Skip to content

Bump the nuget-production group with 13 updates - #17

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/common/core/nuget-production-cad8eb4370
Open

Bump the nuget-production group with 13 updates#17
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/common/core/nuget-production-cad8eb4370

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026

Copy link
Copy Markdown
Contributor

Updated Azure.Monitor.OpenTelemetry.Exporter from 1.9.0 to 1.10.0.

Release notes

Sourced from Azure.Monitor.OpenTelemetry.Exporter's releases.

1.10.0

1.10.0 (2026-10-05)

Features Added

  • Added the Azure.Monitor.OpenTelemetry.Exporter.StorageSubDirectory AppContext value, settable with AppContext.SetData or a runtimeconfig.json configProperty, so that the processes or entry points of one application can share a persistent storage directory. By default the directory name is derived from the process name and AppContext.BaseDirectory, which splits storage when components of one application differ in either, and a component that runs rarely never drains its backlog. When set, the value replaces those two inputs; the instrumentation key and user name still contribute, so different users and resources stay isolated. Behaviour is unchanged when the value is not set.
    (#​62997)

Bugs Fixed

  • SDK statistics sent to the Microsoft OpenTelemetry distro's configured ingestion endpoint (the Azure.Monitor.OpenTelemetry.Exporter.RouteSdkStatsToDistroEndpoint AppContext switch) now carry the same region-matched SDK statistics instrumentation key as the existing SDK statistics endpoint, instead of an all-zero placeholder. Only the destination differs on the distro path.
    (#​63342)

1.10.0-beta.1

1.10.0-beta.1 (2026-09-16)

Features Added

  • Enable AOT compatibility validation for Azure Monitor OpenTelemetry Exporter
    (#​62850)

  • Multi-endpoint routing now maps the microsoft.multi_endpoint_cloud_role attribute to ai.cloud.role for traces and logs. Missing or invalid values use unknown_service, while ai.cloud.roleInstance remains host-derived. The attribute is read from Activity tags for traces and LogRecord.Attributes for logs, and only affects cloud role when multi-endpoint routing is enabled.
    (#​62909)

  • Added multi-endpoint routing for traces, off by default and enabled with the Azure.Monitor.OpenTelemetry.EnableMultiEndpointRouting AppContext switch. When enabled, an Activity carrying the microsoft.instrumentation_key and microsoft.ingestion_endpoint attributes is sent to that endpoint instead of the exporter's own; Activities without both attributes are dropped. Live Metrics is disabled while the switch is on, and sampling defaults to fixed-rate rather than rate-limited because a per-process rate limit would be shared across every destination the process carries. The switch cannot be combined with Microsoft Entra ID authentication, because the credential is scoped to the exporter's own audience and would be sent to endpoints supplied by telemetry.
    (#​62707)

  • Extended multi-endpoint routing to logs, off by default and enabled with the same Azure.Monitor.OpenTelemetry.EnableMultiEndpointRouting AppContext switch used for traces. When enabled, a LogRecord carrying the microsoft.instrumentation_key and microsoft.ingestion_endpoint attributes is sent to that endpoint instead of the exporter's own; log records without both attributes are dropped. The two routing attributes are consumed for routing and are not emitted as custom properties. Routing reads only LogRecord.Attributes, not logging scopes. Live Metrics disablement and the Microsoft Entra ID restriction that apply to multi-endpoint traces apply to logs as well, since both are enforced on the shared transmitter.
    (#​62885)

  • Extended multi-endpoint routing to metrics, off by default and enabled with the same Azure.Monitor.OpenTelemetry.EnableMultiEndpointRouting AppContext switch used for traces and logs. A measurement carrying the microsoft.instrumentation_key and microsoft.ingestion_endpoint dimensions is sent to that endpoint instead of the exporter's own; measurements without both are dropped. Unlike traces and logs, the routing values are supplied as dimensions at measurement time rather than stamped afterwards, because a metric's dimensions are part of its aggregation key: each destination becomes its own time series, and one instrument can feed several endpoints. Routing is applied per MetricPoint, the three routing dimensions are consumed rather than emitted as custom properties, and microsoft.multi_endpoint_cloud_role sets ai.cloud.role as it does for traces and logs. Standard metrics and performance counters are not collected while the switch is on: routed destinations are not sent standard metrics, and a process-scoped performance counter has no single owner among the destinations a routed process carries.
    (#​62957)

  • A connection string is no longer required when multi-endpoint routing is enabled. Routing takes every destination from the telemetry itself, so a process that only routes has no component of its own to name, and previously had to nominate one that received nothing. Telemetry carrying valid routing attributes is still sent to the endpoint it names; telemetry without them is dropped, as it already was. SDK statistics are not collected in this configuration, because they identify a component by instrumentation key and select their region from its ingestion endpoint, neither of which exists without a connection string. Behaviour is unchanged when a connection string is configured, and unchanged when the switch is off: a missing connection string is still an error.
    (#​63004)

Other Changes

  • Added self-diagnostics for multi-endpoint routing, including rejected telemetry, endpoint delivery, partition limits, and storage eviction.
    (#​62925)

Commits viewable in compare view.

Updated Azure.Storage.Blobs from 12.29.2 to 12.30.1.

Release notes

Sourced from Azure.Storage.Blobs's releases.

12.30.1

12.30.1 (2026-10-05)

Bugs Fixed

  • Fixed AuthenticatedRegionCryptoStream.Dispose() to be idempotent and thread-safe, so the buffer it rents is no longer returned to the shared ArrayPool<byte> more than once when the stream is disposed repeatedly or concurrently. Returning the same array twice allowed unrelated callers to rent the same array instance and corrupt each other's data.

12.30.0

12.30.0 (2026-09-28)

Features Added

  • Includes all features from 12.30.0-beta.1 and 12.30.0-beta.2.

Commits viewable in compare view.

Updated Azure.Storage.Files.DataLake from 12.27.1 to 12.28.0.

Release notes

Sourced from Azure.Storage.Files.DataLake's releases.

12.28.0

12.28.0 (2026-09-28)

Features Added

  • Includes all features from 12.28.0-beta.1

Commits viewable in compare view.

Updated coverlet.collector from 10.0.1 to 10.1.0.

Release notes

Sourced from coverlet.collector's releases.

10.1.0

Improvements

  • Publish Microsoft.Testing.Platform coverage messages from coverlet.MTP #​2019
  • Implement dynamic exclusion filters for assemblies (Coverlet.MTP) #​1946
  • Replace legacy .sln files with modern .slnx format #​1966
  • coverlet.console: add trace diagnostics and actionable warnings for instrumentation/hit/empty-result failures #​2005
  • Relax auto-property skip logic and improve coverage for records #​1941

Fixed

  • Fix coverlet.MTP does not collect coverage on the .NET Framework portion of a large project #​1980 #​1967
  • Fix Regression in branch coverage for lambda expressions #​1938
  • Fix When using "is" with "or" in pattern matching, branch coverage is lower than normal #​1979
  • Fix silent zero coverage on .NET Framework since 8.0.0 #​1985 by @​tobiwae
  • Fix Race condition between ProcessExit hit-file write and out-of-proc coverage read causes EndOfStreamException #​1987 #​1988 by @​bkoelman
  • Fix Regression TypeInitializationException when targeting .NET Framework - Could not load type 'System.Collections.Concurrent.ConcurrentBag #​2010
  • Fix use --config-file CLI arg in coverlet.MTP #​2030 by alexthornton1
  • Fix silently empty coverage for shared-framework assemblies missing from compileLibraries #​2032 by @​Eljees

Diff between 10.0.1 and 10.1.0

Commits viewable in compare view.

Updated Dapr.AspNetCore from 1.18.8 to 1.18.10.

Release notes

Sourced from Dapr.AspNetCore's releases.

1.18.10

What's Changed

This is a fix for a regression introduced in v1.18.9!

Full Changelog: dapr/dotnet-sdk@v1.18.9...v1.18.10

1.18.9

Update to v1.18.10 - there was a regression introduced in v1.18.9 and this package should be skipped.

What's Changed

Huge thanks to @​olitomlinson for his eagle eye in spotting and filing an issue for each of these perf improvements. He shared a benchmark with me against 1.18.4 and this release in his dapr-mq message queue implementation atop Dapr demonstrated a dramatic improvement when modeling 20 publish/relay cycles:

  • 54% fewer reads against runtime state
  • Because of #​1913, "not found" was cached and resulted in a single runtime read instead of 44 on a circuit subscription
  • Because of #​1914, there were no runtime reads incurred when publishing compared to a prior 21

Especially for implementations that favor heavy writes and updates, you should see similar improvement.

Full Changelog: dapr/dotnet-sdk@v1.18.8...v1.18.9

Commits viewable in compare view.

Updated Dapr.Client from 1.18.8 to 1.18.10.

Release notes

Sourced from Dapr.Client's releases.

1.18.10

What's Changed

This is a fix for a regression introduced in v1.18.9!

Full Changelog: dapr/dotnet-sdk@v1.18.9...v1.18.10

1.18.9

Update to v1.18.10 - there was a regression introduced in v1.18.9 and this package should be skipped.

What's Changed

Huge thanks to @​olitomlinson for his eagle eye in spotting and filing an issue for each of these perf improvements. He shared a benchmark with me against 1.18.4 and this release in his dapr-mq message queue implementation atop Dapr demonstrated a dramatic improvement when modeling 20 publish/relay cycles:

  • 54% fewer reads against runtime state
  • Because of #​1913, "not found" was cached and resulted in a single runtime read instead of 44 on a circuit subscription
  • Because of #​1914, there were no runtime reads incurred when publishing compared to a prior 21

Especially for implementations that favor heavy writes and updates, you should see similar improvement.

Full Changelog: dapr/dotnet-sdk@v1.18.8...v1.18.9

Commits viewable in compare view.

Updated Microsoft.Azure.Cosmos from 3.63.1 to 3.63.2.

Release notes

Sourced from Microsoft.Azure.Cosmos's releases.

3.63.2

See changelog for details.
NuGet: https://www.nuget.org/packages/Microsoft.Azure.Cosmos/3.63.2

Commits viewable in compare view.

Updated Microsoft.CST.DevSkim from 1.0.90 to 1.0.100.

Release notes

Sourced from Microsoft.CST.DevSkim's releases.

1.0.100

Changes:

  • ea92e6f3cc1a1482c39afbe2060aba7f77b74c48 Close SDL coverage gaps and fix rules that could never match (#​780) [ #​654, #​787 ]
  • 0169059213ec6f9ebc9976c88b91db68fe395a9d Fix quadratic backtracking in rule DS440011 (#​789)
  • a452aa506f80928b611c4c7bfe306b8115821aae Fix VS Code release publish failing with npm E401 (#​772)
  • 24e90f68355560b6c2152636c7cee425e4e6f3a3 Pin GitHub Actions to full-length commit SHAs (#​779)
  • e07864b08597b7b22e235292d121e51d32b81b9b Consolidate open Dependabot updates into one dependency bump (#​773) [ #​765, #​766, #​767, #​768, #​769 ]
  • 3592c088fcea88b6e25fa8d1d4e2ced4ca2954a5 Add Dependabot config that consolidates updates into a single PR (#​770)
  • db6dff6e6e34ec60202c3976b5f002d6e8ecaee6 Bump js-yaml from 4.1.1 to 4.3.0 in /DevSkim-VSCode-Plugin (#​762)
  • cb9950a1f8092896d167fc6f6b6b0a40a01c25e8 Bump markdown-it from 14.1.1 to 14.2.0 in /DevSkim-VSCode-Plugin (#​760)
  • a79045ed2e767c6c8873668096f063bbe768b4b3 Bump form-data from 4.0.5 to 4.0.6 in /DevSkim-VSCode-Plugin (#​758)
  • 751c1be02e13af109bbb2cbb3252167797ec17e7 Bump esbuild from 0.25.2 to 0.28.1 in /DevSkim-VSCode-Plugin (#​757)

This list of changes was auto generated.

Commits viewable in compare view.

Updated Moq from 4.20.72 to 4.21.0.

Release notes

Sourced from Moq's releases.

4.21.0

What's Changed

✨ Implemented enhancements

🐛 Fixed bugs

🔨 Other

New Contributors

Full Changelog: devlooped/moq@v4.20.72...v4.21.0

Sponsors

The following sponsors made this release possible: @​clarius, @​MFB-Technologies-Inc, @​sandrock, @​drivenet, @​Keflon, @​tbolon, @​rbnswartz, @​jfoshee, @​Mrxx99, @​eajhnsn1, @​Jonathan-Hickey, @​KenBonny, @​SimonCropp, @​agileworks-eu, @​arsdragonfly, @​vezel-dev, @​ChilliCream, @​4OTC, @​DominicSchell, @​adalon, @​torutek, @​mccaffers, @​SeikaLogiciel, @​wizardness, @​eska-gmbh, @​geodata-no.

Thanks 💜

Commits viewable in compare view.

Updated Refit from 16.1.0 to 16.3.0.

Release notes

Sourced from Refit's releases.

16.3.0

🗞️ What's Changed

✨ Features

  • reactiveui/refit@​053873c309b518d21aa128c246ff8c8b2e38bed4 feat(analyzers): explain why a method cannot generate and flag unbound route placeholders (#​2340) @​glennawatson

🔗 Full Changelog: reactiveui/refit@v16.2.0...v16.3.0

🙌 Contributions

💖 Thanks to all the contributors: @​glennawatson

16.2.0

🗞️ What's Changed

✨ Features

  • reactiveui/refit@​d864935e7f389e76cae04aecc8c8991712f8d050 feat(testing): add controllable streams, request capture and a test clock to Refit.Testing (#​2337) @​glennawatson
  • reactiveui/refit@​04187430b0a947b4d5d3280f3fd5ac6cfebe67c1 feat(bodies): typed JSON Lines uploads from IEnumerable and IAsyncEnumerable (#​2338) @​glennawatson

🧹 General Changes

  • reactiveui/refit@​2ecbf2a5613af71d6bcc51a7440a740f814685f1 chore: update packages, credit Refit's origins, remove stale files (#​2336) @​glennawatson
  • reactiveui/refit@​7aa89fa16df2a8c69811a07d5fca14d4121b999a chore: remove the Jekyll site files now that GitHub Pages redirects to reactiveui.net @​glennawatson

✅ Tests

  • reactiveui/refit@​a463e8a209976e19998d7c2125cd7829f6ebbc7c test(bodies): cover the remaining typed JSON Lines branches (#​2339) @​glennawatson

📝 Documentation

  • reactiveui/refit@​5d17ac99ebea81fe4c587c139297bf399c19145b docs(readme): name the programme behind each sponsor @​glennawatson
  • reactiveui/refit@​ceb75e82fb44241ca5f276b0d05dca44647c09bb docs(readme): link to the ReactiveUI sponsors page @​glennawatson
  • reactiveui/refit@​a330a6369aae657039cc075232608f4d20651da7 docs(readme): keep the README renderable on nuget.org @​glennawatson
  • reactiveui/refit@​176ebdbf5440f75e66961290769d8d006c99f4c1 docs: new Refit logo and official sponsor logos @​glennawatson
  • reactiveui/refit@​7333739298ab4994996f95d99724fff93b0616f5 docs(readme): credit OpenAI's Codex for Open Source support @​glennawatson

📦 Dependencies

  • reactiveui/refit@​b7ca0298c2b4c418e7b3b86fe659a5c3e31bc305 chore(deps): update dependency reactiveui.primitives to 8.1.0 (#​2334) renovate[bot]

🔗 Full Changelog: reactiveui/refit@v16.1.0...v16.2.0

🙌 Contributions

💖 Thanks to all the contributors: @​glennawatson

🤖 Automated services that contributed: renovate[bot]

Commits viewable in compare view.

Updated Refit.HttpClientFactory from 16.1.0 to 16.3.0.

Release notes

Sourced from Refit.HttpClientFactory's releases.

16.3.0

🗞️ What's Changed

✨ Features

  • reactiveui/refit@​053873c309b518d21aa128c246ff8c8b2e38bed4 feat(analyzers): explain why a method cannot generate and flag unbound route placeholders (#​2340) @​glennawatson

🔗 Full Changelog: reactiveui/refit@v16.2.0...v16.3.0

🙌 Contributions

💖 Thanks to all the contributors: @​glennawatson

16.2.0

🗞️ What's Changed

✨ Features

  • reactiveui/refit@​d864935e7f389e76cae04aecc8c8991712f8d050 feat(testing): add controllable streams, request capture and a test clock to Refit.Testing (#​2337) @​glennawatson
  • reactiveui/refit@​04187430b0a947b4d5d3280f3fd5ac6cfebe67c1 feat(bodies): typed JSON Lines uploads from IEnumerable and IAsyncEnumerable (#​2338) @​glennawatson

🧹 General Changes

  • reactiveui/refit@​2ecbf2a5613af71d6bcc51a7440a740f814685f1 chore: update packages, credit Refit's origins, remove stale files (#​2336) @​glennawatson
  • reactiveui/refit@​7aa89fa16df2a8c69811a07d5fca14d4121b999a chore: remove the Jekyll site files now that GitHub Pages redirects to reactiveui.net @​glennawatson

✅ Tests

  • reactiveui/refit@​a463e8a209976e19998d7c2125cd7829f6ebbc7c test(bodies): cover the remaining typed JSON Lines branches (#​2339) @​glennawatson

📝 Documentation

  • reactiveui/refit@​5d17ac99ebea81fe4c587c139297bf399c19145b docs(readme): name the programme behind each sponsor @​glennawatson
  • reactiveui/refit@​ceb75e82fb44241ca5f276b0d05dca44647c09bb docs(readme): link to the ReactiveUI sponsors page @​glennawatson
  • reactiveui/refit@​a330a6369aae657039cc075232608f4d20651da7 docs(readme): keep the README renderable on nuget.org @​glennawatson
  • reactiveui/refit@​176ebdbf5440f75e66961290769d8d006c99f4c1 docs: new Refit logo and official sponsor logos @​glennawatson
  • reactiveui/refit@​7333739298ab4994996f95d99724fff93b0616f5 docs(readme): credit OpenAI's Codex for Open Source support @​glennawatson

📦 Dependencies

  • reactiveui/refit@​b7ca0298c2b4c418e7b3b86fe659a5c3e31bc305 chore(deps): update dependency reactiveui.primitives to 8.1.0 (#​2334) renovate[bot]

🔗 Full Changelog: reactiveui/refit@v16.1.0...v16.2.0

🙌 Contributions

💖 Thanks to all the contributors: @​glennawatson

🤖 Automated services that contributed: renovate[bot]

Commits viewable in compare view.

Updated Roslynator.Analyzers from 5.0.0 to 5.0.1.

Release notes

Sourced from Roslynator.Analyzers's releases.

5.0.1

Fixed

  • Set Visual Studio extension InstallationTarget to API version [17.14,) so Marketplace publish succeeds (VsixPub0029; API 18.0 is experimental). Installable on Visual Studio 2022 17.14+ and Visual Studio 2026 (VS 2026 extension compatibility).
  • [CLI] Reference the compiled output of referenced projects that cannot be loaded into the workspace (for example F# projects), so their types are no longer reported as missing (CS0103/CS0246) during analysis (PR)
  • [CLI] Fix loading of analyzers that reference System.Composition on the .NET 10 SDK (PR)
  • Fix code fix for RCS1233 to add parentheses when the new &&/|| expression is an operand of an operator with higher precedence (e.g. a && b | c is now fixed to a && (b || c)) (PR)

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.34.0.3385 to 10.35.0.4138.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.35.0.4138

Release notes - .NET Analyzers - 10.35

Feature

NET-1313 Improve S3267: Suggest other LINQ methods instead of always Where
NET-4549 Update RSPEC before 10.35 release

False Positive

NET-87 Fix S6667 FP: Add an exception when rethrowing the exception
NET-1559 Fix S6966 FP: FluentValidation ValidateAndThrow should not be proposed
NET-3964 Fix S125 FP: Do not raise on comments that resemble code but are not
NET-4294 Fix S107 FP: Should not raise on constructors of dependency-injection managed types
NET-4310 Fix S8747 FP: Do not raise when data is backfilled via UpdateData
NET-4315 Fix S3453 FP: Should not raise on classes with static members and non-static nested types
NET-4415 Fix S8969 FP: redundant null-forgiving operator raised on ref-loop variables reassigned each iteration
NET-4466 Fix S6966 FP: Do not suggest a non-awaitable overload resolved via speculative rebind
NET-4546 Fix S6669 FP: overridden "format" rule parameter is ignored
NET-4556 Fix S1128 FP: SafeVisit abort silently drops necessary usings
NET-4634 Fix S9022 FP: Generic identity pass-through wrapper not implementing IEnumerable misclassified as a reshaping boundary
NET-4639 Fix S8717 FP: EF6 and EF Core referenced in the same compilation (in-progress migration)

False Negative

NET-4256 Fix S9022 FN: Include on owned-type navigation not detected as redundant
NET-4532 Fix S9022/S9023 FN: rule stays silent when the Include is used in a comparison, cast, or other common expression
NET-4541 Fix S5542 FN: Detect weak RSA signature padding

Bug

NET-4571 Fix AD0001: NRE in DoNotOverwriteCollectionElements
NET-4587 Fix AD0001: ArgumentNullException in ReleaseCorrectReaderWriterLockBase (S7131)
NET-4588 Fix AD0001: ArgumentNullException in FirstSingleShouldBeUsedOnNonEmptyCollectionBase (S7130)
NET-4636 Fix S6966 AD0001: NullReferenceException on null-conditional calls followed by an indexer

Maintenance

NET-4370 Drop backward compatibility with S4NET below 5.2
NET-4540 Update MSTest to 4.4.0
NET-4550 Bump version to 10.35
NET-4555 Update SonarSource/sonar-scanner-engine monorepo to v13.11.0.5929
NET-4558 Create SLCORE ticket instead of SLVSCODE and SLI on release
NET-4579 ShimLayer Generator: Remove old BasicBlock and ControlFlowBranch
NET-4580 Update dependency Microsoft.NET.Test.Sdk to 18.10.0
NET-4596 Update dependency org.codehaus.mojo:build-helper-maven-plugin to v3.6.2
NET-4597 Update dependency Verify.MSTest to 32.0.1
NET-4622 Update SonarSource/sonar-scanner-engine monorepo to v13.13.0.6016
NET-4628 Update dependency Microsoft.NET.Test.Sdk to 18.10.1
NET-4631 Update MSTest to 4.4.1
NET-4632 Harden S1144: internal-type usage scan no longer trusts partial SafeVisit walks
NET-4637 Update protocolbuffers/protobuf monorepo to v4.36.2
NET-4663 Restore sonar-csharp-enterprise-plugin minsize to 6200000

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the nuget-production group with 13 updates
d2a733b 
Bumps Azure.Monitor.OpenTelemetry.Exporter from 1.9.0 to 1.10.0
Bumps Azure.Storage.Blobs from 12.29.2 to 12.30.1
Bumps Azure.Storage.Files.DataLake from 12.27.1 to 12.28.0
Bumps coverlet.collector from 10.0.1 to 10.1.0
Bumps Dapr.AspNetCore from 1.18.8 to 1.18.10
Bumps Dapr.Client from 1.18.8 to 1.18.10
Bumps Microsoft.Azure.Cosmos from 3.63.1 to 3.63.2
Bumps Microsoft.CST.DevSkim from 1.0.90 to 1.0.100
Bumps Moq from 4.20.72 to 4.21.0
Bumps Refit from 16.1.0 to 16.3.0
Bumps Refit.HttpClientFactory from 16.1.0 to 16.3.0
Bumps Roslynator.Analyzers from 5.0.0 to 5.0.1
Bumps SonarAnalyzer.CSharp from 10.34.0.3385 to 10.35.0.4138

---
updated-dependencies:
- dependency-name: Azure.Monitor.OpenTelemetry.Exporter
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Azure.Storage.Blobs
  dependency-version: 12.30.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Azure.Storage.Blobs
  dependency-version: 12.30.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Azure.Storage.Blobs
  dependency-version: 12.30.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Azure.Storage.Blobs
  dependency-version: 12.30.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Azure.Storage.Files.DataLake
  dependency-version: 12.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Azure.Storage.Files.DataLake
  dependency-version: 12.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: coverlet.collector
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: coverlet.collector
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: coverlet.collector
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Dapr.AspNetCore
  dependency-version: 1.18.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production
- dependency-name: Dapr.Client
  dependency-version: 1.18.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production
- dependency-name: Dapr.AspNetCore
  dependency-version: 1.18.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production
- dependency-name: Dapr.Client
  dependency-version: 1.18.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production
- dependency-name: Dapr.Client
  dependency-version: 1.18.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production
- dependency-name: Microsoft.Azure.Cosmos
  dependency-version: 3.63.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production
- dependency-name: Microsoft.CST.DevSkim
  dependency-version: 1.0.100
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production
- dependency-name: Microsoft.CST.DevSkim
  dependency-version: 1.0.100
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production
- dependency-name: Microsoft.CST.DevSkim
  dependency-version: 1.0.100
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production
- dependency-name: Moq
  dependency-version: 4.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Moq
  dependency-version: 4.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Moq
  dependency-version: 4.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Moq
  dependency-version: 4.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Refit
  dependency-version: 16.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Refit
  dependency-version: 16.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Refit
  dependency-version: 16.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Refit.HttpClientFactory
  dependency-version: 16.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: Roslynator.Analyzers
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production
- dependency-name: Roslynator.Analyzers
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production
- dependency-name: Roslynator.Analyzers
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.35.0.4138
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.35.0.4138
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.35.0.4138
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 8, 2026
@dependabot
dependabot Bot requested a review from FlorisDeVries as a code owner October 8, 2026 09:04
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Oct 8, 2026
@dependabot dependabot Bot mentioned this pull request Oct 8, 2026
Closed

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@FlorisDeVries FlorisDeVries Awaiting requested review from FlorisDeVries FlorisDeVries is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants