Skip to content

Bump the non-security-updates group with 25 updates#75

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/backend/src/common/Template.Common.Jobs/non-security-updates-be1aa8ee76
Open

Bump the non-security-updates group with 25 updates#75
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/backend/src/common/Template.Common.Jobs/non-security-updates-be1aa8ee76

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor

Updated coverlet.collector from 10.0.0 to 10.0.1.

Release notes

Sourced from coverlet.collector's releases.

10.0.1

Improvements

Fixed

  • Fix inconsistent paths in cobertura reports #​1723
  • Fix when using "is" with "and" in pattern matching, branch coverage is lower than normal #​1313
  • Fix Coverlet flagging a branch for an async functions finally block where none exists #​1337
  • Fix Coverlet Tracker Missing CompilerGeneratedAttribute #​1828

Maintenance

  • Add architecture docs and diagrams for all integrations #​1927
  • Update NuGet packages and .NET SDK versions #​1933

Diff between 10.0.0 and 10.0.1

Commits viewable in compare view.

Updated ErrorOr from 2.0.1 to 2.1.1.

Release notes

Sourced from ErrorOr's releases.

2.1.1

new Release with many new features:

  • Some minor Fixes
  • Support for .NET 8 was added
  • Support for .NET 10 was added
  • Added missing async versions of FailIf methods
  • Added FailIf method overloads that allow to use value in error definition using Func<TValue, Error> error builder
  • Added ElseDo and ElseDoAsync methods
  • Added Else/ElseAsync overloads returning ErrorOr
  • Added Else/ElseAsync overloads returning ErrorOr
  • Added ToErrorOrAsync method
  • Added missing ErrorOrFactory.From methods
  • Added missing collection expression support
  • Added FromAsync and missing ToErrorOrAsync methods
  • Added ThenEnsure and ThenEnsureAsync methods
  • Added IsSuccess property to ErrorOr

Commits viewable in compare view.

Updated FluentAssertions from 8.9.0 to 8.10.0.

Release notes

Sourced from FluentAssertions's releases.

8.10.0

What's Changed

Improvements

Documentation

Others

Full Changelog: fluentassertions/fluentassertions@8.9.0...8.10.0

Commits viewable in compare view.

Updated Google.Protobuf from 3.34.1 to 3.35.1.

Release notes

Sourced from Google.Protobuf's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Grpc.Tools from 2.80.0 to 2.81.1.

Release notes

Sourced from Grpc.Tools's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Identity.EntityFrameworkCore from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.Identity.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Tools from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Tools's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.ApiDescription.Server from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.ApiDescription.Server's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.IdentityModel.Tokens from 8.18.0 to 8.19.1.

Release notes

Sourced from Microsoft.IdentityModel.Tokens's releases.

8.19.1

Bug Fixes

  • Update JwtSecurityTokenHandler for IssuerSigningKeyResolverUsingConfiguration to take priority over IssuerSigningKeyResolver, matching the documented contract and the correct behavior already present in JsonWebTokenHandler. See PR #​3519.

8.19.0

New Features

  • Add ML-DSA (FIPS 204) post-quantum signature support. See PR #​3479.
  • Cache custom crypto providers in CryptoProviderFactory. See PR #​3489.

Bug Fixes

  • Disable automatic redirects on default HttpClient for JKU retrieval. See PR #​3494.
  • Adjust rented buffer handling in claim set parsing. See PR #​3493.
  • Tidy null handling in SAML conditions validation. See PR #​3491.
  • Improve validation of jku claim. See PR #​3481.
  • Limit telemetry algorithm dimension cardinality. See PR #​3490.
  • Add defensive copy of collections in ValidationParameters. See PR #​3492.
  • Update TokenValidationParameter copy constructor to make a deep copy. See PR #​3488.
  • Update to fail-closed when replay protection isn't configured and other DPoP hardening. See PR #​3505.
  • Apply RFC 3986 section 6.2.2 normalization to DPoP htu comparison. See PR #​3509.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.5.1 to 18.6.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.6.0

What's Changed

Changes to tests and infra

Commits viewable in compare view.

Updated Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.1 to 10.0.2.

Release notes

Sourced from Npgsql.EntityFrameworkCore.PostgreSQL's releases.

10.0.2

Milestone issue

What's Changed

Full Changelog: npgsql/efcore.pg@v10.0.1...v10.0.2

Commits viewable in compare view.

Updated Polly from 8.6.6 to 8.7.0.

Release notes

Sourced from Polly's releases.

8.7.0

Highlights

What's Changed

New Contributors

Full Changelog: App-vNext/Polly@8.6.6...8.7.0

Commits viewable in compare view.

Updated QuestPDF from 2026.2.4 to 2026.6.0.

Release notes

Sourced from QuestPDF's releases.

2026.6.0

  • Substantially revised the QuestPDF legal documents to better support enterprise procurement and compliance requirements and to define usage terms more clearly.
  • Introduced native support for Windows ARM64 (win-arm64) environments.
  • Improved compatibility with older Linux distributions (glibc 2.28 and newer).
  • Reduced the NuGet package size by optimizing native dependencies.
  • Renamed the TranslateX / TranslateY methods to OffsetX / OffsetY to improve discoverability.
  • SVG rendering improvements:
    • Prevented zero-width strokes from being rendered as hairlines, aligning behavior with the SVG specification.
    • Added support for embedded Base64 images that use the modern href attribute instead of xlink:href.
    • Added support for the #RGBA and #RRGGBBAA color formats.
    • Added support for the transparent named color.
  • Fixed PDF bookmark titles so they include only text from the associated paragraph, excluding the alternative text of images.
  • Fixed SectionLink behaving incorrectly when target Section is placed in page header.
  • Updated the Skia native dependency to version m149.
  • Updated the qpdf native dependency to version 12.3.2.
  • Modernized the build system for native dependencies, including how QuestPDF-specific patches are applied.
  • Updated all GitHub Actions workflows to use standard runners, reducing costs and making it easier for everyone to contribute to the project.

2026.5.0

  • Fixed a bug where Table elements with RowSpan could render incorrectly or break when spanning across pages.
  • Fixed visual rendering artifacts that could appear in complex or very large paragraphs.
  • Improved error message when native dependency versions are mismatched — the error now includes step-by-step guidance for updating manually copied native files.
  • Updated the underlying Skia native dependency to version m146.

Commits viewable in compare view.

Updated Scalar.AspNetCore from 2.14.9 to 2.16.3.

Release notes

Sourced from Scalar.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Scriban from 7.1.0 to 7.2.4.

Release notes

Sourced from Scriban's releases.

7.2.4

Changes

🐛 Bug Fixes

  • Fix build warning (4ca0455a)

🧰 Misc

  • Clarify URL escaping semantics (99cc7c61)

Full Changelog: 7.2.3...7.2.4

Published with dotnet-releaser

7.2.3

Changes

🧰 Misc

  • Document safe include file loading (34d1cd12)
  • Restrict reflected writes to public setters (c7377a60)

Full Changelog: 7.2.2...7.2.3

Published with dotnet-releaser

7.2.2

Changes

🐛 Bug Fixes

  • Fix parametric function variable scope (#​676) (54b781ec)

🧰 Misc

  • Clarify variable scope documentation (390db7ff)
  • Clarify MemberFilter sandbox limitations (29294e1b)

Full Changelog: 7.2.1...7.2.2

Published with dotnet-releaser

7.2.1

Changes

🧰 Misc

  • Limit array multiplication growth (205ca6a7)
  • Stop parsing at expression depth limit (8fdbd687)
  • Document member filters as reflection-only (d45f7f03)

Full Changelog: 7.2.0...7.2.1

Published with dotnet-releaser

7.2.0

Changes

🐛 Bug Fixes

  • Fix readme with source embedding (#​671) (c8094b09)

🧰 Misc

  • Merge commit from fork (7fdf19df)

Full Changelog: 7.1.0...7.2.0

Published with dotnet-releaser

Commits viewable in compare view.

Updated System.IdentityModel.Tokens.Jwt from 8.18.0 to 8.19.1.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

8.19.1

Bug Fixes

  • Update JwtSecurityTokenHandler for IssuerSigningKeyResolverUsingConfiguration to take priority over IssuerSigningKeyResolver, matching the documented contract and the correct behavior already present in JsonWebTokenHandler. See PR #​3519.

8.19.0

New Features

  • Add ML-DSA (FIPS 204) post-quantum signature support. See PR #​3479.
  • Cache custom crypto providers in CryptoProviderFactory. See PR #​3489.

Bug Fixes

  • Disable automatic redirects on default HttpClient for JKU retrieval. See PR #​3494.
  • Adjust rented buffer handling in claim set parsing. See PR #​3493.
  • Tidy null handling in SAML conditions validation. See PR #​3491.
  • Improve validation of jku claim. See PR #​3481.
  • Limit telemetry algorithm dimension cardinality. See PR #​3490.
  • Add defensive copy of collections in ValidationParameters. See PR #​3492.
  • Update TokenValidationParameter copy constructor to make a deep copy. See PR #​3488.
  • Update to fail-closed when replay protection isn't configured and other DPoP hardening. See PR #​3505.
  • Apply RFC 3986 section 6.2.2 normalization to DPoP htu comparison. See PR #​3509.

Commits viewable in compare view.

Updated TickerQ from 10.3.0 to 10.4.0.

Release notes

Sourced from TickerQ's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated TickerQ.Dashboard from 10.3.0 to 10.4.0.

Release notes

Sourced from TickerQ.Dashboard's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated TickerQ.EntityFrameworkCore from 10.3.0 to 10.4.0.

Release notes

Sourced from TickerQ.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps coverlet.collector from 10.0.0 to 10.0.1
Bumps ErrorOr from 2.0.1 to 2.1.1
Bumps FluentAssertions from 8.9.0 to 8.10.0
Bumps Google.Protobuf from 3.34.1 to 3.35.1
Bumps Grpc.Tools from 2.80.0 to 2.81.1
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.7 to 10.0.9
Bumps Microsoft.AspNetCore.Identity.EntityFrameworkCore from 10.0.7 to 10.0.9
Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.7 to 10.0.9
Bumps Microsoft.AspNetCore.OpenApi from 10.0.7 to 10.0.9
Bumps Microsoft.EntityFrameworkCore from 10.0.7 to 10.0.9
Bumps Microsoft.EntityFrameworkCore.Design from 10.0.7 to 10.0.9
Bumps Microsoft.EntityFrameworkCore.InMemory from 10.0.7 to 10.0.9
Bumps Microsoft.EntityFrameworkCore.Tools from 10.0.7 to 10.0.9
Bumps Microsoft.Extensions.ApiDescription.Server from 10.0.7 to 10.0.9
Bumps Microsoft.IdentityModel.Tokens from 8.18.0 to 8.19.1
Bumps Microsoft.NET.Test.Sdk from 18.5.1 to 18.6.0
Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.1 to 10.0.2
Bumps Polly from 8.6.6 to 8.7.0
Bumps QuestPDF from 2026.2.4 to 2026.6.0
Bumps Scalar.AspNetCore from 2.14.9 to 2.16.3
Bumps Scriban from 7.1.0 to 7.2.4
Bumps System.IdentityModel.Tokens.Jwt from 8.18.0 to 8.19.1
Bumps TickerQ from 10.3.0 to 10.4.0
Bumps TickerQ.Dashboard from 10.3.0 to 10.4.0
Bumps TickerQ.EntityFrameworkCore from 10.3.0 to 10.4.0

---
updated-dependencies:
- dependency-name: coverlet.collector
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-security-updates
- dependency-name: ErrorOr
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
- dependency-name: FluentAssertions
  dependency-version: 8.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
- dependency-name: Google.Protobuf
  dependency-version: 3.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
- dependency-name: Grpc.Tools
  dependency-version: 2.81.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-security-updates
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-security-updates
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-security-updates
- dependency-name: Microsoft.AspNetCore.Identity.EntityFrameworkCore
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-security-updates
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-security-updates
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-security-updates
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-security-updates
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-security-updates
- dependency-name: Microsoft.EntityFrameworkCore
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-security-updates
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-security-updates
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-security-updates
- dependency-name: Microsoft.EntityFrameworkCore.InMemory
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-security-updates
- dependency-name: Microsoft.EntityFrameworkCore.Tools
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-security-updates
- dependency-name: Microsoft.Extensions.ApiDescription.Server
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-security-updates
- dependency-name: Microsoft.IdentityModel.Tokens
  dependency-version: 8.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
- dependency-name: Microsoft.IdentityModel.Tokens
  dependency-version: 8.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
- dependency-name: Microsoft.IdentityModel.Tokens
  dependency-version: 8.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
- dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-security-updates
- dependency-name: Polly
  dependency-version: 8.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
- dependency-name: QuestPDF
  dependency-version: 2026.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
- dependency-name: QuestPDF
  dependency-version: 2026.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
- dependency-name: Scalar.AspNetCore
  dependency-version: 2.16.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
- dependency-name: Scalar.AspNetCore
  dependency-version: 2.16.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
- dependency-name: Scalar.AspNetCore
  dependency-version: 2.16.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
- dependency-name: Scriban
  dependency-version: 7.2.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-version: 8.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-version: 8.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-version: 8.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
- dependency-name: TickerQ
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
- dependency-name: TickerQ.Dashboard
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
- dependency-name: TickerQ.EntityFrameworkCore
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-security-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 15, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: security. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants