Skip to content

fix: Bump the nuget-production group with 67 updates - #246

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/nuget/dot-config/nuget-production-35a4b6dfee
Closed

dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/nuget/dot-config/nuget-production-35a4b6dfee

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 24, 2026

Copy link
Copy Markdown
Contributor

Updated Asp.Versioning.Mvc.ApiExplorer from 8.1.0 to 8.1.1.

Release notes

Sourced from Asp.Versioning.Mvc.ApiExplorer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated AspNetCore.HealthChecks.Azure.Storage.Blobs from 8.0.1 to 9.0.0.

Release notes

Sourced from AspNetCore.HealthChecks.Azure.Storage.Blobs's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated AspNetCore.HealthChecks.AzureKeyVault from 8.0.1 to 9.0.0.

Release notes

Sourced from AspNetCore.HealthChecks.AzureKeyVault's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated AspNetCore.HealthChecks.UI from 8.0.2 to 9.0.0.

Release notes

Sourced from AspNetCore.HealthChecks.UI's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated AspNetCore.HealthChecks.UI.Client from 8.0.1 to 9.0.0.

Release notes

Sourced from AspNetCore.HealthChecks.UI.Client's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated AspNetCore.HealthChecks.UI.SQLite.Storage from 8.0.1 to 9.0.0.

Release notes

Sourced from AspNetCore.HealthChecks.UI.SQLite.Storage's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated AspNetCore.HealthChecks.UI.SqlServer.Storage from 8.0.1 to 9.0.0.

Release notes

Sourced from AspNetCore.HealthChecks.UI.SqlServer.Storage's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated AutoMapper from 13.0.1 to 16.2.0.

Release notes

Sourced from AutoMapper's releases.

16.2.0

What's Changed

New Contributors

Full Changelog: LuckyPennySoftware/AutoMapper@v15.1.1...v16.2.0

16.1.1

What's Changed

Security

Fixed an issue where certain cyclic or self-referential object graphs could trigger uncontrolled recursion during mapping, potentially resulting in stack exhaustion and denial of service.

Applications that process untrusted or attacker-controlled object graphs through affected mapping paths may be impacted.

Users should upgrade to this release.

Security advisory: GHSA-rvv3-g6hj-g44x

Thanks to @​skdishansachin for responsibly disclosing this issue.

Full Changelog: LuckyPennySoftware/AutoMapper@v16.1.0...v16.1.1

16.1.0

What's Changed

New Contributors

Full Changelog: LuckyPennySoftware/AutoMapper@v16.0.0...v16.1.0

16.0.0

What's Changed

Full Changelog: LuckyPennySoftware/AutoMapper@v15.1.0...v16.0.0

16.0.0-beta-1

What's Changed

Full Changelog: LuckyPennySoftware/AutoMapper@v15.1.0...v16.0.0-beta-1

This release is a beta release that introduces .NET 10 support and package signing. Signed packages means going forward packages can be validated against trusted authorities that the package has been published by Lucky Penny Software and not tampered with.

15.1.3

What's Changed

Security

Fixed an issue where certain cyclic or self-referential object graphs could trigger uncontrolled recursion during mapping, potentially resulting in stack exhaustion and denial of service.

Applications that process untrusted or attacker-controlled object graphs through affected mapping paths may be impacted.

Users should upgrade to this release.

Security advisory: GHSA-rvv3-g6hj-g44x

Thanks to @​skdishansachin for responsibly disclosing this issue.

Full Changelog: LuckyPennySoftware/AutoMapper@v15.1.0...v15.1.3

15.1.2

What's Changed

Security

Fixed an issue where certain cyclic or self-referential object graphs could trigger uncontrolled recursion during mapping, potentially resulting in stack exhaustion and denial of service.

Applications that process untrusted or attacker-controlled object graphs through affected mapping paths may be impacted.

Users should upgrade to this release.

Security advisory: GHSA-rvv3-g6hj-g44x

Thanks to @​skdishansachin for responsibly disclosing this issue.

Full Changelog: LuckyPennySoftware/AutoMapper@v16.1.1...v15.1.2

15.1.1

What's Changed

Security

Fixed an issue where certain cyclic or self-referential object graphs could trigger uncontrolled recursion during mapping, potentially resulting in stack exhaustion and denial of service.

Applications that process untrusted or attacker-controlled object graphs through affected mapping paths may be impacted.

Users should upgrade to this release.

Security advisory: GHSA-rvv3-g6hj-g44x

Thanks to @​skdishansachin for responsibly disclosing this issue.

Full Changelog: LuckyPennySoftware/AutoMapper@v16.1.1...v15.1.1

15.1.0

What's Changed

New Contributors

Full Changelog: LuckyPennySoftware/AutoMapper@v15.0.1...v15.1.0

15.0.1

What's Changed

Full Changelog: LuckyPennySoftware/AutoMapper@v15.0.0...v15.0.1

This release supersedes the 15.0.0 release, reverting behavior and overloads so that the AddAutoMapper overloads separate the "scanning for maps" from the "scanning for dependencies". Unfortunately it's not really possible to combine these two together.

This also fixes a critical bug in #​4545 that does not work with .NET 4.x applications (as intended).

Because of this, the 15.0.0 will be delisted because of the breaking changes there.

15.0.0

Full Changelog: LuckyPennySoftware/AutoMapper@v14.0.0...v15.0.0

  • Added support for .NET Standard 2.0
  • Requiring license key
  • Moving from MIT license to dual commercial/OSS license

To set your license key:

services.AddAutoMapper(cfg => {
    cfg.LicenseKey = "<License key here>";
});

This also introduced a breaking change with MapperConfiguration requiring an ILoggerFactory for logging purposes:

public MapperConfiguration(MapperConfigurationExpression configurationExpression, ILoggerFactory loggerFactory)

Registering AutoMapper with services.AddAutoMapper will automatically supply this parameter. Otherwise you'll need to supply the logger factory.

You can obtain your license key at AutoMapper.io

14.0.0

What's Changed

New Contributors

Full Changelog: LuckyPennySoftware/AutoMapper@v13.0.1...v14.0.0

Commits viewable in compare view.

Updated Azure.Messaging.ServiceBus from 7.20.1 to 7.21.0.

Release notes

Sourced from Azure.Messaging.ServiceBus's releases.

7.21.0

7.21.0 (2026-10-06)

Features Added

  • Added SqlFilterCount and CorrelationFilterCount properties to TopicRuntimeProperties, exposing the total number of SQL filters and correlation filters across all of a topic's subscriptions. These are populated by GetTopicRuntimePropertiesAsync and GetTopicsRuntimePropertiesAsync.
  • Added ServiceBusAdministrationClientOptions.ServiceVersion.V2024_05 and made it the default service version. The topic filter counts above are served by the 2024-05 service API version, so the administration client now sends api-version=2024-05 by default.
  • Added GetMessageSessionsAsync overloads on ServiceBusClient for queues and subscriptions. The no-filter overload returns the IDs of sessions that have active messages or session state, and the sessionStateUpdatedAfter overload returns session IDs whose session state was updated after the specified timestamp. Implements the com.microsoft:get-message-sessions AMQP management operation. (#​58761)
  • Added opt-in support for non-exclusive session locking on ServiceBusSessionReceiver, allowing a session to be cooperatively taken over by another receiver. Set ServiceBusSessionReceiverOptions.EnableNonExclusiveSession to accept a session non-exclusively, then read the token from ServiceBusSessionReceiver.SessionLockToken and pass it as ServiceBusSessionReceiverOptions.SessionLockToken = Guid.Parse(token) to take that session over. ServiceBusSessionReceiver.IsSessionExclusive reports the mode the session was established under. Dispositions for a non-exclusive session are routed over the management link so that settlement keeps working across a takeover, which lowers settlement throughput compared to an exclusive session. This applies to ServiceBusSessionReceiver only; ServiceBusSessionProcessor continues to lock sessions exclusively. Accepting a session with EnableNonExclusiveSession set throws NotSupportedException when the endpoint declines it, either by refusing the request outright or by accepting it without assigning a lock token, which is how a caller detects whether the feature is available for a namespace. An endpoint that declines in some other way surfaces the exception its own error maps to. (#​60060)

Bugs Fixed

  • Fixed retry classification for web socket failures with nested causes. On modern .NET, a transient network failure during a web socket connection attempt surfaces as a WebSocketException that wraps an HttpRequestException, which wraps the meaningful IOException or SocketException. The retry policy previously inspected only one level of nesting and treated these failures as terminal. The policy now unwraps nested wrapper exceptions to a bounded depth, so transient failures such as a connection reset use the configured retries. Terminal socket failures, such as host-not-found and host-unreachable, are not retried at any supported depth. A host-unreachable failure on an established connection is now terminal. Earlier versions retried it. (#​61868)

  • Fixed a bug where canceling ServiceBusReceiver.CloseAsync left the receiver unable to close its own links. The receiver was marked as closed, and its set of locked messages disposed, before the cancellation was observed, so every later call to CloseAsync returned immediately without doing any work and the links stayed open until the owning ServiceBusClient was disposed. The receiver is now left open and closable when a close does not complete, so the operation can be retried. (#​59309)

Other Changes

  • The default ServiceBusAdministrationClient service version is now 2024-05 (previously 2021-05). Existing operations are unaffected in behavior; the change is required to surface the new topic filter count properties.

Commits viewable in compare view.

Updated Azure.Monitor.OpenTelemetry.AspNetCore from 1.2.0 to 1.6.0.

Release notes

Sourced from Azure.Monitor.OpenTelemetry.AspNetCore's releases.

1.6.0

1.6.0 (2026-02-13)

Features Added

  • Add support for handling group presence events.

1.6.0-beta.1

1.6.0-beta.1 (2026-09-22)

Features Added

  • Upgraded API version to 2026-04-01-preview.

Other Changes

  • Upgraded dependent Azure.Core to 1.62.0.

1.5.5

1.5.5 (2026-10-21)

Other Changes

  • Updated Microsoft.AspNetCore.DataProtection dependency to 8.0.32 for net8.0 and 10.0.13 for all other target frameworks.

1.5.0

1.5.0 (2026-09-09)

Features Added

  • Upgraded the service API version to 2026-08-01.
  • Added support for retrieving the iSCSI mount scripts of an instant item recovery operation via the new InstantItemRecoveryOperationResult API, including the InstantItemRecoveryTarget and ClientScriptForConnect models.

1.5.0-beta.1

1.5.0-beta.1 (2026-09-23)

Features Added

  • Upgraded api-version to 2025-08-01-preview.

1.4.0

1.4.0 (2026-10-08)

Features Added

  • Added AdministrativeCredentialsPatch, BareMetalMachineConfigurationPatch, ClusterSecretArchivePatch, ClusterUpdateStrategyPatch, ImageRepositoryCredentialsPatch, NetworkCloudRackDefinitionPatch, NetworkCloudSshPublicKeyPatch, RuntimeProtectionConfigurationPatch, ServicePrincipalInformationPatch, StorageApplianceConfigurationPatch, and ValidationThresholdPatch models to align the update/patch payloads with their corresponding patch semantics.

1.4.0-beta.2

1.4.0-beta.2 (2026-10-10)

Features Added

  • Added ClusterArmId to RelayNamespaceData and RelayNamespacePatch, exposing the cluster ARM ID of a namespace as a ResourceIdentifier in create, read, and update operations.

1.3.0

1.3.0 (2026-10-06)

Features Added

  • Regenerated from the relocated ProviderHub TypeSpec (specification/providerhub/resource-manager/Microsoft.ProviderHub/ProviderHub), targeting API version 2025-10-01.
  • Added ManifestInfo and OperationsPutContent resources, along with the models supporting them.
  • Added ApplicationDataAuthorization.IsApplicationIdExcludedFromManifest, ResourceTypeRegistrationProperties.IsSuperScaleEnabled and the LinkedAccessCheckOption enum, all new in API version 2025-10-01. Their .NET names come from @@​clientName customizations in the specification so that they follow the .NET naming guidelines.

1.3.0-beta.1

1.3.0-beta.1 (2026-10-14)

Features Added

  • Upgraded api-version to 2026-05-01-preview.
    • Added Elastic SAN V2 support: ElasticSanData.Version (ElasticSanVersion), new SKU ElasticSanSkuName.ElasticSanLrs, and settable TotalIops, TotalMbps and TotalSizeTiB on ElasticSanData and ElasticSanPatch.
    • Added TotalReservedIops, TotalReservedMBps and UsedCapacityGiB to ElasticSanData.
    • Added QualityOfService (ElasticSanQualityOfService), ReservedIops, ReservedMBps and IsEncryptionInTransitEnabled to ElasticSanVolumeGroupData, and ReservedIops/ReservedMBps to ElasticSanVolumeGroupPatch.
    • Added ElasticSanStorageTargetType.DirectAttach.
    • Added ManagedBy (a list of ElasticSanManagedByInfo) to ElasticSanVolumeData and ElasticSanVolumePatch, so a volume can be managed by multiple resources. The existing ManagedByResourceId property is kept for backward compatibility and maps to a single ManagedBy entry.
    • Added SnapshotAccessState and CompletionPercent to ElasticSanSnapshotData.
    • Added ZoneDetails (ElasticSanSkuZoneDetails) to ElasticSanSkuLocationInfo.
    • Added an optional accessSoftDeletedResources parameter to ElasticSanVolumeCollection.GetAll and ElasticSanVolumeGroupCollection.GetAll for listing soft-deleted resources.

Bugs Fixed

  • Fixed ElasticSanVolumeResource.RestoreVolume so it uses the resource's API version instead of always sending 2024-07-01-preview.
  • ElasticSanVolumeData and ElasticSanVolumePatch now deserialize both the legacy managedBy object ({ "resourceId": "..." }) and the new array shape, so responses from older API versions and models persisted by earlier library versions continue to load.
  • Fixed ElasticSanVolumeCollection.GetAll and ElasticSanVolumeGroupCollection.GetAll so the accessSoftDeletedResources filter is also sent on continuation pages.
  • Fixed ElasticSanVolumeGroupData.DeleteRetentionPolicy, ElasticSanVolumeGroupPatch.DeleteRetentionPolicy and ElasticSanSnapshotData.CreationDataSourceId, which were not serialized or populated from service responses.

Commits viewable in compare view.

Updated Azure.Storage.Blobs from 12.22.0 to 12.30.1.

Release notes

Sourced from Azure.Storage.Blobs's releases.

12.30.1

12.30.1 (2026-10-05)

Bugs Fixed

  • Fixed AuthenticatedRegionCryptoStream.Dispose() to be idempotent and thread-safe, so the buffer it rents is no longer returned to the shared ArrayPool<byte> more than once when the stream is disposed repeatedly or concurrently. Returning the same array twice allowed unrelated callers to rent the same array instance and corrupt each other's data.

12.30.0

12.30.0 (2026-09-28)

Features Added

  • Includes all features from 12.30.0-beta.1 and 12.30.0-beta.2.

Commits viewable in compare view.

Updated Bogus from 35.6.1 to 35.6.5.

Release notes

Sourced from Bogus's releases.

35.6.5

CHANGE LOG

35.6.4

CHANGE LOG

35.6.3

CHANGE LOG

35.6.2

CHANGE LOG

Commits viewable in compare view.

Updated CountryData.Bogus from 6.10.0 to 6.20.0.

Release notes

Sourced from CountryData.Bogus's releases.

6.20.0

Commits viewable in compare view.

Updated coverlet.collector from 6.0.2 to 10.1.0.

Release notes

Sourced from coverlet.collector's releases.

10.1.0

Improvements

  • Publish Microsoft.Testing.Platform coverage messages from coverlet.MTP #​2019
  • Implement dynamic exclusion filters for assemblies (Coverlet.MTP) #​1946
  • Replace legacy .sln files with modern .slnx format #​1966
  • coverlet.console: add trace diagnostics and actionable warnings for instrumentation/hit/empty-result failures #​2005
  • Relax auto-property skip logic and improve coverage for records #​1941

Fixed

  • Fix coverlet.MTP does not collect coverage on the .NET Framework portion of a large project #​1980 #​1967
  • Fix Regression in branch coverage for lambda expressions #​1938
  • Fix When using "is" with "or" in pattern matching, branch coverage is lower than normal #​1979
  • Fix silent zero coverage on .NET Framework since 8.0.0 #​1985 by @​tobiwae
  • Fix Race condition between ProcessExit hit-file write and out-of-proc coverage read causes EndOfStreamException #​1987 #​1988 by @​bkoelman
  • Fix Regression TypeInitializationException when targeting .NET Framework - Could not load type 'System.Collections.Concurrent.ConcurrentBag #​2010
  • Fix use --config-file CLI arg in coverlet.MTP #​2030 by alexthornton1
  • Fix silently empty coverage for shared-framework assemblies missing from compileLibraries #​2032 by @​Eljees

Diff between 10.0.1 and 10.1.0

10.0.1

Improvements

Fixed

  • Fix inconsistent paths in cobertura reports #​1723
  • Fix when using "is" with "and" in pattern matching, branch coverage is lower than normal #​1313
  • Fix Coverlet flagging a branch for an async functions finally block where none exists #​1337
  • Fix Coverlet Tracker Missing CompilerGeneratedAttribute #​1828

Maintenance

  • Add architecture docs and diagrams for all integrations #​1927
  • Update NuGet packages and .NET SDK versions #​1933

Diff between 10.0.0 and 10.0.1

10.0.0

Improvements

  • Unique Report Filenames (coverlet.MTP and AzDO) #​1866
  • Add --coverlet-file-prefix option for unique report files #​1869
  • Introduce .NET 10 support #​1823

Fixed

  • Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #​1836
  • Fix [BUG] Missing Coverage after moving to MTP #​1843
  • Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #​1842
  • Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #​1878
  • Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #​1880
  • Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #​1718 by https://github.com/yusyd
  • Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #​1762

Maintenance

  • Add comprehensive async method tests and documentation for issue #​1864
  • Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #​1833
  • Add net9.0 and net10.0 targets #​1822

Diff between 8.0.1 and 10.0.0

8.0.1

Fixed

  • Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
  • Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

  • Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

8.0.0

Special Thanks: A huge thank you to @​Bertk for driving the majority of the work in this release! 🎉

Fixed

Improvements

  • Coverlet MTP extension feature #​1788
  • Generate SBOM for nuget packages #​1752
  • Use multi targets projects for coverlet.collector, coverlet.msbuild.tasks packages #​1742
  • Use .NET 8.0 target framework for coverlet.core and remove Newtonsoft.Json #​1733
  • Use latest System.CommandLine version #​1660
  • Upgraded minimum required .NET SDK and runtime to .NET 8.0 LTS (Long Term Support) (Breaking Change)
  • Use xunit.v3 for tests and example code

Diff between 6.0.4 and 8.0.0

6.0.4

Fixed

  • Fix empty coverage report when using include and exclude filters #​1726

Diff between 6.0.3 and 6.0.4

6.0.3

Fixed

Improvements

  • Cache the regex used in InstrumentationHelper #​1693
  • Enable dotnetTool integration tests for linux #​660

Diff between 6.0.2 and 6.0.3

Commits viewable in compare view.

Updated dotnet-ef from 9.0.1 to 10.0.13.

Release notes

Sourced from dotnet-ef's releases.

10.0.0-preview.6.25358.103

You can build .NET 10.0 Preview 6 from the repository by cloning the release tag v10.0.0-preview.6.25358.103 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.5.25277.114

You can build .NET 10.0 Preview 5 from the repository by cloning the release tag v10.0.0-preview.5.25277.114 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.4.25258.110

You can build .NET 10.0 Preview 4 from the repository by cloning the release tag v10.0.0-preview.4.25258.110 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.3.25171.5

You can build .NET 10.0 Preview 3 from the repository by cloning the release tag v10.0.0-preview.3.25171.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.2.25163.2

You can build .NET 10.0 Preview 2 from the repository by cloning the release tag v10.0.0-preview.2.25163.2 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.1.25080.5

You can build .NET 10.0 Preview 1 from the repository by cloning the release tag v10.0.0-preview.1.25080.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.122

You can build .NET 9.0 from the repository by cloning the release tag v9.0.122 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.121

You can build .NET 9.0 from the repository by cloning the release tag v9.0.121 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.120

You can build .NET 9.0 from the repository by cloning the release tag v9.0.120 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached is a PGP signature for the GitHub generated tarball. You can find the public key at https://dot.net/release-key-2023

9.0.119

You can build .NET 9.0 from the repository by cloning the release tag v9.0.119 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.118

You can build .NET 9.0 from the repository by cloning the release tag v9.0.118 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached is a PGP signature for the GitHub generated tarball. You can find the public key at https://dot.net/release-key-2023

9.0.117

You can build .NET 9.0 from the repository by cloning the release tag v9.0.117 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.116

You can build .NET 9.0 from the repository by cloning the release tag v9.0.116 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.115

You can build .NET 9.0 from the repository by cloning the release tag v9.0.115 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.114

You can build .NET 9.0 from the repository by cloning the release tag v9.0.114 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached is the PGP signature for the GitHub generated tarball. You can find the public key at https://dot.net/release-key-2023

9.0.113

You can build .NET 9.0 from the repository by cloning the release tag v9.0.113 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.112

You can build .NET 9.0 from the repository by cloning the release tag v9.0.112 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.111

You can build .NET 9.0 from the repository by cloning the release tag v9.0.111 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.110

You can build .NET 9.0 from the repository by cloning the release tag v9.0.110 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.109

You can build .NET 9.0 from the repository by cloning the release tag v9.0.109 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.101

You can build .NET 9.0 from the repository by cloning the release tag v9.0.101 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.7

You can build .NET 9.0 from the repository by cloning the release tag v9.0.7 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.6

You can build .NET 9.0 from the repository by cloning the release tag v9.0.6 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.5

You can build .NET 9.0 from the repository by cloning the release tag v9.0.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.4

You can build .NET 9.0 from the repository by cloning the release tag v9.0.4 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.3

You can build .NET 9.0 from the repository by cloning the release tag v9.0.3 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.2

You can build .NET 9.0 from the repository by cloning the release tag v9.0.2 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

Commits viewable in compare view.

Updated dotnet-reportgenerator-globaltool from 5.0.4 to 5.5.11.

Release notes

Sourced from dotnet-reportgenerator-globaltool's releases.

5.5.11

Changes:

  • #​786 Improved HTML table layout for Firefox
  • #​785 Changed hover color for table rows in HTML reports to improve readability in dark mode

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

5.5.10

Changes:

  • Added support for Sha256 signed licenses

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

5.5.9

Changes:

  • Added new setting "applyQueryStringToAllLinks" to apply query string to referenced CSS and JavaScript files and links to support SAS tokens (e.g. on blob storage) (#​349)
  • Improved escaping of JavaScript content

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

5.5.8

Changes:

  • Azure DevOps: Added metadata to become a trusted publisher

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

5.5.7

Changes:

  • #​783: Reduce memory usage for large code files

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

5.5.6

Changes:

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

5.5.5

Changes:

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

5.5.4

Changes:

  • #​777: Added new report type 'cjson' (contributed by @​RemyBoyer)

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

5.5.3

Changes:

  • #​776: Fix issue in coverage delta chart

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

5.5.2

Changes:

  • #​772: Added coverage delta chart for comparision with previous coverage report
  • #​773: Improved handling of file paths on Unix systems

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

5.5.1

Changes:

  • Added support for .NET 10
  • #​766: Added new setting "preserveTrailingEmptyLine".
  • #​769: Added support for Cobertura files exported from Swift (contributed by @​Vovanni)

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

5.5.0

Changes:

  • Added support for .NET 10
  • #​762: Improved handling of generic classes in DynamicCodeCoverage files (generated by dotnet-coverage)
  • #​763: Added new setting "includeAllDatesInCharts".

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

5.4.18

Changes:

  • #​760: Improved light/dark mode when "Auto Dark Mode for Web Contents" is enabled in Chrome/Edge
  • #​762: Improved handling of generic classes in DynamicCodeCoverage files (generated by dotnet-coverage)

This release requires .NET Framework 4.7 or .NET 8.0/9.0

5.4.17

Changes:

  • #​756: Added new report type 'Markdown'
  • #​757: Improved title elements in SVGs charts embedded in MHTML report

This release requires .NET Framework 4.7 or .NET 8.0/9.0

5.4.16

Changes:

  • #​755: Improved MHTML reports (inline CSS)

This release requires .NET Framework 4.7 or .NET 8.0/9.0

5.4.15

Changes:

  • #​752: Added support for Scoverage input format
  • #​753: Added tiny history charts to HTML reports (if JavaScript is disabled)

This release requires .NET Framework 4.7 or .NET 8.0/9.0

5.4.14

Changes:

  • Added support for Testwell CTC++ coverage files (PRO version only)
  • #​753: Added title elements to SVGs generated with SvgChart report type

This release requires .NET Framework 4.7 or .NET 8.0/9.0

5.4.13

Changes:

  • #​751: Improved support for large numbers in LCOV files

This release requires .NET Framework 4.7 or .NET 8.0/9.0

5.4.12

Changes:

  • #​750: Cobertura reports now contain timestamp in UTC format

This release requires .NET Framework 4.7 or .NET 8.0/9.0

5.4.11

This release requires .NET Framework 4.7 or .NET 8.0/9.0

5.4.10

Changes:

  • #​746: Improved "raw mode" (settings:rawMode=true): Leave method names unchanged

This release requires .NET Framework 4.7 or .NET 8.0/9.0

5.4.9

Changes:

  • #​744: Azure DevOps task: Added support for nodeJS 20

This release requires .NET Framework 4.7 or .NET 8.0/9.0

5.4.8

Changes:

  • #​737 Improved lcov support (take FNDA elements into account to determine whether a code element has been covered)
  • #​741 Charts does not render "Full method coverage" elements if coverage information is not available
  • Added new setting "applyMaximumGroupingLevel". This allows to apply the maximum grouping level instead of the default 'By assembly' grouping in HTML reports.

