Skip to content

Bump the dotnet-platform group with 6 updates#637

Merged
PrzemyslawKlys merged 1 commit into
v2-speedygonzalesfrom
dependabot/nuget/Sources/Mailozaurr.Application/dotnet-platform-2838d3be02
Jul 20, 2026
Merged

Bump the dotnet-platform group with 6 updates#637
PrzemyslawKlys merged 1 commit into
v2-speedygonzalesfrom
dependabot/nuget/Sources/Mailozaurr.Application/dotnet-platform-2838d3be02

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.Extensions.Hosting from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Client from 4.86.0 to 4.86.1.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.86.1

Bug Fixes

  • Fixed the mTLS Proof-of-Possession token cache to key on the certificate's full DER (x5t#S256) instead of only the public key, preventing a stale token (and AADSTS500181) after a same-key certificate renewal. #​6123
  • Fell back to RS256 when a certificate's PSS signing operation is rejected by RSACryptoServiceProvider, rebuilding the client assertion so authentication can proceed. #​6126
  • Detect and reject symbolic links in the Unix cache-file write path (lstat pre-check plus O_NOFOLLOW), closing a TOCTOU window. #​6115
  • Corrected misleading "region required" error messages and doc comments in the mTLS PoP flow. #​6127

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.8.1

What's Changed

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0

What's Changed

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

Commits viewable in compare view.

Updated System.CommandLine from 2.0.9 to 2.0.10.

Release notes

Sourced from System.CommandLine's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated System.Security.Cryptography.ProtectedData from 10.0.9 to 10.0.10.

Release notes

Sourced from System.Security.Cryptography.ProtectedData's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated System.Text.Json from 10.0.9 to 10.0.10.

Release notes

Sourced from System.Text.Json's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Microsoft.Extensions.Hosting from 10.0.9 to 10.0.10
Bumps Microsoft.Identity.Client from 4.86.0 to 4.86.1
Bumps Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1
Bumps System.CommandLine from 2.0.9 to 2.0.10
Bumps System.Security.Cryptography.ProtectedData from 10.0.9 to 10.0.10
Bumps System.Text.Json from 10.0.9 to 10.0.10

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-platform
- dependency-name: Microsoft.Identity.Client
  dependency-version: 4.86.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-platform
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-platform
- dependency-name: System.CommandLine
  dependency-version: 2.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-platform
- dependency-name: System.Security.Cryptography.ProtectedData
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-platform
- dependency-name: System.Text.Json
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-platform
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jul 20, 2026
@codecov

codecov Bot commented Jul 20, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 52.09%. Comparing base (feda487) to head (2b7748e).

Additional details and impacted files
@@                Coverage Diff                 @@
##           v2-speedygonzales     #637   +/-   ##
==================================================
  Coverage              52.09%   52.09%           
==================================================
  Files                    550      550           
  Lines                  33857    33857           
  Branches                5798     5798           
==================================================
  Hits                   17637    17637           
  Misses                 13920    13920           
  Partials                2300     2300           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@PrzemyslawKlys
PrzemyslawKlys merged commit 9917510 into v2-speedygonzales Jul 20, 2026
8 checks passed
@PrzemyslawKlys
PrzemyslawKlys deleted the dependabot/nuget/Sources/Mailozaurr.Application/dotnet-platform-2838d3be02 branch July 20, 2026 07:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant