Bump the actions-minor-patch group with 10 updates#74
Merged
af-fwu merged 3 commits intoJun 9, 2026
Merged
Conversation
Bumps dotnet-coverage from 18.7.0 to 18.8.0 Bumps MediatR from 12.2.0 to 12.5.0 Bumps Microsoft.Extensions.Resilience from 9.9.0 to 9.10.0 Bumps Microsoft.Identity.Web from 3.14.1 to 3.15.1 Bumps Microsoft.IdentityModel.Tokens to 7.7.2, 8.19.1 Bumps Microsoft.NET.Test.Sdk from 17.6.3 to 17.14.1 Bumps NUnit from 3.13.3 to 3.14.0 Bumps NUnit.Analyzers from 3.6.1 to 3.10.0 Bumps NUnit3TestAdapter from 4.2.1 to 4.6.0 Bumps System.IdentityModel.Tokens.Jwt to 7.7.1, 8.19.1 --- updated-dependencies: - dependency-name: dotnet-coverage dependency-version: 18.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: MediatR dependency-version: 12.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: Microsoft.Extensions.Resilience dependency-version: 9.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: Microsoft.Identity.Web dependency-version: 3.15.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: Microsoft.IdentityModel.Tokens dependency-version: 7.7.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: Microsoft.IdentityModel.Tokens dependency-version: 8.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 17.14.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 17.14.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 17.14.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 17.14.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: NUnit dependency-version: 3.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: NUnit dependency-version: 3.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: NUnit dependency-version: 3.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: NUnit dependency-version: 3.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: NUnit.Analyzers dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: NUnit.Analyzers dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: NUnit.Analyzers dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: NUnit.Analyzers dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: NUnit3TestAdapter dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: NUnit3TestAdapter dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: NUnit3TestAdapter dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: NUnit3TestAdapter dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: System.IdentityModel.Tokens.Jwt dependency-version: 7.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: System.IdentityModel.Tokens.Jwt dependency-version: 8.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
…ons-minor-patch-bf866557ea
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated dotnet-coverage from 18.7.0 to 18.8.0.
Release notes
Sourced from dotnet-coverage's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated MediatR from 12.2.0 to 12.5.0.
Release notes
Sourced from MediatR's releases.
12.5.0
What's Changed
Nullableproperty fromMediatR.Contractsby @jithu7432 in Remove duplicateNullableproperty fromMediatR.ContractsLuckyPennySoftware/MediatR#1061New Contributors
Nullableproperty fromMediatR.ContractsLuckyPennySoftware/MediatR#1061Full Changelog: LuckyPennySoftware/MediatR@v12.4.1...v12.5.0
12.4.1
What's Changed
Full Changelog: LuckyPennySoftware/MediatR@v12.4.0...v12.4.1
12.4.0
What's Changed
Full Changelog: LuckyPennySoftware/MediatR@v12.3.0...v12.4.0
12.3.0
What's Changed
New Contributors
Full Changelog: LuckyPennySoftware/MediatR@v12.2.0...v12.3.0
Commits viewable in compare view.
Updated Microsoft.Extensions.Resilience from 9.9.0 to 9.10.0.
Release notes
Sourced from Microsoft.Extensions.Resilience's releases.
9.10.0
What's Changed
KeyNotFoundExceptioninHttpRequestLatencyListener.OnEventWrittenby @pentp in FixKeyNotFoundExceptioninHttpRequestLatencyListener.OnEventWrittendotnet/extensions#6823ModelContextProtocolversion in MCP template by @MackinnonBuck in UpdateModelContextProtocolversion in MCP template dotnet/extensions#6870HostApplicationBuilderin AmbientMetadata extension by @eduherminio in Add support forHostApplicationBuilderin AmbientMetadata extension dotnet/extensions#6867New Contributors
... (truncated)
Commits viewable in compare view.
Updated Microsoft.Identity.Web from 3.14.1 to 3.15.1.
Release notes
Sourced from Microsoft.Identity.Web's releases.
3.15.0
Bug fixes
Behavior changes
Dependencies updates
Full Changelog: 3.14.1...3.15.0 (AzureAD/microsoft-identity-web@3.14.1...3.15.0)
Commits viewable in compare view.
Updated Microsoft.IdentityModel.Tokens from 7.1.2 to 7.7.2.
Release notes
Sourced from Microsoft.IdentityModel.Tokens's releases.
7.7.2
Bug Fixes
JwtSecurityTokenHandlerforIssuerSigningKeyResolverUsingConfigurationto take priority overIssuerSigningKeyResolver, matching the documented contract and the correct behavior already present inJsonWebTokenHandler. See PR #3519.jkuclaim. See PR #3480.Dependency Updates
7.7.1
7.7.1
Bug Fix
JsonSerializerPrimitives.TryAllStringClaimsAsDateTimewhich was removed as it is in an internal class, but due toInternalsVisibleTocan lead to aMissingMethodExceptionif IdentityModel versions are not aligned. See PR #2734 for details.7.7.0
7.7.0
CVE package updates
CVE-2024-30105
ClaimsIdentitywhere claim retrieval is case-sensitive. The currentClaimsIdentity, in .NET, retrieves claims in a case-insensitive manner which is different than querying the underlyingSecurityToken. The newCaseSensitiveClaimsIdentityclass provides consistent retrieval logic withSecurityToken. Opt in to the new behavior via an AppContext switch. See PR #2715 for details.Performance improvement
AppContext.TryGetSwitchstatically caches internally but takes out a lock..NET almost always caches these values. They're not expected to change while the process is running unlike normal config. IdentityModel now caches the value. See issue #2722 for details.
7.6.2
7.6.2
Bug Fix:
AadIssuerValidatorby not usingstring.Replacewhere appropriate due to an index out-of-range error.7.6.1
7.6.1
New Features:
Bug Fixes:
IDX14100. See issue #2058 and PR #2618 for details.JwtRegisteredClaimNamesnow contains previously missing Standard OpenIdConnect claims. See issue #1598 for details.Performance Improvements:
AadIssuerValidatorby not usingstring.Replacewhere appropriate. See issue #2595 and PR #2597 for more details.7.6.0
7.6.0
New Features:
JsonWebToken- extract and expose the method that reads the header/payload property values from the reader so it can be overridden in children classes to add any extra own logic. See issues #2581, #2583, and #2495 for details.Bug Fixes:
Performance Improvements:
Fundamentals:
Microsoft.IdentityModel.Tokensdelegates to a new file. See PR #26067.5.2
7.5.2
Bug Fixes:
Fundamentals:
Performance Improvements:
VerifyRsa/VerifyECDsa. See PR #2589 for more details. By @eerhardtValidateSignatureby using a collection expression instead ofnew List<SecurityKey> { key }, to optimize for the single element case. See PR #2586 for more details. By @eerhardtAadIssuerValidator. See PR #2584 for more details. By @eerhardt7.5.1
Performance Improvements:
Fundamentals:
Bug Fix:
UserInfoEndpoint. See issue #2548 for details.7.5.0
New Features:
Supports the 1.1 version of the Microsoft Entra ID Endpoint #2503
What's Changed
Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@v7.4.1...7.5.0
7.4.1
7.4.1
Bug Fixes:
SamlSecurityTokenHandlerandSaml2SecurityTokenHandlernow can fetch configuration when validating SAML issuer and signature. See PR #2412JsonWebToken.ReadTokennow correctly checks Dot3 index in JWE. See PR #2501Engineering Excellence:
Microsoft.IdentityModel.LogginginMicrosoft.IdentityModel.Protocols, which already depends on it viaMicrosoft.IdentityModel.Tokens. See PR #2508build.sh, improving speed. See PR #25217.4.0
7.4.0
New Features:
Performance Improvements:
Fundamentals:
Engineering Excellence:
7.4.0-preview1
Performance Improvements:
Performance Assessment on .NET 8:
Preview branch:

Dev (main) branch:

View the benchmarks here.
7.3.1
7.3.1
Bug Fixes:
MetadataNameconstant. See issue #2471 for details.Performance Improvements:
Documentation:
azpinJsonWebToken. See #2475 for details.7.3.0
New Features
Addition of the ClientCertificates property to the HttpRequestData class enables exposure of certificate collection involved in authenticating the client against the server and unlock support of new scenarios within the SDK. See PR #2462 for details.
Bug Fixes
Fixed bug where x5c property is empty in JwtHeader after reading a JWT containing x5c in its header, issue #2447, see PR #2460 for details.
Fixed bug where JwtPayload.Claim.Value was not culture invariant #2409. Fixed by PRs #2453 and #2461.
Fixed bug where Guid values in JwtPayload caused an exception, issue #2439. Fixed by PR #2440.
Performance Improvements
Remove linq from BaseConfigurationComparer, improvement #2464, for additional details see PR #2465.
Engineering Excellence
New benchmark tests for AsymmetricAdapter signatures. For details see PR #2449.
7.2.0
7.2.0
Performance Improvements:
Reduce allocations and transformations when creating a token #2395.
Update Esrp Code Signing version to speed up release build #2429.
Engineering Excellence:
Improve benchmark consistency #2428.
Adding P50, P90 and P100 percentiles to benchmarks #2411.
Decouple benchmark tests from test projects #2413.
Include pack step in PR builds #2442.
Fundamentals:
Improve logging in Wilson for failed token validation when key not found #2436.
Remove conditional Net8.0 compilation #2424.
Commits viewable in compare view.
Updated Microsoft.IdentityModel.Tokens from 8.14.0 to 8.19.1.
Release notes
Sourced from Microsoft.IdentityModel.Tokens's releases.
8.19.1
Bug Fixes
JwtSecurityTokenHandlerforIssuerSigningKeyResolverUsingConfigurationto take priority overIssuerSigningKeyResolver, matching the documented contract and the correct behavior already present inJsonWebTokenHandler. See PR #3519.8.19.0
New Features
Bug Fixes
jkuclaim. See PR #3481.htucomparison. See PR #3509.8.18.0
New Features
IConfigurationEventHandlerContextAware<T>that provides context to the configuration event handler implementation, allowing it to optionally bypass a cache lookup. See PR #3444.8.17.0
Dependencies
8.16.0
New Features
Fundamentals
8.15.0
New Features
X509SecurityKeyandJsonWebKeyConverter.ConvertFromX509SecurityKeyExtended
X509SecurityKeyandJsonWebKeyConverter.ConvertFromX509SecurityKeyto support ECDSA keys.See PR #2377 for details.
Bug Fixes
Updated logging to sanitize sensitive values, reducing the risk of inadvertently exposing secrets or PII in logs.
See PR #3316 for details.
SearchValuesImproved the performance of the log sanitization logic introduced earlier by using
SearchValues, making sanitization more efficient in high-throughput scenarios.See PR #3341 for details.
IDX10400Adjusted the
IDX10400test to align with the current behavior and error messaging.See PR #3314 for details.
Fundamentals
Added new tests to validate the set of supported cryptographic algorithms, increasing confidence in algorithm coverage and compatibility.
See PR #3296 for details.
.clinerulestoagents.mdMoved repository agent/AI-assist rules into markdown documentation to make them more visible and easier to maintain.
See PR #3313 for details.
Microsoft.IdentityModel.TestExtensionsfrom Newtonsoft.Json to System.Text.JsonUpdated
Microsoft.IdentityModel.TestExtensionsto useSystem.Text.Jsoninstead ofNewtonsoft.Json, aligning tests with the runtime serialization stack.See PR #3356 for details.
Turned off automated code coverage comments on PRs to reduce noise while retaining coverage data elsewhere.
See PR #3349 for details.
Addressed CodeQL-reported issues to improve security posture and static analysis cleanliness.
See PR #3364 for details.
.NET 10 / SDK and tooling updates
Updated the repository to build and test against .NET 10.0 preview/RC1, ensuring early compatibility with the upcoming runtime.
See PRs #3287, #3357, and #3358 for details.
Ensured consistent use of the
TargetNetNextparameter across build, test, and pack phases so .NET 10.0 tests execute reliably.See PR #3337 for details.
Adjusted project files and CI workflows to correctly target and run on .NET 10.0, including test and pack scenarios.
See PR #3363 for details.
Updated the .NET version references to be compliant with corporate governance (CG) requirements.
See PR #3353 for details.
CoverletCollectorVersionto 6.0.4.See PR #3333 for details.
Microsoft.NET.Test.Sdkto a newer version for improved test reliability and tooling support.... (truncated)
Commits viewable in compare view.
Updated Microsoft.NET.Test.Sdk from 17.6.3 to 17.14.1.
Release notes
Sourced from Microsoft.NET.Test.Sdk's releases.
17.14.1
What's Changed
Full Changelog: microsoft/vstest@v17.14.0...v17.14.1
17.14.0
What's Changed
.NET versions updated
This version of VS Test upgraded .NET to net8 and net9. All projects targeting net6.0 (or other end-of-life .NET target frameworks) should pin their version of Microsoft.NET.Test.SDK to 17.13.0, or update the projects to net8 or newer. We remain backwards compatible with previous versions of Microsoft.NET.Test.SDK. This change does NOT prevent you from:
It also has no impact on .NET Framework projects, where we continue targeting .NET Framework 4.6.2.
Changes
Internal version updates and fixes
New Contributors
... (truncated)
17.14.0-preview-25107-01
What's Changed
.NET versions updated
This version of VS Test upgraded .NET to net8 and net9. All projects targeting net6.0 (or other end-of-life .NET target frameworks) should pin their version of Microsoft.NET.Test.SDK to 17.13.0, or update the projects to net8 or newer. We remain backwards compatible with previous versions of Microsoft.NET.Test.SDK. This change does NOT prevent you from:
It also has no impact on .NET Framework projects, where we continue targeting .NET Framework 4.6.2.
Changes
Internal version updates and fixes
Will probably revert before release:
New Contributors
Full Changelog: microsoft/vstest@v17.13.0...v17.14.0-preview-25107-01
17.13.0
What's Changed
Add letter number among valid identifiers in class name by @nohwnd in Add letter number among valid identifiers in class name microsoft/vstest#13868
Fix formatting in Runner by @mthalman in Fix formatting in Runner microsoft/vstest#13871
Downgrade xunit skip warning to info by @nohwnd in Downgrade xunit skip warning to info microsoft/vstest#10381
Add msdia for arm64 into nuget by @nohwnd in Add msdia for arm64 into nuget microsoft/vstest#10382
Enable native debugging for vstest.console by @ocitrev in Enable native debugging for vstest.console microsoft/vstest#10401
Fix RFCs links by @Youssef1313 in Fix RFCs links microsoft/vstest#10424
Convert to auto property by @nohwnd in Convert to auto property microsoft/vstest#10365
Update Versions.props by @nohwnd in Update Versions.props microsoft/vstest#10378
Enable TSA by @jakubch1 in Enable TSA microsoft/vstest#10385
Arm64 dia by @nohwnd in Arm64 dia microsoft/vstest#10390
Update source-build team references by @MichaelSimons in Update source-build team references microsoft/vstest#10388
Exclude .signature.p7s from nupkg file count by @ellahathaway in Exclude .signature.p7s from nupkg file count microsoft/vstest#10418
Set NetCurrent so that it doesn't roll forward automatically by @ViktorHofer in Set NetCurrent so that it doesn't roll forward automatically microsoft/vstest#10622
New Contributors
Full Changelog: microsoft/vstest@v17.12.0...v17.13.0
17.12.0
What's Changed
Internal and infrastructure fixes:
Full Changelog: microsoft/vstest@v17.11.1...v17.12.0
17.11.1
What's Changed
Full Changelog: microsoft/vstest@v17.11.0...v17.11.1
17.11.0
What's Changed
New Contributors
Full Changelog: microsoft/vstest@v17.10.0...v17.11.0-release-24352-06
17.11.0-release-24373-02
What's Changed
Full Changelog: microsoft/vstest@v17.11.0-release-24352-06...v17.11.0-release-24373-02
17.11.0-release-24352-06
What's Changed
New Contributors
Full Changelog: microsoft/vstest@v17.10.0...v17.11.0-release-24352-06
17.10.0
What's Changed
And many infrastructure related changes and updates.
New Contributors
Full Changelog: microsoft/vstest@v17.9.0...v17.10.0
17.10.0-release-24177-07
What's Changed
Fix Microsoft.TestPlatform.Build sourcebuild nuspec by @Evangelink in Fix Microsoft.TestPlatform.Build sourcebuild nuspec microsoft/vstest#4871
Updating version of Microsoft.VisualStudio.Interop to 17.10 by @MSLukeWest in Updating version of Microsoft.VisualStudio.Interop to 17.10 microsoft/vstest#4866
Add VSTEST_DIAG_VERBOSITY to help by @nohwnd in Add VSTEST_DIAG_VERBOSITY to help microsoft/vstest#4882
Move SB metadata to intermediates by @ellahathaway in Move SB metadata to intermediates microsoft/vstest#4884
Fix feature flag name by @nohwnd in Fix feature flag name microsoft/vstest#4885
Remove PackageLicenseFile preventing PackageLicenseExpression from working by @lahma in Remove PackageLicenseFile preventing PackageLicenseExpression from working microsoft/vstest#4890
Add GitHub Actions logger by @martincostello in Add GitHub Actions logger microsoft/vstest#4906
Ensure to send a session complete event by @drognanar in Ensure to send a session complete event microsoft/vstest#4878
specify Win10 + maxversiontested to enable xaml APIs to be used in tests running under testhost.exe by @ChrisGuzak in specify Win10 + maxversiontested to enable xaml APIs to be used in tests running under testhost.exe microsoft/vstest#4888
Improve terminal logger by @nohwnd in Improve terminal logger microsoft/vstest#4877
Add test name to MSBuild where we have frame. by @nohwnd in Add test name to MSBuild where we have frame. microsoft/vstest#4935
Updated Code Coverage to latest version [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#4933
New Contributors
And many infrastructure related changes to migrate our pipelines to common build system.
Full Changelog: microsoft/vstest@v17.10.0-preview-24080-01...v17.10.0-release-24177-07
17.10.0-preview-24080-01
What's Changed
New Contributors
Full Changelog: microsoft/vstest@v17.9.0-preview-23577-04...v17.10.0-preview-24080-01
17.9.0
What's Changed
HtmlLoggerby @daveMueller in Remove javascript inHtmlLoggermicrosoft/vstest#4744New Contributors
Full Changelog: microsoft/vstest@v17.8.0...v17.9.0
17.9.0-release-23619-01
What's Changed
Full Changelog: microsoft/vstest@v17.9.0-preview-23577-04...v17.9.0-release-23619-01
17.9.0-preview-23577-04
What's Changed
Description has been truncated