Bump Marten and 14 others by dependabot[bot] · Pull Request #98 · nicocda/Pleno

dependabot · 2026-10-22T11:52:19Z

Pinned Marten at 9.51.0.

Release notes

9.51.0 What's Changed

Skip the database when LoadManyAsync is given no ids by @lahma in Skip the database when LoadManyAsync is given no ids JasperFx/marten#5681
Supervised CI on Bobcat 0.60.4: worker lanes, per-lane databases, opt-in retries, committed ledger (bobcat#565) by @jeremydmiller in Supervised CI on Bobcat 0.60.4: worker lanes, per-lane databases, opt-in retries, committed ledger (bobcat#565) JasperFx/marten#5687
DaemonTests on Bobcat 1.0.0-alpha.1: rendered daemon specs and diagnosed catch-up waits (bobcat#562) by @jeremydmiller in DaemonTests on Bobcat 1.0.0-alpha.1: rendered daemon specs and diagnosed catch-up waits (bobcat#562) JasperFx/marten#5690
Bobcat 1.0.0-rc.1 by @jeremydmiller in Bobcat 1.0.0-rc.1 JasperFx/marten#5697
Roll back cancelled saves and write tombstones off the failed save's path (#5688) by @jeremydmiller in Roll back cancelled saves and write tombstones off the failed save's path (#5688) JasperFx/marten#5699
Master-table and sharded tenancy: the tenancy's own AutoCreate picks the apply mode, not only whether to apply by @lahma in Master-table and sharded tenancy: the tenancy's own AutoCreate picks the apply mode, not only whether to apply JasperFx/marten#5692
IMartenStorage.ApplyAllConfiguredChangesToDatabaseAsync: pass the AutoCreate override on to each database by @lahma in IMartenStorage.ApplyAllConfiguredChangesToDatabaseAsync: pass the AutoCreate override on to each database JasperFx/marten#5693
Delete the DCB tag rows of the events Marten deletes, and index the tag tables on seq_id by @lahma in Delete the DCB tag rows of the events Marten deletes, and index the tag tables on seq_id JasperFx/marten#5694
Read only the named stream for Guid.Empty, an empty key and a null key, and refuse them in CompactStreamAsync by @lahma in Read only the named stream for Guid.Empty, an empty key and a null key, and refuse them in CompactStreamAsync JasperFx/marten#5695
Scope MarkEventsAsSkipped to a tenant under UseTenantPartitionedEvents (#5234 follow-up) by @lahma in Scope MarkEventsAsSkipped to a tenant under UseTenantPartitionedEvents (#5234 follow-up) JasperFx/marten#5698
Start per-tenant subscription agents whose starting position seeds their progress (UseTenantPartitionedEvents) by @lahma in Start per-tenant subscription agents whose starting position seeds their progress (UseTenantPartitionedEvents) JasperFx/marten#5700
An empty tenant list, not 42P01, before the first tenant is registered (UseTenantPartitionedEvents) by @lahma in An empty tenant list, not 42P01, before the first tenant is registered (UseTenantPartitionedEvents) JasperFx/marten#5701
ShardedTenancy: resolve a shard's database id instead of registering it as a tenant by @lahma in ShardedTenancy: resolve a shard's database id instead of registering it as a tenant JasperFx/marten#5702
Treat an inline array literal as a value in LINQ Contains(), including a compiled query's own members (supersedes #5691) by @jeremydmiller in Treat an inline array literal as a value in LINQ Contains(), including a compiled query's own members (supersedes #5691) JasperFx/marten#5712
Upgrade JasperFx to 2.91.0 by @jeremydmiller in Upgrade JasperFx to 2.91.0 JasperFx/marten#5713
Upgrade Weasel to 9.46.0 by @jeremydmiller in Upgrade Weasel to 9.46.0 JasperFx/marten#5714
Pin #5704: the high-water agent survives an outage that hangs connections by @jeremydmiller in Pin #5704: the high-water agent survives an outage that hangs connections JasperFx/marten#5715
Add AddMartenHighWaterHealthCheck() for stores registered with AddMartenStore by @jeremydmiller in Add AddMartenHighWaterHealthCheck<TStore>() for stores registered with AddMartenStore JasperFx/marten#5716
Compiled queries: plan from a generated template, and refuse values computed from the query object (#5711, options 2 and 3) by @jeremydmiller in Compiled queries: plan from a generated template, and refuse values computed from the query object (#5711, options 2 and 3) JasperFx/marten#5717
Bump version to 9.51.0 by @jeremydmiller in Bump version to 9.51.0 JasperFx/marten#5718

Full Changelog: JasperFx/marten@V9.50.3...v9.51.0

9.50.3

The Native AOT and hard-delete release. One new feature on the event store, two schema-naming fixes that could not be worked around, and three behaviour changes — read those before upgrading.

Note on these notes. They were rewritten after publication. 9.50.3 was cut as the JasperFx 2.90.1 dependency bump, but five pull requests had merged in the minutes before the tag, so the tag carried all of them too. The original notes described only the dependency bump and said no code change was needed. Everything below is what 9.50.3 actually contains; nothing about the published packages changed.

New

TombstoneStream — a hard stream delete (#5673, #5674). session.Events.TombstoneStream(id) queues a single-statement delete of a stream's tag rows, its events and its stream row — plus the mt_streams_identity row under strict identity enforcement — scoped to the session tenant under conjoined tenancy. The event sequence is never touched, and projected documents are deliberately left alone. Queued until SaveChangesAsync, like every other write.

It is on the shared IEventStoreOperations contract as a default member that throws NotSupportedException, so a store without a hard delete stays source-compatible, and the shared StreamTombstoningCompliance suite now runs against Marten.
DCB tag types can be registered for Native AOT (#5649, #5674, #5676). RegisterTagType<TTag>() discovers the tag's inner type by reflecting over its members and closes a generic registration at runtime, neither of which a native image can do — so a store with a DCB tag type could not even be configured under AOT.
```
opts.Events.RegisterTagType<StudentId, Guid>(x => x.Value, "student")
    .ForAggregate<StudentCourseEnrollment>();
```
Naming the inner type closes the generic at compile time and the unwrapper replaces the reflection. The suffix is optional and defaults to the tag type's own name, so for a tag the inferring overload could register, this one registers the same inner type and the same table. It works identically under a JIT.

The inferring overloads are now annotated [RequiresUnreferencedCode]/[RequiresDynamicCode], and — because an analyzer warning only reaches an application that is itself AOT-analyzed, while a store configured from inside a library gets nothing — a failure at runtime now throws naming the exact line to write, keeping the original exception as its inner exception. Automatic tag registration from projection identities logs a warning naming the same line, including the projection's ForAggregate<T>().

With explicit registrations, tagging, tag rules, EventTagQuery, EventsExistAsync, AggregateByTagsAsync and FetchForWritingByTags into a [BoundaryAggregate] all run from a native binary. A CI job publishes and runs them.

Fixed

A custom foreign key name is no longer discarded under conjoined tenancy (#5672, #5678). Moving tenant_id to the front of a document foreign key regenerated the key's name unconditionally, so a name set through the foreignKeyConfiguration callback was thrown away. That is what made the identifier-length failure unfixable: the exception tells you to override the database object name, and overriding it had no effect. A generated name is still regenerated; a chosen one survives, as does the name of a ForeignKey added by hand.
Archiving a tagged stream no longer fails with a foreign key violation (#5675, #5679). With UseArchivedStreamPartitioning on and any DCB tag type registered, ArchiveStream came back as 23503. Each mt_event_tag_* table is partitioned by is_archived and carries a composite foreign key to mt_events; mt_archive_stream moved the events between partitions without moving the tag rows that referenced them. It now moves them, in the order that keeps both sides of a non-deferrable key consistent at every statement.
AllObjects() no longer applies the Hi-Lo DDL (#5665, #5670). Describing the schema provisioned part of it. The describing seam is now separate from the applying one, and is proven offline against an unreachable host.
A failed Rebuild-mode run can be restarted and finished from its committed progress (#5668, #5669).

Performance

A commit that only starts streams no longer queries for a snapshot that cannot exist (#5671, thanks @lahma). An inline single-stream projection asks storage only for the ids of streams being appended to, so a start-only commit passed an empty id array — and still paid a round trip on id = ANY($1) that could only return no rows, plus a second connection with the default UseIdentityMapForAggregates = false. The same guard removes a wasted round trip from an async daemon batch whose slices all hit the aggregate write cache.

Behaviour changes

An empty DCB tag table suffix is refused. RegisterTagType<T>("") used to be accepted and named mt_event_tag_ — a real table that every tag type registered that way would share. Pass a suffix, or null for the tag type's own name.
A tag type that cannot be read now throws InvalidOperationException, with the original InvalidValueTypeException as its inner exception, and a message naming the explicit registration. This happens whether or not dynamic code is available, because the same exception means "not a single-value wrapper" under a JIT and "the members were trimmed away" in a trimmed image, and nothing at runtime tells those apart.
Document foreign key and index names longer than 63 characters are shortened with a deterministic hash suffix, the same treatment the document table's primary key already got. If you raised PostgreSQL's NAMEDATALEN and have a foreign key or index whose generated name is between 64 characters and your own limit, that object will be renamed and you will see it in a migration diff.

Known, not fixed

DCB tag queries return archived events, where every other event query excludes them by default — #5677. It matters most for EventsExistAsync, which is what a consistency boundary assertion is built on: an archived stream still answers yes. Independent of storage mode and of archived-stream partitioning.

Dependencies

... (truncated)

9.50.2

A maintenance release. Nothing in a shipped Marten package changed, and nothing here requires a configuration or code change.

Dependencies

The NuGet vulnerability audit is clean (#5666). Marten's shipped packages were never affected by GHSA-846f-f764-76mx (CVE-2026-84008, System.Security.Cryptography.Pkcs). Npgsql doesn't bring that package in. Every finding was in the Nuke build tool or the samples:
- The build tool now uses patched System.Security.Cryptography.Pkcs, System.Security.Cryptography.Xml and NuGet.Packaging.
- The OpenTelemetry packages used by the EventPublisher sample and the Aspire sample moved from 1.8.x to 1.19.x.

The same advisory does reach Polecat and Weasel's SQL Server and Oracle packages, through their database drivers. Those are fixed in Polecat 5.40.2 and Weasel 9.45.1.

9.50.1

A patch release with one addition, for Wolverine's agent assignment. Nothing here requires a configuration or code change.

Event store

IEventStore.TryDescribeDatabasesAsync() is answered straight from the tenancy (#5664). JasperFx 2.87.1 adds this narrower call, the database half of TryCreateUsage(). It returns each database's server, name and tenant ids without reading the highest event sequence or describing every projection, subscription, event type and tag type. Wolverine 6.50.0 asks for it on every leader heartbeat, for every store, where it used to build the full usage (JasperFx/wolverine#5002). It follows on from #5652, so thanks again to @uniquelau for a report that came with the heartbeat maths already done.

Dependencies

JasperFx 2.87.1.

9.50.0

A bug-fix release. Nothing here requires a configuration or code change, but three things change what an application observes — read the box below before upgrading.

Observable changes

TotalResults changes value for Stats() + Include() + Select() + Take(). It was reporting the size of the page; it now reports the number of matches (#5654). If you compute page counts from it, those counts change — to the correct ones.

A new warning may appear at startup if tag-type auto-discovery cannot register a projection's identity type. That condition is not new; it was previously silent (#5649).

db-patch drop files no longer DROP ... CASCADE every schema — they roll back only what the patch touched (Weasel 9.45.0, weasel#706). This is the one to look at if you apply drop files in an environment you care about.

LINQ — `Include()` joined on the queried document's own id

Three separate defects in the same corner, found by pulling on the first one. An Include() joined on the queried document's own id builds a temp table, and that temp table was missing the id it is joined on.

#5650 — failed with 42703: column d.id does not exist in a query session when the queried document had any duplicated field. Lightweight, identity-map and dirty-tracked sessions were unaffected. Thanks to @Blackclaws for the report and the fix (#5651).
#5653 — the same 42703, in a query session, when the query also called Stats(). Unlike #5650 this did not depend on a duplicated field; Stats() wraps the select clause, which hid it from the check that puts the id back.
#5654 — Stats() with an Include() and a Select() projection reported TotalResults as the size of the page rather than the number of matches, whenever Take() was used. No exception, just a wrong number, on every session kind. The temp table already held the correct count — PostgreSQL evaluates a window function before LIMIT — but re-applying the projection emitted a second count(*) over() against the already-truncated temp table.

If you page a projected grid with Stats() and Include(), #5654 is the one to read.

Event store

#5652 — a store with no event types and no projections never has its event tables migrated, so building a usage descriptor asked Postgres for a table that was not there. Marten swallowed the failure, but Postgres logged an ERROR for every attempt; under UseWolverineManagedEventSubscriptionDistribution the leader does this for every store on a ten-second heartbeat, which is tens of thousands of server-side ERROR lines a day for a store that can never hold an event. Marten now asks the catalog first, so nothing reaches the server log. Thanks to @uniquelau for a report that came with the heartbeat maths already done.
#5658 — IEventStore.FindDatabaseForTenantAsync, so a caller waiting on or querying a single tenant touches only that tenant's database instead of all of them. Goes through ITenancy.TryFindDatabase, never FindOrCreateDatabase, so a lookup cannot bring an unknown tenant into existence.

Native AOT

#5649 (partial) — a DCB [BoundaryAggregate] fetch failed natively with MissingMethodException, because EventGraph.Build<TDoc>() closed SingleStreamProjection<,> at runtime even though both type arguments were known at compile time. And tag-type auto-discovery swallowed the AOT failure in the same breath as a benign one, leaving a store running with the tag type quietly absent; it now says so. Verified by publishing and running the native binary, not by a clean publish.

Still open: RegisterTagType<TTag>() closes its own open generic and remains broken under Native AOT. That needs a reflection-free construction path in JasperFx.Events plus a new overload — see the discussion on #5649. Thanks to @skoging for an unusually thorough report, with native runs and three costed alternatives.

Dependencies

Weasel 9.45.0 — db-patch drop files no longer drop every schema with CASCADE; they roll back only what the patch touched (weasel#706). This changes what an existing drop file does. Primary keys can also now be added to and removed from existing tables (weasel#707).
JasperFx 2.87.0 — across all five packages.

Known issue

Stats() with Include() and a Select() projection is fixed here, but note that the Include() itself still follows the page, not the match set — it reads from the same truncated temp table. Only the statistics column outlives the Take(). That is existing, intended behaviour; it is called out because #5654 makes the distinction visible for the first time.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.Google from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.Google's releases.