Update dependency NServiceBus.Persistence.CosmosDB to 2.0.5

[dependencyupdates]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
NServiceBus.Persistence.CosmosDB (source)	2.0.1 → 2.0.5

---

Release Notes

Particular/NServiceBus.Persistence.CosmosDB (NServiceBus.Persistence.CosmosDB)

v2.0.5

Compare Source

As part of this release we had 7 commits which resulted in 2 issues being closed.

Dependency CVEs

• #​1014 GitHub Security Advisory ID (GHSA-37gx-xxp4-5rgx) reported on branch release-2.0
• #​1015 GitHub Security Advisory ID (GHSA-w3x6-4m5h-cxqf) reported on branch release-2.0

Where to get it

You can download this release from NuGet.

🛡 ClamAV virus scan results: No viruses detected

Version: ClamAV 1.4.4
Scan Date: Thu, 07 May 2026 22:15:25 GMT

----------- SCAN SUMMARY -----------
Known viruses: 3627854
Engine version: 1.4.4
Scanned directories: 1
Scanned files: 4
Infected files: 0
Data scanned: 2.25 MB
Data read: 0.48 MB (ratio 4.71:1)
Time: 11.647 sec (0 m 11 s)
Start Date: 2026:05:07 22:15:09
End Date:   2026:05:07 22:15:21

v2.0.4

Compare Source

As part of this release we had 4 commits which resulted in 1 issue being closed.

bug

• #​893 Endpoints using the outbox subscribed to the same event will experience concurrency conflicts if sharing the same database and container

Documentation can be found here.

Where to get it

You can download this release from NuGet.

🛡 ClamAV virus scan results: No viruses detected

Version: ClamAV 1.4.3/27784/Mon Oct  6 09:39:27 2025
Scan Date: Tue, 07 Oct 2025 04:01:44 GMT

----------- SCAN SUMMARY -----------
Known viruses: 8708666
Engine version: 1.4.3
Scanned directories: 1
Scanned files: 4
Infected files: 0
Data scanned: 2.05 MB
Data read: 0.46 MB (ratio 4.41:1)
Time: 15.131 sec (0 m 15 s)
Start Date: 2025:10:07 04:01:25
End Date:   2025:10:07 04:01:40

v2.0.3

Compare Source

As part of this release we had 9 commits which resulted in 1 issue being closed.

bug

• #​859 Loading outbox or saga records under load may lead to existing outbox or saga records not being found

Where to get it

You can download this release from NuGet.

🛡 ClamAV virus scan results: No viruses detected

Version: ClamAV 1.0.8/27660/Fri Jun  6 08:32:06 2025
Scan Date: Fri, 06 Jun 2025 16:37:37 GMT

----------- SCAN SUMMARY -----------
Known viruses: 8707510
Engine version: 1.0.8
Scanned directories: 1
Scanned files: 4
Infected files: 0
Data scanned: 2.03 MB
Data read: 0.46 MB (ratio 4.44:1)
Time: 14.447 sec (0 m 14 s)
Start Date: 2025:06:06 16:37:19
End Date:   2025:06:06 16:37:33

v2.0.2

Compare Source

As part of this release we had 32 commits which resulted in 1 issue being closed.

bug

• #​777 Update dependencies to prevent exposure to transitive vulnerabilities

Where to get it

You can download this release from NuGet.

🛡 ClamAV virus scan results: No viruses detected

Version: ClamAV 1.0.7/27526/Wed Jan 22 09:40:03 2025
Scan Date: Wed, 22 Jan 2025 23:55:29 GMT

----------- SCAN SUMMARY -----------
Known viruses: 8704059
Engine version: 1.0.7
Scanned directories: 1
Scanned files: 4
Infected files: 0
Data scanned: 1.95 MB
Data read: 0.45 MB (ratio 4.33:1)
Time: 14.858 sec (0 m 14 s)
Start Date: 2025:01:22 23:55:13
End Date:   2025:01:22 23:55:28

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

Commands to ignore dependencies

You can trigger dependency actions by commenting on this PR:

• @particularbot ignore this major version
• @particularbot ignore this minor version
• @particularbot ignore this dependency

[dependencyupdates]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.