deps: Bump the microsoft-packages group with 5 updates #39

dependabot · 2025-12-15T09:32:05Z

Updated Microsoft.ApplicationInsights.AspNetCore from 2.22.0 to 2.23.0.

Release notes

Sourced from Microsoft.ApplicationInsights.AspNetCore's releases.

2.23.0

no changes since beta.

2.23.0-beta1

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.8 to 8.0.22.

Update branding to 8.0.18 by @vseanreesermsft in Update branding to 8.0.18 dotnet/aspnetcore#62241
[release/8.0] Update Alpine helix references by @github-actions in [release/8.0] Update Alpine helix references dotnet/aspnetcore#62243
[release/8.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 dotnet/aspnetcore#62201
[8.0] Delete src/arcade directory by @akoeplinger in [8.0] Delete src/arcade directory dotnet/aspnetcore#61994
[Backport 8.0] [IIS] Manually parse exe bitness (#61894) by @BrennanConroy in [Backport 8.0] [IIS] Manually parse exe bitness (#61894) dotnet/aspnetcore#62037
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#62006
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61944
[release/8.0] Associate tagged keys with entries so replacements are not evicted by @github-actions in [release/8.0] Associate tagged keys with entries so replacements are not evicted dotnet/aspnetcore#62247
[release/8.0] Block test that is failing after switching to latest-chrome by @github-actions in [release/8.0] Block test that is failing after switching to latest-chrome dotnet/aspnetcore#62284
backport(net8.0): http.sys on-demand TLS client hello retrieval by @DeagleGross in backport(net8.0): http.sys on-demand TLS client hello retrieval dotnet/aspnetcore#62290
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#62302

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17 Bug Fixes

Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#61623)
The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

Update dependencies from dotnet/arcade (#61832)
This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.
Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#61761)
The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

Update branding to 8.0.17 (#61830)
The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.
Merging internal commits for release/8.0 (#61924)
This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

Update branding to 8.0.11 by @vseanreesermsft in Update branding to 8.0.11 dotnet/aspnetcore#58198
[release/8.0] (deps): Bump src/submodules/googletest from ff233bd to 6dae7eb by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from ff233bd to 6dae7eb dotnet/aspnetcore#58180
[release/8.0] Add explicit conversion for value-type returning handlers with filters by @captainsafia in [release/8.0] Add explicit conversion for value-type returning handlers with filters dotnet/aspnetcore#57966
[release/8.0] Stop using Mac 11 in Helix by @wtgodbe in [release/8.0] Stop using Mac 11 in Helix dotnet/aspnetcore#58063
[release/8.0] Enable TSA/Policheck by @github-actions in [release/8.0] Enable TSA/Policheck dotnet/aspnetcore#58124
[release/8.0] (deps): Bump src/submodules/MessagePack-CSharp from ecc4e18 to 9511905 by @dependabot in [release/8.0] (deps): Bump src/submodules/MessagePack-CSharp from ecc4e18 to 9511905 dotnet/aspnetcore#58179
[Backport] Http.Sys: Clean up Request parsing errors by @BrennanConroy in [Backport] Http.Sys: Clean up Request parsing errors dotnet/aspnetcore#57819
[release/8.0] Update the Microsoft.Identity.Web versions used by project templates by @halter73 in [release/8.0] Update the Microsoft.Identity.Web versions used by project templates dotnet/aspnetcore#58229
Add registry search for upgrade policy keys, update dependencies from Arcade by @dotnet-maestro in Add registry search for upgrade policy keys, update dependencies from Arcade dotnet/aspnetcore#58278
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#58300
[release/8.0] Remove ProviderKey from Hosting Bundle by @github-actions in [release/8.0] Remove ProviderKey from Hosting Bundle dotnet/aspnetcore#58294
[release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#58352
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#58347
[release/8.0] Improve dev-certs export error message by @amcasey in [release/8.0] Improve dev-certs export error message dotnet/aspnetcore#58470
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#58474

Full Changelog: dotnet/aspnetcore@v8.0.10...v8.0.11

8.0.10

Release

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.NewtonsoftJson from 8.0.8 to 8.0.22.

Update branding to 8.0.18 by @vseanreesermsft in Update branding to 8.0.18 dotnet/aspnetcore#62241
[release/8.0] Update Alpine helix references by @github-actions in [release/8.0] Update Alpine helix references dotnet/aspnetcore#62243
[release/8.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 dotnet/aspnetcore#62201
[8.0] Delete src/arcade directory by @akoeplinger in [8.0] Delete src/arcade directory dotnet/aspnetcore#61994
[Backport 8.0] [IIS] Manually parse exe bitness (#61894) by @BrennanConroy in [Backport 8.0] [IIS] Manually parse exe bitness (#61894) dotnet/aspnetcore#62037
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#62006
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61944
[release/8.0] Associate tagged keys with entries so replacements are not evicted by @github-actions in [release/8.0] Associate tagged keys with entries so replacements are not evicted dotnet/aspnetcore#62247
[release/8.0] Block test that is failing after switching to latest-chrome by @github-actions in [release/8.0] Block test that is failing after switching to latest-chrome dotnet/aspnetcore#62284
backport(net8.0): http.sys on-demand TLS client hello retrieval by @DeagleGross in backport(net8.0): http.sys on-demand TLS client hello retrieval dotnet/aspnetcore#62290
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#62302

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17 Bug Fixes

Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#61623)
The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

Update dependencies from dotnet/arcade (#61832)
This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.
Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#61761)
The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

Update branding to 8.0.17 (#61830)
The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.
Merging internal commits for release/8.0 (#61924)
This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

Update branding to 8.0.11 by @vseanreesermsft in Update branding to 8.0.11 dotnet/aspnetcore#58198
[release/8.0] (deps): Bump src/submodules/googletest from ff233bd to 6dae7eb by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from ff233bd to 6dae7eb dotnet/aspnetcore#58180
[release/8.0] Add explicit conversion for value-type returning handlers with filters by @captainsafia in [release/8.0] Add explicit conversion for value-type returning handlers with filters dotnet/aspnetcore#57966
[release/8.0] Stop using Mac 11 in Helix by @wtgodbe in [release/8.0] Stop using Mac 11 in Helix dotnet/aspnetcore#58063
[release/8.0] Enable TSA/Policheck by @github-actions in [release/8.0] Enable TSA/Policheck dotnet/aspnetcore#58124
[release/8.0] (deps): Bump src/submodules/MessagePack-CSharp from ecc4e18 to 9511905 by @dependabot in [release/8.0] (deps): Bump src/submodules/MessagePack-CSharp from ecc4e18 to 9511905 dotnet/aspnetcore#58179
[Backport] Http.Sys: Clean up Request parsing errors by @BrennanConroy in [Backport] Http.Sys: Clean up Request parsing errors dotnet/aspnetcore#57819
[release/8.0] Update the Microsoft.Identity.Web versions used by project templates by @halter73 in [release/8.0] Update the Microsoft.Identity.Web versions used by project templates dotnet/aspnetcore#58229
Add registry search for upgrade policy keys, update dependencies from Arcade by @dotnet-maestro in Add registry search for upgrade policy keys, update dependencies from Arcade dotnet/aspnetcore#58278
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#58300
[release/8.0] Remove ProviderKey from Hosting Bundle by @github-actions in [release/8.0] Remove ProviderKey from Hosting Bundle dotnet/aspnetcore#58294
[release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#58352
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#58347
[release/8.0] Improve dev-certs export error message by @amcasey in [release/8.0] Improve dev-certs export error message dotnet/aspnetcore#58470
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#58474

Full Changelog: dotnet/aspnetcore@v8.0.10...v8.0.11

8.0.10

Release

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 8.0.8 to 8.0.22.

[release/8.0] Merge release/8.0 => release/8.0-staging by @cincuranet in [release/8.0] Merge release/8.0 => release/8.0-staging dotnet/efcore#36197
Update branding to 8.0.20 by @vseanreesermsft in Update branding to 8.0.20 dotnet/efcore#36497
[release/8.0] Dispose related readers in GroupBySplitQueryingEnumerable (#36484) by @roji in [release/8.0] Dispose related readers in GroupBySplitQueryingEnumerable (#36484) dotnet/efcore#36489
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/efcore#36512
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/arcade dotnet/efcore#36533
[release/8.0] Merge release/8.0-staging to release/8.0 by @cincuranet in [release/8.0] Merge release/8.0-staging to release/8.0 dotnet/efcore#36531

Full Changelog: dotnet/efcore@v8.0.19...v8.0.20

8.0.17 Dependency Updates

Update dependencies from dotnet/arcade (#36085)
Updates the project's dependencies using the latest versions from the dotnet/arcade repository. This ensures that the build infrastructure and related tooling are up to date, which can bring in important bug fixes, security patches, and improvements from upstream.

Miscellaneous

Update branding to 8.0.17 (#36043)
Updates the internal version branding to 8.0.17. This change ensures that the product and its packages correctly reflect the new release version, helping users and developers identify the build.
Merging internal commits for release/8.0 (#36080)
Integrates various internal commits into the release/8.0 branch. This merge brings together important updates and ensures the release branch is synchronized with recent internal development, maintaining consistency and stability for the release.

Update branding to 8.0.11 by @vseanreesermsft in Update branding to 8.0.11 dotnet/efcore#34807
[release/8.0] Remove referencing indexes when reconfiguring a property as a navigation by @AndriySvyryd in [release/8.0] Remove referencing indexes when reconfiguring a property as a navigation dotnet/efcore#34651
[release/8.0] Update dependencies by @AndriySvyryd in [release/8.0] Update dependencies dotnet/efcore#34822
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/efcore#34880
[release/8.0] Update Microsoft.Extensions.HostFactoryResolver.Sources version by @AndriySvyryd in [release/8.0] Update Microsoft.Extensions.HostFactoryResolver.Sources version dotnet/efcore#34884
[release/8.0] Don't execute empty batches by @AndriySvyryd in [release/8.0] Don't execute empty batches dotnet/efcore#34882
[release/8.0] Avoid infinite recursion on identifying shadow FKs by @AndriySvyryd in [release/8.0] Avoid infinite recursion on identifying shadow FKs dotnet/efcore#34891
Merging internal commits for release/8.0 by @AndriySvyryd in Merging internal commits for release/8.0 dotnet/efcore#34902
[release/8.0] Keep parameter values out IMemoryCache in RelationalCommandCache by @roji in [release/8.0] Keep parameter values out IMemoryCache in RelationalCommandCache dotnet/efcore#34908

Full Changelog: dotnet/efcore@v8.0.10...v8.0.11

8.0.10

Release

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.StackExchangeRedis from 8.0.8 to 8.0.22.

Update branding to 8.0.18 by @vseanreesermsft in Update branding to 8.0.18 dotnet/aspnetcore#62241
[release/8.0] Update Alpine helix references by @github-actions in [release/8.0] Update Alpine helix references dotnet/aspnetcore#62243
[release/8.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 dotnet/aspnetcore#62201
[8.0] Delete src/arcade directory by @akoeplinger in [8.0] Delete src/arcade directory dotnet/aspnetcore#61994
[Backport 8.0] [IIS] Manually parse exe bitness (#61894) by @BrennanConroy in [Backport 8.0] [IIS] Manually parse exe bitness (#61894) dotnet/aspnetcore#62037
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#62006
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61944
[release/8.0] Associate tagged keys with entries so replacements are not evicted by @github-actions in [release/8.0] Associate tagged keys with entries so replacements are not evicted dotnet/aspnetcore#62247
[release/8.0] Block test that is failing after switching to latest-chrome by @github-actions in [release/8.0] Block test that is failing after switching to latest-chrome dotnet/aspnetcore#62284
backport(net8.0): http.sys on-demand TLS client hello retrieval by @DeagleGross in backport(net8.0): http.sys on-demand TLS client hello retrieval dotnet/aspnetcore#62290
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#62302

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17 Bug Fixes

Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#61623)
The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

Update dependencies from dotnet/arcade (#61832)
This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.
Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#61761)
The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

Update branding to 8.0.17 (#61830)
The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.
Merging internal commits for release/8.0 (#61924)
This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

Update branding to 8.0.11 by @vseanreesermsft in Update branding to 8.0.11 dotnet/aspnetcore#58198
[release/8.0] (deps): Bump src/submodules/googletest from ff233bd to 6dae7eb by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from ff233bd to 6dae7eb dotnet/aspnetcore#58180
[release/8.0] Add explicit conversion for value-type...

Description has been truncated

Bumps Microsoft.ApplicationInsights.AspNetCore from 2.22.0 to 2.23.0 Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.8 to 8.0.22 Bumps Microsoft.AspNetCore.Mvc.NewtonsoftJson from 8.0.8 to 8.0.22 Bumps Microsoft.EntityFrameworkCore from 8.0.8 to 8.0.22 Bumps Microsoft.Extensions.Caching.StackExchangeRedis from 8.0.8 to 8.0.22 --- updated-dependencies: - dependency-name: Microsoft.ApplicationInsights.AspNetCore dependency-version: 2.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: microsoft-packages - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 8.0.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-packages - dependency-name: Microsoft.AspNetCore.Mvc.NewtonsoftJson dependency-version: 8.0.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-packages - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 8.0.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-packages - dependency-name: Microsoft.Extensions.Caching.StackExchangeRedis dependency-version: 8.0.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-packages ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-12-15T09:32:07Z

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot bot assigned msftsean Dec 15, 2025

dependabot bot mentioned this pull request Dec 15, 2025

deps: Bump the microsoft-packages group with 5 updates #38

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps: Bump the microsoft-packages group with 5 updates #39

deps: Bump the microsoft-packages group with 5 updates #39

Uh oh!

dependabot bot commented on behalf of github Dec 15, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Dec 15, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

deps: Bump the microsoft-packages group with 5 updates #39

Are you sure you want to change the base?

deps: Bump the microsoft-packages group with 5 updates #39

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 15, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

2.23.0

2.23.0-beta1

8.0.22

What's Changed

8.0.21

What's Changed

8.0.20

What's Changed

8.0.18

What's Changed

8.0.17

Bug Fixes

Dependency Updates

Miscellaneous

8.0.16

What's Changed

8.0.15

What's Changed

8.0.14

What's Changed

8.0.13

What's Changed

8.0.12

What's Changed

8.0.11

What's Changed

8.0.10

8.0.22

What's Changed

8.0.21

What's Changed

8.0.20

What's Changed

8.0.18

What's Changed

8.0.17

Bug Fixes

Dependency Updates

Miscellaneous

8.0.16

What's Changed

8.0.15

What's Changed

8.0.14

What's Changed

8.0.13

What's Changed

8.0.12

What's Changed

8.0.11

What's Changed

8.0.10

8.0.22

What's Changed

8.0.21

What's Changed

8.0.20

What's Changed

8.0.17

Dependency Updates

Miscellaneous

8.0.16

What's Changed

8.0.15

What's Changed

8.0.14

What's Changed

8.0.13

What's Changed

8.0.12

What's Changed

8.0.11

What's Changed

dependabot bot commented on behalf of github Dec 15, 2025 •

edited

Loading