Skip to content

Bump Akka.Hosting.TestKit and Microsoft.Extensions.Hosting#66

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/nuget/dev/multi-201c6bbb42
Open

Bump Akka.Hosting.TestKit and Microsoft.Extensions.Hosting#66
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/nuget/dev/multi-201c6bbb42

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 19, 2026

Updated Akka.Hosting.TestKit from 1.5.67 to 1.5.68.

Release notes

Sourced from Akka.Hosting.TestKit's releases.

1.5.68

1.5.68 May 18th 2026

Security Fixes

  • Resolve GHSA-g94r-2vxg-569j by bumping OpenTelemetry minimum to 1.10.0 - OpenTelemetry.Api 1.9.0 has a known moderate severity vulnerability. The minimum OpenTelemetry version floor has been raised from 1.9.0 to 1.10.0, and the Microsoft.Extensions.Logging floor has been raised to 9.0.0. Downstream consumers that previously resolved to the vulnerable OpenTelemetry.Api 1.9.0 will now pull the safe 1.10.0 release.

Bug Fixes

  • Fix implicit-sender leak under xUnit v3 parallel execution in Akka.Hosting.TestKit - Under xUnit v3's default parallel-class scheduling, await continuations could resume on ThreadPool threads where a sibling test had pinned its actor cell, causing Tell() to use the wrong implicit sender and replies to land in the wrong TestActor's mailbox. A new wrapping SynchronizationContext preserves xUnit's scheduler while pinning the ambient actor cell across await continuations.
  • Fix SynchronizationContext leak and TestActor startup race in Akka.Hosting.TestKit - Two compounding sources of flakiness in sequential xUnit v3 suites: (1) the ActorCellKeepingSynchronizationContext installed during host startup leaked out of the initialization callback and was inherited by subsequent tests, pinning continuations onto disposed ActorCells; (2) the TestActor created during host startup was intermittently terminated by a race with other /system actors starting concurrently. Fixed by bracketing the context installation with a save/restore and adding post-startup TestActor liveness verification with automatic re-creation.
  • Fix cached TestProbe refs becoming stale after TestActor recovery in Akka.Hosting.TestKit - Actors created during WithActors could cache IRequiredActor<TestProbe>.ActorRef before recovery ran. Re-registering a new raw TestActor in ActorRegistry did not update those cached refs. TestProbe is now registered via a stable forwarding actor whose target is swapped atomically after recovery, ensuring all cached references remain valid.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 8.0.0 to 9.0.0.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

9.0.0

Release

What's Changed

9.0.0-rc.2.24473.5

Release

9.0.0-rc.1.24431.7

Release

9.0.0-preview.7.24405.7

Release

9.0.0-preview.5.24306.7

Release

9.0.0-preview.4.24266.19

Release

9.0.0-preview.3.24172.9

Release

9.0.0-preview.2.24128.5

[Release[(https://github.com/dotnet/core/releases/tag/v9.0.0-preview.2)

9.0.0-preview.1.24080.9

Release

8.0.27

Release

8.0.26

Release

What's Changed

Full Changelog: dotnet/runtime@v8.0.25...v8.0.26

8.0.25

Release

8.0.24

Release

What's Changed

Full Changelog: dotnet/runtime@v8.0.23...v8.0.24

8.0.23

Release

8.0.22

Release

What's Changed

Full Changelog: dotnet/runtime@v8.0.21...v8.0.22

8.0.21

Release

What's Changed

Full Changelog: dotnet/runtime@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

Full Changelog: dotnet/runtime@v8.0.19...v8.0.20

8.0.19

Release

What's Changed

Full Changelog: dotnet/runtime@v8.0.18...v8.0.19

8.0.18

Release

What's Changed

Full Changelog: dotnet/runtime@v8.0.17...v8.0.18

8.0.17

Bug Fixes

  • Work around MSVC miscompiling sgen_clz (#​114904)
    Addresses an issue where the Microsoft Visual C++ (MSVC) compiler was miscompiling the sgen_clz function in Mono. This workaround ensures correct behavior and stability for affected builds.

  • Fix Idn tests (#​115030)
    Resolves issues in the Internationalized Domain Name (Idn) tests, improving test reliability and ensuring accurate validation of related functionality.

  • Handle OSSL 3.4 change to SAN:othername formatting (#​115367)
    Updates the handling of Subject Alternative Name (SAN) formatting to accommodate changes introduced in OpenSSL 3.4. This ensures compatibility and correct certificate processing.

  • Don't expose TrustedCertificatesDirectory() and StartNewTlsSessionContext() to NetFx (#​115008)
    Prevents certain internal APIs from being exposed to .NET Framework (NetFx), reducing the risk of unintended usage and improving API surface consistency.

  • Fix line endings (#​115414)
    Corrects line ending inconsistencies in the codebase, which helps prevent cross-platform issues and improves code readability.

Performance Improvements

  • Improve distribute_free_regions (#​115023)
    Optimizes the algorithm for distributing free memory regions, leading to better memory management and potentially improved application performance.

Technical Improvements

  • Strip trailing slash from source dir for cmake4 (#​114906)
    Refines the build process by removing unnecessary trailing slashes from source directory paths when using CMake 4, reducing potential build errors and improving consistency.

  • Add support for more libicu versions (#​115378)
    Expands compatibility by supporting additional versions of the International Components for Unicode (ICU) library, enhancing globalization features across more environments.

Infrastructure

  • Update dependencies from dotnet/arcade (#​114441)
    Refreshes build and engineering dependencies from the Arcade repository, ensuring the latest tooling and infrastructure improvements are incorporated.

  • Migrate MacCatalyst and iOS/tvOS simulator jobs to new queues (#​114633)
    Moves MacCatalyst and iOS/tvOS simulator jobs to updated build queues (osx.14.arm64.open and osx.15.amd64.open), improving build reliability and aligning with current infrastructure standards.

  • Run outerloop pipeline only for release branches (#​115012)
    Adjusts CI pipeline triggers so that the outerloop pipeline runs only for release branches, reducing unnecessary builds and streamlining the development workflow.

  • Update OpenSUSE (#​115028)
    Updates support for the OpenSUSE Linux distribution, ensuring compatibility and up-to-date platform support.

  • Update dependencies from dotnet/emsdk (#​114830)
    Updates the Emscripten SDK dependencies, improving WebAssembly build support and incorporating the latest fixes and features.

  • Update MacOS signing to use PME (#​115633)
    Switches MacOS code signing to use PME (Public Managed Environment), enhancing security and compliance for MacOS builds.

... (truncated)

8.0.16

Release

What's Changed

Full Changelog: dotnet/runtime@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/runtime@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/runtime@v8.0.13...v8.0.14

8.0.13

[Release](https://github.com/dotnet/core/releases/tag/v8.0.13

What's Changed

Full Changelog: dotnet/runtime@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Full Changelog: dotnet/runtime@v8.0.11...v8.0.12

8.0.11

Release

What's Changed

Full Changelog: dotnet/runtime@v8.0.10...v8.0.11

8.0.10

Release

8.0.8

Release

8.0.7

Release

8.0.6

Release

8.0.5

Release

What's Changed

8.0.4

Release

8.0.3

Release

8.0.2

Release

8.0.1

Release

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps Akka.Hosting.TestKit from 1.5.67 to 1.5.68
Bumps Microsoft.Extensions.Hosting from 8.0.0 to 9.0.0

---
updated-dependencies:
- dependency-name: Akka.Hosting.TestKit
  dependency-version: 1.5.68
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels May 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants