chore(backend): Bump Azure.Storage.Blobs and 13 others

[dependabot]

Updated Azure.Storage.Blobs from 12.29.0 to 12.29.1.

Release notes

Sourced from Azure.Storage.Blobs's releases.

12.29.1

12.29.1 (2026-06-23)

Bugs Fixed

• Fixed an issue where the GenerateSasUri and GenerateUserDelegationSasUri convenience methods on blob clients did not honor the RequestHeaders and RequestQueryParameters properties, and where GenerateUserDelegationSasUri did not honor DelegatedUserObjectId, set on the supplied BlobSasBuilder.
• Fixed an issue where structured-message Uploads with checksum validation could fail with a ArgumentOutOfRangeException for empty content

Commits viewable in compare view.

Updated dotnet-ef from 10.0.8 to 10.0.10.

Release notes

Sourced from dotnet-ef's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.8 to 10.0.10.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Identity.EntityFrameworkCore from 10.0.8 to 10.0.10.

Release notes

Sourced from Microsoft.AspNetCore.Identity.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.8 to 10.0.10.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.8 to 10.0.10.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.SignalR.Client from 10.0.8 to 10.0.10.

Release notes

Sourced from Microsoft.AspNetCore.SignalR.Client's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.8 to 10.0.10.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.8 to 10.0.10.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.6.0 to 18.8.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.8.1

What's Changed

• Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) by @​nohwnd in Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) microsoft/vstest#16281

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0

What's Changed

• Migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) by @​nohwnd in feat: migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) microsoft/vstest#15687
  • For more detail refer to https://devblogs.microsoft.com/dotnet/vs-test-is-removing-its-newtonsoft-json-dependency/
• Create source-only filter package by @​Youssef1313 in Create source-only filter package microsoft/vstest#15638
• Add ARM64 msdia140.dll support to test platform packages by @​nohwnd in Cherry-pick: Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15692
• Fix mutex cleanup crash on macOS/Linux by @​nohwnd in Fix mutex cleanup crash on macOS/Linux microsoft/vstest#15684
• Restrict artifact temp directory permissions on Unix by @​nohwnd in Restrict artifact temp directory permissions on Unix microsoft/vstest#15729
• Add support for filtering uncategorized tests with TestCategory=None by @​Evangelink in Add support for filtering uncategorized tests with TestCategory=None microsoft/vstest#15727
• Fix SCI binding failure in DTA hosts (main) by @​nohwnd in Fix SCI binding failure in DTA hosts (main) microsoft/vstest#15724
• Fix HTML logger parallel file collision by @​nohwnd in [fix] Fix HTML logger parallel file collision microsoft/vstest#15435
• Improve error message when testhost cannot be found by @​nohwnd in [fix] Improve error message when testhost cannot be found microsoft/vstest#16053
• Fix HTML logger exception on invalid XML chars in test display names by @​nohwnd in [fix] Fix HTML logger exception on invalid XML chars in test display names microsoft/vstest#16051

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

18.7.0

What's Changed

• Add ARM64 msdia140.dll support to test platform packages by @​jamesmcroft in Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15689
• Update System.Memory from 4.5.5 to 4.6.3 by @​nohwnd in Update System.Memory from 4.5.5 to 4.6.3 microsoft/vstest#15706

New Contributors

• @​jamesmcroft made their first contribution in Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15689

Full Changelog: microsoft/vstest@v18.6.0...v18.7.0

Commits viewable in compare view.

Updated Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.2 to 10.0.3.

Release notes

Sourced from Npgsql.EntityFrameworkCore.PostgreSQL's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Npgsql.EntityFrameworkCore.PostgreSQL.NetTopologySuite from 10.0.2 to 10.0.3.

Release notes

Sourced from Npgsql.EntityFrameworkCore.PostgreSQL.NetTopologySuite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated OpenTelemetry.Api from 1.15.3 to 1.17.0.

Release notes

Sourced from OpenTelemetry.Api's releases.

1.17.0

For highlights and announcements pertaining to this release see: Release Notes > 1.17.0.

The following changes are from the previous release 1.17.0-rc.1.

• NuGet: OpenTelemetry v1.17.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.17.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.17.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Console v1.17.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.InMemory v1.17.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.17.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Zipkin v1.17.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Extensions.Hosting v1.17.0

  No notable changes.

... (truncated)

1.17.0-rc.1

The following changes are from the previous release 1.16.0.

• NuGet: OpenTelemetry v1.17.0-rc.1

  • Fixed a metric point reclaim data race on CPU ARM architectures.
    (#​7401)

  • The library is now marked as trim and AOT compatible.
    (#​7441)

  • Replaced the vendored copy of
    EnvironmentVariablesConfigurationProvider with a direct
    Microsoft.Extensions.Configuration.EnvironmentVariables package dependency.
    Consumers gain automatic pickup of upstream bug fixes and security patches;
    no public API or behavioural change.
    (#​7146)

  • Added a verbose OpenTelemetry-Sdk self-diagnostics event that is emitted
    when an activity is dropped because its local (in-process) parent is not
    recorded.
    (#​7427)

  • Added support for a Schema URL on Resource instances.
    (#​7472)

  • Fixed a metric storage leak that occurred when meters and instruments were
    repeatedly created and disposed.
    (#​7466)

  • Added ExcludedTagKeys property to MetricStreamConfiguration to support
    excluding specific tag keys from metric streams.
    (#​7373)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.17.0-rc.1

  • Fixed TraceContextPropagator to normalize empty tracestate header values
    to null when extracting trace context.
    (#​7407,
    #​7433)

  • The library is now marked as trim and AOT compatible.
    (#​7441)

  • Experimental (pre-release builds only): Updated EnvironmentVariableCarrier.Get
    to read only the normalized environment variable name, following the updated
    environment variable carrier specification.
    Non-normalized carrier keys are no longer matched, even when they would
    normalize to the requested key.
    ... (truncated)

1.17.0-beta.1

The following changes are from the previous release 1.16.0-beta.1.

• NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.17.0-beta.1

  • Added a verbose-level diagnostic event for ignored metrics.
    (#​7429)

  • The library is now marked as trim and AOT compatible.
    (#​7441)

  • Fix double unit suffixes in metric names when using OpenMetrics.
    (#​7454)

  • Fix incorrect handling of leading digits in metric names for OpenMetrics.
    (#​7454)

  • Add PrometheusAspNetCoreOptions.ScopeInfoEnabled property to enable or
    disable scope labels in Prometheus metrics. Defaults to true.
    (#​7436)

  • Added support for the dots and values Prometheus UTF-8 name escaping
    schemes when negotiated via the Accept header.
    (#​7439)

  • Add PrometheusAspNetCoreOptions.TargetInfoEnabled property to enable or
    disable the target_info metric in Prometheus metrics. Defaults to true.
    (#​7438)

  • Added support for the allow-utf-8 Prometheus UTF-8 name escaping scheme
    when negotiated via the Accept header.
    (#​7440)

  • Add PrometheusAspNetCoreOptions.ResourceConstantLabels property to select
    resource attributes to add to each metric as constant labels. Defaults to
    null (no resource attributes are added as metric labels).
    (#​7471)

  • Add PrometheusAspNetCoreOptions.MaxScrapeResponseSizeBytes to configure
    the maximum size of a scrape response. The default is now ~166 MiB.
    (#​7487)

  • A scrape whose serialized output exceeds the maximum scrape response size
    limit now responds with HTTP 500.
    (#​7487)

  • Fixed the Prometheus text exposition format emitting redundant comments.
    (#​7491)

  • Made Accept header content negotiation consistent with the
    PrometheusHttpListener endpoint.
    ... (truncated)

1.16.0

For highlights and announcements pertaining to this release see: Release Notes > 1.16.0.

The following changes are from the previous release 1.16.0-rc.1.

• NuGet: OpenTelemetry v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Console v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.InMemory v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Zipkin v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Extensions.Hosting v1.16.0

  No notable changes.

... (truncated)

1.16.0-rc.1

The following changes are from the previous release 1.15.3.

• NuGet: OpenTelemetry v1.16.0-rc.1

  • Stop validating View-provided metric stream Name against the instrument
    name syntax, per
    spec clarification.
    (#​7300)

  • Fix incorrect validation of OTEL_BSP_* and OTEL_BLRP_* environment
    variables.
    (#​7187)

  • Fix observable instrument callbacks running once per reader instead of
    once per collection cycle.
    (#​7188)

  • Added exception safety for user-supplied ExemplarReservoir implementations.
    Exceptions thrown from Offer are now caught and logged rather than propagating
    out of Counter.Add/Histogram.Record.
    (#​7277)

  • Update OpenTelemetrySdkEventSource to support the W3C randomness flag.
    (#​7301)

  • Added ObservedTimestamp property to LogRecord.
    (#​6979)

  • Breaking Change Explicit histogram boundaries no longer allow more than
    10 million values.
    (#​7165)

  • Fixed a circular reference which could cause a LoggerProvider to fail to
    resolve when one of its dependencies depends on ILogger or ILoggerFactory.
    As part of this fix the LoggerProvider resolved from dependency injection
    is now created lazily when the first logger is created rather than when
    ILoggerProvider or ILoggerFactory is resolved. A consequence is that any
    invalid configuration now surfaces when the first log record is written instead
    of when the logging services are resolved.
    (#​7308)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.16.0-rc.1

  • Experimental (pre-release builds only):
    Add support for using environment variables as context propagation carriers.
    (#​7174)

  • Fix BaggagePropagator to correctly follow Key and Value Encoding rules as per
    ... (truncated)

1.16.0-beta.1

The following changes are from the previous release 1.15.3-beta.1.

• NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.16.0-beta.1

  • Fixed scrape response cache freshness using monotonic time so it is not
    affected by NTP system clock adjustments.
    (#​7253)

  • Breaking Change Removed DisableTimestamp property from
    PrometheusAspNetCoreOptions.
    (#​7176)

  • Fixed the serialization of NaN, PositiveInfinity, and NegativeInfinity
    values in Prometheus metrics to be compliant with the specification.
    (#​7179)

  • Fixed loss of precision when serializing double and float values in
    Prometheus metrics to be compliant with the specification by using 17
    significant digits to represent such values.
    (#​7179)

  • Fix non-ASCII characters in metric names and unit strings not being sanitized
    correctly during Prometheus serialization.
    (#​7184)

  • Fix case where reader tracking could be reset while readers were still active.
    (#​7190)

  • Improve Accept header handling for format negotiation so OpenMetrics is
    selected correctly by considering whitespace and q weights.
    (#​7208)

  • Emit OpenMetrics exemplars for counters and histogram buckets.
    (#​7222)

  • Fix incorrect handling of untyped metrics when using OpenMetrics format.
    (#​7219)

  • Fix Prometheus/OpenMetrics serialization to emit metric and label names
    containing _ instead of dropping them and prefixing leading digits.
    Invalid characters are replaced with _ instead of being dropped.
    (#​7209)

  • Add escaping=underscores to the Accept header handling for content
    negotiation so OpenMetrics are handled correctly.
    (#​7209)

  • Omit histogram _sum and _count in OpenMetrics when negative bucket
    thresholds are present.
    (#​7221)
    ... (truncated)

Commits viewable in compare view.

Updated Scalar.AspNetCore from 2.14.14 to 2.16.15.

Release notes

Sourced from Scalar.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
collaboration-in-local-communities	Ignored		Jul 19, 2026 2:28pm

[dependabot]

Superseded by #338.