Bump the all-updates group with 16 updates

[dependabot]

Updated dotnet-ef from 10.0.9 to 10.0.10.

Release notes

Sourced from dotnet-ef's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Proxies from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Proxies's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Sqlite from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.SqlServer from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.EntityFrameworkCore.SqlServer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Tools from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Tools's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Abstractions from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Configuration.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 4.12.1 to 4.13.2.

Release notes

Sourced from Microsoft.Identity.Web's releases.

4.13.2

What's Changed

• Apply reserved-header handling on the request-clone path and cover all X-MS-TOKEN- headers by @​iNinja in Apply reserved-header handling on the request-clone path and cover all X-MS-TOKEN- headers AzureAD/microsoft-identity-web#3915
• Restore independent PR pipeline + pool-aware MI identity + net462/472 unit tests by @​iarekk in Restore independent PR pipeline + pool-aware MI identity + net462/472 unit tests AzureAD/microsoft-identity-web#3935
• Post-release 4.13.0: changelog and public API shipped move by @​neha-bhargava in Post-release 4.13.0: changelog and public API shipped move AzureAD/microsoft-identity-web#3937
• Remove redundant 'Run unit tests' GitHub Action by @​iarekk in Remove redundant 'Run unit tests' GitHub Action AzureAD/microsoft-identity-web#3939
• Apply consistent redirect-URI validation on AccountController.SignIn by @​iNinja in Apply consistent redirect-URI validation on AccountController.SignIn AzureAD/microsoft-identity-web#3940
• Fix duplicate logging of MsalUiRequiredException (in-repo copy of #​3910) by @​iarekk in Fix duplicate logging of MsalUiRequiredException (in-repo copy of #3910) AzureAD/microsoft-identity-web#3941
• Use MSAL's recent UserFIC API for agentic flows by @​Avery-Dunn in Use MSAL's recent UserFIC API for agentic flows AzureAD/microsoft-identity-web#3842
• Restore CustomizeHttpRequestMessage to run after the authorization header by @​neha-bhargava in Restore CustomizeHttpRequestMessage to run after the authorization header AzureAD/microsoft-identity-web#3943
• Bump Microsoft.IdentityModel.Tokens.Saml from 5.7.0 to 8.19.1 by @​dependabot[bot] in Bump Microsoft.IdentityModel.Tokens.Saml from 5.7.0 to 8.19.1 AzureAD/microsoft-identity-web#3909
• Revert #​3909: keep OWIN Saml/WsFederation on 5.7.0 by @​iarekk in Revert #3909: keep OWIN Saml/WsFederation on 5.7.0 AzureAD/microsoft-identity-web#3944
• Bump Microsoft.Identity.Abstractions from 12.4.0 to 12.5.0 by @​neha-bhargava in Bump Microsoft.Identity.Abstractions from 12.4.0 to 12.5.0 AzureAD/microsoft-identity-web#3947
• Add OnBeforeAuthHeaderCreation / OnAfterAuthHeaderCreation hooks to DownstreamApi by @​neha-bhargava in Add OnBeforeAuthHeaderCreation / OnAfterAuthHeaderCreation hooks to DownstreamApi AzureAD/microsoft-identity-web#3942
• Update IdentityModelV5Version and SamlPackageVersion to 5.7.1 in proj… by @​trwalke in Update IdentityModelV5Version and SamlPackageVersion to 5.7.1 in proj… AzureAD/microsoft-identity-web#3950
• Rename retired MSALMSIV2 agent pool to MISEManagedIdentity by @​gladjohn with @​Copilot in Rename retired MSALMSIV2 agent pool to MISEManagedIdentity AzureAD/microsoft-identity-web#3949
• Improve IDW10109 error handling for credential loading failures by @​Avery-Dunn in Improve IDW10109 error handling for credential loading failures AzureAD/microsoft-identity-web#3946
• Bump MSAL dependencies to 4.86.1 in central props by @​gladjohn with @​Copilot in Bump MSAL dependencies to 4.86.1 in central props AzureAD/microsoft-identity-web#3953
• Bump the notsecurity group with 3 updates by @​dependabot[bot] in Bump the notsecurity group with 3 updates AzureAD/microsoft-identity-web#3954

Full Changelog: AzureAD/microsoft-identity-web@4.13.0...4.13.2

4.13.0

What's Changed

• Categorize managed-identity E2E tests and exclude them from the PR build by @​iarekk in Categorize managed-identity E2E tests and exclude them from the PR build AzureAD/microsoft-identity-web#3923
• Add more tests for TokenAcquisitionMetadata.ExpiresOn from AuthenticationResult by @​neha-bhargava in Add more tests for TokenAcquisitionMetadata.ExpiresOn from AuthenticationResult AzureAD/microsoft-identity-web#3904
• Test: consolidate MI E2E test onto shared Msal_Integration_tests UAMI by @​RyAuld in Test: consolidate MI E2E test onto shared Msal_Integration_tests UAMI AzureAD/microsoft-identity-web#3926
• docs: Credential architecture internals documentation by @​gladjohn in docs: Credential architecture internals documentation AzureAD/microsoft-identity-web#3886
• Potential fix for code scanning alert no. 35: Missing cross-site request forgery token validation by @​gladjohn in Potential fix for code scanning alert no. 35: Missing cross-site request forgery token validation AzureAD/microsoft-identity-web#3929
• Register IAuthorizationHeaderProvider2 in DI by @​neha-bhargava in Register IAuthorizationHeaderProvider2 in DI AzureAD/microsoft-identity-web#3927
• Bump Microsoft.Identity.Client to 4.86.0 by @​neha-bhargava in Bump Microsoft.Identity.Client to 4.86.0 AzureAD/microsoft-identity-web#3931
• Split PR pipeline into independent net8 stages; add MI E2E stage on MSALMSIV2 by @​iarekk in Split PR pipeline into independent net8 stages; add MI E2E stage on MSALMSIV2 AzureAD/microsoft-identity-web#3933
• Run missing unit test projects in the ADO PR build by @​iarekk in Run missing unit test projects in the ADO PR build AzureAD/microsoft-identity-web#3934
• Revert PRs #​3933 and #​3934: restore single-job PR pipeline by @​gladjohn with @​Copilot in Revert PRs #3933 and #3934: restore single-job PR pipeline AzureAD/microsoft-identity-web#3936

Full Changelog: AzureAD/microsoft-identity-web@4.12.2...4.13.0

4.12.2

Bug fixes

• Make the Microsoft.Identity.Client.KeyAttestation dependency conditional on modern .NET (.NETCoreApp) targets. It transitively pulls the native-only Microsoft.Azure.Security.KeyGuardAttestation package, which ships no .NET Framework/netstandard-compatible assets and broke NuGet restore for .NET Framework (packages.config) projects. Microsoft.Identity.Web.Certificateless now multi-targets, and .NET Framework consumers use the netstandard2.0 asset without this dependency. See #​3894.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.8.1

What's Changed

• Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) by @​nohwnd in Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) microsoft/vstest#16281

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0

What's Changed

• Migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) by @​nohwnd in feat: migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) microsoft/vstest#15687
  • For more detail refer to https://devblogs.microsoft.com/dotnet/vs-test-is-removing-its-newtonsoft-json-dependency/
• Create source-only filter package by @​Youssef1313 in Create source-only filter package microsoft/vstest#15638
• Add ARM64 msdia140.dll support to test platform packages by @​nohwnd in Cherry-pick: Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15692
• Fix mutex cleanup crash on macOS/Linux by @​nohwnd in Fix mutex cleanup crash on macOS/Linux microsoft/vstest#15684
• Restrict artifact temp directory permissions on Unix by @​nohwnd in Restrict artifact temp directory permissions on Unix microsoft/vstest#15729
• Add support for filtering uncategorized tests with TestCategory=None by @​Evangelink in Add support for filtering uncategorized tests with TestCategory=None microsoft/vstest#15727
• Fix SCI binding failure in DTA hosts (main) by @​nohwnd in Fix SCI binding failure in DTA hosts (main) microsoft/vstest#15724
• Fix HTML logger parallel file collision by @​nohwnd in [fix] Fix HTML logger parallel file collision microsoft/vstest#15435
• Improve error message when testhost cannot be found by @​nohwnd in [fix] Improve error message when testhost cannot be found microsoft/vstest#16053
• Fix HTML logger exception on invalid XML chars in test display names by @​nohwnd in [fix] Fix HTML logger exception on invalid XML chars in test display names microsoft/vstest#16051

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

Commits viewable in compare view.

Updated Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.2 to 10.0.3.

Release notes

Sourced from Npgsql.EntityFrameworkCore.PostgreSQL's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Radzen.Blazor from 11.1.0 to 11.1.5.

Release notes

Sourced from Radzen.Blazor's releases.

11.1.5

11.1.5 - 2026-07-15

Improvements

• RadzenScheduler view titles - new TitleFormat and TitleFormatter parameters on the scheduler views give full control over each view's title: a format string, or a formatter function for complete customization.

Fixes

• RadzenSpreadsheet - reading an XLSX file with more than 100 rows or columns no longer throws "Row index is out of range". Each sheet is now sized from its actual used range instead of a fixed 100x100 grid.
• RadzenColorPicker - no longer stuck in color-picking mode when a native browser drag interrupts dragging. Fixes #​2610.
• JS interop - component create functions now return a no-op disposable instead of null when the element reference has already been released (component disposed, or navigation before OnAfterRenderAsync interop completes), avoiding "Cannot create a JSObjectReference from the value 'null'".

11.1.4

11.1.4 - 2026-07-13

Improvements

• RadzenPivotDataGrid group limits — new MaxGroups and OthersLabel properties on RadzenPivotRow and RadzenPivotColumn limit the number of row or column groups displayed at each level. The most significant groups (ranked by the sorted aggregate or the first aggregate) are kept and the remaining items are combined into a single localizable "Others" group. Fixes #​2470.
• RadzenChartRangeNavigator and RadzenRangeNavigator handle label formatting — new HandleLabelFormatter property accepts a formatter function (receiving a DateTime for date ranges or a double for numeric ranges) for full control over the handle labels, taking precedence over HandleLabelFormatString. Fixes #​2617.
• RadzenDropDown, RadzenListBox and RadzenDropDownDataGrid loading state — IsLoading and LoadingTemplate are now available on DropDown and ListBox, and DropDownDataGrid forwards its LoadingTemplate to the inner DataGrid. Thanks to @​artnim!

Fixes

• RadzenChart: fixed an infinite loop in the chart tooltip disposal that could permanently pin a CPU core when a chart tooltip was opened during prerendering (e.g. a sparkline with a data point near the top-left corner of the plot). Chart tooltips now open only in response to actual mouse interaction over the chart.
• RadzenSplitter: the collapse and expand buttons no longer start a drag resize on pointer down. Fixes #​2616.

11.1.3

11.1.3 - 2026-07-10

Improvements

• RadzenSpreadsheet culture-aware editing, display and formulas — the spreadsheet now honors the component's inherited Culture (exposed as a new Workbook.Culture property, defaulting to the current culture). It drives cell input parsing (including comma-decimal entry like 10,50 and day-month date handling), edit and display rendering, number formats (separators, month names and AM/PM designators follow the culture while format codes stay canonical), formula entry and display with Excel FormulaLocal semantics (; argument separators and , decimals in comma-decimal cultures), and dialog input for data validation, conditional formats and filters. XLSX and CSV files continue to read and write canonical invariant values regardless of the workbook culture, and malformed formulas now surface as formula errors instead of throwing. Includes new localization demos for Spreadsheet and Document Processing. Note: headless code on non-en-US hosts now parses string values with the host culture — set Workbook.Culture explicitly (e.g. to InvariantCulture) for host-independent processing.
• RadzenSpreadsheet protected sheets — pasting into unlocked cells of a protected sheet is now allowed. Paste is blocked only when the selection contains a locked cell, and cut & paste can no longer bypass sheet protection. Thanks to @​panoskentros! Fixes #​2609.
• RadzenChart data labels — each series data label group now carries a data-seriesindex attribute, making it possible to establish a direct link between a series and its labels. Thanks to @​wimsoetens-cmd!

Fixes

• RadzenChart: the tooltip is no longer clipped at the chart edge and tooltip placement is now RTL-aware.
• RadzenSlider: the slider now initializes correctly when it starts disabled and is enabled at runtime.

11.1.2

11.1.2 - 2026-07-06

Improvements

• RadzenSpeechToTextButton — speech recognition now automatically restarts when the browser ends it prematurely (browsers stop the Web Speech API session after a pause in speech), so dictation keeps going until you actually stop it.
• Further accessibility improvements: decorative icons across components — Accordion, Chip, ColorPicker, DataGrid, DropDownDataGrid, Fieldset, Menu, PanelMenu, Panel, ProfileMenu, SelectBar, Sidebar, Tabs, Upload, HtmlEditor and Spreadsheet — are now hidden from screen readers with aria-hidden.

Fixes

• RadzenChart: an additional value axis no longer shows category axis labels when its series is hidden (e.g. via a legend click) — the axis keeps its own numeric scale, for both bar and column series. Fixes #​2607.

11.1.1

11.1.1 - 2026-07-06

Improvements

• RadzenChart axis Width — new property that sets the axis width in pixels. If not specified, the width is calculated automatically; setting a fixed width helps reduce unnecessary spacing when using multiple Y-axes. Thanks to @​wimsoetens-cmd!
• RadzenQRCode / RadzenBarcode / RadzenChart ToPng — can now return the PNG data directly and accept output size options.
• RadzenSpreadsheet Excel-style clipboard — pasting a copied range into a larger selection now tiles the copied cells to fill the selection, and paste, cut and autofill transfer the full cell state, matching Excel: formats, quote prefixes and hyperlinks are copied, empty source cells blank their destinations, cut clears the source, entering a value over a formula cell replaces the formula, and undo restores cells exactly as captured.
• RadzenSpreadsheet column auto-fit — double-clicking a column edge resizes the column to fit its longest cell (capped at 800px).
• RadzenDropDown / RadzenDropDownDataGrid — new public OpenPopup(), ClosePopup() and TogglePopup() methods.
• Localization: more built-in strings are now localizable (Pager, DataGrid, DatePicker, HtmlEditor table dialogs, Dialog, Notification, Slider, Steps and more), with updated German, Spanish, French, Italian and Japanese translations.
• Further accessibility improvements across components — AutoComplete, Alert, BreadCrumb, Carousel, CheckBox, Dialog, DropDown and more — plus unified focus-outline styles for ListBox, Pager, ProfileMenu, SelectBar, SplitButton and Tabs.

Fixes

• RadzenRequiredValidator: no longer shows the "required" message for a filled RadzenTextBox / RadzenTextArea / RadzenPassword / RadzenMask / RadzenAutoComplete on blur and no longer blocks form submission. Fixes #​2605.
• RadzenSpreadsheet: XLSX column widths no longer render too narrow in Excel — auto-fitted columns are measured against the rendered text using Excel's font metrics, account for East Asian wide glyphs, and are slightly over-fitted to absorb renderer differences.
• RadzenChart: multiple value axes with RadzenBarSeries no longer behave like category axes. Fixes #​2597.
• RadzenChart: fixed crosshair label formatting and null handling at axis edges.
• RadzenChart: the legend line swatch now uses the custom series stroke color.
• RadzenPieSeries: fixed the pie not displaying anything in certain scenarios.
• RadzenPivotDataGrid: Sum/Average aggregates no longer degrade to Count for dynamic data (e.g. IDictionary) — the configured aggregate Type is used when reflection cannot resolve the property type.
• RadzenDataGrid: escaped the popup id in setPopupAriaExpanded to fix a querySelector error with dynamically generated columns.

Breaking changes

• RangeSnapshotCommandBase (Spreadsheet) now snapshots cells as detached clones (Dictionary<CellRef, Cell?>) instead of a value/formula/format tuple — only affects code deriving from this class.

Commits viewable in compare view.

Updated Sentry.AspNetCore from 6.6.0 to 6.7.0.

Release notes

Sourced from Sentry.AspNetCore's releases.

6.7.0

Features ✨

• feat(android): expose tombstone options via SentryOptions.Native by @​jamescrosswell in #​5226
• Add IgnoreTransactions option to filter out transactions by name, matching substrings or regular expressions against the transaction name (#​5377) by @​Adham-Kiwan in #​5377
• feat: Add BeforeSendFeedback callback to inspect, modify, or drop user feedback before it's sent by @​vladbrincoveanu in #​5361
• Add public API for checking unhandled exceptions (SentryEventExtensions.IsFromUnhandledException) and terminal exceptions (SentryEventExtensions.IsFromTerminalException) by @​jamescrosswell in #​5177
• feat: Add PreferTransactionNameProvider option by @​jamescrosswell in #​5159
• feat: Add exponential backoff and log deduplication to Spotlight by @​mattico in #​5025

Fixes 🐛

• fix(otel): only set Scope.Transaction in SentrySpanProcessor when null by @​tsushanth in #​5337
• fix: LNK4291 on Native AOT WinExe with Control Flow Guard by @​jamescrosswell in #​5298
• fix: OpenTelemetry transactions for failed requests keep their route name and otel context by @​jamescrosswell in #​5310
• fix: populate Default attributes on structured logs from current scope by @​jamescrosswell in #​5216
• fix: [.NET 10] PageNavigationExtensions updated for public Page properties by @​nor0x in #​5278

Dependencies ⬆️

Deps

• chore(deps): update Java SDK to v8.48.0 by @​github-actions in #​5360
• chore(deps): update Cocoa SDK to v9.21.0 by @​github-actions in #​5359
• chore(deps): update Native SDK to v0.15.3 by @​github-actions in #​5353
• chore(deps): update Cocoa SDK to v9.20.0 by @​github-actions in #​5354
• chore(deps): update Java SDK to v8.47.0 by @​github-actions in #​5338
• chore(deps): update Cocoa SDK to v9.19.1 by @​github-actions in #​5336
• chore(deps): update CLI to v3.6.0 by @​github-actions in #​5329
• chore(deps): update Cocoa SDK to v9.19.0 by @​github-actions in #​5316
• chore(deps): update Java SDK to v8.46.0 by @​github-actions in #​5321
• chore(deps): update Java SDK to v8.45.0 by @​github-actions in #​5315
• chore(deps): update Native SDK to v0.15.2 by @​github-actions in #​5309
• chore(deps): update Cocoa SDK to v9.18.0 by @​github-actions in #​5264
• chore(deps): update Java SDK to v8.44.1 by @​github-actions in #​5263
• chore(deps): update CLI to v3.5.1 by @​github-actions in #​5279
• chore(deps): update Native SDK to v0.15.1 by @​github-actions in #​5282

Other

• Added Sentry.Samples.OpenTelemetry.MongoDB by @​jamescrosswell in #​5335
• docs: add XML comments for boolean return of Sentry.Extensions.Logging Filters by @​Flash0ver in #​5297
• LatestWindowsTfm added to Directory.Build.props by @​nor0x in #​5277

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions