Bump CancelCop.Analyzer and 3 others by dependabot[bot] · Pull Request #365 · VahidN/DNTCommon.Web.Core

dependabot · 2026-08-14T19:36:39Z

Updated CancelCop.Analyzer from 1.38.0 to 1.39.0.

Release notes

Sourced from CancelCop.Analyzer's releases.

1.39.0 Framework cancellation tokens are now in-scope

HttpContext.RequestAborted and ServerCallContext.CancellationToken participate in the shared token walk that powers CC002/CC003/CC004 and sibling rules (CC009, CC010, CC012, CC013, CC026, CC028, CC029, CC030, CC034). A CancellationToken parameter still wins when both exist.

// ❌ CC004 — RequestAborted is in scope but not passed
public async Task InvokeAsync(HttpContext context)
{
    return await _http.GetStringAsync(url);
}

// ✅
public async Task InvokeAsync(HttpContext context)
{
    return await _http.GetStringAsync(url, context.RequestAborted);
}

CC001 skips convention middleware Invoke / InvokeAsync(HttpContext). Adding a token parameter is not injected by the pipeline and can throw at runtime. Use RequestAborted instead. Closes the remaining half of #1.

Code fixes emit member-access expressions (context.RequestAborted), not dotted identifiers. CC028's speculative bind uses the same expression so blocking file I/O in middleware is no longer silent.

1030 tests passing. Focused Stryker.NET on the walk at 96% mutation score. 36 diagnostics.

Commits viewable in compare view.

Updated iTextSharp.LGPLv2.Core from 3.8.4 to 3.8.5.

Release notes

Sourced from iTextSharp.LGPLv2.Core's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Polly from 9.0.0 to 9.0.19.

Update branding to 9.0.7 by @vseanreesermsft in Update branding to 9.0.7 dotnet/aspnetcore#62242
[release/9.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 by @dependabot in [release/9.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 dotnet/aspnetcore#62199
Fix OpenApiJsonSchema array parsing (#62051) by @BrennanConroy in Fix OpenApiJsonSchema array parsing (#62051) dotnet/aspnetcore#62118
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#61986
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61945
[release/9.0] Update Alpine helix references by @wtgodbe in [release/9.0] Update Alpine helix references dotnet/aspnetcore#62240
[Backport 9.0] [IIS] Manually parse exe bitness (#61894) by @BrennanConroy in [Backport 9.0] [IIS] Manually parse exe bitness (#61894) dotnet/aspnetcore#62038
[release/9.0] Associate tagged keys with entries so replacements are not evicted by @github-actions in [release/9.0] Associate tagged keys with entries so replacements are not evicted dotnet/aspnetcore#62248
[release/9.0] Block test that is failing after switching to latest-chrome by @github-actions in [release/9.0] Block test that is failing after switching to latest-chrome dotnet/aspnetcore#62283
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#62281
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#62282
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#62303

Full Changelog: dotnet/aspnetcore@v9.0.6...v9.0.7

9.0.6 Bug Fixes

Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#61622)
The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues.

Dependency Updates

Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#61762)
Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project.
Update dependencies from dotnet/arcade (#61714)
Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools.
Update dependencies from dotnet/extensions (#61571)
Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries.
Update dependencies from dotnet/extensions (#61877)
Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes.
Update dependencies from dotnet/arcade (#61892)
Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes.

Miscellaneous

Update branding to 9.0.6 (#61831)
Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase.
Merging internal commits for release/9.0 (#61925)
Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release.

Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#58900
[release/9.0] Prevent unnecessary debugger stops for user-unhandled exceptions in Blazor apps with Just My Code enabled by @halter73 in [release/9.0] Prevent unnecessary debugger stops for user-unhandled exceptions in Blazor apps with Just My Code enabled dotnet/aspnetcore#58573
Hot Reload agent improvements by @tmat in Hot Reload agent improvements dotnet/aspnetcore#58333
[release/9.0] Update dependencies from roslyn by @wtgodbe in [release/9.0] Update dependencies from roslyn dotnet/aspnetcore#59183
[release/9.0] Add direct reference to System.Drawing.Common in tools by @wtgodbe in [release/9.0] Add direct reference to System.Drawing.Common in tools dotnet/aspnetcore#59189
[release/9.0] Harden parsing of [Range] attribute values by @github-actions in [release/9.0] Harden parsing of [Range] attribute values dotnet/aspnetcore#59077
[release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#59143
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#59024
[release/9.0] (deps): Bump src/submodules/googletest from 6dae7eb to d144031 by @dependabot in [release/9.0] (deps): Bump src/submodules/googletest from 6dae7eb to d144031 dotnet/aspnetcore#59032
[release/9.0] Update dependencies from dotnet/xdt by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/xdt dotnet/aspnetcore#58589
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#58675
[release/9.0] Fix SignalR Java POM to include description by @github-actions in [release/9.0] Fix SignalR Java POM to include description dotnet/aspnetcore#58896
[release/9.0] Fix IIS outofprocess to remove WebSocket compression handshake by @github-actions in [release/9.0] Fix IIS outofprocess to remove WebSocket compression handshake dotnet/aspnetcore#58931

Full Changelog: dotnet/aspnetcore@v9.0.0...v9.0.1

Commits viewable in compare view.

Updated System.ServiceModel.Syndication from 9.0.0 to 9.0.19.

Release

9.0.14

Release

9.0.13

Release

What's Changed

[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#122508
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#122747
Update branding to 9.0.13 by @vseanreesermsft in Update branding to 9.0.13 dotnet/runtime#122888
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#122941
[manual] Merge release/9.0-staging into release/9.0 by @jeffhandley in [manual] Merge release/9.0-staging into release/9.0 dotnet/runtime#123113

Full Changelog: dotnet/runtime@v9.0.12...v9.0.13

[release/9.0-staging] Fix crash during Async Break when APC and CET are enabled by @thaystg in [release/9.0-staging] Fix crash during Async Break when APC and CET are enabled dotnet/runtime#114932
[release/9.0-staging] [STJ] Account for F# CompilationMappingAttribute now supporting multiple declarations. by @github-actions in [release/9.0-staging] [STJ] Account for F# CompilationMappingAttribute now supporting multiple declarations. dotnet/runtime#115076
[release/9.0-staging][wasm][interpreter] Fix PackedSimd interpreter intrinsics by @lewing in [release/9.0-staging][wasm][interpreter] Fix PackedSimd interpreter intrinsics dotnet/runtime#114218
[release/9.0-staging] JIT: Fix invalid removal of explicit zeroing in methods without .localsinit by @jakobbotsch in https://github.com/dotnet/runtime...

Description has been truncated

Bumps CancelCop.Analyzer from 1.38.0 to 1.39.0 Bumps iTextSharp.LGPLv2.Core from 3.8.4 to 3.8.5 Bumps Microsoft.Extensions.Http.Polly from 9.0.0 to 9.0.19 Bumps System.ServiceModel.Syndication from 9.0.0 to 9.0.19 --- updated-dependencies: - dependency-name: CancelCop.Analyzer dependency-version: 1.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: tests - dependency-name: iTextSharp.LGPLv2.Core dependency-version: 3.8.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: tests - dependency-name: Microsoft.Extensions.Http.Polly dependency-version: 9.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: tests - dependency-name: System.ServiceModel.Syndication dependency-version: 9.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: tests ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-14T19:37:22Z

Superseded by #366.

dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Aug 14, 2026

dependabot Bot had a problem deploying to release August 14, 2026 19:36 Failure

dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .net code labels Aug 14, 2026

dependabot Bot mentioned this pull request Aug 14, 2026

Bump CancelCop.Analyzer and 2 others #364

Closed

dependabot Bot deployed to release August 14, 2026 19:36 Active

dependabot Bot closed this Aug 14, 2026

dependabot Bot deleted the dependabot/nuget/src/DNTCommon.Web.Core/tests-4ac88c9276 branch August 14, 2026 19:37

Navigation Menu

Uh oh!

Bump CancelCop.Analyzer and 3 others - #365

Bump CancelCop.Analyzer and 3 others#365
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/src/DNTCommon.Web.Core/tests-4ac88c9276

dependabot Bot commented on behalf of github Aug 14, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 14, 2026

1.39.0

Framework cancellation tokens are now in-scope

9.0.19

What's Changed

9.0.18

What's Changed

9.0.17

What's Changed

9.0.16

What's Changed

9.0.15

What's Changed

9.0.14

What's Changed

9.0.13

What's Changed

9.0.12

What's Changed

9.0.11

What's Changed

9.0.10

What's Changed

9.0.9

What's Changed

9.0.7

What's Changed

9.0.6

Bug Fixes

Dependency Updates

Miscellaneous

9.0.5

What's Changed

9.0.4

What's Changed

9.0.3

What's Changed

9.0.2

What's Changed

9.0.1

What's Changed

9.0.19

What's Changed

9.0.18

What's Changed

9.0.17

What's Changed

9.0.16

9.0.15

9.0.14

9.0.13

What's Changed

9.0.12

9.0.11

What's Changed

9.0.10

What's Changed

9.0.9

What's Changed

9.0.8

What's Changed

9.0.7

What's Changed

Uh oh!

dependabot Bot commented on behalf of github Aug 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants