Skip to content

Bump the tests group with 14 updates#317

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/dot-config/tests-c7a22f9343
Closed

Bump the tests group with 14 updates#317
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/dot-config/tests-c7a22f9343

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 16, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updated DependencyInjection.Lifetime.Analyzers from 2.18.0 to 2.18.19.

Release notes

Sourced from DependencyInjection.Lifetime.Analyzers's releases.

2.18.19

DependencyInjection.Lifetime.Analyzers 2.18.19

Compile-time DI diagnostics for Microsoft.Extensions.DependencyInjection projects that want earlier feedback on lifetime bugs, scope leaks, service locator drift, and unresolvable registrations.

Why install or upgrade

  • DI016 null-coalescing throw guards — builder .Services registration flows now remain recognizable through an identity-preserving ?? throw guard, so (builder.Services ?? throw ...).BuildServiceProvider() reports like the unguarded call. Coalesces with an arbitrary fallback collection remain conservative and silent because the provider may be built from a different source.

Install

dotnet add package DependencyInjection.Lifetime.Analyzers --version 2.18.19

What changed

Fixed

  • DI016 null-coalescing throw guards — builder .Services registration flows now remain recognizable through an identity-preserving ?? throw guard, so (builder.Services ?? throw ...).BuildServiceProvider() reports like the unguarded call. Coalesces with an arbitrary fallback collection remain conservative and silent because the provider may be built from a different source.

Learn more

2.18.18

DependencyInjection.Lifetime.Analyzers 2.18.18

Compile-time DI diagnostics for Microsoft.Extensions.DependencyInjection projects that want earlier feedback on lifetime bugs, scope leaks, service locator drift, and unresolvable registrations.

Why install or upgrade

  • DI019 direct static service-resolution calls — root-provider analysis now recovers the provider from the bound ordinal-zero extension parameter for direct calls through ServiceProviderServiceExtensions, including non-generic overloads with reordered named arguments. Calls through scoped or otherwise unproven providers remain quiet, and the code fixer deliberately offers no rewrite for static-call syntax.

Install

dotnet add package DependencyInjection.Lifetime.Analyzers --version 2.18.18

What changed

Fixed

  • DI019 direct static service-resolution calls — root-provider analysis now recovers the provider from the bound ordinal-zero extension parameter for direct calls through ServiceProviderServiceExtensions, including non-generic overloads with reordered named arguments. Calls through scoped or otherwise unproven providers remain quiet, and the code fixer deliberately offers no rewrite for static-call syntax.

Learn more

2.18.17

DependencyInjection.Lifetime.Analyzers 2.18.17

Compile-time DI diagnostics for Microsoft.Extensions.DependencyInjection projects that want earlier feedback on lifetime bugs, scope leaks, service locator drift, and unresolvable registrations.

Why install or upgrade

  • DI003 IServiceCollection.Insert(0, ...) registrations — the shared registration collector now includes ServiceDescriptor registrations prepended at a compile-time-zero index, including reordered named arguments and concrete framework ServiceCollection receivers. Descriptor precedence models normal additions plus repeated prepends in runtime list order, so a prepended descriptor cannot falsely override a later descriptor; nonzero or dynamic indexes and source-defined concrete Insert bodies remain conservative and silent because their absolute position or mutation behavior is not provable.

Install

dotnet add package DependencyInjection.Lifetime.Analyzers --version 2.18.17

What changed

Fixed

  • DI003 IServiceCollection.Insert(0, ...) registrations — the shared registration collector now includes ServiceDescriptor registrations prepended at a compile-time-zero index, including reordered named arguments and concrete framework ServiceCollection receivers. Descriptor precedence models normal additions plus repeated prepends in runtime list order, so a prepended descriptor cannot falsely override a later descriptor; nonzero or dynamic indexes and source-defined concrete Insert bodies remain conservative and silent because their absolute position or mutation behavior is not provable.

Learn more

2.18.16

DependencyInjection.Lifetime.Analyzers 2.18.16

Compile-time DI diagnostics for Microsoft.Extensions.DependencyInjection projects that want earlier feedback on lifetime bugs, scope leaks, service locator drift, and unresolvable registrations.

Why install or upgrade

  • DI016 direct static BuildServiceProvider calls — registration-context analysis now recovers the IServiceCollection receiver from the bound extension parameter for ServiceCollectionContainerBuilderExtensions.BuildServiceProvider(...). Builder .Services flows report in ordinary methods and top-level statements even with named/reordered arguments, while provider-factory methods that intentionally return IServiceProvider remain quiet.

Install

dotnet add package DependencyInjection.Lifetime.Analyzers --version 2.18.16

What changed

Fixed

  • DI016 direct static BuildServiceProvider calls — registration-context analysis now recovers the IServiceCollection receiver from the bound extension parameter for ServiceCollectionContainerBuilderExtensions.BuildServiceProvider(...). Builder .Services flows report in ordinary methods and top-level statements even with named/reordered arguments, while provider-factory methods that intentionally return IServiceProvider remain quiet.

Learn more

2.18.15

DependencyInjection.Lifetime.Analyzers 2.18.15

Compile-time DI diagnostics for Microsoft.Extensions.DependencyInjection projects that want earlier feedback on lifetime bugs, scope leaks, service locator drift, and unresolvable registrations.

Why install or upgrade

  • DI025/DI026 identity-preserving publisher casts — event subscriptions now retain injected-receiver lifetime proofs through identity and reference casts, including constructor parameters, injected fields, and already-proven stable receiver chains. Matching unsubscriptions canonicalize across casted and uncast syntax, while user-defined conversions and unstable chains remain conservative and silent; DI027 and the code fixer are unchanged.

Install

dotnet add package DependencyInjection.Lifetime.Analyzers --version 2.18.15

What changed

Fixed

  • DI025/DI026 identity-preserving publisher casts — event subscriptions now retain injected-receiver lifetime proofs through identity and reference casts, including constructor parameters, injected fields, and already-proven stable receiver chains. Matching unsubscriptions canonicalize across casted and uncast syntax, while user-defined conversions and unstable chains remain conservative and silent; DI027 and the code fixer are unchanged.

Learn more

2.18.14

DependencyInjection.Lifetime.Analyzers 2.18.14

Compile-time DI diagnostics for Microsoft.Extensions.DependencyInjection projects that want earlier feedback on lifetime bugs, scope leaks, service locator drift, and unresolvable registrations.

Why install or upgrade

  • DI018 value-type activation fidelity — default structs and enums registered by implementation type now report because the default container's reflection path cannot see their synthetic parameterless constructors and fails at first resolution. Structs with an explicitly declared public constructor remain valid, while factory and implementation-instance registrations stay quiet.

Install

dotnet add package DependencyInjection.Lifetime.Analyzers --version 2.18.14

What changed

Fixed

  • DI018 value-type activation fidelity — default structs and enums registered by implementation type now report because the default container's reflection path cannot see their synthetic parameterless constructors and fails at first resolution. Structs with an explicitly declared public constructor remain valid, while factory and implementation-instance registrations stay quiet.

Learn more

2.18.13

DependencyInjection.Lifetime.Analyzers 2.18.13

Compile-time DI diagnostics for Microsoft.Extensions.DependencyInjection projects that want earlier feedback on lifetime bugs, scope leaks, service locator drift, and unresolvable registrations.

Why install or upgrade

  • DI021 stable shared lock monitors — lock suppression now rejects monitor fields, outer locals, and captured parameters that the concurrent handler writes. Replacing the monitor inside an invocation can make handlers lock different objects, so those shared-state accesses continue to report; stable shared monitors remain valid serialization guards.

Install

dotnet add package DependencyInjection.Lifetime.Analyzers --version 2.18.13

What changed

Fixed

  • DI021 stable shared lock monitors — lock suppression now rejects monitor fields, outer locals, and captured parameters that the concurrent handler writes. Replacing the monitor inside an invocation can make handlers lock different objects, so those shared-state accesses continue to report; stable shared monitors remain valid serialization guards.

Learn more

2.18.12

DependencyInjection.Lifetime.Analyzers 2.18.12

Compile-time DI diagnostics for Microsoft.Extensions.DependencyInjection projects that want earlier feedback on lifetime bugs, scope leaks, service locator drift, and unresolvable registrations.

Why install or upgrade

  • DI021 invocation-local lock parameters — serialization suppression now requires a parameter monitor to be declared outside the concurrent handler. Locking the handler's own parameter no longer hides shared-state diagnostics because different invocations can receive different monitor objects; a parameter captured from the enclosing method remains a valid shared lock.

Install

dotnet add package DependencyInjection.Lifetime.Analyzers --version 2.18.12

What changed

Fixed

  • DI021 invocation-local lock parameters — serialization suppression now requires a parameter monitor to be declared outside the concurrent handler. Locking the handler's own parameter no longer hides shared-state diagnostics because different invocations can receive different monitor objects; a parameter captured from the enclosing method remains a valid shared lock.

Learn more

2.18.11

DependencyInjection.Lifetime.Analyzers 2.18.11

Compile-time DI diagnostics for Microsoft.Extensions.DependencyInjection projects that want earlier feedback on lifetime bugs, scope leaks, service locator drift, and unresolvable registrations.

Why install or upgrade

  • DI021/DI022 symbol-bound concurrency knobs — strengthen-only fallback scans now accept a constant concurrency value only when the assignment binds to the expected SDK option property for Service Bus, RabbitMQ, ParallelOptions, or TPL Dataflow. Unrelated user properties with names such as MaxConcurrentCalls or ConsumerDispatchConcurrency no longer upgrade a config-gated DI022 Info diagnostic into a false DI021 Warning.

Install

dotnet add package DependencyInjection.Lifetime.Analyzers --version 2.18.11

What changed

Fixed

  • DI021/DI022 symbol-bound concurrency knobs — strengthen-only fallback scans now accept a constant concurrency value only when the assignment binds to the expected SDK option property for Service Bus, RabbitMQ, ParallelOptions, or TPL Dataflow. Unrelated user properties with names such as MaxConcurrentCalls or ConsumerDispatchConcurrency no longer upgrade a config-gated DI022 Info diagnostic into a false DI021 Warning.

Learn more

2.18.10

DependencyInjection.Lifetime.Analyzers 2.18.10

Compile-time DI diagnostics for Microsoft.Extensions.DependencyInjection projects that want earlier feedback on lifetime bugs, scope leaks, service locator drift, and unresolvable registrations.

Why install or upgrade

  • DI017 MEDI constructor-set fidelity — circular-dependency analysis now mirrors the default container's resolvable-constructor ambiguity rule: the greediest constructor is selected only when its resolved service-identifier set contains every other resolvable constructor's service identifiers. Equivalent constructors whose parameters are reordered now expose real cycles, while non-superset constructor sets — including same-typed keyed parameters requesting different keys — stay silent because the container rejects them as ambiguous before activation.

Install

dotnet add package DependencyInjection.Lifetime.Analyzers --version 2.18.10

What changed

Fixed

  • DI017 MEDI constructor-set fidelity — circular-dependency analysis now mirrors the default container's resolvable-constructor ambiguity rule: the greediest constructor is selected only when its resolved service-identifier set contains every other resolvable constructor's service identifiers. Equivalent constructors whose parameters are reordered now expose real cycles, while non-superset constructor sets — including same-typed keyed parameters requesting different keys — stay silent because the container rejects them as ambiguous before activation.

Learn more

2.18.9

DependencyInjection.Lifetime.Analyzers 2.18.9

Compile-time DI diagnostics for Microsoft.Extensions.DependencyInjection projects that want earlier feedback on lifetime bugs, scope leaks, service locator drift, and unresolvable registrations.

Why install or upgrade

  • DI014 conditional/coalesce ownership transfer — root-provider disposal and caller-ownership proofs now follow BuildServiceProvider() results through ternary arms and null-coalescing operands. Returned providers and providers assigned to reliably disposed locals, fields, or properties no longer produce false positives, including nested transparent wrappers; user-defined conversions still break the same-instance proof and report.

Install

dotnet add package DependencyInjection.Lifetime.Analyzers --version 2.18.9

What changed

Fixed

  • DI014 conditional/coalesce ownership transfer — root-provider disposal and caller-ownership proofs now follow BuildServiceProvider() results through ternary arms and null-coalescing operands. Returned providers and providers assigned to reliably disposed locals, fields, or properties no longer produce false positives, including nested transparent wrappers; user-defined conversions still break the same-instance proof and report.

Learn more

2.18.8

DependencyInjection.Lifetime.Analyzers 2.18.8

Compile-time DI diagnostics for Microsoft.Extensions.DependencyInjection projects that want earlier feedback on lifetime bugs, scope leaks, service locator drift, and unresolvable registrations.

Why install or upgrade

  • DI020 direct static UseMiddleware calls — middleware activation analysis now recognizes generic and direct-typeof(T) non-generic calls made through the framework UseMiddlewareExtensions class. Receiver, middleware, and explicit activation arguments are bound by declared parameter, including reordered named arguments and expanded params; runtime Type values and user-defined same-named static helpers remain conservative and silent.

Install

dotnet add package DependencyInjection.Lifetime.Analyzers --version 2.18.8

What changed

Fixed

  • DI020 direct static UseMiddleware calls — middleware activation analysis now recognizes generic and direct-typeof(T) non-generic calls made through the framework UseMiddlewareExtensions class. Receiver, middleware, and explicit activation arguments are bound by declared parameter, including reordered named arguments and expanded params; runtime Type values and user-defined same-named static helpers remain conservative and silent.

Learn more

2.18.7

DependencyInjection.Lifetime.Analyzers 2.18.7

Compile-time DI diagnostics for Microsoft.Extensions.DependencyInjection projects that want earlier feedback on lifetime bugs, scope leaks, service locator drift, and unresolvable registrations.

Why install or upgrade

  • DI024 direct private helper loops — hosted-service analysis now follows one-hop, directly invoked private helpers in the same type declaration and applies the existing helper-local scope/service loop checks. Unsafe helper-local reuse now reports, while uncalled helpers, deferred lambda/local-function/query invocations, transitive helpers, and cross-method field flow remain conservative and silent.

Install

dotnet add package DependencyInjection.Lifetime.Analyzers --version 2.18.7

What changed

Fixed

  • DI024 direct private helper loops — hosted-service analysis now follows one-hop, directly invoked private helpers in the same type declaration and applies the existing helper-local scope/service loop checks. Unsafe helper-local reuse now reports, while uncalled helpers, deferred lambda/local-function/query invocations, transitive helpers, and cross-method field flow remain conservative and silent.

Learn more

2.18.6

DependencyInjection.Lifetime.Analyzers 2.18.6

Compile-time DI diagnostics for Microsoft.Extensions.DependencyInjection projects that want earlier feedback on lifetime bugs, scope leaks, service locator drift, and unresolvable registrations.

Why install or upgrade

  • DI024 keyed service resolution — hosted-service reuse analysis now carries the compile-time service key through generic and direct-typeof(T) non-generic GetKeyedService/GetRequiredKeyedService calls. Keyed scoped services resolved once before a process-lifetime loop report, while scopes used only for the matching keyed singleton no longer warn; dynamic keys remain conservative and silent.

Install

dotnet add package DependencyInjection.Lifetime.Analyzers --version 2.18.6

What changed

Fixed

  • DI024 keyed service resolution — hosted-service reuse analysis now carries the compile-time service key through generic and direct-typeof(T) non-generic GetKeyedService/GetRequiredKeyedService calls. Keyed scoped services resolved once before a process-lifetime loop report, while scopes used only for the matching keyed singleton no longer warn; dynamic keys remain conservative and silent.

Learn more

2.18.5

DependencyInjection.Lifetime.Analyzers 2.18.5

Compile-time DI diagnostics for Microsoft.Extensions.DependencyInjection projects that want earlier feedback on lifetime bugs, scope leaks, service locator drift, and unresolvable registrations.

Why install or upgrade

  • DI024 non-generic service resolution — hosted-service reuse analysis now understands framework GetRequiredService(typeof(T)) and IServiceProvider.GetService(typeof(T)) calls, including casts and null-forgiving wrappers. Scoped services resolved once before a process-lifetime loop report, while scopes used only for registration-proven singletons no longer produce an opaque-use warning; runtime Type values and user-defined same-named methods remain conservative and silent.

Install

dotnet add package DependencyInjection.Lifetime.Analyzers --version 2.18.5

What changed

Fixed

  • DI024 non-generic service resolution — hosted-service reuse analysis now understands framework GetRequiredService(typeof(T)) and IServiceProvider.GetService(typeof(T)) calls, including casts and null-forgiving wrappers. Scoped services resolved once before a process-lifetime loop report, while scopes used only for registration-proven singletons no longer produce an opaque-use warning; runtime Type values and user-defined same-named methods remain conservative and silent.

Learn more

2.18.4

DependencyInjection.Lifetime.Analyzers 2.18.4

Compile-time DI diagnostics for Microsoft.Extensions.DependencyInjection projects that want earlier feedback on lifetime bugs, scope leaks, service locator drift, and unresolvable registrations.

Why install or upgrade

  • DI024 nested logical negation — hosted-service loop analysis now reduces nested ! operators by polarity before applying the existing cancellation, conjunction, disjunction, and De Morgan rules. Odd-parity cancellation loops such as while (!(!(!token.IsCancellationRequested))) report, while even-parity conditions and cancellation-plus-counter bounded loops remain silent.

Install

dotnet add package DependencyInjection.Lifetime.Analyzers --version 2.18.4

What changed

Fixed

  • DI024 nested logical negation — hosted-service loop analysis now reduces nested ! operators by polarity before applying the existing cancellation, conjunction, disjunction, and De Morgan rules. Odd-parity cancellation loops such as while (!(!(!token.IsCancellationRequested))) report, while even-parity conditions and cancellation-plus-counter bounded loops remain silent.

Learn more

2.18.3

DependencyInjection.Lifetime.Analyzers 2.18.3

Compile-time DI diagnostics for Microsoft.Extensions.DependencyInjection projects that want earlier feedback on lifetime bugs, scope leaks, service locator drift, and unresolvable registrations.

Why install or upgrade

  • DI027 direct self-observer subscriptions — discarded BCL subscriptions such as observable.Subscribe(this) now report when this is bound to an IObserver<T> parameter, because the longer-lived observable directly retains the shorter-lived subscriber. Separate observer objects and non-observer overloads remain silent.

Install

dotnet add package DependencyInjection.Lifetime.Analyzers --version 2.18.3

What changed

Fixed

  • DI027 direct self-observer subscriptions — discarded BCL subscriptions such as observable.Subscribe(this) now report when this is bound to an IObserver<T> parameter, because the longer-lived observable directly retains the shorter-lived subscriber. Separate observer objects and non-observer overloads remain silent.

Learn more

2.18.2

DependencyInjection.Lifetime.Analyzers 2.18.2

Compile-time DI diagnostics for Microsoft.Extensions.DependencyInjection projects that want earlier feedback on lifetime bugs, scope leaks, service locator drift, and unresolvable registrations.

Why install or upgrade

  • DI027 direct static extension calls — Rx subscriptions invoked as ObservableExtensions.Subscribe(source, handler) now receive the same discarded-token and lifetime analysis as source.Subscribe(handler). Bound extension-parameter mapping preserves named and reordered arguments, while non-extension static helpers and static callbacks remain silent.

Install

dotnet add package DependencyInjection.Lifetime.Analyzers --version 2.18.2

What changed

Fixed

  • DI027 direct static extension calls — Rx subscriptions invoked as ObservableExtensions.Subscribe(source, handler) now receive the same discarded-token and lifetime analysis as source.Subscribe(handler). Bound extension-parameter mapping preserves named and reordered arguments, while non-extension static helpers and static callbacks remain silent.

Learn more

2.18.1

DependencyInjection.Lifetime.Analyzers 2.18.1

Compile-time DI diagnostics for Microsoft.Extensions.DependencyInjection projects that want earlier feedback on lifetime bugs, scope leaks, service locator drift, and unresolvable registrations.

Why install or upgrade

  • DI024 compound cancellation loops — hosted-service scope-per-iteration analysis now recognises parenthesised && and || compositions of long-running loop conditions and applies De Morgan semantics to negated cancellation-token conditions. Hoisted scopes and scoped services are reported when the compound condition can run for the host lifetime, while bounded conjunctions and unproven conditions remain silent.

Install

dotnet add package DependencyInjection.Lifetime.Analyzers --version 2.18.1

What changed

Fixed

  • DI024 compound cancellation loops — hosted-service scope-per-iteration analysis now recognises parenthesised && and || compositions of long-running loop conditions and applies De Morgan semantics to negated cancellation-token conditions. Hoisted scopes and scoped services are reported when the compound condition can run for the host lifetime, while bounded conjunctions and unproven conditions remain silent.

Learn more

Commits viewable in compare view.

Updated HarfBuzzSharp.NativeAssets.Linux from 14.2.1 to 14.2.1.1.

Updated iTextSharp.LGPLv2.Core from 3.8.1 to 3.8.2.

Release notes

Sourced from iTextSharp.LGPLv2.Core's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Polly from 9.0.0 to 9.0.18.

Release notes

Sourced from Microsoft.Extensions.Http.Polly's releases.

9.0.18

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.17...v9.0.18

9.0.17

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.16...v9.0.17

9.0.16

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.15...v9.0.16

9.0.15

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.14...v9.0.15

9.0.14

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.13...v9.0.14

9.0.13

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.12...v9.0.13)

9.0.12

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.11...v9.0.12

9.0.11

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.10...v9.0.11

9.0.10

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.9...v9.0.10

9.0.9

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.8...v9.0.9

9.0.7

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.6...v9.0.7

9.0.6

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61622)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues.

Dependency Updates

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61762)
    Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project.
  • Update dependencies from dotnet/arcade (#​61714)
    Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools.
  • Update dependencies from dotnet/extensions (#​61571)
    Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries.
  • Update dependencies from dotnet/extensions (#​61877)
    Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes.
  • Update dependencies from dotnet/arcade (#​61892)
    Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes.

Miscellaneous

  • Update branding to 9.0.6 (#​61831)
    Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase.
  • Merging internal commits for release/9.0 (#​61925)
    Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v9.0.5...v9.0.6

9.0.5

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.4...v9.0.5

9.0.4

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.3...v9.0.4

9.0.3

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.2...v9.0.3

9.0.2

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.1...v9.0.2

9.0.1

Release

What's Changed

...

Description has been truncated

@dependabot
Bump the tests group with 14 updates
3a9e589 
Bumps DependencyInjection.Lifetime.Analyzers from 2.18.0 to 2.18.19
Bumps HarfBuzzSharp.NativeAssets.Linux from 14.2.1 to 14.2.1.1
Bumps iTextSharp.LGPLv2.Core from 3.8.1 to 3.8.2
Bumps Microsoft.Extensions.Http.Polly from 9.0.0 to 9.0.18
Bumps Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1
Bumps Microsoft.SourceLink.GitHub from 10.0.300 to 10.0.301
Bumps microsoft.web.librarymanager.cli from 3.0.71 to 3.0.114
Bumps MSTest.TestAdapter from 4.3.0 to 4.3.2
Bumps MSTest.TestFramework from 4.3.0 to 4.3.2
Bumps SkiaSharp from 4.150.0 to 4.150.1
Bumps SkiaSharp.HarfBuzz from 4.150.0 to 4.150.1
Bumps SkiaSharp.NativeAssets.Linux from 4.150.0 to 4.150.1
Bumps System.IO.Hashing from 10.0.8 to 10.0.10
Bumps System.ServiceModel.Syndication from 9.0.0 to 9.0.18

---
updated-dependencies:
- dependency-name: DependencyInjection.Lifetime.Analyzers
  dependency-version: 2.18.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tests
- dependency-name: HarfBuzzSharp.NativeAssets.Linux
  dependency-version: 14.2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tests
- dependency-name: iTextSharp.LGPLv2.Core
  dependency-version: 3.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tests
- dependency-name: SkiaSharp
  dependency-version: 4.150.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tests
- dependency-name: Microsoft.Extensions.Http.Polly
  dependency-version: 9.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tests
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tests
- dependency-name: Microsoft.SourceLink.GitHub
  dependency-version: 10.0.301
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tests
- dependency-name: System.IO.Hashing
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tests
- dependency-name: microsoft.web.librarymanager.cli
  dependency-version: 3.0.114
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tests
- dependency-name: MSTest.TestAdapter
  dependency-version: 4.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tests
- dependency-name: MSTest.TestFramework
  dependency-version: 4.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tests
- dependency-name: SkiaSharp.HarfBuzz
  dependency-version: 4.150.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tests
- dependency-name: SkiaSharp.NativeAssets.Linux
  dependency-version: 4.150.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tests
- dependency-name: System.ServiceModel.Syndication
  dependency-version: 9.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tests
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Jul 16, 2026
This was referenced Jul 16, 2026
Closed
Closed
Closed
Closed
@what-the-diff

what-the-diff Bot commented Jul 16, 2026

Copy link
Copy Markdown

PR Summary

  • Improved .NET tooling: Upgraded the .NET tool microsoft.web.librarymanager.cli to a more recent version, enhancing its efficiency and potential compatibility with newer systems or languages.
  • Boosted testing capabilities: Updated the versions of several testing tools included in the test project, which will enable better detection of software errors and bugs and improve software stability.
  • Enhanced core project dependencies: Upgraded a number of package versions in the core project, delivering potential improvements in performance, reliability, and compatibility.
  • Upgraded HarfBuzzSharp.NativeAssets.Linux package: The package version for HarfBuzzSharp.NativeAssets.Linux was updated, which potentially enhances the project's efficiency and functionality on Linux platforms.

@dependabot @github

dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #321.

@dependabot dependabot Bot closed this Jul 17, 2026
@dependabot
dependabot Bot deleted the dependabot/nuget/dot-config/tests-c7a22f9343 branch July 17, 2026 19:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants