Bump Microsoft.AspNetCore.Authentication.JwtBearer and 7 others

[dependabot]

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.IdentityModel.Tokens from 8.22.0 to 8.23.0.

Release notes

Sourced from Microsoft.IdentityModel.Tokens's releases.

8.23.0

What's Changed

• Backport configurable SHR p claim path comparison to 8.x by @​debchoudhury-id4s in Backport configurable SHR p claim path comparison to 8.x AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3577
• Backport SHR p-claim percent-encoding hex case handling to dev8x by @​debchoudhury-id4s in Backport SHR p-claim percent-encoding hex case handling to dev8x AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3579
• Reinstate Microsoft.IdentityModel.Protocols.WsTrust as a supported 8.x package by @​iNinja in Reinstate Microsoft.IdentityModel.Protocols.WsTrust as a supported 8.x package AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3547
• Include WS-Trust in build pipelines by @​iNinja in Include WS-Trust in build pipelines AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3604
• Log IDX10650 decryption-tag failures below Error during multi-key decryption by @​RojaEnnam in Log IDX10650 decryption-tag failures below Error during multi-key decryption AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3582
• Support ML-DSA AKP keys in JsonWebKeySet by @​iNinja in Support ML-DSA AKP keys in JsonWebKeySet AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3597
• Add Composite ML-DSA support (internal, gated) by @​iNinja in Add Composite ML-DSA support (internal, gated) AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3596

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.22.0...8.23.0

Commits viewable in compare view.

Updated Microsoft.IdentityModel.Tokens.Saml from 8.22.0 to 8.23.0.

Release notes

Sourced from Microsoft.IdentityModel.Tokens.Saml's releases.

8.23.0

What's Changed

• Backport configurable SHR p claim path comparison to 8.x by @​debchoudhury-id4s in Backport configurable SHR p claim path comparison to 8.x AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3577
• Backport SHR p-claim percent-encoding hex case handling to dev8x by @​debchoudhury-id4s in Backport SHR p-claim percent-encoding hex case handling to dev8x AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3579
• Reinstate Microsoft.IdentityModel.Protocols.WsTrust as a supported 8.x package by @​iNinja in Reinstate Microsoft.IdentityModel.Protocols.WsTrust as a supported 8.x package AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3547
• Include WS-Trust in build pipelines by @​iNinja in Include WS-Trust in build pipelines AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3604
• Log IDX10650 decryption-tag failures below Error during multi-key decryption by @​RojaEnnam in Log IDX10650 decryption-tag failures below Error during multi-key decryption AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3582
• Support ML-DSA AKP keys in JsonWebKeySet by @​iNinja in Support ML-DSA AKP keys in JsonWebKeySet AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3597
• Add Composite ML-DSA support (internal, gated) by @​iNinja in Add Composite ML-DSA support (internal, gated) AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3596

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.22.0...8.23.0

Commits viewable in compare view.

Updated QuestPDF from 2026.8.0 to 2026.9.1.

Release notes

Sourced from QuestPDF's releases.

2026.9.1

• Updated Skia to m154.
• Updated qpdf to 12.4.1.
• Fixed an issue where garbage collection could corrupt PDF tag attributes during concurrent PDF generation (found and fixed by @​Lurtz7 in Keep PDF/UA attribute strings alive until the document is closed (fixes stale-pointer corruption and crashes in document_close) QuestPDF/QuestPDF#1483),
• Improved PDF/UA-1 compatibility when generating ZUGFeRD and Factur-X invoices.
• Fixed an issue in the DocumentOperation API where DocumentAttachmentRelationship.Supplement was incorrectly mapped to /Alternative.
• Improved handling of stream-writing exceptions during PDF generation.
• The ShowInCompanion API now automatically starts the Companion App if it is not already running (requires Companion App 2026.9.0 or newer).
• Improved exception messages related to Settings.ThrowOnMissingFontFamilies, Settings.ThrowOnMissingTextGlyphs, and Settings.UseSystemFonts.
• Reduced connection time to the Companion App on Windows.
• Added missing license files for dependencies.

2026.9.0

This release is dedicated to text handling improvements

QuestPDF 2026.9.0 improves font management to make document rendering more predictable across development machines, CI, containers, and cloud environments.

Fonts installed on the operating system vary between machines. A document that looks correct during development may use different fallback fonts, display placeholder glyphs, or lose text after deployment. To help catch these problems before a PDF reaches its recipient, QuestPDF now excludes system fonts by default and validates font availability and glyph coverage during document generation.

Upgrading to 2026.9.0

Deploy the required font files with your application and reference them by the family names stored in those files. Fonts in the application directory are registered automatically; you can also register them explicitly through FontManager. Use FontManager.GetRegisteredFonts() to inspect the available family names.

Please compare previous settings with the new defaults:

// previous behavior:
QuestPDF.Settings.UseSystemFonts = true;
QuestPDF.Settings.ThrowOnMissingFontFamilies = false;
QuestPDF.Settings.ThrowOnMissingTextGlyphs = false;
QuestPDF.Settings.EnableDetailedLayoutErrors = false;

// current behavior:
QuestPDF.Settings.UseSystemFonts = false;
QuestPDF.Settings.ThrowOnMissingFontFamilies = true;
QuestPDF.Settings.ThrowOnMissingTextGlyphs = true;
QuestPDF.Settings.EnableDetailedLayoutErrors = true;

Also review the deployment and API changes below. Renamed APIs remain available under their previous names, marked as obsolete with compiler warnings.

Covering additional languages

QuestPDF includes the bundled Lato font, which covers Latin, Greek, and Cyrillic scripts. For other scripts, such as Chinese, Japanese, Korean, Arabic, Hebrew, Thai, or emoji, we recommend additionally deploying the free, open-source Google Noto font family, registering it with FontManager, and configuring it as a font fallback in the default text style of the document.

// at application startup
FontManager.RegisterFontsFromDirectory("Fonts/Noto");

// in the document
Document.Create(document => 
{
    document.Page(page => 
    {
        page.DefaultTextStyle(style => style.FontFamily("Lato", "Noto Sans", "Noto Sans CJK SC", "Noto Emoji"));
    });
});

⚠️ Breaking changes

... (truncated)

Commits viewable in compare view.

Updated System.IdentityModel.Tokens.Jwt from 8.22.0 to 8.23.0.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

8.23.0

What's Changed

• Backport configurable SHR p claim path comparison to 8.x by @​debchoudhury-id4s in Backport configurable SHR p claim path comparison to 8.x AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3577
• Backport SHR p-claim percent-encoding hex case handling to dev8x by @​debchoudhury-id4s in Backport SHR p-claim percent-encoding hex case handling to dev8x AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3579
• Reinstate Microsoft.IdentityModel.Protocols.WsTrust as a supported 8.x package by @​iNinja in Reinstate Microsoft.IdentityModel.Protocols.WsTrust as a supported 8.x package AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3547
• Include WS-Trust in build pipelines by @​iNinja in Include WS-Trust in build pipelines AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3604
• Log IDX10650 decryption-tag failures below Error during multi-key decryption by @​RojaEnnam in Log IDX10650 decryption-tag failures below Error during multi-key decryption AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3582
• Support ML-DSA AKP keys in JsonWebKeySet by @​iNinja in Support ML-DSA AKP keys in JsonWebKeySet AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3597
• Add Composite ML-DSA support (internal, gated) by @​iNinja in Add Composite ML-DSA support (internal, gated) AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3596

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.22.0...8.23.0

Commits viewable in compare view.

[dependabot]

Superseded by #24.