Skip to content

deps: Bump the backend-dotnet-patch-minor group with 11 updates#28

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/dot-config/backend-dotnet-patch-minor-f61ca9ca1e
Open

deps: Bump the backend-dotnet-patch-minor group with 11 updates#28
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/dot-config/backend-dotnet-patch-minor-f61ca9ca1e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown

Updated dotnet-ef from 8.0.4 to 8.0.28.

Release notes

Sourced from dotnet-ef's releases.

8.0.28

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.27...v8.0.28

8.0.27

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.26...v8.0.27

8.0.26

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.25...v8.0.26

8.0.25

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.24...v8.0.25

8.0.24

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.23...v8.0.24

8.0.23

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.22...v8.0.23

8.0.22

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.21...v8.0.22

8.0.21

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.19...v8.0.20

8.0.17

Dependency Updates

  • Update dependencies from dotnet/arcade (#​36085)
    Updates the project's dependencies using the latest versions from the dotnet/arcade repository. This ensures that the build infrastructure and related tooling are up to date, which can bring in important bug fixes, security patches, and improvements from upstream.

Miscellaneous

  • Update branding to 8.0.17 (#​36043)
    Updates the internal version branding to 8.0.17. This change ensures that the product and its packages correctly reflect the new release version, helping users and developers identify the build.

  • Merging internal commits for release/8.0 (#​36080)
    Integrates various internal commits into the release/8.0 branch. This merge brings together important updates and ensures the release branch is synchronized with recent internal development, maintaining consistency and stability for the release.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.13...v8.0.14

8.0.13

[Release](https://github.com/dotnet/core/releases/tag/v8.0.13

What's Changed

Full Changelog: dotnet/efcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.11...v8.0.12

8.0.11

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.10...v8.0.11

8.0.10

Release

8.0.8

Release

8.0.7

EF Core 8.0.7 is available on NuGet now. This is a patch release of EF Core 8 (EF8) containing only important bug fixes:

8.0.6

This is a patch release of EF Core 8.0 containing only updates to dependencies. There are no additional fixes in this release beyond those already shipped in EF Core 8.0.5.

8.0.5

This is a patch release of EF Core 8.0 containing only updates to dependencies. There are no additional fixes in this release beyond those already shipped in EF Core 8.0.4.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.27 to 8.0.28.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

8.0.28

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.27...v8.0.28

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 8.0.27 to 8.0.28.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

8.0.28

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.27...v8.0.28

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 8.0.27 to 8.0.28.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

8.0.28

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.27...v8.0.28

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 8.0.27 to 8.0.28.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

8.0.28

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.27...v8.0.28

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Sqlite from 8.0.27 to 8.0.28.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

8.0.28

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.27...v8.0.28

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Json from 8.0.0 to 8.0.1.

Release notes

Sourced from Microsoft.Extensions.Configuration.Json's releases.

8.0.1

Release

Commits viewable in compare view.

Updated Serilog.AspNetCore from 8.0.1 to 8.0.3.

Release notes

Sourced from Serilog.AspNetCore's releases.

8.0.3

  • #​383 - update Serilog.Settings.Configuration dependency (@​Numpsy)

8.0.2

  • #​376 - update Serilog.Settings.Configuration dependency to avoid transitive dependency on vulnerable System.Text.Json (@​nblumhardt)
  • #​364 - fix example code (@​RandomBuffer)
  • #​367 - clean up and format (@​sungam3r)
  • #​370 - README updates (@​nblumhardt)

Commits viewable in compare view.

Updated System.IdentityModel.Tokens.Jwt from 8.17.0 to 8.19.1.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

8.19.1

Bug Fixes

  • Update JwtSecurityTokenHandler for IssuerSigningKeyResolverUsingConfiguration to take priority over IssuerSigningKeyResolver, matching the documented contract and the correct behavior already present in JsonWebTokenHandler. See PR #​3519.

8.19.0

New Features

  • Add ML-DSA (FIPS 204) post-quantum signature support. See PR #​3479.
  • Cache custom crypto providers in CryptoProviderFactory. See PR #​3489.

Bug Fixes

  • Disable automatic redirects on default HttpClient for JKU retrieval. See PR #​3494.
  • Adjust rented buffer handling in claim set parsing. See PR #​3493.
  • Tidy null handling in SAML conditions validation. See PR #​3491.
  • Improve validation of jku claim. See PR #​3481.
  • Limit telemetry algorithm dimension cardinality. See PR #​3490.
  • Add defensive copy of collections in ValidationParameters. See PR #​3492.
  • Update TokenValidationParameter copy constructor to make a deep copy. See PR #​3488.
  • Update to fail-closed when replay protection isn't configured and other DPoP hardening. See PR #​3505.
  • Apply RFC 3986 section 6.2.2 normalization to DPoP htu comparison. See PR #​3509.

8.18.0

New Features

  • Introduced a new interface IConfigurationEventHandlerContextAware<T> that provides context to the configuration event handler implementation, allowing it to optionally bypass a cache lookup. See PR #​3444.
  • Added Microsoft.IdentityModel.Dpop — a new package implementing DPoP (Demonstrating Proof-of-Possession) per RFC 9449. Provides both client-side and server-side proof validation with no System.Net.Http dependency. See PR #​3443.

Commits viewable in compare view.

Updated xunit from 2.5.3 to 2.9.3.

Release notes

Sourced from xunit's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated xunit.runner.visualstudio from 2.5.3 to 2.8.2.

Release notes

Sourced from xunit.runner.visualstudio's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps: Bump the backend-dotnet-patch-minor group with 11 updates
6b9d0b7 
Bumps dotnet-ef from 8.0.4 to 8.0.28
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.27 to 8.0.28
Bumps Microsoft.AspNetCore.Mvc.Testing from 8.0.27 to 8.0.28
Bumps Microsoft.EntityFrameworkCore from 8.0.27 to 8.0.28
Bumps Microsoft.EntityFrameworkCore.Design from 8.0.27 to 8.0.28
Bumps Microsoft.EntityFrameworkCore.Sqlite from 8.0.27 to 8.0.28
Bumps Microsoft.Extensions.Configuration.Json from 8.0.0 to 8.0.1
Bumps Serilog.AspNetCore from 8.0.1 to 8.0.3
Bumps System.IdentityModel.Tokens.Jwt from 8.17.0 to 8.19.1
Bumps xunit from 2.5.3 to 2.9.3
Bumps xunit.runner.visualstudio from 2.5.3 to 2.8.2

---
updated-dependencies:
- dependency-name: dotnet-ef
  dependency-version: 8.0.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-dotnet-patch-minor
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 8.0.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-dotnet-patch-minor
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 8.0.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-dotnet-patch-minor
- dependency-name: Microsoft.EntityFrameworkCore
  dependency-version: 8.0.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-dotnet-patch-minor
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 8.0.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-dotnet-patch-minor
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 8.0.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-dotnet-patch-minor
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-dotnet-patch-minor
- dependency-name: Serilog.AspNetCore
  dependency-version: 8.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-dotnet-patch-minor
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-version: 8.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-dotnet-patch-minor
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-dotnet-patch-minor
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-dotnet-patch-minor
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-dotnet-patch-minor
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-dotnet-patch-minor
- dependency-name: xunit.runner.visualstudio
  dependency-version: 2.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-dotnet-patch-minor
- dependency-name: xunit.runner.visualstudio
  dependency-version: 2.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-dotnet-patch-minor
- dependency-name: xunit.runner.visualstudio
  dependency-version: 2.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-dotnet-patch-minor
- dependency-name: xunit.runner.visualstudio
  dependency-version: 2.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-dotnet-patch-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: backend. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 15, 2026
@dependabot dependabot Bot mentioned this pull request Jun 15, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants