. It supersedes and folds together 23.1.1, 23.1.8, 23.2.1, 23.2.19, and 23.2.27, which were signed with a code-signing certificate that has since been revoked — NuGet restore fails on them with NU3012. 23.2.28 is identical in code to 23.2.27 but re-signed with a valid certificate, and it depends on the re-signed Splat 19.4.1. Those superseded releases have been removed and their notes consolidated here.

🗞️ What's Changed

🐛 Fixes

• Interaction async-handler scheduling (#​4351, fixes #​4280)
• Support inherited DependencyProperty lookup (#​4350, fixes #​3921)
• Handle null load state in activation (#​4349, fixes #​4331)
• WinForms designer serialization errors (#​4339)
• BindCommand passing the wrong parameter after a new ViewModel is assigned to the View (#​4324)
• WPF design-time activation and main-thread bindings (#​4337)
• Slow WPF startup — ComponentModelFallbackConverter false positives + missing ConverterService registrations (#​4313)
• Blazor activation render ordering (#​4318)
• WithWinForms() initialization + ReactiveCommand output-propagation tests (#​4314)
• Builder StackOverflow, activator negative ref-count, a binding regression, and testing extensions (#​4301)

✨ Enhancements

• WithCoreServices() and additional platform converters (#​4316)

🧹 Build, CI & signing

• Migrate signing to Certum SimplySign and versioning to MinVer (this release is a re-sign of the 23.2.27 source)
• Add a CodeQL analysis workflow
• Remove the deprecated integration tests; add modern samples, snippets, CI and docs (#​4319)

📦 Dependencies

• Splat → 19.4.1 (re-signed)
• Routine dependency/test-stack updates by @​renovate[bot]

🔗 Full Changelog: reactiveui/ReactiveUI@22.3.1...23.2.28

🙌 Contributions

💖 Thanks to all the contributors — @​glennawatson, @​ChrisPulman, @​Copilot, and Maciej Walczak (see the linked PRs for attribution).

🤖 Automated services that contributed: @​renovate[bot], @​github-code-quality[bot]

Commits viewable in compare view.

Updated Velopack from 1.1.1 to 1.2.0.

Release notes

Sourced from Velopack's releases.

1.2.0

What's Changed

• Add python typings by @​caesay in Add python typings velopack/velopack#919
• Improve validation for semver versions to avoid rust crashes by @​caesay in Improve validation for semver versions to avoid rust crashes velopack/velopack#923
• Locator uses the wrong root path on Linux by @​caesay in Locator uses the wrong root path on Linux velopack/velopack#921
• Add fallback to fix old versions of Velopack updating on Mac by @​caesay in Add fallback to fix old versions of Velopack updating on Mac velopack/velopack#924

Full Changelog: velopack/velopack@1.1.1...1.2.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, nuget. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.