Skip to content

相依套件： Bump the nuget group with 29 updates - #31

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/Website/nuget-8ef2c38029
Open

相依套件： Bump the nuget group with 29 updates#31
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/Website/nuget-8ef2c38029

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown

Updated Apache.Arrow from 22.1.0 to 23.0.0.

Release notes

Sourced from Apache.Arrow's releases.

23.0.0

Release Notes URL: https://arrow.apache.org/release/23.0.0.html

23.0.0-rc2

Release Notes: Release Candidate: 23.0.0 RC2

Commits viewable in compare view.

Updated Azure.Core from 1.60.0 to 1.63.0.

Release notes

Sourced from Azure.Core's releases.

1.63.0

1.63.0 (2026-09-25)

Features Added

  • Added mTLS proof-of-possession support to ClientCertificateCredential, including subject name and issuer certificate authentication configured with SendCertificateChain. Proof-of-possession is used by default when requested; first-party applications can opt out by setting the Azure.Identity.EnableClientCertificateMtlsProofOfPossession AppContext switch (or AZURE_IDENTITY_ENABLE_CLIENT_CERTIFICATE_MTLS_POP environment variable) to false.
  • Added mTLS proof-of-possession support to the managed identity federated identity flow used by configured credentials, covering both managed identity assertion acquisition and client assertion token redemption. It is enabled by default; set EnableMtlsProofOfPossession to false in the credential's JSON configuration to force bearer authentication for both exchanges. On a host that cannot provide a binding certificate, the flow falls back to a bearer token instead of failing, matching the direct managed identity flow.

Breaking Changes

  • Renamed the experimental ManagedIdentityCredentialOptions.DisableMtlsProofOfPossession property and corresponding configuration setting to EnableMtlsProofOfPossession. mTLS proof-of-possession is enabled by default for direct and configured managed identity when requested and supported. To force bearer authentication, replace DisableMtlsProofOfPossession = true with EnableMtlsProofOfPossession = false in code or credential configuration.

Bugs Fixed

  • Fixed ModelReaderWriter deserialization of GeoPoint with AzureCoreContext or a generated consumer context throwing because its type builder was not registered.
  • Fixed DefaultAzureCredential taking up to a minute to continue past managed identity on hosts where IMDS is unavailable. Ordinary chained requests use the short Azure.Core IMDS probe, while proof-of-possession capability discovery passes the same initial IMDS timeout to MSAL so discovery retry delays are canceled and timed-out discovery results are not cached.
  • Fixed chained managed identity aborting the credential chain when MSAL reports all sources unavailable immediately after a successful initial IMDS probe.
  • Managed identity mTLS proof-of-possession now requires a KeyGuard-backed host capability and enforces KeyGuard as the minimum binding strength during token acquisition. (#​62585)

Commits viewable in compare view.

Updated Azure.Storage.Blobs from 12.30.0 to 12.30.1.

Release notes

Sourced from Azure.Storage.Blobs's releases.

12.30.1

12.30.1 (2026-10-05)

Bugs Fixed

  • Fixed AuthenticatedRegionCryptoStream.Dispose() to be idempotent and thread-safe, so the buffer it rents is no longer returned to the shared ArrayPool<byte> more than once when the stream is disposed repeatedly or concurrently. Returning the same array twice allowed unrelated callers to rent the same array instance and corrupt each other's data.

Commits viewable in compare view.

Updated BouncyCastle.Cryptography from 2.6.2 to 2.7.0.

Release notes

Sourced from BouncyCastle.Cryptography's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated dbup-core from 5.0.37 to 6.1.1.

Release notes

Sourced from dbup-core's releases.

6.1.1

What's Changed

Full Changelog: DbUp/DbUp@6.0.15...6.1.1

6.0.15

What's Changed

Docs Changes

Development Time Changes

New Contributors

Full Changelog: DbUp/DbUp@6.0.4...6.0.15

6.0.4

What's Changed

Full Changelog: DbUp/DbUp@6.0.3...6.0.4

6.0.3

What's Changed

New Contributors

Full Changelog: DbUp/DbUp@6.0.0...6.0.3

6.0.0

Breaking Changes

https://dbup.readthedocs.io/en/latest/breaking-changes/

Noteable Changes

  • Added MicrosoftUpgradeLog to wrap the Microsoft logger (and a .LogTo(...) extension method)

PRs

6.0.0-beta.146

What's Changed

Full Changelog: DbUp/DbUp@6.0.0-beta.108...6.0.0-beta.146

6.0.0-beta.108

What's Changed

New Contributors

Full Changelog: DbUp/DbUp@6.0.0-beta.73...6.0.0-beta.108

6.0.0-beta.73

What's Changed

New Contributors

Full Changelog: DbUp/DbUp@6.0.0-beta.44...6.0.0-beta.73

6.0.0-beta.44

Breaking Changes

Other Changes

New Contributors

Full Changelog: DbUp/DbUp@5.0.76...6.0.0-beta.44

5.0.87

What's Changed

New Contributors

Full Changelog: DbUp/DbUp@5.0.76...5.0.87

5.0.76

What's Changed

New Contributors

Full Changelog: DbUp/DbUp@5.0.37...5.0.76

Commits viewable in compare view.

Updated dbup-sqlserver from 5.0.41 to 7.2.0.

Release notes

Sourced from dbup-sqlserver's releases.

7.2.0

What's Changed

Full Changelog: DbUp/dbup-sqlserver@7.1.0...7.2.0

7.1.0

What's Changed

Full Changelog: DbUp/dbup-sqlserver@6.0.16...7.1.0

6.0.16

What's Changed

New Contributors

dbup-core changes: https://github.com/DbUp/DbUp/releases/tag/6.0.15
Full Changelog: DbUp/dbup-sqlserver@6.0.0...6.0.16

6.0.0

Breaking Changes

  • Updated DbUp Core to 6.0.0, see https://dbup.readthedocs.io/en/latest/breaking-changes/ for full details
    • LibLog has been replaced by the standard .NET ILogger abstraction
      • The Autodetect logger feature provided by LibLog is removed
      • MultipleUpgradeLog has been replaced with AggregateLog
      • IUpgradeLogger still exists but method names have changed from Write* to Log* to match Microsoft's ILogger interface
    • Scripts with ScriptType.RunAlways will no longer be journaled
    • Only netstandard2.0 compatible frameworks are supported

What's Else Has Changed

New Contributors

Full Changelog: DbUp/dbup-sqlserver@5.0.41...6.0.0

6.0.0-beta.21

Full Changelog: DbUp/dbup-sqlserver@6.0.0-beta.9...6.0.0-beta.21

6.0.0-beta.9

What's Changed

Full Changelog: https://github.com/DbUp/dbup-sqlserver/commits/6.0.0-beta.9

Commits viewable in compare view.

Updated Microsoft.Bcl.AsyncInterfaces from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Bcl.AsyncInterfaces's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Abstractions from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.Abstractions from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.FileProviders.Abstractions from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.FileProviders.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting.Abstractions from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Hosting.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Options's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Primitives from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Primitives's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Client from 4.84.2 to 4.90.1.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.90.1

New Features

  • Added IMsalWsTrustHttpClientFactory, allowing custom HTTP client factories to provide redirect-disabled, credential-policy-aware clients for federation metadata (MEX) and WS-Trust requests. Added MsalError.TooManyRedirects and MsalError.WsTrustCrossOriginRedirectNotSupported for redirect failures. #​6165

Bug Fixes

  • Hardened federation metadata and WS-Trust requests by requiring HTTPS, securely validating redirects, rejecting credential-bearing cross-origin redirects, and limiting redirect chains. #​6165
  • Fixed instance discovery so a custom authority port is not forwarded to the global discovery host, while preserving the port when discovery uses the authority host. #​6155
  • Fixed KeyGuard attestation to send the tenant ID as the MAA client_id metadata value without changing managed-identity client-ID handling or attestation-cache partitioning. #​6200

Changes

  • Updated Microsoft.Azure.Security.KeyGuardAttestation from version 1.1.7 to 1.1.8. #​6202

4.90.0

Changes

  • Updated the KeyGuardAttestation package version to 1.1.7. #​6189

4.89.0

What's Changed

New Contributors

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.88.0...4.89.0

4.88.0

New Features

  • Added user-assigned managed identity support for Azure Arc, including selecting the identity by client ID and validating the identity returned in the token response. #​6128
  • Added WithRequestOverMtls() to managed identity token requests, enabling attested bearer-token acquisition over the IMDSv2 mTLS transport. #​6086

Bug Fixes

  • Fixed token-cache key collisions by length-prefixing additional cache-key components before hashing. #​6137
  • Populated authentication-result telemetry metadata on proactive background-refresh results. #​6157
  • Fixed mTLS PoP authority validation incorrectly rejecting sovereign-cloud aliases such as login.chinacloudapi.cn and login.usgovcloudapi.net. #​6153

4.87.0

What's Changed

  • Expose MsalServiceException.ErrorCodesForLogging for diagnostics in #​6138
  • Expose WithOtelTagsEnricher for managed identity requests in #​6144
  • Forward OpenTelemetry tags enricher to the client-assertion callback in #​6142
  • Add client-side opaque-token log scrubber in #​6119
  • Populate ExecutionResult.Exception for non-MSAL failures in #​6139
  • Use PSS padding in KeyGuard liveness probe (CodeQL SM03799) in #​6141
  • Remove managed identity support from WithClaimsFromClient (confidential-client only) in #​6113
  • Remove experimental features from client setup in #​6143
  • Update Azure Arc managed identity API version from 2019-11-01 to 2020-06-01 in #​6130

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.86.1...4.87.0

4.86.1

Bug Fixes

  • Fixed the mTLS Proof-of-Possession token cache to key on the certificate's full DER (x5t#S256) instead of only the public key, preventing a stale token (and AADSTS500181) after a same-key certificate renewal. #​6123
  • Fell back to RS256 when a certificate's PSS signing operation is rejected by RSACryptoServiceProvider, rebuilding the client assertion so authentication can proceed. #​6126
  • Detect and reject symbolic links in the Unix cache-file write path (lstat pre-check plus O_NOFOLLOW), closing a TOCTOU window. #​6115
  • Corrected misleading "region required" error messages and doc comments in the mTLS PoP flow. #​6127

4.86.0

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.85.2...4.86.0

4.85.2

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.85.1...4.85.2

4.85.1

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.85.0...4.85.1

4.85.0

What's Changed

New Contributors

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.84.2...4.85.0

Commits viewable in compare view.

Updated Microsoft.Identity.Client.Extensions.Msal from 4.84.2 to 4.90.1.

Release notes

Sourced from Microsoft.Identity.Client.Extensions.Msal's releases.

4.90.1

New Features

  • Added IMsalWsTrustHttpClientFactory, allowing custom HTTP client factories to provide redirect-disabled, credential-policy-aware clients for federation metadata (MEX) and WS-Trust requests. Added MsalError.TooManyRedirects and MsalError.WsTrustCrossOriginRedirectNotSupported for redirect failures. #​6165

Bug Fixes

  • Hardened federation metadata and WS-Trust requests by requiring HTTPS, securely validating redirects, rejecting credential-bearing cross-origin redirects, and limiting redirect chains. #​6165
  • Fixed instance discovery so a custom authority port is not forwarded to the global discovery host, while preserving the port when discovery uses the authority host. #​6155
  • Fixed KeyGuard attestation to send the tenant ID as the MAA client_id metadata value without changing managed-identity client-ID handling or attestation-cache partitioning. #​6200

Changes

  • Updated Microsoft.Azure.Security.KeyGuardAttestation from version 1.1.7 to 1.1.8. #​6202

4.90.0

Changes

  • Updated the KeyGuardAttestation package version to 1.1.7. #​6189

4.89.0

What's Changed

New Contributors

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.88.0...4.89.0

4.88.0

New Features

  • Added user-assigned managed identity support for Azure Arc, including selecting the identity by client ID and validating the identity returned in the token response. #​6128
  • Added WithRequestOverMtls() to managed identity token requests, enabling attested bearer-token acquisition over the IMDSv2 mTLS transport. #​6086

Bug Fixes

  • Fixed token-cache key collisions by length-prefixing additional cache-key components before hashing. #​6137
  • Populated authentication-result telemetry metadata on proactive background-refresh results. #​6157
  • Fixed mTLS PoP authority validation incorrectly rejecting sovereign-cloud aliases such as login.chinacloudapi.cn and login.usgovcloudapi.net. #​6153

4.87.0

What's Changed

  • Expose MsalServiceException.ErrorCodesForLogging for diagnostics in #​6138
  • Expose WithOtelTagsEnricher for managed identity requests in #​6144
  • Forward OpenTelemetry tags enricher to the client-assertion callback in #​6142
  • Add client-side opaque-token log scrubber in #​6119
  • Populate ExecutionResult.Exception for non-MSAL failures in #​6139
  • Use PSS padding in KeyGuard liveness probe (CodeQL SM03799) in #​6141
  • Remove managed identity support from WithClaimsFromClient (confidential-client only) in #​6113
  • Remove experimental features from client setup in #​6143
  • Update Azure Arc managed identity API version from 2019-11-01 to 2020-06-01 in #​6130

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.86.1...4.87.0

4.86.1

Bug Fixes

  • Fixed the mTLS Proof-of-Possession token cache to key on the certificate's full DER (x5t#S256) instead of only the public key, preventing a stale token (and AADSTS500181) after a same-key certificate renewal. #​6123
  • Fell back to RS256 when a certificate's PSS signing operation is rejected by RSACryptoServiceProvider, rebuilding the client assertion so authentication can proceed. #​6126
  • Detect and reject symbolic links in the Unix cache-file write path (lstat pre-check plus O_NOFOLLOW), closing a TOCTOU window. #​6115
  • Corrected misleading "region required" error messages and doc comments in the mTLS PoP flow. #​6127

4.86.0

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.85.2...4.86.0

4.85.2

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.85.1...4.85.2

4.85.1

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.85.0...4.85.1

4.85.0

What's Changed

New Contributors

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.84.2...4.85.0

Commits viewable in compare view.

Updated Microsoft.IdentityModel.Abstractions from 8.14.0 to 8.23.0.

Release notes

Sourced from Microsoft.IdentityModel.Abstractions's releases.

8.23.0

What's Changed

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.22.0...8.23.0

8.22.0

What's Changed

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.21.0...8.22.0

8.21.0

Performance Improvements

  • Add JsonWebToken header-replacement path to avoid re-parsing payload. See PR #​3553.
  • Add claims dictionary preallocation. See PR #​3550.

Bug Fixes

  • Fix CI build failures: remove unused log message and add missing DPoP API entries. See PR #​3551.

8.19.2

What's Changed

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.19.1...8.19.2

8.19.1

Bug Fixes

  • Update JwtSecurityTokenHandler for IssuerSigningKeyResolverUsingConfiguration to take priority over IssuerSigningKeyResolver, matching the documented contract and the correct behavior already present in JsonWebTokenHandler. See PR #​3519.

8.19.0

New Features

  • Add ML-DSA (FIPS 204) post-quantum signature support. See PR #​3479.
  • Cache custom crypto providers in CryptoProviderFactory. See PR #​3489.

Bug Fixes

  • Disable automatic redirects on default HttpClient for JKU retrieval. See PR #​3494.
  • Adjust rented buffer handling in claim set parsing. See PR #​3493.
  • Tidy null handling in SAML conditions validation. See PR #​3491.
  • Improve validation of jku claim. See PR #​3481.
  • Limit telemetry algorithm dimension cardinality. See PR #​3490.
  • Add defensive copy of collections in ValidationParameters. See PR #​3492.
  • Update TokenValidationParameter copy constructor to make a deep copy. See PR #​3488.
  • Update to fail-closed when replay protection isn't configured and other DPoP hardening. See PR #​3505.
  • Apply RFC 3986 section 6.2.2 normalization to DPoP htu comparison. See PR #​3509.

8.18.0

New Features

  • Introduced a new interface IConfigurationEventHandlerContextAware<T> that provides context to the configuration event handler implementation, allowing it to optionally bypass a cache lookup. See PR #​3444.
  • Added Microsoft.IdentityModel.Dpop — a new package implementing DPoP (Demonstrating Proof-of-Possession) per RFC 9449. Provides both client-side and server-side proof validation with no System.Net.Http dependency. See PR #​3443.

8.17.0

Dependencies

  • Downgrade MicrosoftExtensionsLoggingAbstractionsVersion to 8.0.0 on .NET 10. See PR #​3435.

8.16.0

New Features

  • Add telemetry around signature validation. See PR #​3415 for details.

Fundamentals

  • Fix FileVersion format to use two-digit year and day of year. See PR #​3389 for details.

8.15.0

New Features

  • Add ECDsa support in X509SecurityKey and JsonWebKeyConverter.ConvertFromX509SecurityKey
    Extended X509SecurityKey and JsonWebKeyConverter.ConvertFromX509SecurityKey to support ECDSA keys.
    See PR #​2377 for details.

Bug Fixes

  • Sanitize logs to avoid leaking sensitive data
    Updated logging to sanitize sensitive values, reducing the risk of inadvertently exposing secrets or PII in logs.
    See PR #​3316 for details.
  • Optimize log sanitization with SearchValues
    Improved the performance of the log sanitization logic introduced earlier by using SearchValues, making sanitization more efficient in high-throughput scenarios.
    See PR #​3341 for details.
  • Update test for IDX10400
    Adjusted the IDX10400 test to align with the current behavior and error messaging.
    See PR #​3314 for details.

Fundamentals

  • Add supported algorithm tests
    Added new tests to validate the set of supported cryptographic algorithms, increasing confidence in algorithm coverage and compatibility.
    See PR #​3296 for details.
  • Migrate repository agent rules from .clinerules to agents.md
    Moved repository agent/AI-assist rules into markdown documentation to make them more visible and easier to maintain.
    See PR #​3313 for details.
  • Migrate Microsoft.IdentityModel.TestExtensions from Newtonsoft.Json to System.Text.Json
    Updated Microsoft.IdentityModel.TestExtensions to use System.Text.Json instead of Newtonsoft.Json, aligning tests with the runtime serialization stack.
    See PR #​3356 for details.
  • Disable code coverage comments
    Turned off automated code coverage comments on PRs to reduce noise while retaining coverage data elsewhere.
    See PR #​3349 for details.
  • Fix CodeQL alerts
    Addressed CodeQL-reported issues to improve security posture and static analysis cleanliness.
    See PR #​3364 for details.

.NET 10 / SDK and tooling updates

  • Building with .NET 10 preview / RC 1
    Updated the repository to build and test against .NET 10.0 preview/RC1, ensuring early compatibility with the upcoming runtime.
    See PRs #​3287, #​3357, and #​3358 for details.
  • Fix .NET 10 test execution consistency
    Ensured consistent use of the TargetNetNext parameter across build, test, and pack phases so .NET 10.0 tests execute reliably.
    See PR #​3337 for details.
  • Update project files and workflows for .NET 10.0 compatibility
    Adjusted project files and CI workflows to correctly target and run on .NET 10.0, including test and pack scenarios.
    See PR #​3363 for details.
  • Update .NET version to meet CG compliance
    Updated the .NET version references to be compliant with corporate governance (CG) requirements.
    See PR #​3353 for details.
  • Update Coverlet collector and test SDK
    • Bumped CoverletCollectorVersion to 6.0.4.
      See PR #​3333 for details.
    • Upgraded Microsoft.NET.Test.Sdk to a newer version for improved test reliability and tooling support.
      ... (truncated)

Commits viewable in compare view.

Updated Microsoft.IdentityModel.Clients.ActiveDirectory from 5.2.9 to 5.3.0.

Updated System.ClientModel from 1.14.0 to 1.16.0.

Release notes

Sourced from System.ClientModel's releases.

1.16.0

1.16.0 (2026-09-16)

Features Added

  • AsyncStreamingResult and AsyncStreamingResult<T> are now generally available and no longer require suppressing the SCME0005 experimental diagnostic.
  • Added automatic reconnection for eligible non-buffered server-sent event responses after abrupt connection loss, honoring server-provided retry intervals and Last-Event-ID when available.

Breaking Changes

  • Renamed the experimental AsyncStreamingClientResult and AsyncStreamingClientResult<T> types to AsyncStreamingResult and AsyncStreamingResult<T>, respectively.

Commits viewable in compare view.

Updated System.Diagnostics.DiagnosticSource from 10.0.9 to 10.0.12.

Release notes

Sourced from System.Diagnostics.DiagnosticSource's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated System.Formats.Asn1 from 8.0.1 to 10.0.12.

Release notes

Sourced from System.Formats.Asn1's releases.

10.0.0-preview.6.25358.103

You can build .NET 10.0 Preview 6 from the repository by cloning the release tag v10.0.0-preview.6.25358.103 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.5.25277.114

You can build .NET 10.0 Preview 5 from the repository by cloning the release tag v10.0.0-preview.5.25277.114 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.4.25258.110

You can build .NET 10.0 Preview 4 from the repository by cloning the release tag v10.0.0-preview.4.25258.110 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.3.25171.5

You can build .NET 10.0 Preview 3 from the repository by cloning the release tag v10.0.0-preview.3.25171.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.2.25163.2

You can build .NET 10.0 Preview 2 from the repository by cloning the release tag v10.0.0-preview.2.25163.2 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.1.25080.5

You can build .NET 10.0 Preview 1 from the repository by cloning the release tag v10.0.0-preview.1.25080.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.121

You can build .NET 9.0 from the repository by cloning the release tag v9.0.121 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.120

You can build .NET 9.0 from the repository by cloning the release tag v9.0.120 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached is a PGP signature for the GitHub generated tarball. You can find the public key at https://dot.net/release-key-2023

9.0.119

You can build .NET 9.0 from the repository by cloning the release tag v9.0.119 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.118

You can build .NET 9.0 from the repository by cloning the release tag v9.0.118 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached is a PGP signature for the GitHub generated tarball. You can find the public key at https://dot.net/release-key-2023

9.0.117

You can build .NET 9.0 from the repository by cloning the release tag v9.0.117 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.116

You can build .NET 9.0 from the repository by cloning the release tag v9.0.116 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.115

You can build .NET 9.0 from the repository by cloning the release tag v9.0.115 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.114

@dependabot
相依套件： Bump the nuget group with 29 updates
706fc3b 
Bumps Apache.Arrow from 22.1.0 to 23.0.0
Bumps Azure.Core from 1.60.0 to 1.63.0
Bumps Azure.Storage.Blobs from 12.30.0 to 12.30.1
Bumps BouncyCastle.Cryptography from 2.6.2 to 2.7.0
Bumps dbup-core from 5.0.37 to 6.1.1
Bumps dbup-sqlserver from 5.0.41 to 7.2.0
Bumps Microsoft.Bcl.AsyncInterfaces from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.Configuration.Abstractions from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.Diagnostics.Abstractions from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.FileProviders.Abstractions from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.Hosting.Abstractions from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.Options from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.Primitives from 10.0.9 to 10.0.12
Bumps Microsoft.Identity.Client from 4.84.2 to 4.90.1
Bumps Microsoft.Identity.Client.Extensions.Msal from 4.84.2 to 4.90.1
Bumps Microsoft.IdentityModel.Abstractions from 8.14.0 to 8.23.0
Bumps Microsoft.IdentityModel.Clients.ActiveDirectory from 5.2.9 to 5.3.0
Bumps System.ClientModel from 1.14.0 to 1.16.0
Bumps System.Diagnostics.DiagnosticSource from 10.0.9 to 10.0.12
Bumps System.Formats.Asn1 from 8.0.1 to 10.0.12
Bumps System.IO.Hashing from 10.0.9 to 10.0.12
Bumps System.IO.Pipelines from 10.0.9 to 10.0.12
Bumps System.Memory.Data from 10.0.9 to 10.0.12
Bumps System.Security.AccessControl from 5.0.0 to 6.0.1
Bumps System.Security.Cryptography.ProtectedData from 4.5.0 to 10.0.12
Bumps System.Text.Encodings.Web from 10.0.9 to 10.0.12
Bumps System.Text.Json from 10.0.9 to 10.0.12

---
updated-dependencies:
- dependency-name: Apache.Arrow
  dependency-version: 23.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
- dependency-name: Azure.Core
  dependency-version: 1.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Azure.Storage.Blobs
  dependency-version: 12.30.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: BouncyCastle.Cryptography
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: dbup-core
  dependency-version: 6.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
- dependency-name: dbup-sqlserver
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
- dependency-name: Microsoft.Bcl.AsyncInterfaces
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.Configuration.Abstractions
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.Diagnostics.Abstractions
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.FileProviders.Abstractions
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.Hosting.Abstractions
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.Options
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.Primitives
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Identity.Client
  dependency-version: 4.90.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Microsoft.Identity.Client.Extensions.Msal
  dependency-version: 4.90.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Microsoft.IdentityModel.Abstractions
  dependency-version: 8.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Microsoft.IdentityModel.Clients.ActiveDirectory
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: System.ClientModel
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: System.Diagnostics.DiagnosticSource
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: System.Formats.Asn1
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
- dependency-name: System.IO.Hashing
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: System.IO.Pipelines
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: System.Memory.Data
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: System.Security.AccessControl
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
- dependency-name: System.Security.Cryptography.ProtectedData
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
- dependency-name: System.Text.Encodings.Web
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: System.Text.Json
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from jeff1121 as a code owner October 12, 2026 03:33
@dependabot dependabot Bot added the dependencies 相依套件更新 label Oct 12, 2026
@dependabot dependabot Bot mentioned this pull request Oct 12, 2026
Closed

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jeff1121 jeff1121 Awaiting requested review from jeff1121 jeff1121 is a code owner

Assignees

No one assigned

Labels

dependencies 相依套件更新

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants