Bump the dependencies group with 14 updates

[dependabot]

Updated FluentAssertions from 8.10.0 to 8.11.0.

Release notes

Sourced from FluentAssertions's releases.

8.11.0

What's Changed

New features

• Add ThatSatisfy for methods and properties by @​jnyrup in Add ThatSatisfy for methods and properties fluentassertions/fluentassertions#3257
• Add BeSupersetOf, BeProperSubsetOf and BeProperSupersetOf collection assertions by @​dennisdoomen in Add BeSupersetOf, BeProperSubsetOf and BeProperSupersetOf collection assertions fluentassertions/fluentassertions#3271
• Add BeJsonSerializable round-trip assertions by @​dennisdoomen in Add BeJsonSerializable round-trip assertions fluentassertions/fluentassertions#3293
• Support asserting on delegates that return a value task by @​dennisdoomen in Support asserting on delegates that return a value task fluentassertions/fluentassertions#3301

Improvements

• BeEmpty for IEnumerable assertions now lists the first 10 items in… by @​Xceed-DelvaJB in BeEmpty for IEnumerable<T> assertions now lists the first 10 items in… fluentassertions/fluentassertions#3198
• Clean-up the stack trace further by @​jnyrup in Clean-up the stack trace further fluentassertions/fluentassertions#3290
• Add HaveLineCount()/NotHaveLineCount() and ContainLine()/NotContainLine() to StringAssertions by @​dennisdoomen in Add HaveLineCount()/NotHaveLineCount() and ContainLine()/NotContainLine() to StringAssertions fluentassertions/fluentassertions#3297
• Add public ValueTypeAssertions<TSubject, TAssertions> base class by @​dennisdoomen in Add public ValueTypeAssertions<TSubject, TAssertions> base class fluentassertions/fluentassertions#3308

Fixes

• Fix JsonNodeAssertions.HaveProperty/NotHaveProperty for properties with explicit null values by @​dennisdoomen with @​Copilot in Fix JsonNodeAssertions.HaveProperty/NotHaveProperty for properties with explicit null values fluentassertions/fluentassertions#3282
• Fix exception on HaveProperty on JsonArray by @​jnyrup in Fix exception on HaveProperty on JsonArray fluentassertions/fluentassertions#3295
• Fix potential NREs when using AssertionScope (#​3178) by @​dennisdoomen in Fix potential NREs when using AssertionScope (#3178) fluentassertions/fluentassertions#3323

Documentation

• Fix typos by @​jnyrup in Fix typos fluentassertions/fluentassertions#3310
• Fix typo in exceptions page by @​jpgomezv in Fix typo in exceptions page fluentassertions/fluentassertions#3317

Others

• Simplify GetMinValue/GetMaxValue by @​jnyrup in Simplify GetMinValue/GetMaxValue fluentassertions/fluentassertions#3210
• Revert "Bump coverlet.collector from 6.0.4 to 8.0.1" by @​jnyrup in Revert "Bump coverlet.collector from 6.0.4 to 8.0.1" fluentassertions/fluentassertions#3218
• Update nugets by @​jnyrup in Update nugets fluentassertions/fluentassertions#3226
• Convert the build pipeline from Nuke to Fallout by @​dennisdoomen in Convert the build pipeline from Nuke to Fallout fluentassertions/fluentassertions#3234
• Expose ShouldThrowOnCyclicReference on IEquivalencyValidationContext by @​dennisdoomen in Expose ShouldThrowOnCyclicReference on IEquivalencyValidationContext fluentassertions/fluentassertions#3242
• Prevent pwn-request RCE via the Qodana workflow by @​dennisdoomen in Prevent pwn-request RCE via the Qodana workflow fluentassertions/fluentassertions#3217
• Harden NPM install by @​jnyrup in Harden NPM install fluentassertions/fluentassertions#3258
• Pin System.Security.Cryptography.Xml to patched version to fix build restore failures by @​dennisdoomen in Pin System.Security.Cryptography.Xml to patched version to fix build restore failures fluentassertions/fluentassertions#3283
• Exclude dependabot PRs from auto-generated release notes by @​dennisdoomen in Exclude dependabot PRs from auto-generated release notes fluentassertions/fluentassertions#3294
• Fix Qodana PR scans failing on pull requests from forks by @​dennisdoomen in Fix Qodana PR scans failing on pull requests from forks fluentassertions/fluentassertions#3299
• Cancel duplicate CI runs when a push triggers both push and pull_request events by @​dennisdoomen in Cancel duplicate CI runs when a push triggers both push and pull_request events fluentassertions/fluentassertions#3298
• Fix Qodana-flagged possible multiple enumeration and unused auto-property warnings by @​dennisdoomen in Fix Qodana-flagged possible multiple enumeration and unused auto-property warnings fluentassertions/fluentassertions#3300
• Document lessons learned from #​3291 in agents.md by @​dennisdoomen in Document lessons learned from #3291 in agents.md fluentassertions/fluentassertions#3307
• Pin SDK to workaround 10.0.400 by @​jnyrup in Pin SDK to workaround 10.0.400 fluentassertions/fluentassertions#3309
• Stop the Build workflow from running twice on same-repo PRs by @​dennisdoomen in Stop the Build workflow from running twice on same-repo PRs fluentassertions/fluentassertions#3311
• Update NuGet.Frameworks to workaround Fallout issue by @​jnyrup in Update NuGet.Frameworks to workaround Fallout issue fluentassertions/fluentassertions#3318
• Prefer Count > 0 over Any() by @​jnyrup in Prefer Count > 0 over Any() fluentassertions/fluentassertions#3321
• Correct the arguments passed to string.Format on failure by @​jnyrup in Correct the arguments passed to string.Format on failure fluentassertions/fluentassertions#3325
• Migrate xunit v3 test projects off the VSTest pipeline by @​dennisdoomen in Migrate xunit v3 test projects off the VSTest pipeline fluentassertions/fluentassertions#3320
• Include PackageGuard risk report and SBOM in pipeline by @​dennisdoomen in Include PackageGuard risk report and SBOM in pipeline fluentassertions/fluentassertions#3324

New Contributors

• @​jpgomezv made their first contribution in Fix typo in exceptions page fluentassertions/fluentassertions#3317

Full Changelog: fluentassertions/fluentassertions@8.10.0...8.11.0

Commits viewable in compare view.

Updated HtmlAgilityPack from 1.12.4 to 1.13.0.

Release notes

Sourced from HtmlAgilityPack's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration.EnvironmentVariables's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Json from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration.Json's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Options's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Options.ConfigurationExtensions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.9.0 to 18.10.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.10.0

What's Changed

• Drop Mono fallback, run .NET Framework tests on Windows only by @​nohwnd in Drop Mono fallback, run .NET Framework tests on Windows only microsoft/vstest#16158
• Run Microsoft.Testing.Platform test apps under vstest.console and datacollector by @​nohwnd in Run Microsoft.Testing.Platform test apps under vstest.console and datacollector microsoft/vstest#16201
• Fix test output eaten by MSBuild terminal logger by @​nohwnd in [fix] Fix test output eaten by MSBuild terminal logger microsoft/vstest#16223
• Remove the experimental test session feature by @​nohwnd in Remove the experimental test session feature microsoft/vstest#16231
• Skip a single bad executor instead of failing all executor loading by @​nohwnd in Skip a single bad executor instead of failing all executor loading microsoft/vstest#16239
• Assert apartment state instead of using Clipboard in UI tests by @​nohwnd in Assert apartment state instead of using Clipboard in UI tests microsoft/vstest#16270
• Surface test host crashes during protocol negotiation by @​nohwnd in Surface test host crashes during protocol negotiation microsoft/vstest#16285
• Pass the inferred target platform to the host in run settings by @​nohwnd in Pass the inferred target platform to the host in run settings microsoft/vstest#16271
• Report raw invalid IsTargetPlatformInferred value, cover host x64 forcing by @​nohwnd in Report raw invalid IsTargetPlatformInferred value, cover host x64 forcing microsoft/vstest#16295
• Disable the MTP testhost by default (#​16337) by @​nohwnd in [rel/18.10] Disable the MTP testhost by default (#16337) microsoft/vstest#16341

Full Changelog: microsoft/vstest@v18.9.0...v18.10.0

Commits viewable in compare view.

Updated MimeKit from 4.17.0 to 4.18.0.

Release notes

Sourced from MimeKit's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Polly from 8.7.0 to 8.8.0.

Release notes

Sourced from Polly's releases.

8.8.0

Highlights

• Add EnableReloadsWithMonitor() accepting custom IOptionsMonitor by @​arashzjahangiri in feat(extensions): add EnableReloads overload accepting custom IOptionsMonitor App-vNext/Polly#3140
• Return null from FaultGenerator when no fault is generated by @​dualfroz in Return null from FaultGenerator when no fault is generated App-vNext/Polly#3220

What's Changed

• Update workflow timeout by @​martincostello in Update workflow timeout App-vNext/Polly#3106
• Set SOURCE_DATE_EPOCH by @​martincostello in Set SOURCE_DATE_EPOCH App-vNext/Polly#3115
• Use NUGET_API_KEY by @​martincostello in Use NUGET_API_KEY App-vNext/Polly#3116
• Test refactoring by @​martincostello in Test refactoring App-vNext/Polly#3132
• Avoid test flakiness by @​martincostello in Avoid test flakiness App-vNext/Polly#3134
• Group github/codeql-action updates by @​martincostello in Group github/codeql-action updates App-vNext/Polly#3147
• Fix wrong word in hedging documentation by @​latent-9 in Fix wrong word in hedging documentation App-vNext/Polly#3191
• OSMF sponsorship notice by @​joelhulen in OSMF sponsorship App-vNext/Polly#3194
• Fix XML doc comment on PipelineExecutedArguments by @​JiuYue0820 in Fix XML doc comment on PipelineExecutedArguments App-vNext/Polly#3201
• Update to xunit v3 by @​martincostello in Update to xunit v3 App-vNext/Polly#3131
• .NET 11 preparation by @​martincostello in .NET 11 preparation App-vNext/Polly#3225
• Fix flaky test by @​martincostello in Fix flaky test App-vNext/Polly#3231

New Contributors

• @​arashzjahangiri made their first contribution in feat(extensions): add EnableReloads overload accepting custom IOptionsMonitor App-vNext/Polly#3140
• @​latent-9 made their first contribution in Fix wrong word in hedging documentation App-vNext/Polly#3191
• @​JiuYue0820 made their first contribution in Fix XML doc comment on PipelineExecutedArguments App-vNext/Polly#3201
• @​dualfroz made their first contribution in Return null from FaultGenerator when no fault is generated App-vNext/Polly#3220

Full Changelog: App-vNext/Polly@8.7.0...8.8.0

Commits viewable in compare view.

Updated Scalar.AspNetCore from 2.16.11 to 2.17.3.

Release notes

Sourced from Scalar.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: .NET, dependencies, packages. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: eba57e45-536f-478e-bae8-00e8c2e068ea

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[guibranco]

Automatically approved by gstraccini[bot]

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	microsoft.extensions.logging.abstractions@​10.0.9 ⏵ 10.0.12
	microsoft.extensions.dependencyinjection.abstractions@​10.0.9 ⏵ 10.0.12
	microsoft.extensions.options@​10.0.9 ⏵ 10.0.12
	microsoft.extensions.configuration@​10.0.9 ⏵ 10.0.12
	microsoft.extensions.configuration.environmentvariables@​10.0.9 ⏵ 10.0.12
	microsoft.extensions.configuration.json@​10.0.9 ⏵ 10.0.12
	microsoft.extensions.options.configurationextensions@​10.0.9 ⏵ 10.0.12
	microsoft.extensions.diagnostics.healthchecks.entityframeworkcore@​10.0.9 ⏵ 10.0.12
	scalar.aspnetcore@​2.16.11 ⏵ 2.17.3
	mimekit@​4.17.0 ⏵ 4.18.0
	polly@​8.7.0 ⏵ 8.8.0
	htmlagilitypack@​1.12.4 ⏵ 1.13.0

View full report

[socket-security]

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Block		System shell access: nuget polly.core Location: Package overview From: src/DaftAlerts.Infrastructure/DaftAlerts.Infrastructure.csproj → nuget/polly@8.8.0 → nuget/polly.core@8.8.0 ℹ Read more on: This package | This alert | What is shell access? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/polly.core@8.8.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Block		Dynamic code execution: nuget polly.core Location: Package overview From: src/DaftAlerts.Infrastructure/DaftAlerts.Infrastructure.csproj → nuget/polly@8.8.0 → nuget/polly.core@8.8.0 ℹ Read more on: This package | This alert | What is dynamic code execution? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Avoid packages that use dynamic code execution like eval(), since this could potentially execute any code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/polly.core@8.8.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Block		Dynamic code execution: nuget polly Location: Package overview From: src/DaftAlerts.Infrastructure/DaftAlerts.Infrastructure.csproj → nuget/polly@8.8.0 ℹ Read more on: This package | This alert | What is dynamic code execution? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Avoid packages that use dynamic code execution like eval(), since this could potentially execute any code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/polly@8.8.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud