Skip to content

Bump the dotnet-minor-patch group with 22 updates#39

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/backend/src/RepairDesk.API/dotnet-minor-patch-c42435505c
Open

Bump the dotnet-minor-patch group with 22 updates#39
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/backend/src/RepairDesk.API/dotnet-minor-patch-c42435505c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown

Updated AWSSDK.S3 from 3.7.406 to 3.7.511.8.

Release notes

Sourced from AWSSDK.S3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Identity.EntityFrameworkCore from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.Identity.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Data.SqlClient from 7.0.1 to 7.0.2.

Release notes

Sourced from Microsoft.Data.SqlClient's releases.

7.0.2

This update brings the following changes since the 7.0.1 release:

Important — package version alignment: Starting with 7.0.2, the Microsoft.Data.SqlClient driver and its companion packages share a single aligned version. The following packages now ship together as 7.0.2:

  • Microsoft.Data.SqlClient
  • Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider
  • Microsoft.Data.SqlClient.Extensions.Azure
  • Microsoft.Data.SqlClient.Extensions.Abstractions
  • Microsoft.Data.SqlClient.Internal.Logging

(Microsoft.SqlServer.Server continues to version independently and remains at 1.0.0.)

Applications must reference the same versions of Microsoft.Data.SqlClient and its extensions for best compatibility. In particular, applications that reference Microsoft.Data.SqlClient.Extensions.Azure must upgrade it to 7.0.2 when upgrading Microsoft.Data.SqlClient to 7.0.2.

Breaking change (.NET Framework only): As part of this alignment, the AssemblyVersion of Microsoft.Data.SqlClient.Extensions.Azure, Microsoft.Data.SqlClient.Extensions.Abstractions, and Microsoft.Data.SqlClient.Internal.Logging changed from 1.0.0.0 to 7.0.0.0 (the Microsoft.Data.SqlClient and Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider assembly versions are unchanged). On .NET Framework, AssemblyVersion is part of the strong-name identity, so applications that drop these assemblies into an existing deployment without rebuilding must rebuild against the 7.0.2 packages (or add binding redirects). Applications on .NET / .NET Core are not affected.

Companion package release notes

The following companion packages ship aligned as 7.0.2. See their individual release notes for package-specific changes (including the Microsoft.Data.SqlClient.Extensions.Azure WAM broker support):

Fixed

  • Fixed a NullReferenceException in SqlCommand.Cancel(). The diagnostic message built during cancellation dereferenced the active connection directly; it now uses a null-conditional access so cancellation no longer throws when the connection has already been torn down.
    (#​4372,#​4373)

  • Fixed a NullReferenceException in SqlDataReader when calling GetBytes/GetChars with a null destination buffer. The argument-validation path that constructs the InvalidDestinationBufferIndex exception now guards against the null buffer so the correct ArgumentException is surfaced instead of an NRE.
    (#​4159,#​4206)

  • Fixed Always Encrypted column master key signature verification incorrectly reusing cached results. The SignatureVerificationCache lookup logic was corrected so signature verification outcomes are cached and retrieved against the correct key, preventing stale or mismatched verification results.
    (#​4339,#​4343)

Changed

Hardened TDS token parsing with data-length bounds checks

What Changed:

  • Added bounds checking when parsing TDS token and feature-extension-acknowledgment data lengths. The parser now validates the declared length of incoming token data against the available buffer before reading, rejecting malformed or out-of-range length values instead of reading past the intended boundary.
    (#​4340,#​4358)

Who Benefits:

  • All consumers benefit from improved resilience against malformed or hostile TDS responses. A server (or man-in-the-middle) sending an invalid token length can no longer drive the parser to read beyond the declared payload.

Impact:
... (truncated)

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.SqlServer from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.SqlServer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Tools from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Tools's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Abstractions from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Caching.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Caching.StackExchangeRedis's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Abstractions from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Configuration.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Identity.Stores from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Identity.Stores's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.5.1 to 18.7.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.7.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.6.0...v18.7.0

18.6.0

What's Changed

Changes to tests and infra

Commits viewable in compare view.

Updated PdfPig from 0.1.14 to 0.1.15.

Release notes

Sourced from PdfPig's releases.

0.1.15

What's Changed

New Contributors

Commits viewable in compare view.

Updated QuestPDF from 2026.5.0 to 2026.6.1.

Release notes

Sourced from QuestPDF's releases.

2026.6.1

  • Updated the Skia native dependency to M150.
  • Improved text rendering stability when handling an excessive number of whitespace characters.
  • Improved the failure message shown when the library runs on an unsupported platform (e.g., Android, iOS, or WASM).
  • Improved platform compatibility checks and introduced more advanced fallback mechanisms.
  • Improved diagnostics for missing font glyph exceptions.
  • Improved PDF output consistency of section links by avoiding name escaping and removing unnecessary documentId prefix.
  • Made the Image.Size property public.

2026.6.0

  • Substantially revised the QuestPDF legal documents to better support enterprise procurement and compliance requirements and to define usage terms more clearly.
  • Introduced native support for Windows ARM64 (win-arm64) environments.
  • Improved compatibility with older Linux distributions (glibc 2.28 and newer).
  • Reduced the NuGet package size by optimizing native dependencies.
  • Renamed the TranslateX / TranslateY methods to OffsetX / OffsetY to improve discoverability.
  • SVG rendering improvements:
    • Prevented zero-width strokes from being rendered as hairlines, aligning behavior with the SVG specification.
    • Added support for embedded Base64 images that use the modern href attribute instead of xlink:href.
    • Added support for the #RGBA and #RRGGBBAA color formats.
    • Added support for the transparent named color.
  • Fixed PDF bookmark titles so they include only text from the associated paragraph, excluding the alternative text of images.
  • Fixed SectionLink behaving incorrectly when target Section is placed in page header.
  • Updated the Skia native dependency to version m149.
  • Updated the qpdf native dependency to version 12.3.2.
  • Modernized the build system for native dependencies, including how QuestPDF-specific patches are applied.
  • Updated all GitHub Actions workflows to use standard runners, reducing costs and making it easier for everyone to contribute to the project.

Commits viewable in compare view.

Updated Sentry.AspNetCore from 6.5.0 to 6.6.0.

Release notes

Sourced from Sentry.AspNetCore's releases.

6.6.0

Features ✨

  • feat: propagate trace to sentry-android and sentry-cocoa by @​bitsandfoxes in #​5244
  • feat: User.Id can now be overriden (set to null) in Global mode by @​jamescrosswell in #​5039
  • feat: Implement strict trace continuation by @​giortzisg in #​4981

Fixes 🐛

  • fix: return early from AddSentryOtlpExporter when DSN is the disable-SDK sentinel by @​jamescrosswell in #​5247
  • fix: sync default tags to native layer by @​bitsandfoxes in #​5214

Dependencies ⬆️

Deps

  • chore(deps): update Cocoa SDK to v9.14.0 by @​github-actions[bot] in #​5252
  • chore(deps): update Java SDK to v8.42.0 by @​github-actions[bot] in #​5208

Other

  • release: 6.6.0 by @​jamescrosswell in 0140be0a
  • chore: update scripts/update-cli.ps1 to 3.4.3 by @​github-actions[bot] in #​5251
  • ci: update the Update Dependencies workflow by @​Flash0ver in #​5175
  • chore: update modules/sentry-native to 0.14.2 by @​github-actions[bot] in #​5229
  • chore: update modules/sentry-cocoa to 9.13.0 by @​github-actions[bot] in #​5221
  • chore: update scripts/update-cli.ps1 to 3.4.2 by @​github-actions[bot] in #​5220
  • chore: update modules/sentry-cocoa to 9.12.1 by @​github-actions[bot] in #​5207

Commits viewable in compare view.

Updated Sentry.Serilog from 6.5.0 to 6.6.0.

Release notes

Sourced from Sentry.Serilog's releases.

6.6.0

Features ✨

  • feat: propagate trace to sentry-android and sentry-cocoa by @​bitsandfoxes in #​5244
  • feat: User.Id can now be overriden (set to null) in Global mode by @​jamescrosswell in #​5039
  • feat: Implement strict trace continuation by @​giortzisg in #​4981

Fixes 🐛

  • fix: return early from AddSentryOtlpExporter when DSN is the disable-SDK sentinel by @​jamescrosswell in #​5247
  • fix: sync default tags to native layer by @​bitsandfoxes in #​5214

Dependencies ⬆️

Deps

  • chore(deps): update Cocoa SDK to v9.14.0 by @​github-actions[bot] in #​5252
  • chore(deps): update Java SDK to v8.42.0 by @​github-actions[bot] in #​5208

Other

  • release: 6.6.0 by @​jamescrosswell in 0140be0a
  • chore: update scripts/update-cli.ps1 to 3.4.3 by @​github-actions[bot] in #​5251
  • ci: update the Update Dependencies workflow by @​Flash0ver in #​5175
  • chore: update modules/sentry-native to 0.14.2 by @​github-actions[bot] in #​5229
  • chore: update modules/sentry-cocoa to 9.13.0 by @​github-actions[bot] in #​5221
  • chore: update scripts/update-cli.ps1 to 3.4.2 by @​github-actions[bot] in #​5220
  • chore: update modules/sentry-cocoa to 9.12.1 by @​github-actions[bot] in #​5207

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore from 10.1.7 to 10.2.3.

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

10.2.3

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.2...v10.2.3

10.2.2

What's Changed

New Contributors

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.1...v10.2.2

10.2.1

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.0...v10.2.1

10.2.0

What's Changed

New Contributors

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.7...v10.2.0

Commits viewable in compare view.

Updated System.IdentityModel.Tokens.Jwt from 8.18.0 to 8.19.1.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

8.19.1

Bug Fixes

  • Update JwtSecurityTokenHandler for IssuerSigningKeyResolverUsingConfiguration to take priority over IssuerSigningKeyResolver, matching the documented contract and the correct behavior already present in JsonWebTokenHandler. See PR #​3519.

8.19.0

New Features

  • Add ML-DSA (FIPS 204) post-quantum signature support. See PR #​3479.
  • Cache custom crypto providers in CryptoProviderFactory. See PR #​3489.

Bug Fixes

  • Disable automatic redirects on default HttpClient for JKU retrieval. See PR #​3494.
  • Adjust rented buffer handling in claim set parsing. See PR #​3493.
  • Tidy null handling in SAML conditions validation. See PR #​3491.
  • Improve validation of jku claim. See PR #​3481.
  • Limit telemetry algorithm dimension cardinality. See PR #​3490.
  • Add defensive copy of collections in ValidationParameters. See PR #​3492.
  • Update TokenValidationParameter copy constructor to make a deep copy. See PR #​3488.
  • Update to fail-closed when replay protection isn't configured and other DPoP hardening. See PR #​3505.
  • Apply RFC 3986 section 6.2.2 normalization to DPoP htu comparison. See PR #​3509.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dotnet-minor-patch group with 22 updates
a56a382 
Bumps AWSSDK.S3 from 3.7.406 to 3.7.511.8
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.8 to 10.0.9
Bumps Microsoft.AspNetCore.Identity.EntityFrameworkCore from 10.0.8 to 10.0.9
Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.8 to 10.0.9
Bumps Microsoft.AspNetCore.OpenApi from 10.0.8 to 10.0.9
Bumps Microsoft.Data.SqlClient from 7.0.1 to 7.0.2
Bumps Microsoft.EntityFrameworkCore from 10.0.8 to 10.0.9
Bumps Microsoft.EntityFrameworkCore.Design from 10.0.8 to 10.0.9
Bumps Microsoft.EntityFrameworkCore.InMemory from 10.0.8 to 10.0.9
Bumps Microsoft.EntityFrameworkCore.SqlServer from 10.0.8 to 10.0.9
Bumps Microsoft.EntityFrameworkCore.Tools from 10.0.8 to 10.0.9
Bumps Microsoft.Extensions.Caching.Abstractions from 10.0.8 to 10.0.9
Bumps Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.8 to 10.0.9
Bumps Microsoft.Extensions.Configuration.Abstractions from 10.0.8 to 10.0.9
Bumps Microsoft.Extensions.Identity.Stores from 10.0.8 to 10.0.9
Bumps Microsoft.NET.Test.Sdk from 18.5.1 to 18.7.0
Bumps PdfPig from 0.1.14 to 0.1.15
Bumps QuestPDF from 2026.5.0 to 2026.6.1
Bumps Sentry.AspNetCore from 6.5.0 to 6.6.0
Bumps Sentry.Serilog from 6.5.0 to 6.6.0
Bumps Swashbuckle.AspNetCore from 10.1.7 to 10.2.3
Bumps System.IdentityModel.Tokens.Jwt from 8.18.0 to 8.19.1

---
updated-dependencies:
- dependency-name: AWSSDK.S3
  dependency-version: 3.7.511.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.AspNetCore.Identity.EntityFrameworkCore
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Data.SqlClient
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.EntityFrameworkCore
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.EntityFrameworkCore.InMemory
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.EntityFrameworkCore.SqlServer
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.EntityFrameworkCore.Tools
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Extensions.Caching.Abstractions
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Extensions.Caching.Abstractions
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Extensions.Caching.StackExchangeRedis
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Extensions.Configuration.Abstractions
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Extensions.Configuration.Abstractions
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.Extensions.Identity.Stores
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-patch
- dependency-name: PdfPig
  dependency-version: 0.1.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor-patch
- dependency-name: QuestPDF
  dependency-version: 2026.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-patch
- dependency-name: Sentry.AspNetCore
  dependency-version: 6.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-patch
- dependency-name: Sentry.Serilog
  dependency-version: 6.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-patch
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 10.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-patch
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-version: 8.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jun 29, 2026
This was referenced Jun 29, 2026
Closed
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants