Bump AWSSDK.S3 and 14 others by dependabot[bot] · Pull Request #780 · kenhayward/Diariz

dependabot · 2026-10-01T11:45:42Z

Updated AWSSDK.S3 from 4.0.102.4 to 4.0.104.1.

Release notes

Sourced from AWSSDK.S3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated coverlet.collector from 10.0.1 to 10.1.0.

Release notes

Sourced from coverlet.collector's releases.

10.1.0

Improvements

Publish Microsoft.Testing.Platform coverage messages from coverlet.MTP #2019
Implement dynamic exclusion filters for assemblies (Coverlet.MTP) #1946
Replace legacy .sln files with modern .slnx format #1966
coverlet.console: add trace diagnostics and actionable warnings for instrumentation/hit/empty-result failures #2005
Relax auto-property skip logic and improve coverage for records #1941

Fixed

Fix coverlet.MTP does not collect coverage on the .NET Framework portion of a large project #1980 #1967
Fix Regression in branch coverage for lambda expressions #1938
Fix When using "is" with "or" in pattern matching, branch coverage is lower than normal #1979
Fix silent zero coverage on .NET Framework since 8.0.0 #1985 by @tobiwae
Fix Race condition between ProcessExit hit-file write and out-of-proc coverage read causes EndOfStreamException #1987 #1988 by @bkoelman
Fix Regression TypeInitializationException when targeting .NET Framework - Could not load type 'System.Collections.Concurrent.ConcurrentBag #2010
Fix use --config-file CLI arg in coverlet.MTP #2030 by alexthornton1
Fix silently empty coverage for shared-framework assemblies missing from compileLibraries #2032 by @Eljees

Diff between 10.0.1 and 10.1.0

Commits viewable in compare view.

Updated Google.Apis.Auth from 1.76.0 to 1.77.0.

Release notes

Sourced from Google.Apis.Auth's releases.

1.77.0

Bug fixes:

#3236 Validate path parameters against path traversal and parameter injection

Commits viewable in compare view.

Updated MailKit from 4.17.0 to 4.18.1.

Release notes

Sourced from MailKit's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Markdig from 1.3.2 to 1.4.0.

Release notes

Sourced from Markdig's releases.

1.4.0

Changes

✨ New Features

Add strict GFM pipe table parsing mode (14cd25c7)

🐛 Bug Fixes

Fix heading auto-link hijacking nested link labels (#668) (PR #949) by @dualfroz
Fix: keep trailing content out of an unmatched emphasis closer (#743) (PR #950) by @dualfroz
Fix indent on first list item (#482) (PR #953) by @boxofyellow
Add Normalization Support for PipeTables (GFM) (PR #954) by @boxofyellow
Fix partially empty pipe table separator regression (PR #955) by @vicancy
Reject emoji-parsing if the slice ends with ** (PR #947) by @bstordrup
Fix strict GFM tables against native cmark-gfm (86866b91)

🚀 Enhancements

Update 3rd party extensions (PR #945) by @Kryptos-FR

🏭 Tests

Fix tests warnings (96b024c2)

📦 Dependencies

Bump deps (c6b186b4)

🧰 Misc

Use NuGet Trusted Publishing via dotnet-releaser (56e9c238)

Full Changelog: 1.3.2...1.4.0

_{Published with dotnet-releaser}

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.9.0 to 18.10.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.10.1 What's Changed

Isolate code coverage files in published output by @azat-msft in [rel/18.10] Isolate code coverage files in published output microsoft/vstest#16476

Full Changelog: microsoft/vstest@v18.10.0...v18.10.1

18.10.0 What's Changed

Drop Mono fallback, run .NET Framework tests on Windows only by @nohwnd in Drop Mono fallback, run .NET Framework tests on Windows only microsoft/vstest#16158
Run Microsoft.Testing.Platform test apps under vstest.console and datacollector by @nohwnd in Run Microsoft.Testing.Platform test apps under vstest.console and datacollector microsoft/vstest#16201
Fix test output eaten by MSBuild terminal logger by @nohwnd in [fix] Fix test output eaten by MSBuild terminal logger microsoft/vstest#16223
Remove the experimental test session feature by @nohwnd in Remove the experimental test session feature microsoft/vstest#16231
Skip a single bad executor instead of failing all executor loading by @nohwnd in Skip a single bad executor instead of failing all executor loading microsoft/vstest#16239
Assert apartment state instead of using Clipboard in UI tests by @nohwnd in Assert apartment state instead of using Clipboard in UI tests microsoft/vstest#16270
Surface test host crashes during protocol negotiation by @nohwnd in Surface test host crashes during protocol negotiation microsoft/vstest#16285
Pass the inferred target platform to the host in run settings by @nohwnd in Pass the inferred target platform to the host in run settings microsoft/vstest#16271
Report raw invalid IsTargetPlatformInferred value, cover host x64 forcing by @nohwnd in Report raw invalid IsTargetPlatformInferred value, cover host x64 forcing microsoft/vstest#16295
Disable the MTP testhost by default (#16337) by @nohwnd in [rel/18.10] Disable the MTP testhost by default (#16337) microsoft/vstest#16341

Full Changelog: microsoft/vstest@v18.9.0...v18.10.0

Commits viewable in compare view.

Updated MimeKit from 4.17.0 to 4.18.1.

Release notes

Sourced from MimeKit's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated OpenIddict.AspNetCore from 7.6.1 to 7.7.1.

Release notes

Sourced from OpenIddict.AspNetCore's releases.

7.7.1

This release introduces the following changes:

The identity token principal extracted from identity token hints is now correctly restored and returned by ASP.NET Core/OWIN's AuthenticateAsync() API when using pushed authorization requests, authorization request caching or end session request caching.

7.7.0

This release introduces the following changes:

A vulnerability affecting the validation of audiences contained in client assertions by the OpenIddict server stack was identified earlier today (thanks @x-redacted! ❤️) and fixed.

[!CAUTION]
Upgrading to OpenIddict 7.7 or 8.0 preview 4 is strongly advised. See GHSA-925x-4h4v-2792 for more information.

On .NET 10 and higher, the OpenIddict.Quartz package now references the 4.0 version of Quartz.NET. See https://www.quartz-scheduler.net/documentation/quartz-4.x/migration-guide.html for more information about Quartz.NET 4.0.

[!IMPORTANT]
On .NET Framework and .NET Standard 2.0/2.1, the package keeps referencing the 3.x branch, as Quartz.NET 4.0 is only compatible with .NET 10 and higher.

The aud claim in client assertions can now be represented as a JSON array, as allowed by the recent versions of the Updates to OAuth 2.0 JSON Web Token (JWT) Client Authentication and Assertion-Based Authorization Grants specification.
The OpenIddict.Client.WebIntegration package now supports JoinRpg (thanks @leotsarev! ❤️)
grant_type=urn:ietf:params:oauth:grant-type:device_code token requests that don't include a client identifier are now rejected earlier by the OpenIddict server stack.
The net9.0-android, net9.0-ios, net9.0-maccatalyst and net9.0-macos target framework monikers are no longer supported by Microsoft and have been removed from the OpenIddict.Client.SystemIntegration package and the OpenIddict metapackage. Users of the OpenIddict.Client.SystemIntegration package are invited to migrate to .NET 10.0.
All the .NET and third-party dependencies have been updated to their latest version.
The System.Interactive.Async dependency (used only on .NET Framework and .NET Standard) was downgraded to 3.2.0 to fix a TypeLoadException that prevented using the OpenIddict Entity Framework Core 2.3 stores on .NET Framework after migrating to OpenIddict 7.6.0.

Commits viewable in compare view.

Updated OpenIddict.EntityFrameworkCore from 7.6.1 to 7.7.1.

Release notes

Sourced from OpenIddict.EntityFrameworkCore's releases.

7.7.1

This release introduces the following changes:

The identity token principal extracted from identity token hints is now correctly restored and returned by ASP.NET Core/OWIN's AuthenticateAsync() API when using pushed authorization requests, authorization request caching or end session request caching.

7.7.0

This release introduces the following changes:

A vulnerability affecting the validation of audiences contained in client assertions by the OpenIddict server stack was identified earlier today (thanks @x-redacted! ❤️) and fixed.

[!CAUTION]
Upgrading to OpenIddict 7.7 or 8.0 preview 4 is strongly advised. See GHSA-925x-4h4v-2792 for more information.

On .NET 10 and higher, the OpenIddict.Quartz package now references the 4.0 version of Quartz.NET. See https://www.quartz-scheduler.net/documentation/quartz-4.x/migration-guide.html for more information about Quartz.NET 4.0.

[!IMPORTANT]
On .NET Framework and .NET Standard 2.0/2.1, the package keeps referencing the 3.x branch, as Quartz.NET 4.0 is only compatible with .NET 10 and higher.

The aud claim in client assertions can now be represented as a JSON array, as allowed by the recent versions of the Updates to OAuth 2.0 JSON Web Token (JWT) Client Authentication and Assertion-Based Authorization Grants specification.
The OpenIddict.Client.WebIntegration package now supports JoinRpg (thanks @leotsarev! ❤️)
grant_type=urn:ietf:params:oauth:grant-type:device_code token requests that don't include a client identifier are now rejected earlier by the OpenIddict server stack.
The net9.0-android, net9.0-ios, net9.0-maccatalyst and net9.0-macos target framework monikers are no longer supported by Microsoft and have been removed from the OpenIddict.Client.SystemIntegration package and the OpenIddict metapackage. Users of the OpenIddict.Client.SystemIntegration package are invited to migrate to .NET 10.0.
All the .NET and third-party dependencies have been updated to their latest version.
The System.Interactive.Async dependency (used only on .NET Framework and .NET Standard) was downgraded to 3.2.0 to fix a TypeLoadException that prevented using the OpenIddict Entity Framework Core 2.3 stores on .NET Framework after migrating to OpenIddict 7.6.0.

Commits viewable in compare view.

Updated Sentry.AspNetCore from 6.9.0 to 6.12.0.

Release notes

Sourced from Sentry.AspNetCore's releases.

6.12.0

Features ✨

feat(otel): mark span processor based OpenTelemetry setup methods as obsolete by @jamescrosswell in #5586

Fixes 🐛

fix(blazor): logging options set in UseSentry now take effect by @ric-oliv in #5640
fix(log4net): send event properties as log attributes on log4net 3.x by @jamescrosswell in #5559
fix: TraceIgnoreStatusCodes no longer drops outgoing HTTP requests traced with OpenTelemetry by @jamescrosswell in #5643
fix: an exception in BeforeSend or BeforeSendTransaction now drops the item instead of sending it by @jamescrosswell in #5610
fix: telemetry dropped by user callbacks and by validation is now counted in client reports by @jamescrosswell in #5607
fix: exceptions thrown from BeforeBreadcrumb, log filters and BeforeScreenshotCapture no longer reach the application by @jamescrosswell in #5606
fix: transaction processors no longer discard each other's results by @jamescrosswell in #5621
fix: Throw ArgumentException for empty traceId in DynamicSamplingContext by @chiliec in #5599

Dependencies ⬆️

Deps

chore(deps): update Cocoa SDK to v9.30.0 by @github-actions in #5656
chore(deps): update Cocoa SDK to v9.29.2 by @github-actions in #5624
chore(deps): update Java SDK to v8.58.0 by @github-actions in #5622
chore(deps): update Native SDK to v0.17.1 by @github-actions in #5625
chore(deps): update Native SDK to v0.17.0 by @github-actions in #5614

Other

meta: remove duplicate Blank Issue template by @SatvikMishra08 in #5601

6.11.1

Fixes 🐛

fix(cocoa): iOS and Mac Catalyst apps no longer crash in [NSURLSessionTask cancel] when a request is cancelled after it has already completed with Native.EnableSwizzling enabled (Cocoa SDK v9.29.0). Note that native crashes now set mechanism.synthetic, so expect a one-time regrouping of existing crash issues as your app adopts this version. by @github-actions in #5596

Dependencies ⬆️

Deps

chore(deps): update Native SDK to v0.16.8 by @github-actions in #5600
chore(deps): raise the OpenTelemetry floor to 1.12.0 by @jamescrosswell in #5588
chore(deps): update Java SDK to v8.57.0 by @github-actions in #5590
chore(deps): update CLI to v3.8.0 by @github-actions in #5591
chore(deps): update Java SDK to v8.56.0 by @github-actions in #5562
chore(deps): update Cocoa SDK to v9.28.0 by @github-actions in #5561
chore(deps): update Native SDK to v0.16.6 by @github-actions in #5563

Other

test: add ASP.NET Core blocking detection integration tests by @z0rimo in #5578

6.11.0

Features ✨

feat: Expose StringOrRegex discriminator by @limbonaut in #5543
feat: Provide the exception in the Hint passed to BeforeBreadcrumb by @jamescrosswell in #5523

Fixes 🐛

fix: isolate TracesSampler callback failures by @elkampu in #5545
fix: validate envelope item payload lengths before allocating a read buffer by @thaildhe172591 in #5541
fix: discard corrupt cache files instead of looping on them (resulting in an OOM exception) by @lgarczyn in #5507

Dependencies ⬆️

Deps

chore(deps): update Cocoa SDK to v9.27.0 by @github-actions in #5539
chore(deps): update Java SDK to v8.55.0 by @github-actions in #5538
chore(deps): update Native SDK to v0.16.5 by @github-actions in #5532

6.10.0

Features ✨

feat: Logs sent via SentrySdk.Logger no longer require EnableLogs by @jamescrosswell in #5512
feat: SentryOptions.EnableMetrics is obsolete and ignored by @jamescrosswell in #5509

Fixes 🐛

fix: Prevent managed exceptions from leaking as NSExceptions, resulting in duplicate exception capture on iOS by @jpnurmi in #5525
fix(profiling): release the EventPipe session when the SDK shuts down by @jamescrosswell in #5470
fix: Memory leak in Sentry.Profiling due to EventLog interning tables growing indefinitely by @jamescrosswell in #5503
fix: Attachments not being sent properly when Spotlight is enabled by @XAN9xXx in #5511
fix: Heap dump files are now deleted from disk once they have been sent to Sentry by @XAN9xXx in #5481
fix: populate sentry.sdk.name and sentry.sdk.version for console apps by @zkasuran in #5483

Dependencies ⬆️

Deps

chore(deps): update Java SDK to v8.54.0 by @github-actions in #5517
chore(deps): update Cocoa SDK to v9.26.1 by @github-actions in #5516
chore(deps): update CLI to v3.7.0 by @github-actions in #5520
chore(deps): update Native SDK to v0.16.4 by @github-actions in #5508
chore(deps): update Java SDK to v8.53.0 by @github-actions in #5484

Other

deps: update perfview (removes the .il suffix from profile module names) by @jamescrosswell in #5502

Commits viewable in compare view.

Updated SkiaSharp from 4.151.1 to 4.153.1.

Updated SkiaSharp.NativeAssets.Linux.NoDependencies from 4.151.1 to 4.153.1.

Updated StackExchange.Redis from 3.1.31 to 3.3.1.

Release notes

Sourced from StackExchange.Redis's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated System.IO.Packaging from 10.0.11 to 10.0.12.

Release notes

Sourced from System.IO.Packaging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Bumps AWSSDK.S3 from 4.0.102.4 to 4.0.104.1 Bumps coverlet.collector from 10.0.1 to 10.1.0 Bumps Google.Apis.Auth from 1.76.0 to 1.77.0 Bumps MailKit from 4.17.0 to 4.18.1 Bumps Markdig from 1.3.2 to 1.4.0 Bumps Microsoft.AspNetCore.OpenApi from 10.0.11 to 10.0.12 Bumps Microsoft.NET.Test.Sdk from 18.9.0 to 18.10.1 Bumps MimeKit from 4.17.0 to 4.18.1 Bumps OpenIddict.AspNetCore from 7.6.1 to 7.7.1 Bumps OpenIddict.EntityFrameworkCore from 7.6.1 to 7.7.1 Bumps Sentry.AspNetCore from 6.9.0 to 6.12.0 Bumps SkiaSharp from 4.151.1 to 4.153.1 Bumps SkiaSharp.NativeAssets.Linux.NoDependencies from 4.151.1 to 4.153.1 Bumps StackExchange.Redis from 3.1.31 to 3.3.1 Bumps System.IO.Packaging from 10.0.11 to 10.0.12 --- updated-dependencies: - dependency-name: AWSSDK.S3 dependency-version: 4.0.104 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-deps - dependency-name: coverlet.collector dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: coverlet.collector dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: Google.Apis.Auth dependency-version: 1.77.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: MailKit dependency-version: 4.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: Markdig dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-deps - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: MimeKit dependency-version: 4.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: OpenIddict.AspNetCore dependency-version: 7.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: OpenIddict.EntityFrameworkCore dependency-version: 7.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: Sentry.AspNetCore dependency-version: 6.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: SkiaSharp dependency-version: 4.153.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: SkiaSharp.NativeAssets.Linux.NoDependencies dependency-version: 4.153.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: StackExchange.Redis dependency-version: 3.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: System.IO.Packaging dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-deps ... Signed-off-by: dependabot[bot] <support@github.com>

…2f0e24fa8

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 1, 2026

dependabot Bot requested a review from kenhayward as a code owner October 1, 2026 11:45

dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Oct 1, 2026

dependabot Bot changed the title ~~Bump the nuget-deps group with 15 updates~~ Bump AWSSDK.S3 and 14 others Oct 1, 2026

dependabot Bot force-pushed the dependabot/nuget/src/Diariz.Api/nuget-deps-e2f0e24fa8 branch from 5613ac2 to 05adfef Compare October 1, 2026 19:04

dependabot Bot force-pushed the dependabot/nuget/src/Diariz.Api/nuget-deps-e2f0e24fa8 branch from 05adfef to fd8c9ec Compare October 1, 2026 20:12

kenhayward mentioned this pull request Oct 1, 2026

release: 0.273.3 - dependency updates #793

Merged

Merge branch 'main' into dependabot/nuget/src/Diariz.Api/nuget-deps-e…

cf25714

…2f0e24fa8

kenhayward merged commit 6088f55 into main Oct 1, 2026
17 checks passed

kenhayward deleted the dependabot/nuget/src/Diariz.Api/nuget-deps-e2f0e24fa8 branch October 1, 2026 21:32

Navigation Menu

Repository navigation

Bump AWSSDK.S3 and 14 others - #780

Bump AWSSDK.S3 and 14 others#780
kenhayward merged 2 commits into
mainfrom
dependabot/nuget/src/Diariz.Api/nuget-deps-e2f0e24fa8

dependabot Bot commented on behalf of github Oct 1, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

10.1.0

Improvements

Fixed

1.77.0

1.4.0

Changes

✨ New Features

🐛 Bug Fixes

🚀 Enhancements

🏭 Tests

📦 Dependencies

🧰 Misc

18.10.1

What's Changed

18.10.0

What's Changed

7.7.1

7.7.0

7.7.1

7.7.0

6.12.0

Features ✨

Fixes 🐛

Dependencies ⬆️

Deps

Other

6.11.1

Fixes 🐛

Dependencies ⬆️

Deps

Other

6.11.0

Features ✨

Fixes 🐛

Dependencies ⬆️

Deps

6.10.0

Features ✨

Fixes 🐛

Dependencies ⬆️

Deps

Other

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Oct 1, 2026 •

edited

Loading