This release requires .NET Framework 4.7 or .NET 8.0/9.0

5.4.7

Changes:

  • #​731 Added option to break build when maximum risk hotspots metrics are exceeded

This release requires .NET Framework 4.7 or .NET 8.0/9.0

5.4.6

Changes:

  • #​730 Added support for the REPORTGENERATOR_LICENSE environment variable in the MSBuild task (contributed by @​0xced)

This release requires .NET Framework 4.7 or .NET 8.0/9.0

5.4.5

Changes:

  • #​724 Fixed splitting of possible glob patterns (contributed by @​karl-sjogren)

This release requires .NET Framework 4.7 or .NET 8.0/9.0

5.4.4

Changes:

  • #​714 Improved AoT support
  • #​721 Added support for comma-separated arguments in addition to semicolon

This release requires .NET Framework 4.7 or .NET 8.0/9.0

5.4.3

Changes:

  • #​717 Added new new coverage type "Full method coverage" (percentage of methods that are fully covered)

This release requires .NET Framework 4.7 or .NET 8.0/9.0

5.4.2

Changes:

  • #​700 Fixed handling of .netconfig files (sourceDirectories, reportTypes, plugins, assemblyFilters, etc.)
  • #​716 Increased precision of percentages in CsvSummary and TextSummary reports (contributed by @​tomap)
  • #​719 Fixed badges in MarkdownAssembliesSummary report

This release requires .NET Framework 4.7 or .NET 8.0/9.0

5.4.1

Changes:

  • #​707 Fixed issue with file filters

This release requires .NET Framework 4.7 or .NET 8.0/9.0

5.4.0

Changes:

  • Added support for .NET 9. Dropped support for .NET 6 and .NET 7
  • #​699 Rounding crap score to full number
  • #​700 Fixed handling of .netconfig files (sourceDirectories, reportTypes, plugins, assemblyFilters, etc.)
  • #​704 Improved handling of file filters

This release requires .NET Framework 4.7 or .NET 8.0/9.0

5.3.11

Changes:

This release requires .NET Framework 4.7 or .NET 6.0/7.0/8.0

5.3.10

Changes:

  • #​695 HTML reports: Performance and memory improvements (contributed by @​afscrome)
  • #​690 Fixed handling of history files for classes with not unique names

This release requires .NET Framework 4.7 or .NET 6.0/7.0/8.0

5.3.9

Changes:

  • #​685 Extended "raw mode" for dotCover format (settings:rawMode=true) to disable that coverage data of nested or compiler generated classes is included in the parent class.
  • #​691 Cobertura parser: Performance and memory improvements (contributed by @​afscrome)

This release requires .NET Framework 4.7 or .NET 6.0/7.0/8.0

5.3.8

Changes:

  • #​681 Updated System.Text.Json to address CVE-2024-30105 (contributed by @​304NotModified)

This release requires .NET Framework 4.7 or .NET 6.0/7.0/8.0

5.3.7

Changes:

  • Exclude empty modules/assemblies from reports
    -Fix sort direction triangles (contributed by @​YuriyDurov)
    -#​602: HtmlSummary and Html_BlueRed_Summary report types now also create an index.html file

This release requires .NET Framework 4.7 or .NET 6.0/7.0/8.0

5.3.6

Changes:

  • #​676: Fixed issue with Cobertura files with empty class names

This release requires .NET Framework 4.7 or .NET 6.0/7.0/8.0

5.3.5

Changes:

  • #​663: Improved support for Cobertura files generated by "Microsoft CodeCoverage"
  • #​674: License can now be supplied via the REPORTGENERATOR_LICENSE environment variable

This release requires .NET Framework 4.7 or .NET 6.0/7.0/8.0

5.3.4

Changes:

  • #​664: Added filter options for risk hotspots: '-riskhotspotassemblyfilters:', '-riskhotspotclassfilters:'

This release requires .NET Framework 4.7 or .NET 6.0/7.0/8.0

5.3.0

Changes:

  • Azure DevOps task: Added new setting "publishCodeCoverageResults". This allows to publish report in 'Code Coverage' tab directly. Makes the 'PublishCodeCoverageResults' task obsolete.
  • #​662: Added ability to filter by coverage in Html reports
  • #​667: Added new report type 'MarkdownAssembliesSummary'

This release requires .NET Framework 4.7 or .NET 6.0/7.0/8.0

5.2.5

Changes:

  • #​665 Improved handling of duplicate classes in JaCoCo files

This release requires .NET Framework 4.7 or .NET 6.0/7.0/8.0

5.2.4

Changes:

  • #​630 Added "raw mode" (settings:rawMode=true) to disable that coverage data of nested or compiler generated
    classes is included in the parent class. This is useful to merge several Cobertura files into a single file.

This release requires .NET Framework 4.7 or .NET 6.0/7.0/8.0

5.2.3

Changes:

  • #​656 Changed handling of files which are not found in source directory

This release requires .NET Framework 4.7 or .NET 6.0/7.0/8.0

5.2.2

Changes:

  • #​651 Added setting to add custom....

Description has been truncated

Bumps Asp.Versioning.Mvc.ApiExplorer from 8.1.0 to 8.1.1
Bumps AspNetCore.HealthChecks.Azure.Storage.Blobs from 8.0.1 to 9.0.0
Bumps AspNetCore.HealthChecks.AzureKeyVault from 8.0.1 to 9.0.0
Bumps AspNetCore.HealthChecks.UI from 8.0.2 to 9.0.0
Bumps AspNetCore.HealthChecks.UI.Client from 8.0.1 to 9.0.0
Bumps AspNetCore.HealthChecks.UI.SQLite.Storage from 8.0.1 to 9.0.0
Bumps AspNetCore.HealthChecks.UI.SqlServer.Storage from 8.0.1 to 9.0.0
Bumps AutoMapper from 13.0.1 to 16.2.0
Bumps Azure.Messaging.ServiceBus from 7.20.1 to 7.21.0
Bumps Azure.Monitor.OpenTelemetry.AspNetCore from 1.2.0 to 1.6.0
Bumps Azure.Storage.Blobs from 12.22.0 to 12.30.1
Bumps Bogus from 35.6.1 to 35.6.5
Bumps CountryData.Bogus from 6.10.0 to 6.20.0
Bumps coverlet.collector from 6.0.2 to 10.1.0
Bumps dotnet-ef from 9.0.1 to 10.0.13
Bumps dotnet-reportgenerator-globaltool from 5.0.4 to 5.5.11
Bumps dotnet-sonarscanner from 11.2.1 to 12.0.0
Bumps husky from 0.7.2 to 0.9.1
Bumps MailKit from 4.8.0 to 4.18.2
Bumps MediatR from 12.4.1 to 14.2.0
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.11 to 8.0.32
Bumps Microsoft.AspNetCore.Authentication.OpenIdConnect from 8.0.11 to 8.0.32
Bumps Microsoft.AspNetCore.Authorization from 8.0.11 to 10.0.13
Bumps Microsoft.AspNetCore.Mvc.Testing from 8.0.14 to 8.0.32
Bumps Microsoft.EntityFrameworkCore from 8.0.11 to 9.0.21
Bumps Microsoft.EntityFrameworkCore.InMemory from 8.0.11 to 9.0.21
Bumps Microsoft.EntityFrameworkCore.Proxies from 8.0.11 to 9.0.21
Bumps Microsoft.EntityFrameworkCore.Relational from 8.0.11 to 9.0.21
Bumps Microsoft.EntityFrameworkCore.Sqlite from 8.0.11 to 9.0.21
Bumps Microsoft.EntityFrameworkCore.SqlServer from 8.0.11 to 9.0.21
Bumps Microsoft.Extensions.Caching.SqlServer from 8.0.11 to 10.0.13
Bumps Microsoft.Extensions.Configuration from 8.0.0 to 10.0.13
Bumps Microsoft.Extensions.Configuration.Abstractions from 8.0.0 to 10.0.13
Bumps Microsoft.Extensions.Configuration.Json from 8.0.1 to 10.0.13
Bumps Microsoft.Extensions.Configuration.KeyPerFile from 8.0.1 to 10.0.13
Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 8.0.2 to 10.0.13
Bumps Microsoft.Extensions.Hosting from 8.0.1 to 10.0.13
Bumps Microsoft.Extensions.Hosting.Abstractions from 8.0.1 to 10.0.13
Bumps Microsoft.Extensions.Hosting.Systemd from 8.0.1 to 10.0.13
Bumps Microsoft.Extensions.Hosting.WindowsServices from 8.0.1 to 10.0.13
Bumps Microsoft.Extensions.Http from 8.0.1 to 10.0.13
Bumps Microsoft.Extensions.Http.Polly from 8.0.10 to 10.0.13
Bumps Microsoft.Extensions.Logging from 8.0.1 to 10.0.13
Bumps Microsoft.Extensions.Logging.Abstractions from 8.0.2 to 10.0.13
Bumps Microsoft.Extensions.Logging.Configuration from 8.0.1 to 10.0.13
Bumps Microsoft.Extensions.Logging.Console from 8.0.1 to 10.0.13
Bumps Microsoft.Extensions.Options from 8.0.2 to 10.0.13
Bumps Microsoft.Extensions.Options.ConfigurationExtensions from 8.0.0 to 10.0.13
Bumps Microsoft.IdentityModel.Tokens from 8.2.1 to 8.23.0
Bumps Microsoft.NET.Test.Sdk from 17.11.1 to 18.11.0
Bumps Moq from 4.20.70 to 4.21.0
Bumps Net.IBM.Data.Db2-lnx from 8.0.0.400 to 9.0.0.400
Bumps NuGet.Protocol from 6.11.2 to 7.9.0
Bumps Oracle.ManagedDataAccess.Core from 23.6.1 to 23.26.400
Bumps Shouldly from 4.2.1 to 4.3.0
Bumps SSH.NET from 2024.2.0 to 2026.0.0
Bumps StackExchange.Redis from 2.8.12 to 3.4.20
Bumps Swashbuckle.AspNetCore from 7.2.0 to 10.3.1
Bumps Swashbuckle.AspNetCore.Annotations from 7.2.0 to 10.3.1
Bumps Swashbuckle.AspNetCore.Filters from 8.0.2 to 10.0.1
Bumps System.Diagnostics.DiagnosticSource from 8.0.1 to 10.0.13
Bumps System.IdentityModel.Tokens.Jwt from 8.2.1 to 8.23.0
Bumps System.Text.Json from 8.0.5 to 10.0.13
Bumps Testcontainers.MsSql from 3.10.0 to 4.16.0
Bumps xunit from 2.9.0 to 2.9.3
Bumps xunit.runner.visualstudio from 2.8.2 to 4.0.1
Bumps XunitXml.TestLogger from 4.1.0 to 8.0.0

---
updated-dependencies:
- dependency-name: Asp.Versioning.Mvc.ApiExplorer
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production
- dependency-name: AspNetCore.HealthChecks.Azure.Storage.Blobs
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: AspNetCore.HealthChecks.AzureKeyVault
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: AspNetCore.HealthChecks.UI
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: AspNetCore.HealthChecks.UI.Client
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: AspNetCore.HealthChecks.UI.SQLite.Storage
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: AspNetCore.HealthChecks.UI.SqlServer.Storage
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: AutoMapper
  dependency-version: 16.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Azure.Messaging.ServiceBus
  dependency-version: 7.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Azure.Monitor.OpenTelemetry.AspNetCore
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Azure.Storage.Blobs
  dependency-version: 12.30.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Bogus
  dependency-version: 35.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production
- dependency-name: CountryData.Bogus
  dependency-version: 6.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: coverlet.collector
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: dotnet-ef
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: dotnet-reportgenerator-globaltool
  dependency-version: 5.5.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: dotnet-sonarscanner
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: husky
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: MailKit
  dependency-version: 4.18.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: MediatR
  dependency-version: 14.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 8.0.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production
- dependency-name: Microsoft.AspNetCore.Authentication.OpenIdConnect
  dependency-version: 8.0.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production
- dependency-name: Microsoft.AspNetCore.Authorization
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 8.0.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production
- dependency-name: Microsoft.EntityFrameworkCore
  dependency-version: 9.0.21
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.EntityFrameworkCore.InMemory
  dependency-version: 9.0.21
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.EntityFrameworkCore.Proxies
  dependency-version: 9.0.21
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.EntityFrameworkCore.Relational
  dependency-version: 9.0.21
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 9.0.21
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.EntityFrameworkCore.SqlServer
  dependency-version: 9.0.21
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.Extensions.Caching.SqlServer
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.Extensions.Options
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.Extensions.Configuration.Abstractions
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.Extensions.Configuration.KeyPerFile
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.Extensions.Hosting.Abstractions
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.Extensions.Hosting.Systemd
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.Extensions.Hosting.WindowsServices
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.Extensions.Http
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.Extensions.Http.Polly
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.Extensions.Logging
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.Extensions.Logging.Configuration
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.Extensions.Logging.Console
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: System.Text.Json
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Microsoft.IdentityModel.Tokens
  dependency-version: 8.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.11.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Moq
  dependency-version: 4.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Net.IBM.Data.Db2-lnx
  dependency-version: 9.0.0.400
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: NuGet.Protocol
  dependency-version: 7.9.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Oracle.ManagedDataAccess.Core
  dependency-version: 23.26.400
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Shouldly
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: SSH.NET
  dependency-version: 2026.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: StackExchange.Redis
  dependency-version: 3.4.20
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Swashbuckle.AspNetCore.Annotations
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: Swashbuckle.AspNetCore.Filters
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: System.Diagnostics.DiagnosticSource
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-version: 8.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Testcontainers.MsSql
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production
- dependency-name: xunit.runner.visualstudio
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
- dependency-name: XunitXml.TestLogger
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from lzocateli as a code owner October 24, 2026 02:34
@dependabot dependabot Bot added dependencies Atualização ou ajuste de dependências. major Mudança de alto impacto para release major. .NET Pull requests that update .NET code labels Oct 24, 2026
@github-actions github-actions Bot added the test Mudanças em testes automatizados. label Oct 24, 2026
@lzocateli

Copy link
Copy Markdown
Collaborator

Fechado: 44 das 60 atualizações são majors com quebra de build (Swashbuckle 10, StackExchange.Redis 3, Azure Blobs, EF Core 9, Microsoft.Extensions 10) e MediatR/AutoMapper em versões de licença comercial. A política de minor/patch vem no PR do dependabot.yml.

@lzocateli lzocateli closed this Oct 24, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 24, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/nuget/dot-config/nuget-production-35a4b6dfee branch October 24, 2026 03:13
lzocateli added a commit that referenced this pull request Oct 24, 2026
…#247)

# Resumo

Substitui o #246 (60 pacotes, 44 majors e build quebrado).

- Grupos `nuget-production` e `nuget-development` passam a ter
`update-types: [minor, patch]`.
- Majors ficam em `ignore`. O `ignore` também vale para as atualizações
de segurança. Vulnerabilidades que só se corrigem com uma major são
tratadas à mão a partir dos avisos do NuGetAudit no build; hoje são
SSH.NET (alta), AutoMapper (alta, versões ≥ 15 comerciais) e MailKit
(moderada, com correção em minor).

# Impacto na release

- [x] `ci`: não gera release. Depois do merge, o Dependabot reabre o PR
agrupado só com minor/patch.

Co-authored-by: zocatel <zocateli_lincoln@cat.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Atualização ou ajuste de dependências. major Mudança de alto impacto para release major. .NET Pull requests that update .NET code test Mudanças em testes automatizados.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant