Bump the tests group with 6 updates by dependabot[bot] · Pull Request #369 · VahidN/DNTCommon.Web.Core

dependabot · 2026-08-17T19:43:48Z

Updated CancelCop.Analyzer from 1.38.0 to 1.39.0.

Release notes

Sourced from CancelCop.Analyzer's releases.

1.39.0 Framework cancellation tokens are now in-scope

HttpContext.RequestAborted and ServerCallContext.CancellationToken participate in the shared token walk that powers CC002/CC003/CC004 and sibling rules (CC009, CC010, CC012, CC013, CC026, CC028, CC029, CC030, CC034). A CancellationToken parameter still wins when both exist.

// ❌ CC004 — RequestAborted is in scope but not passed
public async Task InvokeAsync(HttpContext context)
{
    return await _http.GetStringAsync(url);
}

// ✅
public async Task InvokeAsync(HttpContext context)
{
    return await _http.GetStringAsync(url, context.RequestAborted);
}

CC001 skips convention middleware Invoke / InvokeAsync(HttpContext). Adding a token parameter is not injected by the pipeline and can throw at runtime. Use RequestAborted instead. Closes the remaining half of #1.

Code fixes emit member-access expressions (context.RequestAborted), not dotted identifiers. CC028's speculative bind uses the same expression so blocking file I/O in middleware is no longer silent.

1030 tests passing. Focused Stryker.NET on the walk at 96% mutation score. 36 diagnostics.

Commits viewable in compare view.

Updated iTextSharp.LGPLv2.Core from 3.8.4 to 3.8.5.

Release notes

Sourced from iTextSharp.LGPLv2.Core's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Polly from 9.0.0 to 9.0.19.

Update branding to 9.0.7 by @vseanreesermsft in Update branding to 9.0.7 dotnet/aspnetcore#62242
[release/9.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 by @dependabot in [release/9.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 dotnet/aspnetcore#62199
Fix OpenApiJsonSchema array parsing (#62051) by @BrennanConroy in Fix OpenApiJsonSchema array parsing (#62051) dotnet/aspnetcore#62118
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#61986
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61945
[release/9.0] Update Alpine helix references by @wtgodbe in [release/9.0] Update Alpine helix references dotnet/aspnetcore#62240
[Backport 9.0] [IIS] Manually parse exe bitness (#61894) by @BrennanConroy in [Backport 9.0] [IIS] Manually parse exe bitness (#61894) dotnet/aspnetcore#62038
[release/9.0] Associate tagged keys with entries so replacements are not evicted by @github-actions in [release/9.0] Associate tagged keys with entries so replacements are not evicted dotnet/aspnetcore#62248
[release/9.0] Block test that is failing after switching to latest-chrome by @github-actions in [release/9.0] Block test that is failing after switching to latest-chrome dotnet/aspnetcore#62283
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#62281
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#62282
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#62303

Full Changelog: dotnet/aspnetcore@v9.0.6...v9.0.7

9.0.6 Bug Fixes

Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#61622)
The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues.

Dependency Updates

Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#61762)
Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project.
Update dependencies from dotnet/arcade (#61714)
Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools.
Update dependencies from dotnet/extensions (#61571)
Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries.
Update dependencies from dotnet/extensions (#61877)
Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes.
Update dependencies from dotnet/arcade (#61892)
Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes.

Miscellaneous

Update branding to 9.0.6 (#61831)
Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase.
Merging internal commits for release/9.0 (#61925)
Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release.

Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#58900
[release/9.0] Prevent unnecessary debugger stops for user-unhandled exceptions in Blazor apps with Just My Code enabled by @halter73 in [release/9.0] Prevent unnecessary debugger stops for user-unhandled exceptions in Blazor apps with Just My Code enabled dotnet/aspnetcore#58573
Hot Reload agent improvements by @tmat in Hot Reload agent improvements dotnet/aspnetcore#58333
[release/9.0] Update dependencies from roslyn by @wtgodbe in [release/9.0] Update dependencies from roslyn dotnet/aspnetcore#59183
[release/9.0] Add direct reference to System.Drawing.Common in tools by @wtgodbe in [release/9.0] Add direct reference to System.Drawing.Common in tools dotnet/aspnetcore#59189
[release/9.0] Harden parsing of [Range] attribute values by @github-actions in [release/9.0] Harden parsing of [Range] attribute values dotnet/aspnetcore#59077
[release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#59143
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#59024
[release/9.0] (deps): Bump src/submodules/googletest from 6dae7eb to d144031 by @dependabot in [release/9.0] (deps): Bump src/submodules/googletest from 6dae7eb to d144031 dotnet/aspnetcore#59032
[release/9.0] Update dependencies from dotnet/xdt by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/xdt dotnet/aspnetcore#58589
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#58675
[release/9.0] Fix SignalR Java POM to include description by @github-actions in [release/9.0] Fix SignalR Java POM to include description dotnet/aspnetcore#58896
[release/9.0] Fix IIS outofprocess to remove WebSocket compression handshake by @github-actions in [release/9.0] Fix IIS outofprocess to remove WebSocket compression handshake dotnet/aspnetcore#58931

Full Changelog: dotnet/aspnetcore@v9.0.0...v9.0.1

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.8.1 to 18.9.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.9.0 What's Changed

Fix tilde/exclamation characters corrupted in TerminalLogger test output by @nohwnd in [fix] Fix tilde/exclamation characters corrupted in TerminalLogger test output microsoft/vstest#16046
Make TranslationLayer Native AOT-compatible by @drewnoakes in Make TranslationLayer Native AOT-compatible microsoft/vstest#16045
Guard GenerateProgramFile target against UseWinUI/UseUwpTools evaluation order by @nohwnd in [fix] fix: guard GenerateProgramFile target against UseWinUI/UseUwpTools evaluation order microsoft/vstest#16072
Add RequestingAssembly to AssemblyResolveEventArgs for binary compat by @nohwnd in [fix] fix: add RequestingAssembly to AssemblyResolveEventArgs for binary compat microsoft/vstest#16076
Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect from testhost.x86 and datacollector by @Evangelink in Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect from testhost.x86 and datacollector microsoft/vstest#16082
Fix TRX attachment paths when LogFileName contains a subdirectory by @nohwnd in [fix] Fix TRX attachment paths when LogFileName contains a subdirectory microsoft/vstest#15791
Fix missing dumps for .NET Framework child processes in NetClientHangDumper by @nohwnd in [fix] Fix missing dumps for .NET Framework child processes in NetClientHangDumper microsoft/vstest#16098
Fix data collection channels to use negotiated protocol version instead of V1 by @nohwnd in [fix] Fix data collection channels to use negotiated protocol version instead of V1 microsoft/vstest#16096
Fix race condition in BlameCollector: skip hang dump when testhost hasn't launched yet by @nohwnd in [fix] Fix race condition in BlameCollector: skip hang dump when testhost hasn't launched yet microsoft/vstest#16065
Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in auto-generated Program files by @nohwnd in [fix] Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in auto-generated Program files microsoft/vstest#16101
Include testhost process path in crash error messages by @nohwnd in [fix] Include testhost process path in crash error messages microsoft/vstest#16108
Fix DataDriven test results being double-counted in TRX logger totals by @nohwnd in [fix] Fix DataDriven test results being double-counted in TRX logger totals microsoft/vstest#15766
Fix datacollector crash visibility: replace Assert with throwable exceptions by @nohwnd in [fix] Fix datacollector crash visibility: replace Assert with throwable exceptions microsoft/vstest#16048
Add TreatErrorMessagesAsWarnings parameter to TRX logger by @nohwnd in [fix] Add TreatErrorMessagesAsWarnings parameter to TRX logger microsoft/vstest#16106
Wait for testhost stderr to drain before reading its crash output by @nohwnd in Wait for testhost stderr to drain before reading its crash output microsoft/vstest#16128
Handle runtimeconfig.dev.json without additionalProbingPaths by @tmat in Handle runtimeconfig.dev.json without additionalProbingPaths microsoft/vstest#16166
Suggest Microsoft.NET.Test.Sdk when a managed test project brings no testhost by @nohwnd in Suggest Microsoft.NET.Test.Sdk when a managed test project brings no testhost microsoft/vstest#16169
Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1) when run via vstest.console.exe directly (#16151) by @azat-msft in Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1) when run via vstest.console.exe directly (#16151) microsoft/vstest#16156
Preserve the real exception (type + stack trace) when a test run aborts in BaseRunTests by @nohwnd in [fix] Preserve the real exception (type + stack trace) when a test run aborts in BaseRunTests microsoft/vstest#16167

New Contributors

@drewnoakes made their first contribution in Make TranslationLayer Native AOT-compatible microsoft/vstest#16045

Full Changelog: microsoft/vstest@v18.8.0...v18.9.0

Commits viewable in compare view.

Updated Roslynator.Analyzers from 4.16.0 to 4.16.1.

Release notes

Sourced from Roslynator.Analyzers's releases.

4.16.1

Fixed

Fix analyzer RCS1060 to not report a file that contains only multiple partial declarations of the same type (PR)
Fix analyzer RCS1231 to not suggest in for ref struct parameters (#1725) (PR)
Fix analyzer RCS1260 false positive for omit_when_single_line on multi-line object/collection initializers (#1439) (PR)
Fix analyzer RCS0036 to report blank lines between single-line declarations in records (PR)
Fix analyzer RCS1046 to report async void methods without Async suffix (PR)
Fix analyzer RCS1265 to not report catch clauses with a when filter (PR)
Fix analyzer RCS0034 for types with a primary constructor and multiple constraint clauses (PR)
Fix analyzer RCS1231 to not report CancellationToken in sync methods returning Task (PR)
[CLI] Fix GitLab output format to use relative paths, forward slashes, and 1-based line numbers (PR)
[CLI] Fix generate-doc to omit internal interfaces from type declarations and the Implements section (PR)

Commits viewable in compare view.

Updated System.ServiceModel.Syndication from 9.0.0 to 9.0.19.

Release

9.0.14

Release

9.0.13

Release

What's Changed

[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#122508
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#122747
Update branding to 9.0.13 by @vseanreesermsft in Update branding to 9.0.13 dotnet/runtime#122888
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#122941
[manual] Merge release/9.0-staging into release/9.0 by @jeffhandley in [manual] Merge release/9.0-staging into release/9.0 dotnet/runtime#123113

Full Changelog: dotnet/runtime@v9.0.12...v9.0.13

[automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#117671
[release/9.0-staging] [Test Only] Fix BuildChainCustomTrustStore test by @github-actions[bot] in [release/9.0-staging] [Test Only] Fix BuildChainCustomTrustStore test dotnet/runtime#117761
[release/9.0-staging] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/arcade dotnet/runtime#117742
[release/9.0-staging] Update dependencies from dotnet/xharness by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/xharness dotnet/runtime#117872
[release/9.0-staging] Update dependencies from dotnet/sdk by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/sdk dotnet/runtime#117873
Revert "[release/9.0-staging] Update dependencies from dotnet/sdk" by @lewing in Revert "[release/9.0-staging] Update dependencies from dotnet/sdk" dotnet/runtime#118001
[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#117910
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#117962
[release/9.0-staging] Update dependencies from dotnet/roslyn by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/roslyn dotnet/runtime#118080
[release/9.0-staging] Update dependencies from dotnet/xharness by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/xharness dotnet/runtime#118114
[release/9.0-staging] Fix broken debugger/debuggee startup handshake protocol on macOS26. by @github-actions[bot] in [release/9.0-staging] Fix broken debugger/debuggee startup handshake protocol on macOS26. dotnet/runtime#118212
[release/9.0-staging] [NRBF] Allow the users to decode System.Nullable by @github-actions[bot] in [release/9.0-staging] [NRBF] Allow the users to decode System.Nullable<UserStruct> dotnet/runtime#118328
[release/9.0-staging] [Test Only] Disable/modify some TimeZoneInfoTests on Android by @github-actions[bot] in [release/9.0-staging] [Test Only] Disable/modify some TimeZoneInfoTests on Android dotnet/runtime#118455
Update branding to 9.0.9 by @vseanreesermsft in Update branding to 9.0.9 dotnet/runtime#118349
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/runtime#118451
[release/9.0-staging] Revert "Remove custom allocator." by @github-actions[bot] in [release/9.0-staging] Revert "Remove custom allocator." dotnet/runtime#118279
[release/9.0] Merge release/9.0-staging changes by @krwq in [release/9.0] Merge release/9.0-staging changes dotnet/runtime#118764
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#117879

Full Changelog: dotnet/runtime@v9.0.8...v9.0.9

9.0.8

[Release](https://...

Description has been truncated

Bumps CancelCop.Analyzer from 1.38.0 to 1.39.0 Bumps iTextSharp.LGPLv2.Core from 3.8.4 to 3.8.5 Bumps Microsoft.Extensions.Http.Polly from 9.0.0 to 9.0.19 Bumps Microsoft.NET.Test.Sdk from 18.8.1 to 18.9.0 Bumps Roslynator.Analyzers from 4.16.0 to 4.16.1 Bumps System.ServiceModel.Syndication from 9.0.0 to 9.0.19 --- updated-dependencies: - dependency-name: CancelCop.Analyzer dependency-version: 1.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: tests - dependency-name: iTextSharp.LGPLv2.Core dependency-version: 3.8.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: tests - dependency-name: Microsoft.Extensions.Http.Polly dependency-version: 9.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: tests - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: tests - dependency-name: Roslynator.Analyzers dependency-version: 4.16.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: tests - dependency-name: System.ServiceModel.Syndication dependency-version: 9.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: tests ... Signed-off-by: dependabot[bot] <support@github.com>

what-the-diff · 2026-08-17T19:44:23Z

PR Summary

Upgraded package versions in DNTCommon.Web.Core.Tests.csproj and DNTCommon.Web.Core.csproj
The pull request includes updates to various software packages used in the project, specifically within DNTCommon.Web.Core.Tests.csproj and DNTCommon.Web.Core.csproj. This improves the project's compatibility with the latest tools and ensures we benefit from the latest features and bug fixes each package offers.
- Microsoft.NET.Test.Sdk was updated from version 18.8.1 to 18.9.0. This package provides the ability to run tests and is critical for software quality assurance.
- Roslynator.Analyzers was upgraded from version 4.16.0 to 4.16.1. This tool helps improve code quality and consistency.
- CancelCop.Analyzer was promoted from version 1.38.0 to 1.39.0. This package helps to optimize the performance of the code.
- iTextSharp.LGPLv2.Core updated from version 3.8.4 to 3.8.5. This software aids in creating and manipulating PDF files.
Upgraded package versions for different target frameworks in DNTCommon.Web.Core.csproj
The pull request also includes updates of two key packages for two different network target frames in DNTCommon.Web.Core.csproj. These changes help our product to stay current and efficient on different network platforms.
- System.ServiceModel.Syndication was updated for both net8.0 and net9.0. This package offers functionalities to consume and expose syndicated content on the web.
- Microsoft.Extensions.Http.Polly was also updated for net8.0 and net9.0. This package improves the resilience and transient-fault-handling capabilities of our project.

dependabot · 2026-08-18T19:37:11Z

Superseded by #370.

dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Aug 17, 2026

dependabot Bot had a problem deploying to release August 17, 2026 19:43 Failure

dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .net code labels Aug 17, 2026

dependabot Bot mentioned this pull request Aug 17, 2026

Bump the tests group with 5 updates #366

Closed

dependabot Bot deployed to release August 17, 2026 19:43 Active

dependabot Bot mentioned this pull request Aug 17, 2026

Bump CancelCop.Analyzer and 4 others #368

Closed

dependabot Bot closed this Aug 18, 2026

dependabot Bot deleted the dependabot/nuget/src/DNTCommon.Web.Core.Tests/tests-07adeecae5 branch August 18, 2026 19:37

Navigation Menu

Uh oh!

Bump the tests group with 6 updates - #369

Bump the tests group with 6 updates#369
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/src/DNTCommon.Web.Core.Tests/tests-07adeecae5

dependabot Bot commented on behalf of github Aug 17, 2026 •

edited

Loading

Uh oh!

what-the-diff Bot commented Aug 17, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

1.39.0

Framework cancellation tokens are now in-scope

9.0.19

What's Changed

9.0.18

What's Changed

9.0.17

What's Changed

9.0.16

What's Changed

9.0.15

What's Changed

9.0.14

What's Changed

9.0.13

What's Changed

9.0.12

What's Changed

9.0.11

What's Changed

9.0.10

What's Changed

9.0.9

What's Changed

9.0.7

What's Changed

9.0.6

Bug Fixes

Dependency Updates

Miscellaneous

9.0.5

What's Changed

9.0.4

What's Changed

9.0.3

What's Changed

9.0.2

What's Changed

9.0.1

What's Changed

18.9.0

What's Changed

New Contributors

4.16.1

Fixed

9.0.19

What's Changed

9.0.18

What's Changed

9.0.17

What's Changed

9.0.16

9.0.15

9.0.14

9.0.13

What's Changed

9.0.12

9.0.11

What's Changed

9.0.10

What's Changed

9.0.9

What's Changed

9.0.8

Uh oh!

what-the-diff Bot commented Aug 17, 2026

PR Summary

Uh oh!

dependabot Bot commented on behalf of github Aug 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

dependabot Bot commented on behalf of github Aug 17, 2026 •

edited

Loading