Bump the dotnet-minor-patch group with 20 updates

[dependabot]

Updated AWSSDK.S3 from 3.7.406 to 3.7.511.8.

Release notes

Sourced from AWSSDK.S3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Identity.EntityFrameworkCore from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.Identity.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.SqlServer from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.SqlServer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Tools from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Tools's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Abstractions from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Caching.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Caching.StackExchangeRedis's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Abstractions from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Configuration.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Identity.Stores from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Identity.Stores's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.5.1 to 18.6.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.6.0

What's Changed

• Revert removal of Video Recorder by @​nohwnd in Revert removal of Video Recorder microsoft/vstest#15336
• Speed up blame by filtering non-.NET processes from dump collection by @​nohwnd in Speed up blame tests by filtering non-.NET processes from dump collection microsoft/vstest#15518
• Add README.md to NuGet packages by @​nohwnd in Add README.md to NuGet packages microsoft/vstest#15550
• Report child process info on connection timeout by @​nohwnd in Report child process info on connection timeout microsoft/vstest#15603

Changes to tests and infra

• Brand as 18.6 by @​nohwnd in Brand as 18.6 microsoft/vstest#15423
• Upgrading code coverage version to 18.5.1, by @​fhnaseer in Upgrading code coverage version to 18.5.1, microsoft/vstest#15422
• Updating System.Collections.Immutable to 9.0.11 by @​MSLukeWest in Updating System.Collections.Immutable to 9.0.11 microsoft/vstest#15425
• Fix attachVS when used for debugging integration tests by @​nohwnd in Fix attachVS when used for debugging integration tests microsoft/vstest#15451
• Replace dotnet.config, with global.json by @​nohwnd in Replace dotnet.config, with global.json microsoft/vstest#15449
• Document debugging integration tests with AttachVS by @​Copilot in Document debugging integration tests with AttachVS microsoft/vstest#15452
• Fix stack overflow tests by @​nohwnd in Fix stack overflow tests microsoft/vstest#15461
• Make TestAssets.sln buildable locally by @​Youssef1313 in Make TestAssets.sln buildable locally microsoft/vstest#15466
• Try filtering out tests by @​nohwnd in Try filtering out tests microsoft/vstest#15463
• Build just once when tfms run in parallel by @​nohwnd in Build just once when tfms run in parallel microsoft/vstest#15465
• Review simplify compatibility sources, deduplicate tests by @​nohwnd in Review simplify compatibility sources, deduplicate tests microsoft/vstest#15472
• Cleanup dead TRX code by @​Youssef1313 in Cleanup dead TRX code microsoft/vstest#15474
• Update .NET runtimes to 8.0.25, 9.0.14, and 10.0.4 by @​nohwnd in Update .NET runtimes to 8.0.25, 9.0.14, and 10.0.4 microsoft/vstest#15481
• Compat matrix checker by @​nohwnd in Compat matrix checker microsoft/vstest#15480
• Add trx analysis skill by @​nohwnd in Add trx analysis skill microsoft/vstest#15486
• Split integration tests to single tfm and multi tfm project by @​nohwnd in Split integration tests to single tfm and multi tfm project microsoft/vstest#15484
• Update matrix by @​nohwnd in Update matrix microsoft/vstest#15477
• Break infinite restore loop in VS by @​nohwnd in Break infinite restore loop in VS microsoft/vstest#15503
• Use global package cache for build, and local for running integration tests by @​nohwnd in Use global package cache for build, and local for running integration tests microsoft/vstest#15500
• Update contributing by @​nohwnd in Update contributing microsoft/vstest#15505
• Reduce test wall-clock time by increasing minThreads by @​drognanar in Reduce test wall-clock time by increasing minThreads microsoft/vstest#15502
• Indicator flakiness by @​nohwnd in Indicator flakiness microsoft/vstest#15513
• Fix ci build by @​nohwnd in Fix ci build microsoft/vstest#15515
• Fix thread safety issues by @​Evangelink in Fix thread safety issues microsoft/vstest#15512
• Optimize DotnetSDKSimulation_PostProcessing test (163s → 61s) by @​nohwnd in Optimize DotnetSDKSimulation_PostProcessing test (163s → 61s) microsoft/vstest#15516
• Build isolated test assets for single TFM instead of 7 by @​nohwnd in Build isolated test assets for single TFM instead of 7 microsoft/vstest#15517
• Remove unused dependencies from Library.IntegrationTests by @​nohwnd in Remove unused dependencies from Library.IntegrationTests microsoft/vstest#15527
• Remove printing _attachments content to console by @​nohwnd in Remove printing _attachments content to console microsoft/vstest#15520
• Add Linux/macOS test filtering guide to CONTRIBUTING.md by @​nohwnd in Add Linux/macOS test filtering guide to CONTRIBUTING.md microsoft/vstest#15521
• Change integration test parallelization from ClassLevel to MethodLevel by @​nohwnd in Change integration test parallelization from ClassLevel to MethodLevel microsoft/vstest#15526
• Unify target framework checks with IsNetFrameworkTarget/IsNetTarget by @​nohwnd in Unify target framework checks with IsNetFrameworkTarget/IsNetTarget microsoft/vstest#15523
• Add unattended work instructions to copilot-instructions.md by @​nohwnd in Add unattended work instructions to copilot-instructions.md microsoft/vstest#15531
• Reduce code style rule severity from warning to suggestion by @​nohwnd in Reduce code style rule severity from warning to suggestion microsoft/vstest#15522
• Remove Debug/Release line number branching from tests by @​nohwnd in Remove Debug/Release line number branching from tests microsoft/vstest#15519
• Revise unattended work instructions in copilot-instructions.md by @​nohwnd in Revise unattended work instructions in copilot-instructions.md microsoft/vstest#15532
• Improve CompatibilityRowsBuilder error message with diagnostic details by @​nohwnd in Improve CompatibilityRowsBuilder error message with diagnostic details microsoft/vstest#15529
• docs: add git worktree and upstream sync workflow to copilot-instructions.md by @​nohwnd in docs: add git worktree and upstream sync workflow to copilot-instructions.md microsoft/vstest#15538
• Add VSIX runner to smoke tests by @​nohwnd in Add VSIX runner to smoke tests microsoft/vstest#15541
• Remove deprecated WebTest and TMI test methods by @​nohwnd in Remove deprecated WebTest and TMI test methods microsoft/vstest#15525
• Fix compatibility test failures for legacy vstest.console and MSTest adapter by @​nohwnd in Fix compatibility test failures for legacy vstest.console and MSTest adapter microsoft/vstest#15534
• Convert TestPlatform.sln to slnx format by @​nohwnd in Convert TestPlatform.sln to slnx format microsoft/vstest#15551
• Convert test/TestAssets .sln files to .slnx format by @​nohwnd in Convert test/TestAssets .sln files to .slnx format microsoft/vstest#15557
  ... (truncated)

Commits viewable in compare view.

Updated QuestPDF from 2026.5.0 to 2026.6.0.

Release notes

Sourced from QuestPDF's releases.

2026.6.0

• Substantially revised the QuestPDF legal documents to better support enterprise procurement and compliance requirements and to define usage terms more clearly.
• Introduced native support for Windows ARM64 (win-arm64) environments.
• Improved compatibility with older Linux distributions (glibc 2.28 and newer).
• Reduced the NuGet package size by optimizing native dependencies.
• Renamed the TranslateX / TranslateY methods to OffsetX / OffsetY to improve discoverability.
• SVG rendering improvements:
  • Prevented zero-width strokes from being rendered as hairlines, aligning behavior with the SVG specification.
  • Added support for embedded Base64 images that use the modern href attribute instead of xlink:href.
  • Added support for the #RGBA and #RRGGBBAA color formats.
  • Added support for the transparent named color.
• Fixed PDF bookmark titles so they include only text from the associated paragraph, excluding the alternative text of images.
• Fixed SectionLink behaving incorrectly when target Section is placed in page header.
• Updated the Skia native dependency to version m149.
• Updated the qpdf native dependency to version 12.3.2.
• Modernized the build system for native dependencies, including how QuestPDF-specific patches are applied.
• Updated all GitHub Actions workflows to use standard runners, reducing costs and making it easier for everyone to contribute to the project.

Commits viewable in compare view.

Updated Sentry.AspNetCore from 6.5.0 to 6.6.0.

Release notes

Sourced from Sentry.AspNetCore's releases.

6.6.0

Features ✨

• feat: propagate trace to sentry-android and sentry-cocoa by @​bitsandfoxes in #​5244
• feat: User.Id can now be overriden (set to null) in Global mode by @​jamescrosswell in #​5039
• feat: Implement strict trace continuation by @​giortzisg in #​4981

Fixes 🐛

• fix: return early from AddSentryOtlpExporter when DSN is the disable-SDK sentinel by @​jamescrosswell in #​5247
• fix: sync default tags to native layer by @​bitsandfoxes in #​5214

Dependencies ⬆️

Deps

• chore(deps): update Cocoa SDK to v9.14.0 by @​github-actions[bot] in #​5252
• chore(deps): update Java SDK to v8.42.0 by @​github-actions[bot] in #​5208

Other

• release: 6.6.0 by @​jamescrosswell in 0140be0a
• chore: update scripts/update-cli.ps1 to 3.4.3 by @​github-actions[bot] in #​5251
• ci: update the Update Dependencies workflow by @​Flash0ver in #​5175
• chore: update modules/sentry-native to 0.14.2 by @​github-actions[bot] in #​5229
• chore: update modules/sentry-cocoa to 9.13.0 by @​github-actions[bot] in #​5221
• chore: update scripts/update-cli.ps1 to 3.4.2 by @​github-actions[bot] in #​5220
• chore: update modules/sentry-cocoa to 9.12.1 by @​github-actions[bot] in #​5207

Commits viewable in compare view.

Updated Sentry.Serilog from 6.5.0 to 6.6.0.

Release notes

Sourced from Sentry.Serilog's releases.

6.6.0

Features ✨

• feat: propagate trace to sentry-android and sentry-cocoa by @​bitsandfoxes in #​5244
• feat: User.Id can now be overriden (set to null) in Global mode by @​jamescrosswell in #​5039
• feat: Implement strict trace continuation by @​giortzisg in #​4981

Fixes 🐛

• fix: return early from AddSentryOtlpExporter when DSN is the disable-SDK sentinel by @​jamescrosswell in #​5247
• fix: sync default tags to native layer by @​bitsandfoxes in #​5214

Dependencies ⬆️

Deps

• chore(deps): update Cocoa SDK to v9.14.0 by @​github-actions[bot] in #​5252
• chore(deps): update Java SDK to v8.42.0 by @​github-actions[bot] in #​5208

Other

• release: 6.6.0 by @​jamescrosswell in 0140be0a
• chore: update scripts/update-cli.ps1 to 3.4.3 by @​github-actions[bot] in #​5251
• ci: update the Update Dependencies workflow by @​Flash0ver in #​5175
• chore: update modules/sentry-native to 0.14.2 by @​github-actions[bot] in #​5229
• chore: update modules/sentry-cocoa to 9.13.0 by @​github-actions[bot] in #​5221
• chore: update scripts/update-cli.ps1 to 3.4.2 by @​github-actions[bot] in #​5220
• chore: update modules/sentry-cocoa to 9.12.1 by @​github-actions[bot] in #​5207

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore from 10.1.7 to 10.2.1.

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

10.2.1

What's Changed

• Update Microsoft.OpenApi to 2.7.5 to pick up fix for GHSA-v5pm-xwqc-g5wc by @​martincostello in Update Microsoft.OpenApi to 2.7.5 domaindrivendev/Swashbuckle.AspNetCore#3974

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.0...v10.2.1

10.2.0

What's Changed

• Add MapSwaggerUI and MapReDoc to support endpoint routing by @​Strepto in Add MapSwaggerUI and MapReDoc to support endpoint routing domaindrivendev/Swashbuckle.AspNetCore#3822
• Bump version to 10.2.0 by @​martincostello in Bump version to 10.2.0 domaindrivendev/Swashbuckle.AspNetCore#3872
• Bump swagger-ui-dist from 5.32.1 to 5.32.2 by @​dependabot in Bump swagger-ui-dist from 5.32.1 to 5.32.2 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3883
• Support HEAD requests by @​snebjorn in Support HEAD requests domaindrivendev/Swashbuckle.AspNetCore#3887
• Use IAsyncSwaggerProvider in CLI tofile command by @​bt-Knodel in Use IAsyncSwaggerProvider in CLI tofile command domaindrivendev/Swashbuckle.AspNetCore#3910
• Pin runner images by @​martincostello in Pin runner images domaindrivendev/Swashbuckle.AspNetCore#3944
• Disable npm install scripts by @​martincostello in Disable npm install scripts domaindrivendev/Swashbuckle.AspNetCore#3946
• Bump redoc from 2.5.2 to 2.5.3 by @​dependabot in Bump redoc from 2.5.2 to 2.5.3 in /src/Swashbuckle.AspNetCore.ReDoc domaindrivendev/Swashbuckle.AspNetCore#3967

New Contributors

• @​Strepto made their first contribution in Add MapSwaggerUI and MapReDoc to support endpoint routing domaindrivendev/Swashbuckle.AspNetCore#3822
• @​snebjorn made their first contribution in Support HEAD requests domaindrivendev/Swashbuckle.AspNetCore#3887
• @​bt-Knodel made their first contribution in Use IAsyncSwaggerProvider in CLI tofile command domaindrivendev/Swashbuckle.AspNetCore#3910

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.7...v10.2.0

Commits viewable in compare view.

Updated System.IdentityModel.Tokens.Jwt from 8.18.0 to 8.19.1.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

8.19.1

Bug Fixes

• Update JwtSecurityTokenHandler for IssuerSigningKeyResolverUsingConfiguration to take priority over IssuerSigningKeyResolver, matching the documented contract and the correct behavior already present in JsonWebTokenHandler. See PR #​3519.

8.19.0

New Features

• Add ML-DSA (FIPS 204) post-quantum signature support. See PR #​3479.
• Cache custom crypto providers in CryptoProviderFactory. See PR #​3489.

Bug Fixes

• Disable automatic redirects on default HttpClient for JKU retrieval. See PR #​3494.
• Adjust rented buffer handling in claim set parsing. See PR #​3493.
• Tidy null handling in SAML conditions validation. See PR #​3491.
• Improve validation of jku claim. See PR #​3481.
• Limit telemetry algorithm dimension cardinality. See PR #​3490.
• Add defensive copy of collections in ValidationParameters. See PR #​3492.
• Update TokenValidationParameter copy constructor to make a deep copy. See PR #​3488.
• Update to fail-closed when replay protection isn't configured and other DPoP hardening. See PR #​3505.
• Apply RFC 3986 section 6.2.2 normalization to DPoP htu comparison. See PR #​3509.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions