Bump Asp.Versioning.Http and 19 others by dependabot[bot] · Pull Request #12 · Typhion/solicitations

dependabot · 2026-11-01T23:08:48Z

Release notes

Sourced from Asp.Versioning.Http's releases.

10.2.0

This release includes some big new features but is fully backward compatible with 10.0.0. The new features include versioned model member filtering, Roslyn analyzers, gRPC preview support, and a number of servicing patches since the previous release.

Fixes

All Platforms

Parsing an API version whose status ends in '.' no longer succeeds silently
Very large padding values in a format string no longer cause a stack overflow
Incorrect lower and upper bounds when matching API version ranges
Parsing a positive integer no longer allows whitespace or a leading '-'

ASP.NET Core

Routes are no longer incorrectly evicted from the route table (#1138)
Fixed routing of unversioned endpoints
Fixed extracting an API version that includes a status when versioning by URL segment (#1187)
A user-registered IProblemDetailsWriter is preserved by AddApiVersioning() (#1191)

ASP.NET Core OpenAPI

Support for more XML comment tags (#1205)
Fixed the error message reported for an unmapped JSON property
Fixed descriptions applied to filtered members

Features

All Platforms

New ApiVersionRange type for matching a set of API versions using the same interval notation as a package version
- 1.0 → x ≥ 1.0
- [1.0] → x == 1.0
- (1.0,) → x > 1.0
- (,1.0] → x ≤ 1.0
- [1.0,2.0) → 1.0 ≤ x < 2.0
- Multiple rules are combined as a logical or; ApiVersionRange.Any and ApiVersionRange.Empty are provided for
  the degenerate cases
- A range matches API versions; it does not define them. API versions must still be explicitly declared
New VisibleInApiVersionAttribute indicates the range of API versions a data member is visible in; for example,
[VisibleInApiVersion("2.0")]
New IAnnotation<TKey, TValue> abstraction for associating out-of-band metadata with a member
[StringSyntax] is now applied to API version inputs so the IDE and analyzers understand them; the recognized
syntaxes are ApiVersion, ApiVersionRange, and ApiVersionFormat

Analyzers

API Versioning now ships Roslyn analyzers. There is no new package to install — the core rules are packed into Asp.Versioning.Abstractions and the API rules are packed into Asp.Versioning.Http, so any application that already references API Versioning picks them up transitively.

There is an initial set of 31 rules. You can find all of the rule information in the new diagnostics wiki topic.

Notes:
... (truncated)

10.0.0

The official release for 10.0 is here! In addition to the changes in the preview releases, there are a few additional changes.

Features

All Platforms

ApiVersionAttribute, MapToVersionAttribute, and AdvertiseApiVersionsAttribute all now have a constructor which can support the date format without being a string; for example, [ApiVersion(2026, 04, 01)]

ASP.NET Core OpenAPI

XmlCommentsTransformer is now resolved via DI, which allows it to be re-registered with a user-defined file path
Public types and members are now virtual for developer extensibility

Fixes

ASP.NET Core OpenAPI

Fix comparison between entry and calling assembly (#1175)
Ensure keyed services are registered with a lowercase key (#1176)
Fix nested key service resolution (#1177)
Implement IKeyedServiceProvider when injecting ApiVersion (#1178)

Breaking Changes

ASP.NET Core OpenAPI

OpenAPI documents use "enum": ["1.0"] instead of "default": "1.0"
- This has a similar effect, but removes the free-form input when the value is bounded
- When optional, the enum value can still be deleted/removed
- Some UIs, such as Scalar, still provide a way to provide an enumerated value that isn't in the list

Release Notes

Asp.Versioning.OData is being released as rc.1 because Microsoft.AspNetCore.OData is only at preview.2
Asp.Versioning.OpenAPI is being released as rc.1 pending the outcome of dotnet/aspnetcore#66408
- If the package can be released without requiring the explicit use of Reflection, that is the preference
- No additional changes are planned unless bugs are reported

Feedback

Thanks to the contributors on this release whether it was code contributions or test driving the previews. Special thanks to @sander1095 for being a strong advocate and helping to bring even more visibility to the project.

10.0.0-preview.2

This release is a quick iteration which contains minor fixes based on feedback from Preview 1.

Trying out previews is always a big ask. The OpenAPI extensions are net new, so I really am looking for some community support to flush out any edge cases I may have been missed before releasing officially. All other libraries are stable.

Aside from whatever the community may report, there are only two final things I'm considering for the final release:

gRPC versioning support, which I'm waiting on grpc/grpc-dotnet#2690 and grpc/grpc-dotnet#2693
Coordination with Microsoft to open up types in Microsoft.AspNetCore.OpenAPI so I don't have to resort to Reflection for integration

If these are not able to be completed within the next few weeks, then I will officially release the stable libraries. The gRPC support will then come in a future, likely minor version, release. The OpenAPI extensions may stay in preview as AOT will likely be broken.

Features

All Platforms

Support _ prefix character when extracting API versions from a .NET namespace (#1172)
Generate software bill of materials (SBOM) (#1100)

Fixes

ASP.NET Core with OpenAPI

Build-time OpenAPI documents have empty paths (#1165, #1168)
Missing XML Comments (#1169)
Support <example> tags (#1170)

Breaking Changes

The OpenAPI extensions for API Versioning (e.g. x-api-versioning) will now use a nested links property rather than a simple array. This allows the schema to be open for possible future enhancements.

Preview 1

{
    "x-api-versioning":
    [
        {
            "title": "Version Policy",
            "type": "text/html",
            "rel": "info",
            "url": "http://my.api.com/policies/versioning.html"
        }
    ]
}

Preview 2+

{
 ... (truncated)

## 10.0.0-preview.1

This is a major release that includes new, publicly visible API changes as well as a rollup of bug fixes. This is an initial preview release that is primarily focused on improving OpenAPI integration. Additional features will come in the next preview. The wiki has not be fully updated - yet, but that will also occur in the near future.

These are preview features and changes. Please report issues if you find them. Feel free to start a [discussion](../../discussions) about the changes in the forthcoming official release.

# Features

## All Platforms

- Support for the `deprecation` response header as defined by [RFC 9745](https://www.rfc-editor.org/rfc/rfc9745.html) (#1128)

## ASP.NET Core

- Integration with the [Microsoft.AspNetCore.OpenApi](https://www.nuget.org/packages/Microsoft.AspNetCore.OpenApi) library
  - These features in the new [Asp.Versioning.OpenApi](https://www.nuget.org/packages/Asp.Versioning.OpenApi) library
  - OpenAPI documents are now generated per API version
  - Sunset and deprecation policies are automatically included with standard (English) text, but can be customized
  - Sunset and deprecation policies links are included in OpenAPI documents via the `x-api-versioning` extension
  - The versioned `HttpClient` can now read and report on sunset and deprecation policies
  - All [example projects](../../tree/main/examples/AspNetCore) have been updated to use [Scalar](https://scalar.com/)

### Example

The following provides an example of a bare minimum setup:

```c#
var builder = WebApplication.CreateBuilder( args );
var services = builder.Services;

services.AddApiVersioning()
        .AddApiExplorer()
        .AddOpenApi();

var app = builder.Build();
var hello = app.NewVersionedApi( "HelloWorld" );
var v1 = hello.MapGroup( "/hello-world" ).HasApiVersion( 1.0 );
var v2 = hello.MapGroup( "/hello-world" ).HasApiVersion( 2.0 );

v1.MapGet( "/", ( ApiVersion version ) => $"Hello world from v{version}" );
v2.MapGet( "/", ( ApiVersion version ) => $"Hello world from v{version}" );

if ( app.Environment.IsDevelopment() )
{
    app.MapOpenApi().WithDocumentPerVersion();
}

app.Run();

The key differences from what you may be currently doing:

... (truncated)

Commits viewable in compare view.

Updated coverlet.collector from 6.0.4 to 10.1.0.

Release notes

Sourced from coverlet.collector's releases.

10.1.0

Improvements

Publish Microsoft.Testing.Platform coverage messages from coverlet.MTP #2019
Implement dynamic exclusion filters for assemblies (Coverlet.MTP) #1946
Replace legacy .sln files with modern .slnx format #1966
coverlet.console: add trace diagnostics and actionable warnings for instrumentation/hit/empty-result failures #2005
Relax auto-property skip logic and improve coverage for records #1941

Fixed

Fix coverlet.MTP does not collect coverage on the .NET Framework portion of a large project #1980 #1967
Fix Regression in branch coverage for lambda expressions #1938
Fix When using "is" with "or" in pattern matching, branch coverage is lower than normal #1979
Fix silent zero coverage on .NET Framework since 8.0.0 #1985 by @tobiwae
Fix Race condition between ProcessExit hit-file write and out-of-proc coverage read causes EndOfStreamException #1987 #1988 by @bkoelman
Fix Regression TypeInitializationException when targeting .NET Framework - Could not load type 'System.Collections.Concurrent.ConcurrentBag #2010
Fix use --config-file CLI arg in coverlet.MTP #2030 by alexthornton1
Fix silently empty coverage for shared-framework assemblies missing from compileLibraries #2032 by @Eljees

Diff between 10.0.1 and 10.1.0

10.0.1

Improvements

Coverlet with MTP 2 doesn't show test coverage statistic in console #1907
Avoid unnecessary testhost restarts #1912 by https://github.com/mawosoft

Fixed

Fix inconsistent paths in cobertura reports #1723
Fix when using "is" with "and" in pattern matching, branch coverage is lower than normal #1313
Fix Coverlet flagging a branch for an async functions finally block where none exists #1337
Fix Coverlet Tracker Missing CompilerGeneratedAttribute #1828

Maintenance

Add architecture docs and diagrams for all integrations #1927
Update NuGet packages and .NET SDK versions #1933

Diff between 10.0.0 and 10.0.1

10.0.0 Improvements

Unique Report Filenames (coverlet.MTP and AzDO) #1866
Add --coverlet-file-prefix option for unique report files #1869
Introduce .NET 10 support #1823

Fixed

Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #1836
Fix [BUG] Missing Coverage after moving to MTP #1843
Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #1842
Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #1878
Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #1880
Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #1718 by https://github.com/yusyd
Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #1762

Maintenance

Add comprehensive async method tests and documentation for issue #1864
Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #1833
Add net9.0 and net10.0 targets #1822

Diff between 8.0.1 and 10.0.0

8.0.1

Fixed

Fix [BUG] TypeInitializationException when targeting .NET Framework #1818
Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #1827

Improvements

Additional improvements needed for .NET Framework instrumentation type import #1825

Diff between 8.0.0 and 8.0.1

8.0.0

Special Thanks: A huge thank you to @Bertk for driving the majority of the work in this release! 🎉

Fixed

Fix System.CommandLine 2.0 release is available #1776
Fix Excluding From Coverage bad defaults from given example #1764
Fix branchpoint exclusion for sdk 8.0.407 #1741
Fix missing copyright information in NuGet #1794
Fix bad default values in documentation #1764 by https://github.com/cboudereau

Improvements

Coverlet MTP extension feature #1788
Generate SBOM for nuget packages #1752
Use multi targets projects for coverlet.collector, coverlet.msbuild.tasks packages #1742
Use .NET 8.0 target framework for coverlet.core and remove Newtonsoft.Json #1733
Use latest System.CommandLine version #1660
Upgraded minimum required .NET SDK and runtime to .NET 8.0 LTS (Long Term Support) (Breaking Change)
Use xunit.v3 for tests and example code

Diff between 6.0.4 and 8.0.0

Commits viewable in compare view.

Updated FluentAssertions from 8.10.0 to 8.11.0.

Release notes

Sourced from FluentAssertions's releases.

8.11.0 What's Changed

New Contributors

@jpgomezv made their first contribution in Fix typo in exceptions page fluentassertions/fluentassertions#3317

Full Changelog: fluentassertions/fluentassertions@8.10.0...8.11.0

Commits viewable in compare view.

Pinned FluentValidation at 12.2.0.

Release notes

Sourced from FluentValidation's releases.

12.2.0

Release notes

Please read the upgrade guide if you are moving from 11.x to 12.x

Changes in 12.2.0

Add Lithuanian language (#2350)
Add Belarusian language (#2356)
Add GetParentChain() to PropertyChain (#2358)
Fix ArgumentNullException in TestValidationResult when a failure has a null PropertyName (#2362)
Reject an inverted range when the comparer returns a negative other than -1 in RangeValidator (#2370)
Change EnumValidator to work under native AOT (#2371)
Fix PropertyChain.IsChildChainOf for sibling chains that share a name prefix (#2372)
Fix PropertyPath is incorrect in .When() on RuleForEach (#2363)

Changes in 12.1.0

Add Tamil language (#2334)
Add Telugu language (#2333)
Fixes to Japanese translations (#2340)

Changes in 12.0.0

Drops support for netstandard2.0, netstandard2.1, .net 5, .net 6 and .net 7. Minimum supported platform is now .net 8.
Add support for dependent rules for custom rules (#2170)
Removes deprecated DI extensions
Removes deprecated transform methods (#2027)
Remove the ability to disable the root-model null check (#2069)
Use Zomp.SyncMethodGenerator to clean up internal sync/async code paths and increase performance (#2136)
Add Serbian (Cyrillic) language; rename existing Serbian to Serbian (Latin) (#2283)

Downloads

Binaries can be downloaded from nuget:

FluentValidation - Main package

Commits viewable in compare view.

Pinned FluentValidation.DependencyInjectionExtensions at 12.2.0.

Release notes

Sourced from FluentValidation.DependencyInjectionExtensions's releases.

12.2.0

Release notes

Please read the upgrade guide if you are moving from 11.x to 12.x

Changes in 12.2.0

Add Lithuanian language (#2350)
Add Belarusian language (#2356)
Add GetParentChain() to PropertyChain (#2358)
Fix ArgumentNullException in TestValidationResult when a failure has a null PropertyName (#2362)
Reject an inverted range when the comparer returns a negative other than -1 in RangeValidator (#2370)
Change EnumValidator to work under native AOT (#2371)
Fix PropertyChain.IsChildChainOf for sibling chains that share a name prefix (#2372)
Fix PropertyPath is incorrect in .When() on RuleForEach (#2363)

Changes in 12.1.0

Add Tamil language (#2334)
Add Telugu language (#2333)
Fixes to Japanese translations (#2340)

Changes in 12.0.0

Drops support for netstandard2.0, netstandard2.1, .net 5, .net 6 and .net 7. Minimum supported platform is now .net 8.
Add support for dependent rules for custom rules (#2170)
Removes deprecated DI extensions
Removes deprecated transform methods (#2027)
Remove the ability to disable the root-model null check (#2069)
Use Zomp.SyncMethodGenerator to clean up internal sync/async code paths and increase performance (#2136)
Add Serbian (Cyrillic) language; rename existing Serbian to Serbian (Latin) (#2283)

Downloads

Binaries can be downloaded from nuget:

FluentValidation - Main package

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.9 to 10.0.14.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.