Bump the api-minor-patch group with 10 updates by dependabot[bot] · Pull Request #73 · jasperfordesq-ai/accounts

Updated Skia to m154.
Updated qpdf to 12.4.1.
Fixed an issue where garbage collection could corrupt PDF tag attributes during concurrent PDF generation (found and fixed by @Lurtz7 in Keep PDF/UA attribute strings alive until the document is closed (fixes stale-pointer corruption and crashes in document_close) QuestPDF/QuestPDF#1483),
Improved PDF/UA-1 compatibility when generating ZUGFeRD and Factur-X invoices.
Fixed an issue in the DocumentOperation API where DocumentAttachmentRelationship.Supplement was incorrectly mapped to /Alternative.
Improved handling of stream-writing exceptions during PDF generation.
The ShowInCompanion API now automatically starts the Companion App if it is not already running (requires Companion App 2026.9.0 or newer).
Improved exception messages related to Settings.ThrowOnMissingFontFamilies, Settings.ThrowOnMissingTextGlyphs, and Settings.UseSystemFonts.
Reduced connection time to the Companion App on Windows.
Added missing license files for dependencies.

2026.9.0

This release is dedicated to text handling improvements

QuestPDF 2026.9.0 improves font management to make document rendering more predictable across development machines, CI, containers, and cloud environments.

Fonts installed on the operating system vary between machines. A document that looks correct during development may use different fallback fonts, display placeholder glyphs, or lose text after deployment. To help catch these problems before a PDF reaches its recipient, QuestPDF now excludes system fonts by default and validates font availability and glyph coverage during document generation.

Upgrading to 2026.9.0

Deploy the required font files with your application and reference them by the family names stored in those files. Fonts in the application directory are registered automatically; you can also register them explicitly through FontManager. Use FontManager.GetRegisteredFonts() to inspect the available family names.

Please compare previous settings with the new defaults:

// previous behavior:
QuestPDF.Settings.UseSystemFonts = true;
QuestPDF.Settings.ThrowOnMissingFontFamilies = false;
QuestPDF.Settings.ThrowOnMissingTextGlyphs = false;
QuestPDF.Settings.EnableDetailedLayoutErrors = false;

// current behavior:
QuestPDF.Settings.UseSystemFonts = false;
QuestPDF.Settings.ThrowOnMissingFontFamilies = true;
QuestPDF.Settings.ThrowOnMissingTextGlyphs = true;
QuestPDF.Settings.EnableDetailedLayoutErrors = true;

Also review the deployment and API changes below. Renamed APIs remain available under their previous names, marked as obsolete with compiler warnings.

Covering additional languages

QuestPDF includes the bundled Lato font, which covers Latin, Greek, and Cyrillic scripts. For other scripts, such as Chinese, Japanese, Korean, Arabic, Hebrew, Thai, or emoji, we recommend additionally deploying the free, open-source Google Noto font family, registering it with FontManager, and configuring it as a font fallback in the default text style of the document.

// at application startup
FontManager.RegisterFontsFromDirectory("Fonts/Noto");

// in the document
Document.Create(document => 
{
    document.Page(page => 
    {
        page.DefaultTextStyle(style => style.FontFamily("Lato", "Noto Sans", "Noto Sans CJK SC", "Noto Emoji"));
    });
});

⚠️ Breaking changes

... (truncated)

2026.8.0

🚀 This release is dedicated to performance, parallelism, and use of available resources. 🚀

Documents render faster, allocate a fraction of the memory they used to, and scale across all available CPU cores. No code changes are required — existing documents benefit simply by upgrading the package.

The numbers below were measured on a MacBook Pro M5 (18-core CPU), using the invoice document from the Getting Started tutorial, across various levels of parallelism, over a sample of 5,000 documents.

Reduced allocated memory amount and allocated object count by 85%.
Improved single-threaded performance by around 15%.
Substantially improved parallel scaling: throughput previously peaked at 4 threads and flattened beyond that, and now scales with available CPU cores — with around 4x better scaling.
Improved performance and scalability for text-heavy documents.
Improved cache usage (mainly for fonts) and significantly reduced locking.

✨ Other improvements:

Added support for soft hyphens: the library does not hyphenate text automatically, but soft hyphen characters (U+00AD) are now correctly interpreted as optional break points and rendered as hyphens when a line breaks.
Added the TextStyle.BreakAnywhere API, which allows a text span to break between any two characters, not only at word boundaries such as spaces or hyphens. Useful for content without natural break points, e.g. long URLs, identifiers, hashes, or file paths.
Improved the visual position of the underline and double underline text decorations.
Improved reliability of the Companion App integration: document previews are now refreshed from a consistent snapshot, and rendered pages are transferred more efficiently.
Increased the zlib compression level used for PDF generation from 1 to 3, which produces significantly smaller files (for text-heavy documents) with a minimal increase in generation time.
Updated the Skia native dependency to version m152.

⚠️ Breaking change

XPS generation has been removed. The format was supported only on Windows, had several rendering issues that could not be reliably resolved, and had negligible adoption. The GenerateXps and GenerateXpsAndShow methods are still present, but calling them now results in a compilation error, and code compiled against an earlier version throws an exception at runtime. Please use PDF generation instead.

2026.7.3

Breaking change: The Rotate API now rotates elements around their center instead of the top-left corner. Center-origin rotation is the expected behavior in virtually all use cases.
Behavioral change: Generated images now use a white background by default, so the output matches how the document appears in a PDF viewer. Previously, PNG and WEBP images had a transparent background. To restore the old behavior, enable ImageGenerationSettings.UseTransparentBackground (applies only to formats supporting transparency: PNG and WEBP).
Automated table semantic tagging is now applied whenever a Table element is placed inside a SemanticTable container, even indirectly. Nested semantic captions are now supported as well.
Image elements now emit the /BBox attribute, improving PDF/UA-1 compliance with validators that require it.
Improved the stability and speed of the QuestPDF Companion integration. The integration now requires .NET 8 or newer.
Improved the developer experience of the GeneratePdfAndShow and GenerateXpsAndShow methods.
Deprecated AsSemanticHorizontalHeader in favor of SemanticHorizontalHeader for API naming consistency.
Deprecated RotateLeft and RotateRight in favor of RotateLayoutCounterclockwise and RotateLayoutClockwise, which better describe what these methods do.

2026.7.2

Fixed a rare Windows x64 concurrency issue where generated PDF documents appeared correct in viewers, but selected and copied text was corrupted.
Improved text rendering representation to resolve rare compatibility issues in certain PDF viewers that could cause incorrect results when selecting or copying text.
Improved compatibility for complex glyphs, such as ligatures, by annotating them with the /ActualText tag. This improves text selection, copying, extraction, and screen-reader accessibility. Ligatures remain disabled by default.
Added support for the AllowModification permission in DocumentOperations when encrypting PDF documents with 128-bit or 256-bit keys.
Added minor fixes and expanded test coverage for the DocumentOperations API.

2026.7.1

Improved performance

PDF generation is now significantly faster. The Skia native dependency has been recompiled with speed-oriented optimizations (favoring performance over binary size) and with SIMD instructions enabled.

The impact depends on document content and platform. For example, generating image-heavy documents that require image rescaling can be several times faster on Windows x64 🎉

Note: this change slightly increases the size of the native dependency by around 20%.

Continuous performance monitoring

We have also built a solid foundation for measuring library performance going forward. A new GitHub Actions workflow benchmarks QuestPDF across all supported operating systems, processor architectures, and .NET releases.

This infrastructure helps us ensure that performance remains stable and consistent across all platforms, and allows us to detect regressions early — before they ever reach a release.

2026.7.0

Updated licensing terms and conditions to version 3.0, including the removal of the developer seat limit for all paid licenses (details: https://www.questpdf.com/pricing).
Added full support for .NET Native AOT and trimming.
Added and improved warning messages related to library configuration.
Fixed a rare rendering issue where the footer was placed incorrectly when the page content was empty.

Commits viewable in compare view.

Updated Sentry.AspNetCore from 6.6.0 to 6.11.1.

Release notes

Sourced from Sentry.AspNetCore's releases.

6.11.1

Fixes 🐛

fix(cocoa): iOS and Mac Catalyst apps no longer crash in [NSURLSessionTask cancel] when a request is cancelled after it has already completed with Native.EnableSwizzling enabled (Cocoa SDK v9.29.0). Note that native crashes now set mechanism.synthetic, so expect a one-time regrouping of existing crash issues as your app adopts this version. by @github-actions in #5596

Dependencies ⬆️

Deps

chore(deps): update Native SDK to v0.16.8 by @github-actions in #5600
chore(deps): raise the OpenTelemetry floor to 1.12.0 by @jamescrosswell in #5588
chore(deps): update Java SDK to v8.57.0 by @github-actions in #5590
chore(deps): update CLI to v3.8.0 by @github-actions in #5591
chore(deps): update Java SDK to v8.56.0 by @github-actions in #5562
chore(deps): update Cocoa SDK to v9.28.0 by @github-actions in #5561
chore(deps): update Native SDK to v0.16.6 by @github-actions in #5563

Other

test: add ASP.NET Core blocking detection integration tests by @z0rimo in #5578

6.11.0

Features ✨

feat: Expose StringOrRegex discriminator by @limbonaut in #5543
feat: Provide the exception in the Hint passed to BeforeBreadcrumb by @jamescrosswell in #5523

Fixes 🐛

fix: isolate TracesSampler callback failures by @elkampu in #5545
fix: validate envelope item payload lengths before allocating a read buffer by @thaildhe172591 in #5541
fix: discard corrupt cache files instead of looping on them (resulting in an OOM exception) by @lgarczyn in #5507

Dependencies ⬆️

Deps

chore(deps): update Cocoa SDK to v9.27.0 by @github-actions in #5539
chore(deps): update Java SDK to v8.55.0 by @github-actions in #5538
chore(deps): update Native SDK to v0.16.5 by @github-actions in #5532

6.10.0

Features ✨

feat: Logs sent via SentrySdk.Logger no longer require EnableLogs by @jamescrosswell in #5512
feat: SentryOptions.EnableMetrics is obsolete and ignored by @jamescrosswell in #5509

Fixes 🐛

fix: Prevent managed exceptions from leaking as NSExceptions, resulting in duplicate exception capture on iOS by @jpnurmi in #5525
fix(profiling): release the EventPipe session when the SDK shuts down by @jamescrosswell in #5470
fix: Memory leak in Sentry.Profiling due to EventLog interning tables growing indefinitely by @jamescrosswell in #5503
fix: Attachments not being sent properly when Spotlight is enabled by @XAN9xXx in #5511
fix: Heap dump files are now deleted from disk once they have been sent to Sentry by @XAN9xXx in #5481
fix: populate sentry.sdk.name and sentry.sdk.version for console apps by @zkasuran in #5483

Dependencies ⬆️

Deps

chore(deps): update Java SDK to v8.54.0 by @github-actions in #5517
chore(deps): update Cocoa SDK to v9.26.1 by @github-actions in #5516
chore(deps): update CLI to v3.7.0 by @github-actions in #5520
chore(deps): update Native SDK to v0.16.4 by @github-actions in #5508
chore(deps): update Java SDK to v8.53.0 by @github-actions in #5484

Other

deps: update perfview (removes the .il suffix from profile module names) by @jamescrosswell in #5502

6.9.0

Features ✨

feat: Allow users to control Mechanism.Handled for captured exceptions by @vladbrincoveanu in #5449

Fixes 🐛

fix(serilog): logs from application namespaces beginning with "Sentry" are discarded by @jamescrosswell in #5456
fix: rate limit on one data category no longer blocks all others by @jamescrosswell in #5482

Dependencies ⬆️

Deps

chore(deps): update Native SDK to v0.16.3 by @github-actions in #5486
chore(deps): update Cocoa SDK to v9.26.0 by @github-actions in #5485
chore(deps): update Cocoa SDK to v9.25.0 by @github-actions in #5472
chore(deps): update Native SDK to v0.16.2 by @github-actions in #5477
chore(deps): update Java SDK to v8.52.0 by @github-actions in #5471
chore(deps): update Cocoa SDK to v9.24.0 by @github-actions in #5460
chore(deps): update Java SDK to v8.51.0 by @github-actions in #5457
chore(deps): update Native SDK to v0.16.1 by @github-actions in #5459
chore(deps): update Native SDK to v0.16.0 by @github-actions in #5452
chore(deps): update Java SDK to v8.50.1 by @github-actions in #5441
chore(deps): update CLI to v3.6.2 by @github-actions in #5443
chore(deps): update Cocoa SDK to v9.23.0 by @github-actions in #5442

Other

ref: migrate Cocoa bindings from PrivateSentrySDKOnly to SentryObjCSDK.internal by @jamescrosswell in #5409

6.8.0

Features ✨

Logs

feat(logs): add log4net integration by @Flash0ver in #5172
feat(logs): add NLog integration by @Flash0ver in #5176

Other

feat(serilog): support restrictedToMinimumLevel when configuring Serilog in code by @jamescrosswell in #5181
Attachments can now be sent with transactions by setting AddToTransactions on SentryAttachment #5182 by @jamescrosswell in #5182
Added SentrySdk.RecordTransaction to record already-completed transactions and spans (e.g. replayed through a proxy) #5333 by @jamescrosswell in #5333
The Environment set on the Scope now gets synchronized to the native layers (sentry-cocoa and sentry-native) by @bitsandfoxes in #5365

Fixes 🐛

fix: SentrySpanProcessor no longer leaks spans whose Activity never ends (e.g. aborted requests); the Activity is now held via a WeakReference so orphaned spans are pruned once it is garbage-collected. by @Ermabo in #5393
The SDK was incorrectly ignoring server rate limits for errors, check-ins, and logs by @jamescrosswell in #5412
fix: BackpressureMonitor.Dispose() no longer deadlocks on single-threaded targets by @jamescrosswell in #5330
fix: Create a single TaskBlockingListener per process for CaptureBlockingCalls by @jamescrosswell in #5381

Dependencies ⬆️

Deps

chore(deps): update CLI to v3.6.1 by @github-actions in #5417
chore(deps): update Native SDK to v0.15.4 by @github-actions in #5416
chore(deps): update Cocoa SDK to v9.22.0 by @github-actions in #5395
chore(deps): update Java SDK to v8.49.0 by @github-actions in #5398

Other

ci: drop install-zstd workaround by @jpnurmi in #5391
docs: add Sentry.OpenTelemetry.Exporter to README.md by @Flash0ver in #5194
meta: Update CODEOWNERS by @Flash0ver in #5386

6.7.0

Features ✨

feat(android): expose tombstone options via SentryOptions.Native by @jamescrosswell in #5226
Add IgnoreTransactions option to filter out transactions by name, matching substrings or regular expressions against the transaction name (#5377) by @Adham-Kiwan in #5377
feat: Add BeforeSendFeedback callback to inspect, modify, or drop user feedback before it's sent by @vladbrincoveanu in #5361
Add public API for checking unhandled exceptions (SentryEventExtensions.IsFromUnhandledException) and terminal exceptions (SentryEventExtensions.IsFromTerminalException) by @jamescrosswell in #5177
feat: Add PreferTransactionNameProvider option by @jamescrosswell in #5159
feat: Add exponential backoff and log deduplication to Spotlight by @mattico in #5025

Fixes 🐛

fix(otel): only set Scope.Transaction in SentrySpanProcessor when null by @tsushanth in #5337
fix: LNK4291 on Native AOT WinExe with Control Flow Guard by @jamescrosswell in #5298
fix: OpenTelemetry transactions for failed requests keep their route name and otel context by @jamescrosswell in #5310
fix: populate Default attributes on structured logs from current scope by @jamescrosswell in #5216
fix: [.NET 10] PageNavigationExtensions updated for public Page properties by @nor0x in #5278

Dependencies ⬆️

Deps

chore(deps): update Java SDK to v8.48.0 by @github-actions in #5360
chore(deps): update Cocoa SDK to v9.21.0 by @github-actions in #5359
chore(deps): update Native SDK to v0.15.3 by @github-actions in #5353
chore(deps): update Cocoa SDK to v9.20.0 by @github-actions in #5354
chore(deps): update Java SDK to v8.47.0 by @github-actions in #5338
chore(deps): update Cocoa SDK to v9.19.1 by @github-actions in #5336
chore(deps): update CLI to v3.6.0 by @github-actions in #5329
chore(deps): update Cocoa SDK to v9.19.0 by @github-actions in #5316
chore(deps): update Java SDK to v8.46.0 by @github-actions in #5321
chore(deps): update Java SDK to v8.45.0 by @github-actions in #5315
chore(deps): update Native SDK to v0.15.2 by @github-actions in #5309
chore(deps): update Cocoa SDK to v9.18.0 by @github-actions in #5264
chore(deps): update Java SDK to v8.44.1 by @github-actions in #5263
chore(deps): update CLI to v3.5.1 by @github-actions in #5279
chore(deps): update Native SDK to v0.15.1 by @github-actions in #5282

Other

Added Sentry.Samples.OpenTelemetry.MongoDB by @jamescrosswell in #5335
docs: add XML comments for boolean return of Sentry.Extensions.Logging Filters by @Flash0ver in #5297
LatestWindowsTfm added to Directory.Build.props by @nor0x in #5277

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps CsvHelper from 33.0.1 to 33.1.0 Bumps dotnet-ef from 10.0.10 to 10.0.12 Bumps Microsoft.AspNetCore.OpenApi from 10.0.10 to 10.0.12 Bumps Microsoft.EntityFrameworkCore from 10.0.10 to 10.0.12 Bumps Microsoft.EntityFrameworkCore.Design from 10.0.10 to 10.0.12 Bumps Microsoft.EntityFrameworkCore.Tools from 10.0.10 to 10.0.12 Bumps Microsoft.Extensions.ApiDescription.Server from 10.0.10 to 10.0.12 Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.2 to 10.0.3 Bumps QuestPDF from 2026.6.1 to 2026.9.1 Bumps Sentry.AspNetCore from 6.6.0 to 6.11.1 --- updated-dependencies: - dependency-name: CsvHelper dependency-version: 33.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: api-minor-patch - dependency-name: dotnet-ef dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: api-minor-patch - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: api-minor-patch - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: api-minor-patch - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: api-minor-patch - dependency-name: Microsoft.EntityFrameworkCore.Tools dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: api-minor-patch - dependency-name: Microsoft.Extensions.ApiDescription.Server dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: api-minor-patch - dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL dependency-version: 10.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: api-minor-patch - dependency-name: QuestPDF dependency-version: 2026.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: api-minor-patch - dependency-name: Sentry.AspNetCore dependency-version: 6.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: api-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Sep 28, 2026

dependabot Bot requested a review from jasperfordesq-ai as a code owner September 28, 2026 04:36

dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Sep 28, 2026

dependabot Bot mentioned this pull request Sep 28, 2026

Bump the api-minor-patch group with 10 updates #71

Closed

Navigation Menu

Bump the api-minor-patch group with 10 updates - #73

Bump the api-minor-patch group with 10 updates#73
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/api-minor-patch-3a5336e4af

dependabot Bot commented on behalf of github Sep 28, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 28, 2026

10.0.3

What's Changed

2026.9.1

2026.9.0

This release is dedicated to text handling improvements

Upgrading to 2026.9.0

Covering additional languages

⚠️ Breaking changes

2026.8.0

🚀 This release is dedicated to performance, parallelism, and use of available resources. 🚀

✨ Other improvements:

⚠️ Breaking change

2026.7.3

2026.7.2

2026.7.1

Improved performance

Continuous performance monitoring

2026.7.0

6.11.1

Fixes 🐛

Dependencies ⬆️

Deps

Other

6.11.0

Features ✨

Fixes 🐛

Dependencies ⬆️

Deps

6.10.0

Features ✨

Fixes 🐛

Dependencies ⬆️

Deps

Other

6.9.0

Features ✨

Fixes 🐛

Dependencies ⬆️

Deps

Other

6.8.0

Features ✨

Logs

Other

Fixes 🐛

Dependencies ⬆️

Deps

Other

6.7.0

Features ✨

Fixes 🐛

Dependencies ⬆️

Deps

Other

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants