Bump coverlet.collector and 25 others by dependabot[bot] · Pull Request #83 · barcsaidominik/dotnet-template

dependabot · 2026-07-20T06:42:02Z

Updated coverlet.collector from 10.0.0 to 10.0.1.

Release notes

Sourced from coverlet.collector's releases.

10.0.1

Improvements

Coverlet with MTP 2 doesn't show test coverage statistic in console #1907
Avoid unnecessary testhost restarts #1912 by https://github.com/mawosoft

Fixed

Fix inconsistent paths in cobertura reports #1723
Fix when using "is" with "and" in pattern matching, branch coverage is lower than normal #1313
Fix Coverlet flagging a branch for an async functions finally block where none exists #1337
Fix Coverlet Tracker Missing CompilerGeneratedAttribute #1828

Maintenance

Add architecture docs and diagrams for all integrations #1927
Update NuGet packages and .NET SDK versions #1933

Diff between 10.0.0 and 10.0.1

Commits viewable in compare view.

Pinned ErrorOr at 2.1.1.

Release notes

Sourced from ErrorOr's releases.

2.1.1

new Release with many new features:

Some minor Fixes
Support for .NET 8 was added
Support for .NET 10 was added
Added missing async versions of FailIf methods
Added FailIf method overloads that allow to use value in error definition using Func<TValue, Error> error builder
Added ElseDo and ElseDoAsync methods
Added Else/ElseAsync overloads returning ErrorOr
Added Else/ElseAsync overloads returning ErrorOr
Added ToErrorOrAsync method
Added missing ErrorOrFactory.From methods
Added missing collection expression support
Added FromAsync and missing ToErrorOrAsync methods
Added ThenEnsure and ThenEnsureAsync methods
Added IsSuccess property to ErrorOr

Commits viewable in compare view.

Updated FluentAssertions from 8.9.0 to 8.10.0.

Release notes

Sourced from FluentAssertions's releases.

8.10.0 What's Changed

Commits viewable in compare view.

Updated Google.Protobuf from 3.34.1 to 3.35.1.

Release notes

Sourced from Google.Protobuf's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Grpc.Tools from 2.80.0 to 2.82.0.

Release notes

Sourced from Grpc.Tools's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.7 to 10.0.10.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Identity.EntityFrameworkCore from 10.0.7 to 10.0.10.

Release notes

Sourced from Microsoft.AspNetCore.Identity.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.7 to 10.0.10.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.7 to 10.0.10.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.EntityFrameworkCore at 10.0.10.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.7 to 10.0.10.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.7 to 10.0.10.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Tools from 10.0.7 to 10.0.10.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Tools's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.ApiDescription.Server from 10.0.7 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.ApiDescription.Server's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.IdentityModel.Tokens from 8.18.0 to 8.19.2.

Release notes

Sourced from Microsoft.IdentityModel.Tokens's releases.

8.19.2 What's Changed

Improve serializer and JWE key unwrap handling by @iNinja in Improve serializer and JWE key unwrap handling AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3544

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.19.1...8.19.2

8.19.1 Bug Fixes

Update JwtSecurityTokenHandler for IssuerSigningKeyResolverUsingConfiguration to take priority over IssuerSigningKeyResolver, matching the documented contract and the correct behavior already present in JsonWebTokenHandler. See PR #3519.

8.19.0 New Features

Add ML-DSA (FIPS 204) post-quantum signature support. See PR #3479.
Cache custom crypto providers in CryptoProviderFactory. See PR #3489.

Bug Fixes

Disable automatic redirects on default HttpClient for JKU retrieval. See PR #3494.
Adjust rented buffer handling in claim set parsing. See PR #3493.
Tidy null handling in SAML conditions validation. See PR #3491.
Improve validation of jku claim. See PR #3481.
Limit telemetry algorithm dimension cardinality. See PR #3490.
Add defensive copy of collections in ValidationParameters. See PR #3492.
Update TokenValidationParameter copy constructor to make a deep copy. See PR #3488.
Update to fail-closed when replay protection isn't configured and other DPoP hardening. See PR #3505.
Apply RFC 3986 section 6.2.2 normalization to DPoP htu comparison. See PR #3509.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.5.1 to 18.8.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.8.1 What's Changed

Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) by @nohwnd in Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) microsoft/vstest#16281

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0 What's Changed

Migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) by @nohwnd in feat: migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) microsoft/vstest#15687
- For more detail refer to https://devblogs.microsoft.com/dotnet/vs-test-is-removing-its-newtonsoft-json-dependency/
Create source-only filter package by @Youssef1313 in Create source-only filter package microsoft/vstest#15638
Add ARM64 msdia140.dll support to test platform packages by @nohwnd in Cherry-pick: Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15692
Fix mutex cleanup crash on macOS/Linux by @nohwnd in Fix mutex cleanup crash on macOS/Linux microsoft/vstest#15684
Restrict artifact temp directory permissions on Unix by @nohwnd in Restrict artifact temp directory permissions on Unix microsoft/vstest#15729
Add support for filtering uncategorized tests with TestCategory=None by @Evangelink in Add support for filtering uncategorized tests with TestCategory=None microsoft/vstest#15727
Fix SCI binding failure in DTA hosts (main) by @nohwnd in Fix SCI binding failure in DTA hosts (main) microsoft/vstest#15724
Fix HTML logger parallel file collision by @nohwnd in [fix] Fix HTML logger parallel file collision microsoft/vstest#15435
Improve error message when testhost cannot be found by @nohwnd in [fix] Improve error message when testhost cannot be found microsoft/vstest#16053
Fix HTML logger exception on invalid XML chars in test display names by @nohwnd in [fix] Fix HTML logger exception on invalid XML chars in test display names microsoft/vstest#16051

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

18.7.0 What's Changed

Add ARM64 msdia140.dll support to test platform packages by @jamesmcroft in Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15689
Update System.Memory from 4.5.5 to 4.6.3 by @nohwnd in Update System.Memory from 4.5.5 to 4.6.3 microsoft/vstest#15706

New Contributors

@jamesmcroft made their first contribution in Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15689

Full Changelog: microsoft/vstest@v18.6.0...v18.7.0

18.6.0 What's Changed

Revert removal of Video Recorder by @nohwnd in Revert removal of Video Recorder microsoft/vstest#15336
Speed up blame by filtering non-.NET processes from dump collection by @nohwnd in Speed up blame tests by filtering non-.NET processes from dump collection microsoft/vstest#15518
Add README.md to NuGet packages by @nohwnd in Add README.md to NuGet packages microsoft/vstest#15550
Report child process info on connection timeout by @nohwnd in Report child process info on connection timeout microsoft/vstest#15603

Changes to tests and infra

Brand as 18.6 by @nohwnd in Brand as 18.6 microsoft/vstest#15423
Upgrading code coverage version to 18.5.1, by @fhnaseer in Upgrading code coverage version to 18.5.1, microsoft/vstest#15422
Updating System.Collections.Immutable to 9.0.11 by @MSLukeWest in Updating System.Collections.Immutable to 9.0.11 microsoft/vstest#15425
Fix attachVS when used for debugging integration tests by @nohwnd in Fix attachVS when used for debugging integration tests microsoft/vstest#15451
Replace dotnet.config, with global.json by @nohwnd in Replace dotnet.config, with global.json microsoft/vstest#15449
Document debugging integration tests with AttachVS by @Copilot in Document debugging integration tests with AttachVS microsoft/vstest#15452
Fix stack overflow tests by @nohwnd in Fix stack overflow tests microsoft/vstest#15461
Make TestAssets.sln buildable locally by @Youssef1313 in Make TestAssets.sln buildable locally microsoft/vstest#15466
Try filtering out tests by @nohwnd in Try filtering out tests microsoft/vstest#15463
Build just once when tfms run in parallel by @nohwnd in Build just once when tfms run in parallel microsoft/vstest#15465
Review simplify compatibility sources, deduplicate tests by @nohwnd in Review simplify compatibility sources, deduplicate tests microsoft/vstest#15472
Cleanup dead TRX code by @Youssef1313 in Cleanup dead TRX code microsoft/vstest#15474
Update .NET runtimes to 8.0.25, 9.0.14, and 10.0.4 by @nohwnd in Update .NET runtimes to 8.0.25, 9.0.14, and 10.0.4 microsoft/vstest#15481
Compat matrix checker by @nohwnd in Compat matrix checker microsoft/vstest#15480
Add trx analysis skill by @nohwnd in Add trx analysis skill microsoft/vstest#15486
Split integration tests to single tfm and multi tfm project by @nohwnd in Split integration tests to single tfm and multi tfm project microsoft/vstest#15484
Update matrix by @nohwnd in Update matrix microsoft/vstest#15477
Break infinite restore loop in VS by @nohwnd in Break infinite restore loop in VS microsoft/vstest#15503
Use global package cache for build, and local for running integration tests by @nohwnd in Use global package cache for build, and local for running integration tests microsoft/vstest#15500
Update contributing by @nohwnd in Update contributing microsoft/vstest#15505
Reduce test wall-clock time by increasing minThreads by @drognanar in Reduce test wall-clock time by increasing minThreads microsoft/vstest#15502
Indicator flakiness by @nohwnd in Indicator flakiness microsoft/vstest#15513
Fix ci build by @nohwnd in Fix ci build microsoft/vstest#15515
Fix thread safety issues by @Evangelink in Fix thread safety issues microsoft/vstest#15512
Optimize DotnetSDKSimulation_PostProcessing test (163s → 61s) by @nohwnd in Optimize DotnetSDKSimulation_PostProcessing test (163s → 61s) microsoft/vstest#15516
Build isolated test assets for single TFM instead of 7 by @nohwnd in Build isolated test assets for single TFM instead of 7 microsoft/vstest#15517
Remove unused dependencies from Library.IntegrationTests by @nohwnd in Remove unused dependencies from Library.IntegrationTests microsoft/vstest#15527
Remove printing _attachments content to console by @nohwnd in Remove printing _attachments content to console microsoft/vstest#15520
Add Linux/macOS test filtering guide to CONTRIBUTING.md by @nohwnd in Add Linux/macOS test filtering guide to CONTRIBUTING.md microsoft/vstest#15521
Change integration test parallelization from ClassLevel to MethodLevel by @nohwnd in Change integration test parallelization from ClassLevel to MethodLevel microsoft/vstest#15526
Unify target framework checks with IsNetFrameworkTarget/IsNetTarget by @nohwnd in Unify target framework checks with IsNetFrameworkTarget/IsNetTarget microsoft/vstest#15523
Add unattended work instructions to copilot-instructions.md by @nohwnd in Add unattended work instructions to copilot-instructions.md microsoft/vstest#15531
Reduce code style rule severity from warning to suggestion by @nohwnd in Reduce code style rule severity from warning to suggestion microsoft/vstest#15522
Remove Debug/Release line number branching from tests by @nohwnd in Remove Debug/Release line number branching from tests microsoft/vstest#15519
Revise unattended work instructions in copilot-instructions.md by @nohwnd in Revise unattended work instructions in copilot-instructions.md microsoft/vstest#15532
Improve CompatibilityRowsBuilder error message with diagnostic details by @nohwnd in Improve CompatibilityRowsBuilder error message with diagnostic details microsoft/vstest#15529
docs: add git worktree and upstream sync workflow to copilot-instructions.md by @nohwnd in docs: add git worktree and upstream sync workflow to copilot-instructions.md microsoft/vstest#15538
Add VSIX runner to smoke tests by @nohwnd in Add VSIX runner to smoke tests microsoft/vstest#15541
Remove deprecated WebTest and TMI test methods by @nohwnd in Remove deprecated WebTest and TMI test methods microsoft/vstest#15525
Fix compatibility test failures for legacy vstest.console and MSTest adapter by @nohwnd in Fix compatibility test failures for legacy vstest.console and MSTest adapter microsoft/vstest#15534
Convert TestPlatform.sln to slnx format by @nohwnd in Convert TestPlatform.sln to slnx format microsoft/vstest#15551
Convert test/TestAssets .sln files to .slnx format by @nohwnd in Convert test/TestAssets .sln files to .slnx format microsoft/vstest#15557
... (truncated)

Commits viewable in compare view.

Updated Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.1 to 10.0.3.

Release notes

Sourced from Npgsql.EntityFrameworkCore.PostgreSQL's releases.

10.0.2

Milestone issue

What's Changed

Translate bytea.Any() as length > 0 by @georg-jung in Translate bytea.Any() as length > 0 npgsql/efcore.pg#3817

Full Changelog: npgsql/efcore.pg@v10.0.1...v10.0.2

Commits viewable in compare view.

Updated NSubstitute from 5.3.0 to 6.0.0.

Release notes

Sourced from NSubstitute's releases.

6.0.0

ℹ️ No changes from Release Candidate 1.

NSubstitute v6.0.0

From RC1 notes:

[NEW] ArgMatchers.Matching predicate matcher as an alternative to Is(Expression<Predicate<T>>. (.NET6 and above.)
[UPDATE] Improved support for custom argument matchers. Arg.Is now accepts arg matchers.
[UPDATE][BREAKING] Update target frameworks: .NET8, .NET Standard 2.0
[UPDATE][BREAKING] Remove legacy obsolete API
[UPDATE][BREAKING] Mark as obsolete api CompatArg with pre c# 7.0 support
[UPDATE][BREAKING] Nullability is enabled for public api for .NET 8+ TFMs
[UPDATE] Migrate documentation to docfx platform and update samples to NUnit 4
[NEW] Added NuGet Package README file.

Full change list

Update target frameworks and other infrastructure changes by @Romfos in Update target frameworks and other infrastructure changes nsubstitute/NSubstitute#831
Remove Google Groups hyperlinks by @304NotModified in Remove Google Groups hyperlinks nsubstitute/NSubstitute#804
Improve output for expected argument matchers in Improve output for expected argument matchers nsubstitute/NSubstitute#806
Mark Substitute.For method as Pure by @Dzliera in Mark Substitute.For<T> method as Pure nsubstitute/NSubstitute#844
Move package creating from build.fsproj to github actions by @Romfos in Move package creating from build.fsproj to github actions nsubstitute/NSubstitute#838
Added .NET 9 to test matrix by @Romfos in Added .NET 9 to test matrix nsubstitute/NSubstitute#848
Update dependencies by @Saibamen in Update dependencies nsubstitute/NSubstitute#843
Migrate documentation to docfx by @Romfos in Migrate documentation to docfx nsubstitute/NSubstitute#850
Added test for issue #716 by @rbeurskens in Added test for issue #716 nsubstitute/NSubstitute#846
feat: add dependabot for this project for minor and patch updates for nuget packages and github actions by @wmundev in feat: add dependabot for this project for minor and patch updates for nuget packages and github actions nsubstitute/NSubstitute#792
#853 Fix matching with multiple generic arguments of the same type by @rholek in #853 Fix matching with multiple generic arguments of the same type nsubstitute/NSubstitute#858
Ability to mock protected methods with and without return value by @Jason31569 in Ability to mock protected methods with and without return value nsubstitute/NSubstitute#845
Enable nullability for public api by @Romfos in Enable nullability for public api nsubstitute/NSubstitute#856
Bugfix/async event handlers return instantly by @jmartschinke in Bugfix/async event handlers return instantly nsubstitute/NSubstitute#808
Fix matching generic calls with AnyType when the generic argument is also a generic argument in return type, out or ref parameter by @JMolenkamp in Fix matching generic calls with AnyType when the generic argument is also a generic argument in return type, out or ref parameter nsubstitute/NSubstitute#862
Feature: allow interception of any generic method call when using Arg.AnyType by @JMolenkamp in Feature: allow interception of any generic method call when using Arg.AnyType nsubstitute/NSubstitute#855
Params arg unit test by @Jason31569 in Params arg unit test nsubstitute/NSubstitute#874
Added exception extensions for ValueTask without return type (rebase) in Added exception extensions for ValueTask without return type (rebase) nsubstitute/NSubstitute#873
Migrate to slnx by @Romfos in Migrate to slnx nsubstitute/NSubstitute#882
Migrate documentation validation from build.fsproj to Roslyn code generator by @Romfos in Migrate documentation validation from build.fsproj to Roslyn code generator nsubstitute/NSubstitute#883
Fix doc links (#884) in Fix doc links (#884) nsubstitute/NSubstitute#886
Add PackageReadmeFile. by @peymanr34 in Add PackageReadmeFile. nsubstitute/NSubstitute#888
Make public api and tests the same for all TFMs by @Romfos in Make public api and tests the same for all TFMs nsubstitute/NSubstitute#885
Migrate documentation samples to NUnit4 by @Romfos in Migrate documentation samples to NUnit4 nsubstitute/NSubstitute#889
Run unit tests in Microsoft.Testing.Platform mode by @Romfos in Run unit tests in Microsoft.Testing.Platform mode nsubstitute/NSubstitute#896
Bump actions/checkout from 4 to 5 by @dependabot[bot] in Bump actions/checkout from 4 to 5 nsubstitute/NSubstitute#902
Fix typo in return value documentation by @ericmutta in Fix typo in return value documentation nsubstitute/NSubstitute#903
Bump actions/setup-dotnet from 4 to 5 by @dependabot[bot] in Bump actions/setup-dotnet from 4 to 5 nsubstitute/NSubstitute#907
Fix typo in received calls documentation by @ericmutta in Fix typo in received calls documentation nsubstitute/NSubstitute#904
Simplify github actions to use less jobs by @Romfos in Simplify github actions to use less jobs nsubstitute/NSubstitute#911
Bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in Bump actions/upload-artifact from 4 to 5 nsubstitute/NSubstitute#916
Bump NUnit3TestAdapter from 5.0.0 to 5.2.0 by @dependabot[bot] in Bump NUnit3TestAdapter from 5.0.0 to 5.2.0 nsubstitute/NSubstitute#922
... (truncated)

6.0.0-rc.1

NSubstitute v6.0.0 Release Candidate 1

Due to the large number of changes in this release, we wanted to start with a release candidate to ensure we've correctly captured breaking changes.

[NEW] ArgMatchers.Matching predicate matcher as an alternative to Is(Expression<Predicate<T>>. (.NET6 and above.)
[UPDATE] Improved support for custom argument matchers. Arg.Is now accepts arg matchers.
[UPDATE][BREAKING] Update target frameworks: .NET8, .NET Standard 2.0
[UPDATE][BREAKING] Remove legacy obsolete API
[UPDATE][BREAKING] Mark as obsolete api CompatArg with pre c# 7.0 support
[UPDATE][BREAKING] Nullability is enabled for public api for .NET 8+ TFMs
[UPDATE] Migrate documentation to docfx platform and update samples to NUnit 4
[NEW] Added NuGet Package README file.

Full change list

Update target frameworks and other infrastructure changes by @Romfos in Update target frameworks and other infrastructure changes nsubstitute/NSubstitute#831
Remove Google Groups hyperlinks by @304NotModified in Remove Google Groups hyperlinks nsubstitute/NSubstitute#804
Improve output for expected argument matchers in Improve output for expected argument matchers nsubstitute/NSubstitute#806
Mark Substitute.For method as Pure by @Dzliera in Mark Substitute.For<T> method as Pure nsubstitute/NSubstitute#844
Move package creating from build.fsproj to github actions by @Romfos in Move package creating from build.fsproj to github actions nsubstitute/NSubstitute#838
Added .NET 9 to test matrix by @Romfos in Added .NET 9 to test matrix nsubstitute/NSubstitute#848
Update dependencies by @Saibamen in Update dependencies nsubstitute/NSubstitute#843
Migrate documentation to docfx by @Romfos in Migrate documentation to docfx nsubstitute/NSubstitute#850
Added test for issue #716 by @rbeurskens in Added test for issue #716 nsubstitute/NSubstitute#846
feat: add dependabot for this project for minor and patch updates for nuget packages and github actions by @wmundev in feat: add dependabot for this project for minor and patch updates for nuget packages and github actions nsubstitute/NSubstitute#792
#853 Fix matching with multiple generic arguments of the same type by @rholek in #853 Fix matching with multiple generic arguments of the same type nsubstitute/NSubstitute#858
Ability to mock protected methods with and without return value by @Jason31569 in Ability to mock protected methods with and without return value nsubstitute/NSubstitute#845
Enable nullability for public api by @Romfos in Enable nullability for public api nsubstitute/NSubstitute#856
Bugfix/async event handlers return instantly by @jmartschinke in Bugfix/async event handlers return instantly nsubstitute/NSubstitute#808
Fix matching generic calls with AnyType when the generic argument is also a generic argument in return type, out or ref parameter by @JMolenkamp in Fix matching generic calls with AnyType when the generic argument is also a generic argument in return type, out or ref parameter nsubstitute/NSubstitute#862
Feature: allow interception of any generic method call when using Arg.AnyType by @JMolenkamp in Feature: allow interception of any generic method call when using Arg.AnyType nsubstitute/NSubstitute#855
Params arg unit test by @Jason31569 in Params arg unit test nsubstitute/NSubstitute#874
Added exception extensions for ValueTask without return type (rebase) in Added exception extensions for ValueTask without return type (rebase) nsubstitute/NSubstitute#873
Migrate to slnx by @Romfos in Migrate to slnx nsubstitute/NSubstitute#882
Migrate documentation validation from build.fsproj to Roslyn code generator by @Romfos in Migrate documentation validation from build.fsproj to Roslyn code generator nsubstitute/NSubstitute#883
Fix doc links (#884) in Fix doc links (#884) nsubstitute/NSubstitute#886
Add PackageReadmeFile. by @peymanr34 in Add PackageReadmeFile. nsubstitute/NSubstitute#888
Make public api and tests the same for all TFMs by @Romfos in Make public api and tests the same for all TFMs nsubstitute/NSubstitute#885
Migrate documentation samples to NUnit4 by @Romfos in Migrate documentation samples to NUnit4 nsubstitute/NSubstitute#889
Run unit tests in Microsoft.Testing.Platform mode by @Romfos in Run unit tests in Microsoft.Testing.Platform mode nsubstitute/NSubstitute#896
Bump actions/checkout from 4 to 5 by @dependabot[bot] in Bump actions/checkout from 4 to 5 nsubstitute/NSubstitute#902
Fix typo in return value documentation by @ericmutta in Fix typo in return value documentation nsubstitute/NSubstitute#903
Bump actions/setup-dotnet from 4 to 5 by @dependabot[bot] in Bump actions/setup-dotnet from 4 to 5 nsubstitute/NSubstitute#907
Fix typo in received calls documentation by @ericmutta in Fix typo in received calls documentation nsubstitute/NSubstitute#904
Simplify github actions to use less jobs by @Romfos in Simplify github actions to use less jobs nsubstitute/NSubstitute#911
Bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in Bump actions/upload-artifact from 4 to 5 nsubstitute/NSubstitute#916
Bump NUnit3TestAdapter from 5.0.0 to 5.2.0 by @dependabot[bot] in Bump NUnit3TestAdapter from 5.0.0 to 5.2.0 nsubstitute/NSubstitute#922
Bump BenchmarkDotNet from 0.15.2 to 0.15.5 by @dependabot[bot] in Bump BenchmarkDotNet from 0.15.2 to 0.15.5 nsubstitute/NSubstitute#921
Add .NET 10 to test matrix by @Romfos in Add .NET 10 to test matrix nsubstitute/NSubstitute#913
... (truncated)

Commits viewable in compare view.

Updated Polly from 8.6.6 to 8.7.0.

Release notes

Sourced from Polly's releases.

8.7.0 Highlights

Adds caller cancellation token propagation in hedging and timeout strategies by @DaRosenberg in Adds caller cancellation token propagation in hedging and timeout strategies App-vNext/Polly#3094
Telemetry refactoring by @martincostello in Telemetry refactoring App-vNext/Polly#2985

What's Changed

Update zizmor to 1.22.0 by @martincostello in Update zizmor to 1.22.0 App-vNext/Polly#2955
Increase test timeout by @martincostello in Increase test timeout App-vNext/Polly#2956
Disable secrets-outside-env audit by @martincostello in Disable secrets-outside-env audit App-vNext/Polly#2969
Update zizmor to 1.23.1 by @martincostello in Update zizmor to 1.23.1 App-vNext/Polly#2970
Update .NET NuGet packages by @martincostello in Update .NET NuGet packages App-vNext/Polly#2982
Add AGENTS.md by @martincostello in Add AGENTS.md App-vNext/Polly#2983
Fix typo in HTTP client integrations documentation by @alexravenna in Fix typo in HTTP client integrations documentation App-vNext/Polly#2984
Remove unused constant by @martincostello in Remove unused constant App-vNext/Polly#2986
Fix non-deterministic branch coverage in HedgingExecutionContext hedging delay tests by @Copilot in Fix non-deterministic branch coverage in HedgingExecutionContext hedging delay tests App-vNext/Polly#2997
Bump GitHubActionsTestLogger to 3.0.2 by @martincostello in Bump GitHubActionsTestLogger to 3.0.2 App-vNext/Polly#3000
Bump actionlint to v1.7.12 by @martincostello in Bump actionlint to v1.7.12 App-vNext/Polly#3006
Bump sign by @martincostello in Bump sign App-vNext/Polly#3008
Move Public API baselines by @martincostello in Move Public API baselines App-vNext/Polly#3016
Formatting tweaks by @martincostello in Formatting tweaks App-vNext/Polly#3017
Formatting tweaks by @martincostello in Formatting tweaks App-vNext/Polly#3018
Remove ZIZMOR_VERSION by @martincostello in Remove ZIZMOR_VERSION App-vNext/Polly#3025
Assert nullable has result by @martincostello in Assert nullable has result App-vNext/Polly#3028
Update deprecated action input by @martincostello in Update deprecated action input App-vNext/Polly#3035
Move dependabot to Friday by @martincostello in Move dependabot to Friday App-vNext/Polly#3044
Fix tag comment by @martincostello in Fix tag comment App-vNext/Polly#3045
Fix dependabot group by @martincostello in Fix dependabot group App-vNext/Polly#3047
Pin runner images by @martincostello in Pin runner images App-vNext/Polly#3065
Bump Refit to 10.2.0 by @martincostello in Bump Refit to 10.2.0 App-vNext/Polly#3096
Disable Azure deployments by @martincostello in Disable Azure deployments App-vNext/Polly#3105

New Contributors

@alexravenna made their first contribution in Fix typo in HTTP client integrations documentation App-vNext/Polly#2984
@DaRosenberg made their first contribution in Adds caller cancellation token propagation in hedging and timeout strategies App-vNext/Polly#3094

Full Changelog: App-vNext/Polly@8.6.6...8.7.0

Commits viewable in compare view.

Updated QuestPDF from 2026.2.4 to 2026.7.1.

Release notes

Sourced from QuestPDF's releases.

2026.7.1

Improved performance

PDF generation is now significantly faster. The Skia native dependency has been recompiled with speed-oriented optimizations (favoring performance over binary size) and with SIMD instructions enabled.

The impact depends on document content and platform. For example, generating image-heavy documents that require image rescaling can be several times faster on Windows x64 🎉

Note: this change slightly increases the size of the native dependency by around 20%.

Continuous performance monitoring

We have also built a solid foundation for measuring library performance going forward. A new GitHub Actions workflow benchmarks QuestPDF across all supported operating systems, processor architectures, and .NET releases.

This infrastructure helps us ensure that performance remains stable and consistent across all platforms, and allows us to detect regressions early — before they ever reach a release.

2026.7.0

Updated licensing terms and conditions to version 3.0, including the removal of the developer seat limit for all paid licenses (details: https://www.questpdf.com/pricing).
Added full support for .NET Native AOT and trimming.
Added and improved warning messages related to library configuration.
Fixed a rare rendering issue where the footer was placed incorrectly when the page content was empty.

2026.6.1

Updated the Skia native dependency to M150.
Improved text rendering stability when handling an excessive number of whitespace characters.
Improved the failure message shown when the library runs on an unsupported platform (e.g., Android, iOS, or WASM).
Improved platform compatibility checks and introduced more advanced fallback mechanisms.
Improved diagnostics for missing font glyph exceptions.
Improved PDF output consistency of section links by avoiding name escaping and removing unnecessary documentId prefix.
Made the Image.Size property public.

2026.6.0

Substantially revised the QuestPDF legal documents to better support enterprise procurement and compliance requirements and to define usage terms more clearly.
Introduced native support for Windows ARM64 (win-arm64) environments.
Improved compatibility with older Linux distributions (glibc 2.28 and newer).
Reduced the NuGet package size by optimizing native dependencies.
Renamed the TranslateX / TranslateY methods to OffsetX / OffsetY to improve discoverability.
SVG rendering improvements:
- Prevented zero-width strokes from being rendered as hairlines, aligning behavior with the SVG specification.
- Added support for embedded Base64 images that use the modern href attribute instead of xlink:href.
- Added support for the #RGBA and #RRGGBBAA color formats.
- Added support for the transparent named color.
Fixed PDF bookmark titles so they include only text from the associated paragraph, excluding the alternative text of images.
Fixed SectionLink behaving incorrectly when target Section is placed in page header.
Updated the Skia native dependency to version m149.
Updated the qpdf native dependency to version 12.3.2.
Modernized the build system for native dependencies, including how QuestPDF-specific patches are applied.
Updated all GitHub Actions workflows to use standard runners, reducing costs and making it easier for everyone to contribute to the project.

2026.5.0

Fixed a bug where Table elements with RowSpan could render incorrectly or break when spanning across pages.
Fixed visual rendering artifacts that could appear in complex or very large paragraphs.
Improved error message when native dependency versions are mismatched — the error now includes step-by-step guidance for updating manually copied native files.
Updated the underlying Skia native dependency to version m146.

Commits viewable in compare view.

Updated Scalar.AspNetCore from 2.14.9 to 2.16.15.

Release notes

Sourced from Scalar.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Scriban from 7.1.0 to 7.2.5.

Release notes

Sourced from Scriban's releases.

7.2.5

Changes

🧰 Misc

Allow nulls in nullable builtin functions (88729199)

Full Changelog: 7.2.4...7.2.5

_{Published with dotnet-releaser}

7.2.4

Changes

🐛 Bug Fixes

Fix build warning (4ca0455a)

🧰 Misc

Clarify URL escaping semantics (99cc7c61)

Full Changelog: 7.2.3...7.2.4

_{Published with dotnet-releaser}

7.2.3

Changes

🧰 Misc

Document safe include file loading (34d1cd12)
Restrict reflected writes to public setters (c7377a60)

Full Changelog: 7.2.2...7.2.3

_{Published with dotnet-releaser}

7.2.2

Changes

🐛 Bug Fixes

Fix parametric function variable scope (#676) (54b781ec)

🧰 Misc

Clarify variable scope documentation (390db7ff)
Clarify MemberFilter sandbox limitations (29294e1b)

Full Changelog: 7.2.1...7.2.2

_{Published with dotnet-releaser}

7.2.1

Changes

🧰 Misc

Limit array multiplication growth (205ca6a7)
Stop parsing at expression depth limit (8fdbd687)
Document member filters as reflection-only (d45f7f03)

Full Changelog: 7.2.0...7.2.1

_{Published with dotnet-releaser}

7.2.0

Changes

🐛 Bug Fixes

Fix readme with source embedding (#671) (c8094b09)

🧰 Misc

Merge commit from fork (7fdf19df)

Full Changelog: 7.1.0...7.2.0

_{Published with dotnet-releaser}

Commits viewable in compare view.

Updated System.IdentityModel.Tokens.Jwt from 8.18.0 to 8.19.2.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

8.19.2 What's Changed

Improve serializer and JWE key unwrap handling by @iNinja in Improve serializer and JWE key unwrap handling AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3544

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.19.1...8.19.2

8.19.1 Bug Fixes

Update JwtSecurityTokenHandler for IssuerSigningKeyResolverUsingConfiguration to take priority over IssuerSigningKeyResolver, matching the documented contract and the correct behavior already present in JsonWebTokenHandler. See PR #3519.

8.19.0 New Features

Add ML-DSA (FIPS 204) post-quantum signature support. See PR #3479.
Cache custom crypto providers in CryptoProviderFactory. See PR #3489.

Bug Fixes

Disable automatic redirects on default HttpClient for JKU retrieval. See PR #3494.
Adjust rented buffer handling in claim set parsing. See PR #3493.
Tidy null handling in SAML conditions validation. See PR #3491.
Improve validation of jku claim. See PR #3481.
Limit telemetry algorithm dimension cardinality. See PR #3490.
Add defensive copy of collections in ValidationParameters. See PR #3492.
Update TokenValidationParameter copy constructor to make a deep copy. See PR #3488.
Update to fail-closed when replay protection isn't configured and other DPoP hardening. See PR #3505.
Apply RFC 3986 section 6.2.2 normalization to DPoP htu comparison. See PR #3509.

Commits viewable in compare view.

Updated TickerQ from 10.3.0 to 10.4.0.

Release notes

Sourced from TickerQ's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated TickerQ.Dashboard from 10.3.0 to 10.4.0.

Release notes

Sourced from TickerQ.Dashboard's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated TickerQ.EntityFrameworkCore from 10.3.0 to 10.4.0.

Release notes

Sourced from TickerQ.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps coverlet.collector from 10.0.0 to 10.0.1 Bumps ErrorOr from 2.0.1 to 2.1.1 Bumps FluentAssertions from 8.9.0 to 8.10.0 Bumps Google.Protobuf from 3.34.1 to 3.35.1 Bumps Grpc.Tools from 2.80.0 to 2.82.0 Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.7 to 10.0.10 Bumps Microsoft.AspNetCore.Identity.EntityFrameworkCore from 10.0.7 to 10.0.10 Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.7 to 10.0.10 Bumps Microsoft.AspNetCore.OpenApi from 10.0.7 to 10.0.10 Bumps Microsoft.EntityFrameworkCore from 10.0.7 to 10.0.10 Bumps Microsoft.EntityFrameworkCore.Design from 10.0.7 to 10.0.10 Bumps Microsoft.EntityFrameworkCore.InMemory from 10.0.7 to 10.0.10 Bumps Microsoft.EntityFrameworkCore.Tools from 10.0.7 to 10.0.10 Bumps Microsoft.Extensions.ApiDescription.Server from 10.0.7 to 10.0.10 Bumps Microsoft.IdentityModel.Tokens from 8.18.0 to 8.19.2 Bumps Microsoft.NET.Test.Sdk from 18.5.1 to 18.8.1 Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.1 to 10.0.3 Bumps NSubstitute from 5.3.0 to 6.0.0 Bumps Polly from 8.6.6 to 8.7.0 Bumps QuestPDF from 2026.2.4 to 2026.7.1 Bumps Scalar.AspNetCore from 2.14.9 to 2.16.15 Bumps Scriban from 7.1.0 to 7.2.5 Bumps System.IdentityModel.Tokens.Jwt from 8.18.0 to 8.19.2 Bumps TickerQ from 10.3.0 to 10.4.0 Bumps TickerQ.Dashboard from 10.3.0 to 10.4.0 Bumps TickerQ.EntityFrameworkCore from 10.3.0 to 10.4.0 --- updated-dependencies: - dependency-name: ErrorOr dependency-version: 2.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: non-security-updates - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: non-security-updates - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: non-security-updates - dependency-name: Polly dependency-version: 8.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: Scalar.AspNetCore dependency-version: 2.16.15 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: non-security-updates - dependency-name: TickerQ dependency-version: 10.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: TickerQ.Dashboard dependency-version: 10.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: TickerQ.EntityFrameworkCore dependency-version: 10.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: QuestPDF dependency-version: 2026.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: Scriban dependency-version: 7.2.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: Google.Protobuf dependency-version: 3.35.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: Grpc.Tools dependency-version: 2.82.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: Microsoft.AspNetCore.Identity.EntityFrameworkCore dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: non-security-updates - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: non-security-updates - dependency-name: Microsoft.EntityFrameworkCore.Tools dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: non-security-updates - dependency-name: Microsoft.IdentityModel.Tokens dependency-version: 8.19.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL dependency-version: 10.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: non-security-updates - dependency-name: QuestPDF dependency-version: 2026.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: System.IdentityModel.Tokens.Jwt dependency-version: 8.19.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: non-security-updates - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: non-security-updates - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: non-security-updates - dependency-name: Microsoft.Extensions.ApiDescription.Server dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: non-security-updates - dependency-name: Microsoft.IdentityModel.Tokens dependency-version: 8.19.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: Scalar.AspNetCore dependency-version: 2.16.15 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: System.IdentityModel.Tokens.Jwt dependency-version: 8.19.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: Grpc.Tools dependency-version: 2.82.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: non-security-updates - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: non-security-updates - dependency-name: Microsoft.IdentityModel.Tokens dependency-version: 8.19.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: Scalar.AspNetCore dependency-version: 2.16.15 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: System.IdentityModel.Tokens.Jwt dependency-version: 8.19.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: coverlet.collector dependency-version: 10.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: non-security-updates - dependency-name: FluentAssertions dependency-version: 8.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: non-security-updates - dependency-name: Microsoft.EntityFrameworkCore.InMemory dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: non-security-updates - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: non-security-updates - dependency-name: NSubstitute dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: non-security-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-20T06:42:03Z

Labels

The following labels could not be found: security. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 20, 2026

dependabot Bot mentioned this pull request Jul 20, 2026

Bump coverlet.collector and 24 others #82

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump coverlet.collector and 25 others#83

Bump coverlet.collector and 25 others#83
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/backend/src/common/Template.Common.Jobs/non-security-updates-a8966e42f5

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 20, 2026

10.0.1

Improvements

Fixed

Maintenance

2.1.1

8.10.0

What's Changed

Improvements

Documentation

Others

8.19.2

What's Changed

8.19.1

Bug Fixes

8.19.0

New Features

Bug Fixes

18.8.1

What's Changed

18.8.0

What's Changed

18.7.0

What's Changed

New Contributors

18.6.0

What's Changed

Changes to tests and infra

10.0.2

What's Changed

6.0.0

NSubstitute v6.0.0

Full change list

6.0.0-rc.1

NSubstitute v6.0.0 Release Candidate 1

Full change list

8.7.0

Highlights

What's Changed

New Contributors

2026.7.1

Improved performance

Continuous performance monitoring

2026.7.0

2026.6.1

2026.6.0

2026.5.0

7.2.5

Changes

🧰 Misc

7.2.4

Changes

🐛 Bug Fixes

🧰 Misc

7.2.3

Changes

🧰 Misc

7.2.2

Changes

🐛 Bug Fixes

🧰 Misc

7.2.1

Changes

🧰 Misc

7.2.0

Changes

🐛 Bug Fixes

🧰 Misc

8.19.2

What's Changed

8.19.1

Bug Fixes

8.19.0

New Features

Bug Fixes

Uh oh!

dependabot Bot commented on behalf of github Jul 20, 2026

Labels

Uh oh!