Bump the minor-and-patch group with 11 updates by dependabot[bot] · Pull Request #26 · 4booser/Shifter

Updated Skia to m154.
Updated qpdf to 12.4.1.
Fixed an issue where garbage collection could corrupt PDF tag attributes during concurrent PDF generation (found and fixed by @Lurtz7 in Keep PDF/UA attribute strings alive until the document is closed (fixes stale-pointer corruption and crashes in document_close) QuestPDF/QuestPDF#1483),
Improved PDF/UA-1 compatibility when generating ZUGFeRD and Factur-X invoices.
Fixed an issue in the DocumentOperation API where DocumentAttachmentRelationship.Supplement was incorrectly mapped to /Alternative.
Improved handling of stream-writing exceptions during PDF generation.
The ShowInCompanion API now automatically starts the Companion App if it is not already running (requires Companion App 2026.9.0 or newer).
Improved exception messages related to Settings.ThrowOnMissingFontFamilies, Settings.ThrowOnMissingTextGlyphs, and Settings.UseSystemFonts.
Reduced connection time to the Companion App on Windows.
Added missing license files for dependencies.

2026.9.0

This release is dedicated to text handling improvements

QuestPDF 2026.9.0 improves font management to make document rendering more predictable across development machines, CI, containers, and cloud environments.

Fonts installed on the operating system vary between machines. A document that looks correct during development may use different fallback fonts, display placeholder glyphs, or lose text after deployment. To help catch these problems before a PDF reaches its recipient, QuestPDF now excludes system fonts by default and validates font availability and glyph coverage during document generation.

Upgrading to 2026.9.0

Deploy the required font files with your application and reference them by the family names stored in those files. Fonts in the application directory are registered automatically; you can also register them explicitly through FontManager. Use FontManager.GetRegisteredFonts() to inspect the available family names.

Please compare previous settings with the new defaults:

// previous behavior:
QuestPDF.Settings.UseSystemFonts = true;
QuestPDF.Settings.ThrowOnMissingFontFamilies = false;
QuestPDF.Settings.ThrowOnMissingTextGlyphs = false;
QuestPDF.Settings.EnableDetailedLayoutErrors = false;

// current behavior:
QuestPDF.Settings.UseSystemFonts = false;
QuestPDF.Settings.ThrowOnMissingFontFamilies = true;
QuestPDF.Settings.ThrowOnMissingTextGlyphs = true;
QuestPDF.Settings.EnableDetailedLayoutErrors = true;

Also review the deployment and API changes below. Renamed APIs remain available under their previous names, marked as obsolete with compiler warnings.

Covering additional languages

QuestPDF includes the bundled Lato font, which covers Latin, Greek, and Cyrillic scripts. For other scripts, such as Chinese, Japanese, Korean, Arabic, Hebrew, Thai, or emoji, we recommend additionally deploying the free, open-source Google Noto font family, registering it with FontManager, and configuring it as a font fallback in the default text style of the document.

// at application startup
FontManager.RegisterFontsFromDirectory("Fonts/Noto");

// in the document
Document.Create(document => 
{
    document.Page(page => 
    {
        page.DefaultTextStyle(style => style.FontFamily("Lato", "Noto Sans", "Noto Sans CJK SC", "Noto Emoji"));
    });
});

⚠️ Breaking changes

... (truncated)

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore.SwaggerGen from 10.2.3 to 10.3.0.

Release notes

Sourced from Swashbuckle.AspNetCore.SwaggerGen's releases.

10.3.0 What's Changed

Change nullability handling for schemas with anyOf, allOf, oneOf or type = null by @ldeluigi in Change nullability handling for schemas with anyOf, allOf, oneOf or type = null domaindrivendev/Swashbuckle.AspNetCore#3976
Handle leading slash on route prefix during index.html GET by @superstator in Handle leading slash on route prefix during index.html GET domaindrivendev/Swashbuckle.AspNetCore#4084
Move NRT handling to DataContractResolver by @desjoerd in Move NRT handling to DataContractResolver domaindrivendev/Swashbuckle.AspNetCore#3998
Clarify nullable behaviour by @martincostello in Clarify nullable behaviour domaindrivendev/Swashbuckle.AspNetCore#4094
Fix review issues for caching and encoding by @martincostello in Fix review issues for caching and encoding domaindrivendev/Swashbuckle.AspNetCore#4093
Support multiple response types per status code by @DeagleGross in Support multiple response types per status code domaindrivendev/Swashbuckle.AspNetCore#4100
Add coverage for AddServer across multiple documents by @RaphaelFakhri in Add coverage for AddServer across multiple documents domaindrivendev/Swashbuckle.AspNetCore#4115
Fix Swagger sort key fallback for empty endpoint tags metadata by @AleksaMCode in Fix Swagger sort key fallback for empty endpoint tags metadata domaindrivendev/Swashbuckle.AspNetCore#4125
Fix parameter matching to consider location when names collide by @nonsoikem in Fix parameter matching to consider location when names collide domaindrivendev/Swashbuckle.AspNetCore#4126
Emit form encoding for properties of a complex form parameter by @RaphaelFakhri in Fix #3169: emit form encoding for properties of a complex form parameter domaindrivendev/Swashbuckle.AspNetCore#4128
Keep a property's own summary when comments come from several XML files by @RaphaelFakhri in Fix #3240: keep a property's own summary when comments come from several XML files domaindrivendev/Swashbuckle.AspNetCore#4129
Strip query string from relative document URLs in Swagger UI by @GabeSilvaDev in Strip query string from relative document URLs in Swagger UI domaindrivendev/Swashbuckle.AspNetCore#4152
Document that System.Text.Json ignores [EnumMember] by @RaphaelFakhri in Document that System.Text.Json ignores [EnumMember] domaindrivendev/Swashbuckle.AspNetCore#4127
Drop the regex route constraint from the default Swagger route by @RaphaelFakhri in Fix #2951: drop the regex route constraint from the default Swagger route domaindrivendev/Swashbuckle.AspNetCore#4130
Serialize custom values in the UI ConfigObject.AdditionalItems by @RaphaelFakhri in Fix #3153: serialize custom values in the UI ConfigObject AdditionalItems domaindrivendev/Swashbuckle.AspNetCore#4132
Use Minimal APIs JSON options when MVC is not registered by @RaphaelFakhri in Use Minimal APIs JSON options when MVC is not registered domaindrivendev/Swashbuckle.AspNetCore#4116
Resolve enum contracts against the underlying type under source generation by @RaphaelFakhri in Fix #3217: resolve enum contracts against the underlying type under source generation domaindrivendev/Swashbuckle.AspNetCore#4131

New Contributors

@ldeluigi made their first contribution in Change nullability handling for schemas with anyOf, allOf, oneOf or type = null domaindrivendev/Swashbuckle.AspNetCore#3976
@superstator made their first contribution in Handle leading slash on route prefix during index.html GET domaindrivendev/Swashbuckle.AspNetCore#4084
@desjoerd made their first contribution in Move NRT handling to DataContractResolver domaindrivendev/Swashbuckle.AspNetCore#3998
@RaphaelFakhri made their first contribution in Add coverage for AddServer across multiple documents domaindrivendev/Swashbuckle.AspNetCore#4115
@AleksaMCode made their first contribution in Fix Swagger sort key fallback for empty endpoint tags metadata domaindrivendev/Swashbuckle.AspNetCore#4125
@nonsoikem made their first contribution in Fix parameter matching to consider location when names collide domaindrivendev/Swashbuckle.AspNetCore#4126
@GabeSilvaDev made their first contribution in Strip query string from relative document URLs in Swagger UI domaindrivendev/Swashbuckle.AspNetCore#4152
@JulianThoms made their first contribution in Add regression tests for nullable dynamic properties domaindrivendev/Swashbuckle.AspNetCore#4182

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.3...v10.3.0

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore.SwaggerUI from 10.2.3 to 10.3.0.

Release notes

Sourced from Swashbuckle.AspNetCore.SwaggerUI's releases.

10.3.0 What's Changed

Change nullability handling for schemas with anyOf, allOf, oneOf or type = null by @ldeluigi in Change nullability handling for schemas with anyOf, allOf, oneOf or type = null domaindrivendev/Swashbuckle.AspNetCore#3976
Handle leading slash on route prefix during index.html GET by @superstator in Handle leading slash on route prefix during index.html GET domaindrivendev/Swashbuckle.AspNetCore#4084
Move NRT handling to DataContractResolver by @desjoerd in Move NRT handling to DataContractResolver domaindrivendev/Swashbuckle.AspNetCore#3998
Clarify nullable behaviour by @martincostello in Clarify nullable behaviour domaindrivendev/Swashbuckle.AspNetCore#4094
Fix review issues for caching and encoding by @martincostello in Fix review issues for caching and encoding domaindrivendev/Swashbuckle.AspNetCore#4093
Support multiple response types per status code by @DeagleGross in Support multiple response types per status code domaindrivendev/Swashbuckle.AspNetCore#4100
Add coverage for AddServer across multiple documents by @RaphaelFakhri in Add coverage for AddServer across multiple documents domaindrivendev/Swashbuckle.AspNetCore#4115
Fix Swagger sort key fallback for empty endpoint tags metadata by @AleksaMCode in Fix Swagger sort key fallback for empty endpoint tags metadata domaindrivendev/Swashbuckle.AspNetCore#4125
Fix parameter matching to consider location when names collide by @nonsoikem in Fix parameter matching to consider location when names collide domaindrivendev/Swashbuckle.AspNetCore#4126
Emit form encoding for properties of a complex form parameter by @RaphaelFakhri in Fix #3169: emit form encoding for properties of a complex form parameter domaindrivendev/Swashbuckle.AspNetCore#4128
Keep a property's own summary when comments come from several XML files by @RaphaelFakhri in Fix #3240: keep a property's own summary when comments come from several XML files domaindrivendev/Swashbuckle.AspNetCore#4129
Strip query string from relative document URLs in Swagger UI by @GabeSilvaDev in Strip query string from relative document URLs in Swagger UI domaindrivendev/Swashbuckle.AspNetCore#4152
Document that System.Text.Json ignores [EnumMember] by @RaphaelFakhri in Document that System.Text.Json ignores [EnumMember] domaindrivendev/Swashbuckle.AspNetCore#4127
Drop the regex route constraint from the default Swagger route by @RaphaelFakhri in Fix #2951: drop the regex route constraint from the default Swagger route domaindrivendev/Swashbuckle.AspNetCore#4130
Serialize custom values in the UI ConfigObject.AdditionalItems by @RaphaelFakhri in Fix #3153: serialize custom values in the UI ConfigObject AdditionalItems domaindrivendev/Swashbuckle.AspNetCore#4132
Use Minimal APIs JSON options when MVC is not registered by @RaphaelFakhri in Use Minimal APIs JSON options when MVC is not registered domaindrivendev/Swashbuckle.AspNetCore#4116
Resolve enum contracts against the underlying type under source generation by @RaphaelFakhri in Fix #3217: resolve enum contracts against the underlying type under source generation domaindrivendev/Swashbuckle.AspNetCore#4131

New Contributors

@ldeluigi made their first contribution in Change nullability handling for schemas with anyOf, allOf, oneOf or type = null domaindrivendev/Swashbuckle.AspNetCore#3976
@superstator made their first contribution in Handle leading slash on route prefix during index.html GET domaindrivendev/Swashbuckle.AspNetCore#4084
@desjoerd made their first contribution in Move NRT handling to DataContractResolver domaindrivendev/Swashbuckle.AspNetCore#3998
@RaphaelFakhri made their first contribution in Add coverage for AddServer across multiple documents domaindrivendev/Swashbuckle.AspNetCore#4115
@AleksaMCode made their first contribution in Fix Swagger sort key fallback for empty endpoint tags metadata domaindrivendev/Swashbuckle.AspNetCore#4125
@nonsoikem made their first contribution in Fix parameter matching to consider location when names collide domaindrivendev/Swashbuckle.AspNetCore#4126
@GabeSilvaDev made their first contribution in Strip query string from relative document URLs in Swagger UI domaindrivendev/Swashbuckle.AspNetCore#4152
@JulianThoms made their first contribution in Add regression tests for nullable dynamic properties domaindrivendev/Swashbuckle.AspNetCore#4182

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.3...v10.3.0

Commits viewable in compare view.

Updated System.IdentityModel.Tokens.Jwt from 8.22.0 to 8.23.0.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

8.23.0 What's Changed

Backport configurable SHR p claim path comparison to 8.x by @debchoudhury-id4s in Backport configurable SHR p claim path comparison to 8.x AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3577
Backport SHR p-claim percent-encoding hex case handling to dev8x by @debchoudhury-id4s in Backport SHR p-claim percent-encoding hex case handling to dev8x AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3579
Reinstate Microsoft.IdentityModel.Protocols.WsTrust as a supported 8.x package by @iNinja in Reinstate Microsoft.IdentityModel.Protocols.WsTrust as a supported 8.x package AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3547
Include WS-Trust in build pipelines by @iNinja in Include WS-Trust in build pipelines AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3604
Log IDX10650 decryption-tag failures below Error during multi-key decryption by @RojaEnnam in Log IDX10650 decryption-tag failures below Error during multi-key decryption AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3582
Support ML-DSA AKP keys in JsonWebKeySet by @iNinja in Support ML-DSA AKP keys in JsonWebKeySet AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3597
Add Composite ML-DSA support (internal, gated) by @iNinja in Add Composite ML-DSA support (internal, gated) AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3596

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.22.0...8.23.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Google.Apis.Auth from 1.76.0 to 1.77.0 Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.11 to 10.0.12 Bumps Microsoft.AspNetCore.OpenApi from 10.0.11 to 10.0.12 Bumps Microsoft.EntityFrameworkCore.Design from 10.0.11 to 10.0.12 Bumps Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 10.0.11 to 10.0.12 Bumps Microsoft.IdentityModel.Tokens from 8.22.0 to 8.23.0 Bumps Microsoft.IdentityModel.Tokens.Saml from 8.22.0 to 8.23.0 Bumps QuestPDF from 2026.8.0 to 2026.9.1 Bumps Swashbuckle.AspNetCore.SwaggerGen from 10.2.3 to 10.3.0 Bumps Swashbuckle.AspNetCore.SwaggerUI from 10.2.3 to 10.3.0 Bumps System.IdentityModel.Tokens.Jwt from 8.22.0 to 8.23.0 --- updated-dependencies: - dependency-name: Google.Apis.Auth dependency-version: 1.77.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.IdentityModel.Tokens dependency-version: 8.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.IdentityModel.Tokens.Saml dependency-version: 8.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: QuestPDF dependency-version: 2026.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Swashbuckle.AspNetCore.SwaggerGen dependency-version: 10.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Swashbuckle.AspNetCore.SwaggerUI dependency-version: 10.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: System.IdentityModel.Tokens.Jwt dependency-version: 8.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 12, 2026

dependabot Bot mentioned this pull request Oct 12, 2026

Bump the minor-and-patch group with 9 updates #24

Closed

Navigation Menu

Repository navigation

Bump the minor-and-patch group with 11 updates - #26

Bump the minor-and-patch group with 11 updates#26
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/server/minor-and-patch-233544e517

dependabot Bot commented on behalf of github Oct 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 12, 2026

1.77.0

8.23.0

What's Changed

8.23.0

What's Changed

2026.9.1

2026.9.0

This release is dedicated to text handling improvements

Upgrading to 2026.9.0

Covering additional languages

⚠️ Breaking changes

10.3.0

What's Changed

New Contributors

10.3.0

What's Changed

New Contributors

8.23.0

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants