deps: Bump AngleSharp and 25 others by dependabot[bot] · Pull Request #51 · munkycdev/nornis

dependabot · 2026-10-19T21:18:05Z

Updated AngleSharp from 1.8.0 to 1.8.5.

Release notes

Sourced from AngleSharp's releases.

1.8.5

Released on Thursday, October 15 2026

What's Changed

Fixed select selectedness and option dirtiness across mutations, reset and cloning (#1384) @PrzemyslawKlys
Fixed fragment parsing losing the context document's quirks and limited-quirks modes (#1382) @PrzemyslawKlys
Fixed :lang() inheritance and namespace precedence in HTML and foreign content (#1379) @PrzemyslawKlys
Fixed URLSearchParams cutting values at a second = such as token=abc== (#1385) @NotAFlightRisk
Released 1.8.5 by @FlorianRappl in Release 1.8.5 AngleSharp/AngleSharp#1386

Full Changelog: AngleSharp/AngleSharp@v1.8.4...v1.8.5

1.8.4

Released on Wednesday, October 7 2026

What's Changed

Improved selection when parsing <select> (#1364) @PrzemyslawKlys
Updated constraint validation eligibility of fieldset and output elements (breaking behavior change) (#1373) @PrzemyslawKlys
Fixed change of <select> value (IsSelected) (#1365) @PrzemyslawKlys
Fixed indeterminate input state when cloning (#1367) @PrzemyslawKlys
Fixed <select> form submission including unselected options and options in disabled groups (#1366) @PrzemyslawKlys
Fixed option indexes inside option groups (#1368) @PrzemyslawKlys
Fixed selecting an option leaving other single-select options selected (#1372) @PrzemyslawKlys
Fixed validity checks for controls excluded from validation (#1370) @PrzemyslawKlys
Fixed template content document when adopting a subtree (#1374) @PrzemyslawKlys
Fixed checking a radio leaving other group members checked (#1371) @PrzemyslawKlys
Fixed parsed radio checkedness depending on attribute order @PrzemyslawKlys
Fixed SVG annotation-xml elements being treated as HTML integration points @NotAFlightRisk
Fixed required radio validation across group members (#1369) @PrzemyslawKlys
Released 1.8.4 by @FlorianRappl in Release 1.8.4 AngleSharp/AngleSharp#1377

New Contributors

@NotAFlightRisk made their first contribution in Don't treat an SVG annotation-xml as an HTML integration point AngleSharp/AngleSharp#1376

Full Changelog: AngleSharp/AngleSharp@v1.8.3...v1.8.4

1.8.3

Released on Wednesday, September 30 2026

What's Changed

Improved cancellation of queued timer callbacks (#1357) @PrzemyslawKlys
Improved configuration / setup performance (#1360) @PrzemyslawKlys
Fixed form submission ignoring sandbox restrictions (#1358) @PrzemyslawKlys
Fixed <base> elements not following frozen document base URL and tree-order mutation rules (#1355, #1362)
Fixed native Unloading handlers subscribing to unloading instead of beforeunload (#1354) @PrzemyslawKlys
Added OnReset event to inform script hosts of native listener removals (#1356) @PrzemyslawKlys
Added pull-based HTML serialization stream (#1361) @PrzemyslawKlys
Released 1.8.3 by @FlorianRappl in Release 1.8.3 AngleSharp/AngleSharp#1363

New Contributors

@PrzemyslawKlys made their first contribution in Notify script hosts when native listeners reset AngleSharp/AngleSharp#1356

Full Changelog: AngleSharp/AngleSharp@v1.8.2...v1.8.3

1.8.2

Released on Friday, September 18 2026

What's Changed

Improved attribute selector serialization to write only the case-sensitivity modifier that was specified (#1351)
Improved id/name lookup on collections (document.forms["x"], form.elements["x"], ...) to enumerate the underlying sequence once instead of twice
Improved performance of form.elements / fieldset.elements by walking the tree directly (#1350)
Improved GetElementsByTagName / GetElementsByClassName traversal to stop double-scanning each element's children
Improved selector specificity (Selectors.Specificity, ComplexSelector.Specificity) to be computed once instead of recomputed on every read
Improved ListSelector.GetMatchingSelector to sort its selectors once instead of on every call
Improved performance of HTML tree construction by keeping mutation logic out of it (#1347)
Improved performance of DOM mutations by building a mutation record only when an observer will consume it (#1347)
Improved performance of parser attribute duplication check
Fixed Document.Forms allocating a new collection instance per read, contradicting its own [DomSameObject] contract
Fixed classList and the other reflected token lists writing their content attribute without running the attribute change steps or queueing a mutation record
Fixed clearing a reflected boolean attribute such as disabled removing it without running the attribute change steps or queueing a mutation record
Fixed vulnerability via SVG style serialization (GHSA-cgp3-27rh-pcp2)
Fixed a StackOverflowException when parsing a document with deeply nested unclosed <template> elements
Added Document.MutationVersion, a synchronous counter of DOM mutations that a parse leaves unchanged (#1344, #1347)
Released 1.8.2 by @FlorianRappl in Release 1.8.2 AngleSharp/AngleSharp#1353

New Contributors

@RichardJansma made their first contribution in Fix broken image download URLs in FAQ AngleSharp/AngleSharp#1352

Full Changelog: AngleSharp/AngleSharp@v1.8.1...v1.8.2

1.8.1

Released on Thursday, September 10 2026

What's Changed

Updated DoFocus and DoBlur to apply to form elements
Improved explicit form ownership to take precedence over ancestor forms for connected controls (#1323) @sebastienros
Fixed HTML hyperlink pseudo-classes omitting empty href and matching link elements (#1337) @sebastienros
Fixed HTML-namespace element creation losing local-name case (#1327) @sebastienros
Fixed :enabled incorrectly matching HTML links with nonempty href (#1324) @sebastienros
Fixed changing focus of elements
Released 1.8.1 by @FlorianRappl in Release 1.8.1 AngleSharp/AngleSharp#1343

New Contributors

@sebastienros made their first contribution in Fix HTML hyperlink pseudo-class classification AngleSharp/AngleSharp#1338

Full Changelog: AngleSharp/AngleSharp@v1.8.0...v1.8.1

Commits viewable in compare view.

Updated Azure.Messaging.ServiceBus from 7.20.2 to 7.21.0.

Release notes

Sourced from Azure.Messaging.ServiceBus's releases.

7.21.0 7.21.0 (2026-10-06)

Features Added

Added SqlFilterCount and CorrelationFilterCount properties to TopicRuntimeProperties, exposing the total number of SQL filters and correlation filters across all of a topic's subscriptions. These are populated by GetTopicRuntimePropertiesAsync and GetTopicsRuntimePropertiesAsync.
Added ServiceBusAdministrationClientOptions.ServiceVersion.V2024_05 and made it the default service version. The topic filter counts above are served by the 2024-05 service API version, so the administration client now sends api-version=2024-05 by default.
Added GetMessageSessionsAsync overloads on ServiceBusClient for queues and subscriptions. The no-filter overload returns the IDs of sessions that have active messages or session state, and the sessionStateUpdatedAfter overload returns session IDs whose session state was updated after the specified timestamp. Implements the com.microsoft:get-message-sessions AMQP management operation. (#58761)
Added opt-in support for non-exclusive session locking on ServiceBusSessionReceiver, allowing a session to be cooperatively taken over by another receiver. Set ServiceBusSessionReceiverOptions.EnableNonExclusiveSession to accept a session non-exclusively, then read the token from ServiceBusSessionReceiver.SessionLockToken and pass it as ServiceBusSessionReceiverOptions.SessionLockToken = Guid.Parse(token) to take that session over. ServiceBusSessionReceiver.IsSessionExclusive reports the mode the session was established under. Dispositions for a non-exclusive session are routed over the management link so that settlement keeps working across a takeover, which lowers settlement throughput compared to an exclusive session. This applies to ServiceBusSessionReceiver only; ServiceBusSessionProcessor continues to lock sessions exclusively. Accepting a session with EnableNonExclusiveSession set throws NotSupportedException when the endpoint declines it, either by refusing the request outright or by accepting it without assigning a lock token, which is how a caller detects whether the feature is available for a namespace. An endpoint that declines in some other way surfaces the exception its own error maps to. (#60060)

Bugs Fixed

Fixed retry classification for web socket failures with nested causes. On modern .NET, a transient network failure during a web socket connection attempt surfaces as a WebSocketException that wraps an HttpRequestException, which wraps the meaningful IOException or SocketException. The retry policy previously inspected only one level of nesting and treated these failures as terminal. The policy now unwraps nested wrapper exceptions to a bounded depth, so transient failures such as a connection reset use the configured retries. Terminal socket failures, such as host-not-found and host-unreachable, are not retried at any supported depth. A host-unreachable failure on an established connection is now terminal. Earlier versions retried it. (#61868)
Fixed a bug where canceling ServiceBusReceiver.CloseAsync left the receiver unable to close its own links. The receiver was marked as closed, and its set of locked messages disposed, before the cancellation was observed, so every later call to CloseAsync returned immediately without doing any work and the links stayed open until the owning ServiceBusClient was disposed. The receiver is now left open and closable when a close does not complete, so the operation can be retried. (#59309)

Other Changes

The default ServiceBusAdministrationClient service version is now 2024-05 (previously 2021-05). Existing operations are unaffected in behavior; the change is required to surface the new topic filter count properties.

Commits viewable in compare view.

Pinned Azure.Storage.Blobs at 12.30.1.

Release notes

Sourced from Azure.Storage.Blobs's releases.

12.30.1 12.30.1 (2026-10-05)

Bugs Fixed

Fixed AuthenticatedRegionCryptoStream.Dispose() to be idempotent and thread-safe, so the buffer it rents is no longer returned to the shared ArrayPool<byte> more than once when the stream is disposed repeatedly or concurrently. Returning the same array twice allowed unrelated callers to rent the same array instance and corrupt each other's data.

12.30.0 12.30.0 (2026-09-28)

Features Added

Includes all features from 12.30.0-beta.1 and 12.30.0-beta.2.

Commits viewable in compare view.

Updated bunit from 2.9.0 to 2.12.5.

Release notes

Sourced from bunit's releases.

2.12.5

Fixed

WrapperBase.WrappedElement could return null and throw NullReferenceException when an element was accessed concurrently with component re-renders. Reported by @psu-prog in #1937. Fixed by @Nacl-HCl.
DisposeComponentsAsync() could dispose nothing when the renderer's dispatcher was busy, e.g. with a timer calling InvokeAsync. Reported by @xfunc-tim-schneider in #1939. Fixed by @linkdotnet.
Markup generation and FindComponents could recurse until the test host crashed with a stack overflow when a render threw while instantiating a child component. Reported in #1935. Fixed by @linkdotnet.
Find() could keep returning DOM nodes from the previous render when a render, e.g. from a timer, happened while the nodes were parsed, causing UnknownEventHandlerIdException. Reported by @xfunc-tim-schneider in #1938. Fixed by @linkdotnet.

2.11.3

Fixed

InvokeOnSpacerBeforeVisible now uses 4 parameters on .NET 11.0. Reported by @vnbaaij in #1915. Fixed by @vnbaaij in #1919.
A JSInterop timeout elapsing while a result was set could crash the test host with InvalidOperationException: Nullable object must have a value. Reported by @calebcwells in #1920. Fixed by @linkdotnet.

2.10.3

Fixed

BunitHtmlParser.Dispose() no longer throws InvalidOperationException: Collection was modified when a parse is in flight on another thread during test teardown. Reported by @thimobuchheister in #1892. Fixed by @linkdotnet.

Commits viewable in compare view.

Updated Markdig from 1.3.2 to 1.4.2.

Release notes

Sourced from Markdig's releases.

1.4.2

Changes

✨ New Features

Add IsAotCompatible for net8.0 and later targets (PR #963) by @StefanGreve

🐛 Bug Fixes

Fix setext heading line breaks and indented lazy quote lines (PR #964) by @wahidrizka
Fix setext underlines in block quotes and list items (PR #965) by @wahidrizka
Fix FindClosestBlock/FindBlockAtPosition with definition groups (#677) (PR #962) by @ybai08

Full Changelog: 1.4.1...1.4.2

_{Published with dotnet-releaser}

1.4.1

Changes

🐛 Bug Fixes

Fix definition list continuation consuming leading markers (PR #957) by @SparkUiX
Fix grid table open last cell taking a | from the next line (#494) (PR #958) by @dualfroz
Fix HTML blocks not ending at a line with only spaces or tabs (PR #960) by @wahidrizka
Fix empty list items being parsed as text after a paragraph (PR #961) by @wahidrizka
Fix definition lists requiring 3 spaces after the marker (PR #959) by @dualfroz
Fix CommonMark HTML block start character classes (d5462ae5)
Fix CommonMark closing-tag block starts and whitespace (05e638f9)
Fix empty list items with trailing marker whitespace (2fec2085)
Fix CommonMark inline HTML declarations (d33c703d)
Fix definition paragraphs inside tight lists (a998839f)
Fix concurrent spec generation in parallel builds (ccb9d859)

📚 Documentation

Update doc for definition-list continuation rules (b58e83b4)

Full Changelog: 1.4.0...1.4.1

_{Published with dotnet-releaser}

1.4.0

Changes

✨ New Features

Add strict GFM pipe table parsing mode (14cd25c7)

🐛 Bug Fixes

Fix heading auto-link hijacking nested link labels (#668) (PR #949) by @dualfroz
Fix: keep trailing content out of an unmatched emphasis closer (#743) (PR #950) by @dualfroz
Fix indent on first list item (#482) (PR #953) by @boxofyellow
Add Normalization Support for PipeTables (GFM) (PR #954) by @boxofyellow
Fix partially empty pipe table separator regression (PR #955) by @vicancy
Reject emoji-parsing if the slice ends with ** (PR #947) by @bstordrup
Fix strict GFM tables against native cmark-gfm (86866b91)

🚀 Enhancements

Update 3rd party extensions (PR #945) by @Kryptos-FR

🏭 Tests

Fix tests warnings (96b024c2)

📦 Dependencies

Bump deps (c6b186b4)

🧰 Misc

Use NuGet Trusted Publishing via dotnet-releaser (56e9c238)

Full Changelog: 1.3.2...1.4.0

_{Published with dotnet-releaser}

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.11 to 10.0.13.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.