Bump the all-updates group with 7 updates

[dependabot]

Updated Azure.Storage.Blobs from 12.29.2 to 12.30.0.

Release notes

Sourced from Azure.Storage.Blobs's releases.

12.30.0

12.30.0 (2026-09-28)

Features Added

• Includes all features from 12.30.0-beta.1 and 12.30.0-beta.2.

Commits viewable in compare view.

Updated coverlet.collector from 10.0.1 to 10.1.0.

Release notes

Sourced from coverlet.collector's releases.

10.1.0

Improvements

• Publish Microsoft.Testing.Platform coverage messages from coverlet.MTP #​2019
• Implement dynamic exclusion filters for assemblies (Coverlet.MTP) #​1946
• Replace legacy .sln files with modern .slnx format #​1966
• coverlet.console: add trace diagnostics and actionable warnings for instrumentation/hit/empty-result failures #​2005
• Relax auto-property skip logic and improve coverage for records #​1941

Fixed

• Fix coverlet.MTP does not collect coverage on the .NET Framework portion of a large project #​1980 #​1967
• Fix Regression in branch coverage for lambda expressions #​1938
• Fix When using "is" with "or" in pattern matching, branch coverage is lower than normal #​1979
• Fix silent zero coverage on .NET Framework since 8.0.0 #​1985 by @​tobiwae
• Fix Race condition between ProcessExit hit-file write and out-of-proc coverage read causes EndOfStreamException #​1987 #​1988 by @​bkoelman
• Fix Regression TypeInitializationException when targeting .NET Framework - Could not load type 'System.Collections.Concurrent.ConcurrentBag #​2010
• Fix use --config-file CLI arg in coverlet.MTP #​2030 by alexthornton1
• Fix silently empty coverage for shared-framework assemblies missing from compileLibraries #​2032 by @​Eljees

Diff between 10.0.1 and 10.1.0

Commits viewable in compare view.

Updated Microsoft.Azure.Functions.Worker.Extensions.DurableTask from 1.19.1 to 1.19.2.

Release notes

Sourced from Microsoft.Azure.Functions.Worker.Extensions.DurableTask's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 4.15.0 to 4.16.0.

Release notes

Sourced from Microsoft.Identity.Web's releases.

4.16.0

What's Changed

• Add 4.15.0 release notes by @​iarekk in Add 4.15.0 release notes AzureAD/microsoft-identity-web#4050
• Post-release 4.15.0: mark APIs shipped and bump version by @​iarekk in Post-release 4.15.0: mark APIs shipped and bump version AzureAD/microsoft-identity-web#4060
• Add Sidecar 1.1.2 changelog by @​soodt in Add Sidecar 1.1.2 changelog AzureAD/microsoft-identity-web#4070
• Fix FIC telemetry enrichment during credential warm-up and assertion cache hits by @​neha-bhargava in Fix FIC telemetry enrichment during credential warm-up and assertion cache hits AzureAD/microsoft-identity-web#4072
• Update agentic docs to cover current behavior by @​Avery-Dunn in Update agentic docs to cover current behavior AzureAD/microsoft-identity-web#4077
• Bump the notsecurity group with 4 updates by @​dependabot[bot] in Bump the notsecurity group with 4 updates AzureAD/microsoft-identity-web#4074

Full Changelog: AzureAD/microsoft-identity-web@4.15.0...4.16.0

Commits viewable in compare view.

Updated XtremeIdiots.Portal.Integrations.Servers.Api.Client.V1 from 4.1.32 to 4.1.38.

Release notes

Sourced from XtremeIdiots.Portal.Integrations.Servers.Api.Client.V1's releases.

4.1.38

What's Changed

• Reduce file API controller cognitive complexity by @​frasermolyneux with @​Copilot in Reduce file API controller cognitive complexity portal-servers-integration#1061

Full Changelog: frasermolyneux/portal-servers-integration@v4.1.37...v4.1.38

Commits viewable in compare view.

Updated XtremeIdiots.Portal.Repository.Abstractions.V1 from 4.2.44 to 4.2.50.

Release notes

Sourced from XtremeIdiots.Portal.Repository.Abstractions.V1's releases.

4.2.50

What's Changed

• Backfill corrupted demo metadata automatically by @​frasermolyneux in Backfill corrupted demo metadata automatically portal-repository#886

Full Changelog: frasermolyneux/portal-repository@v4.2.49...v4.2.50

4.2.49

What's Changed

• Reject invalid demo uploads before storage by @​frasermolyneux in Reject invalid demo uploads before storage portal-repository#885

Full Changelog: frasermolyneux/portal-repository@v4.2.48...v4.2.49

Commits viewable in compare view.

Updated XtremeIdiots.Portal.Repository.Api.Client.V1 from 4.2.44 to 4.2.50.

Release notes

Sourced from XtremeIdiots.Portal.Repository.Api.Client.V1's releases.

4.2.50

What's Changed

• Backfill corrupted demo metadata automatically by @​frasermolyneux in Backfill corrupted demo metadata automatically portal-repository#886

Full Changelog: frasermolyneux/portal-repository@v4.2.49...v4.2.50

4.2.49

What's Changed

• Reject invalid demo uploads before storage by @​frasermolyneux in Reject invalid demo uploads before storage portal-repository#885

Full Changelog: frasermolyneux/portal-repository@v4.2.48...v4.2.49

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
nuget/XtremeIdiots.Portal.Repository.Abstractions.V1	4.2.50	Unknown	Unknown
nuget/coverlet.collector	10.1.0	🟢 4.3	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Code-Review 🟢 3 Found 7/22 approved changesets -- score normalized to 3 Binary-Artifacts 🟢 7 binaries present in source code Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 License 🟢 10 license file detected Fuzzing ⚠️ 0 project is not fuzzed Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy ⚠️ 0 security policy file not detected SAST 🟢 7 SAST tool detected but not run on all commits
nuget/Azure.Storage.Blobs	12.30.0	Unknown	Unknown
nuget/Microsoft.Azure.Functions.Worker.Extensions.DurableTask	1.19.2	Unknown	Unknown
nuget/Microsoft.Identity.Web	4.16.0	Unknown	Unknown
nuget/XtremeIdiots.Portal.Integrations.Servers.Api.Client.V1	4.1.38	Unknown	Unknown
nuget/XtremeIdiots.Portal.Repository.Abstractions.V1	4.2.50	Unknown	Unknown
nuget/XtremeIdiots.Portal.Repository.Api.Client.V1	4.2.50	Unknown	Unknown

Scanned Files

• src/XtremeIdiots.Portal.Forums.Integration/XtremeIdiots.Portal.Forums.Integration.csproj
• src/XtremeIdiots.Portal.Sync.App.Tests/XtremeIdiots.Portal.Sync.App.Tests.csproj
• src/XtremeIdiots.Portal.Sync.App/XtremeIdiots.Portal.Sync.App.csproj

[github-actions]

🏗️ Terraform Plan

🌍 Environment: dev

✅ Validate — Passed

✅ Plan

	Count
➕ Add	16

📋 Resource Details

Action	Resource
➕ Create	azurerm_api_management_api_version_set.api_version_set
➕ Create	azurerm_api_management_product.api_product
➕ Create	azurerm_api_management_product_policy.api_product_policy
➕ Create	azurerm_linux_function_app.function_app
➕ Create	azurerm_monitor_activity_log_alert.rg_resource_health
➕ Create	azurerm_monitor_scheduled_query_rules_alert_v2.generate_ban_files_not_running
➕ Create	azurerm_monitor_scheduled_query_rules_alert_v2.import_ban_files_not_running
➕ Create	azurerm_monitor_scheduled_query_rules_alert_v2.map_redirect_sync_not_running
➕ Create	azurerm_monitor_scheduled_query_rules_alert_v2.redirect_to_server_sync_not_running
➕ Create	azurerm_monitor_scheduled_query_rules_alert_v2.scheduled_job_failures
➕ Create	azurerm_monitor_scheduled_query_rules_alert_v2.user_profile_sync_not_running
➕ Create	azurerm_role_assignment.app-to-storage
➕ Create	azurerm_role_assignment.app-to-storage-queue
➕ Create	azurerm_role_assignment.app-to-storage-table
➕ Create	azurerm_storage_account.function_app_storage
➕ Create	random_id.environment_id

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud