Skip to content

Bump the all-nuget-updates group with 18 updates - #1472

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/nuget/dot-config/all-nuget-updates-7b9fa51534
Open

Bump the all-nuget-updates group with 18 updates#1472
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/nuget/dot-config/all-nuget-updates-7b9fa51534

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 28, 2026

Copy link
Copy Markdown
Contributor

Updated dotnet-ef from 10.0.10 to 10.0.11.

Release notes

Sourced from dotnet-ef's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated GSS.Authentication.CAS.AspNetCore from 5.8.0 to 5.8.1.

Release notes

Sourced from GSS.Authentication.CAS.AspNetCore's releases.

5.8.1

Changes

🐛 Bug Fixes

  • fix: honor CAS sign-out event (release 5.8.1) (#​1012) @​akunzai
  • fix(deps): bump System.Security.Cryptography.Xml to 8.0.4 to fix CVE-2026-50527 (#​1002) @​akunzai

📦 Dependencies

  • Bump StackExchange.Redis from 3.1.3 to 3.1.13 (#​1011) @​dependabot[bot], @​akunzai
  • Bump NSubstitute from 6.0.0 to 6.1.0 (#​1009) @​dependabot[bot], @​akunzai
  • Bump RichardSzalay.MockHttp from 7.0.0 to 7.1.0 (#​1010) @​dependabot[bot], @​akunzai
  • build(deps-dev): bump the frontend group in /samples/AspNetCoreReactSample/ClientApp with 2 updates (#​1008) @​dependabot[bot], @​akunzai
  • build(deps): bump web-vitals from 6.0.1 to 6.1.0 in /samples/AspNetCoreReactSample/ClientApp in the frontend group across 1 directory (#​1004) @​dependabot[bot], @​akunzai
  • Bump StackExchange.Redis from 3.0.25 to 3.1.3 (#​1005) @​dependabot[bot], @​akunzai
  • build(deps): bump typescript-eslint from 8.65.0 to 8.66.0 in /samples/AspNetCoreReactSample/ClientApp in the typescript group (#​1003) @​dependabot[bot], @​akunzai

⚙️ CI/CD

  • ci(e2e): pin tags, GHA cache warm, deepen Docker layers (#​1006) @​akunzai
  • ci: migrate Release Drafter configuration (#​1001) @​akunzai

🔨 Maintenance

  • chore(samples): replace ESLint with oxlint and add oxfmt (#​1007) @​akunzai

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Proxies from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Proxies's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Sqlite from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.SqlServer from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.SqlServer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Tools from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Tools's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Abstractions from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Configuration.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Configuration.EnvironmentVariables's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.UserSecrets from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Configuration.UserSecrets's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.8.1 to 18.9.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.9.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.8.0...v18.9.0

Commits viewable in compare view.

Updated Microsoft.Playwright.NUnit from 1.61.0 to 1.62.0.

Release notes

Sourced from Microsoft.Playwright.NUnit's releases.

1.62.0

🖼️ WebP screenshots

page.screenshot() and locator.screenshot() can now capture screenshots in the WebP format — Playwright infers the format from a .webp file extension, or you can set the type explicitly. Quality 100 (the default) is lossless, while lower values use lossy compression:

await Page.ScreenshotAsync(new() { Path = "homepage.webp", Quality = 50 });

New APIs

  • New Scroll option (Auto | None) on actions to opt out of Playwright's automatic scroll-into-view.
  • New Locator.WaitForFunctionAsync() waits until a function — called with the matching element — returns a truthy value.
  • New APIResponse.TimingAsync() returns resource timing information for an API response.

Announcements

  • 📋 The clipboard is now isolated from the operating system in headless mode, so tests that use navigator.clipboard no longer read or overwrite the clipboard of the machine running them.
  • ⚠️ Debian 11 is not supported anymore.

Browser Versions

  • Chromium 151.0.7922.34
  • Mozilla Firefox 153.0
  • WebKit 26.5

This version was also tested against the following stable channels:

  • Google Chrome 151
  • Microsoft Edge 151

Commits viewable in compare view.

Updated Radzen.Blazor from 11.2.2 to 11.2.6.

Release notes

Sourced from Radzen.Blazor's releases.

11.2.6

11.2.6 - 2026-08-20

Improvements

  • RadzenDataGrid, RadzenDataFilter and RadzenPivotDataGrid In and NotIn filter operators now filter scalar properties, including nullable value types - previously such filters were silently ignored. Filter values are normalized to the property type, so int[], List<long?> or List<object> values filter a long? property correctly, null or scalar filter values are ignored instead of throwing, and the generated expression translates to SQL with Entity Framework Core. SecondFilterOperator now also supports In and NotIn. Fixes #​2663 (thanks @​simonluebker)

Fixes

  • RadzenDataGrid no longer triggers the critical aria-required-children axe violation - the grid role moved to the scrollable data element so it owns only row structure, keyboard navigation and focus behavior are preserved. Fixes #​2669
  • Localization - application resx overrides for Radzen strings are now resolved as documented. Overrides embedded as Radzen.Blazor.RadzenStrings.[culture].resources in the application are consulted before the built-in translations, with fallback to the bundled strings for missing keys. Fixes #​2668
  • RadzenRangeNavigator handle labels now respect the date FormatString while dragging, including month names, two-digit years, 12-hour clock with AM/PM and quoted literals (#​2666, thanks @​wimsoetens-cmd)

11.2.5

11.2.5 - 2026-08-14

Fixes

  • RadzenNumeric no longer swallows keystrokes or registers phantom digits when Immediate and Format are used together. While typing, the input keeps the raw text and the format is applied on change or blur, so the caret no longer jumps and digits are no longer rounded away mid-edit. Digits that are literals in the format string (e.g. ### m2) no longer leak into the parsed value on reparse. Fixes #​2661
  • RadzenProfileMenu closes again when clicking outside the menu or when activating a menu item - regression introduced in 11.2.4. Fixes #​2662
  • RadzenProfileMenu and RadzenSplitButton are now preserved in the trimmer configuration so their popup-close callbacks keep working in trimmed WebAssembly apps.

11.2.4

11.2.4 - 2026-08-13

Improvements

  • RadzenDataGrid - grouping can now be defined declaratively with the new Groups parameter. Thanks to @​Radium001!
  • Themes - updated premium themes

Fixes

  • RadzenDataGrid - column widths no longer jump when a column is resized - the resize logic used the currently drawn width instead of the intended one, and ColumnResized now reports the intended width. Thanks to @​I-Info!
  • RadzenDataGrid - Reset now also clears expanded child data, edit state and the expand-all flag. Fixes #​2651
  • RadzenDataGrid - column visibility from before grouping is restored when a group is removed and the intended visibility is saved in settings
  • RadzenDataGrid - the CheckBoxList filter no longer shows an empty list after a value is auto-applied - the available values are reloaded and the popup re-rendered on close
  • RadzenDatePicker - a cleared time no longer reappears when a new date is selected - clearing the value did not reset the cached time picker state - and pending hour, minute and second edits are now applied together on Ok instead of only the last one
  • RadzenDatePicker - the input no longer swallows the first keystroke after pressing Enter - the keydown preventDefault flag was applied client-side one keystroke late, so Ctrl+A, Delete, caret movement or a typed character right after Enter could be lost and clearing the value with the keyboard could silently fail
  • RadzenSpreadsheet - unsupported '#' input can no longer overflow the formula parser - the lexer end token is now always emitted. Fixes #​2658
  • RadzenSpreadsheet - keyboard navigation now skips hidden rows and columns. Fixes #​2657
  • RadzenSpreadsheet - accepting an empty value now clears the cell instead of storing a phantom newline. Fixes #​2656
  • RadzenSpreadsheet - the last column and row are now rendered when all others are frozen. Fixes #​2644
  • RadzenGantt - Shift+Scroll over the data grid now scrolls it horizontally instead of being forwarded as vertical scroll. Fixes #​2655
  • RadzenProfileMenu - the toggle is now handled server-side so clicks before JS initialization work. Fixes #​2653
  • RadzenSplitButton - item icons are now centered vertically in Small and ExtraSmall popups. Fixes #​2654

11.2.3

11.2.3 - 2026-08-11

Improvements

  • RadzenProgressBar and RadzenProgressBarCircular - new BufferValue parameter displays a secondary buffer indicator ahead of the primary value, e.g. for media buffering. Thanks to @​pfs26!
  • DialogService - the generic dialog methods now accept any type implementing IComponent instead of requiring ComponentBase. Thanks to @​drewcav96!
  • RadzenSpreadsheet - conditional formatting is now imported from and exported to XLSX files. Fixes #​2645

Fixes

  • RadzenSplitButton - the popup now opens reliably on Blazor Server even when the toggle is clicked right after the page loads. Clicks during the JS initialization round trip used to flip server state without showing the popup, leaving the button dead with aria-expanded="true". The popup is now driven entirely server-side and aria-expanded stays in sync when it is closed by clicking outside. Fixes #​2650
  • RadzenDatePicker - the popup no longer intermittently stops opening after rapid re-renders - a stale JS dispose could remove the freshly attached click handler. The trigger also works during initial page load on high-latency connections now that it no longer depends on JS handlers attached after render. Fixes #​2646
  • RadzenSecurityCode and RadzenSlider - keyboard and drag handlers are no longer removed by a stale JS dispose when the component re-renders rapidly.
  • RadzenMenu - submenu clicks are handled by a static listener and now work immediately after page load, even before Blazor becomes interactive.
  • Keyboard navigation - opening a popup with a key whose default action scrolls the page (ArrowDown on RadzenSplitButton, Space on RadzenDropDown, RadzenListBox, RadzenColorPicker and RadzenProfileMenu) no longer scrolls and instantly closes the popup on scrollable pages.
  • RadzenDataGrid - client-side filtering is no longer applied to self-referencing hierarchies when LoadData is used. Fixes #​2649
  • RadzenChart - stacked series render significantly faster - compiled property getters are now cached instead of recompiled on every access.
  • RadzenChat - mention search keeps working when the search text contains spaces while a mention is active. Thanks to @​artnim!
  • RadzenChat - keyboard navigation in the mention popup now works reliably - render-time preventDefault was replaced with a native keydown guard.
  • RadzenSelectBar - background color is now correct in the Material, Default, Humanistic and Software themes.
  • TooltipService - no longer modifies the caller's TooltipOptions instance, so shared options objects can be reused safely. Fixes #​2641

Commits viewable in compare view.

Updated Sentry.AspNetCore from 6.8.0 to 6.9.0.

Release notes

Sourced from Sentry.AspNetCore's releases.

6.9.0

Features ✨

  • feat: Allow users to control Mechanism.Handled for captured exceptions by @​vladbrincoveanu in #​5449

Fixes 🐛

  • fix(serilog): logs from application namespaces beginning with "Sentry" are discarded by @​jamescrosswell in #​5456
  • fix: rate limit on one data category no longer blocks all others by @​jamescrosswell in #​5482

Dependencies ⬆️

Deps

  • chore(deps): update Native SDK to v0.16.3 by @​github-actions in #​5486
  • chore(deps): update Cocoa SDK to v9.26.0 by @​github-actions in #​5485
  • chore(deps): update Cocoa SDK to v9.25.0 by @​github-actions in #​5472
  • chore(deps): update Native SDK to v0.16.2 by @​github-actions in #​5477
  • chore(deps): update Java SDK to v8.52.0 by @​github-actions in #​5471
  • chore(deps): update Cocoa SDK to v9.24.0 by @​github-actions in #​5460
  • chore(deps): update Java SDK to v8.51.0 by @​github-actions in #​5457
  • chore(deps): update Native SDK to v0.16.1 by @​github-actions in #​5459
  • chore(deps): update Native SDK to v0.16.0 by @​github-actions in #​5452
  • chore(deps): update Java SDK to v8.50.1 by @​github-actions in #​5441
  • chore(deps): update CLI to v3.6.2 by @​github-actions in #​5443
  • chore(deps): update Cocoa SDK to v9.23.0 by @​github-actions in #​5442

Other

  • ref: migrate Cocoa bindings from PrivateSentrySDKOnly to SentryObjCSDK.internal by @​jamescrosswell in #​5409

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps dotnet-ef from 10.0.10 to 10.0.11
Bumps GSS.Authentication.CAS.AspNetCore from 5.8.0 to 5.8.1
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.10 to 10.0.11
Bumps Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore from 10.0.10 to 10.0.11
Bumps Microsoft.EntityFrameworkCore from 10.0.10 to 10.0.11
Bumps Microsoft.EntityFrameworkCore.Design from 10.0.10 to 10.0.11
Bumps Microsoft.EntityFrameworkCore.InMemory from 10.0.10 to 10.0.11
Bumps Microsoft.EntityFrameworkCore.Proxies from 10.0.10 to 10.0.11
Bumps Microsoft.EntityFrameworkCore.Sqlite from 10.0.10 to 10.0.11
Bumps Microsoft.EntityFrameworkCore.SqlServer from 10.0.10 to 10.0.11
Bumps Microsoft.EntityFrameworkCore.Tools from 10.0.10 to 10.0.11
Bumps Microsoft.Extensions.Configuration.Abstractions from 10.0.10 to 10.0.11
Bumps Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.10 to 10.0.11
Bumps Microsoft.Extensions.Configuration.UserSecrets from 10.0.10 to 10.0.11
Bumps Microsoft.NET.Test.Sdk from 18.8.1 to 18.9.0
Bumps Microsoft.Playwright.NUnit from 1.61.0 to 1.62.0
Bumps Radzen.Blazor from 11.2.2 to 11.2.6
Bumps Sentry.AspNetCore from 6.8.0 to 6.9.0

---
updated-dependencies:
- dependency-name: dotnet-ef
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-nuget-updates
- dependency-name: GSS.Authentication.CAS.AspNetCore
  dependency-version: 5.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-nuget-updates
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-nuget-updates
- dependency-name: Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-nuget-updates
- dependency-name: Microsoft.EntityFrameworkCore
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-nuget-updates
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-nuget-updates
- dependency-name: Microsoft.Extensions.Configuration.Abstractions
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-nuget-updates
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-nuget-updates
- dependency-name: Microsoft.EntityFrameworkCore.InMemory
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-nuget-updates
- dependency-name: Microsoft.EntityFrameworkCore.Proxies
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-nuget-updates
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-nuget-updates
- dependency-name: Microsoft.EntityFrameworkCore.SqlServer
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-nuget-updates
- dependency-name: Microsoft.EntityFrameworkCore.Tools
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-nuget-updates
- dependency-name: Microsoft.Extensions.Configuration.EnvironmentVariables
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-nuget-updates
- dependency-name: Microsoft.Extensions.Configuration.UserSecrets
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-nuget-updates
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-nuget-updates
- dependency-name: Microsoft.Playwright.NUnit
  dependency-version: 1.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-nuget-updates
- dependency-name: Radzen.Blazor
  dependency-version: 11.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-nuget-updates
- dependency-name: Sentry.AspNetCore
  dependency-version: 6.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-nuget-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants