Bump the minor-and-patch group with 24 updates by dependabot[bot] · Pull Request #99 · nicocda/Pleno

dependabot · 2026-10-29T11:51:54Z

Updated Aspire.Hosting.JavaScript from 13.6.1 to 13.6.4.

Release notes

Sourced from Aspire.Hosting.JavaScript's releases.

13.6.4 What's New in Aspire 13.6.4

Patch release for Aspire 13.6 that improves resource startup reliability, fixes Azure publishing with parameterized enum properties in TypeScript AppHosts, and tightens CLI diagnostic log permissions on Unix.

🐛 Fixes

🖥️ Resources could fail to start after a DCP create request timed out — AppHost now checks whether a resource was created before retrying a timed-out or HTTP 504 request, avoiding a premature FailedToStart state when DCP completed the operation. API operations default to a 40-second timeout with an additional 20-second allowance before the first successful operation, and resource creation has a two-minute recovery budget. These limits can be configured through DcpPublisher:KubernetesApiTimeout, DcpPublisher:KubernetesInitializationAdditionalTimeout, and DcpPublisher:KubernetesCreateRecoveryTimeout. Established watch and log streams are not limited by these operation timeouts. Addresses startup timeouts reported in 13.6. Fixes #20691. (#20868, backport of #20752, @danegsta)
☁️ TypeScript AppHosts could fail to publish parameterized Azure enum properties — Assigning a bicep().parameter(...) expression to an enum-valued provisioning property, such as an Azure Storage SKU name, now works instead of failing with a type-assignment error. Type checking for literal values and incompatible expression types is preserved. Fixes a scenario introduced with the Azure provisioning proxy feature in 13.6. (#20767, backport of #20557, @sebastienros)
🔒 CLI diagnostic logs now use owner-only permissions on Unix — Log files are restricted to owner read/write access (0600), including reused files, and the dedicated Aspire logs directory uses owner-only access (0700), repairing existing permissions when needed. Newly created custom log directories also use 0700; existing custom parent directories and Windows permission behavior are unchanged. Diagnostic logs can contain sensitive data, including dashboard login URLs, so review them before sharing. (#21282, backport of #21276, @mitchdenny)

Full Changelog: v13.6.3...v13.6.4

Full commit: c89352703f78ae46de90fbf751ed8b52b77b89bf

13.6.3 What's New in Aspire 13.6.3

Patch release for Aspire 13.6 that improves resource orchestration reliability by preventing unread resource watches from stalling resource updates and operations.

🐛 Fixes

🖥️ Resource operations could stall when a watch stopped being read — AppHost now closes abandoned watch connections when setup is canceled and keeps reading resource events even when event handlers are slow. Resource event ordering, lifecycle callback dispatch, and the existing periodic reconnection safeguard are preserved. (#21002, backport of #20972, @danegsta)
🔄 Slow watchers could block other resource updates or watcher shutdown — The bundled Developer Control Plane (DCP) is updated to 0.26.6, which keeps internal lifecycle watches draining and uses bounded, asynchronous watch delivery to prevent unread watches from blocking resource-change publication and unrelated watcher shutdown. (#21215, @danegsta; includes microsoft/dcp#307)

Full Changelog: v13.6.2...v13.6.3

Full commit: 38294b1b31552dae42a516cffa0cbc737ec08976

13.6.2

Full commit: af07e33f8d1ef733645138b3f8e36067d073148d

What's Changed

[release/13.6] Bump version to 13.6.2 by @danegsta with @Copilot in [release/13.6] Bump version to 13.6.2 microsoft/aspire#20877
[release/13.6] Pin MessagePack to 2.5.307 for security fixes by @eerhardt in [release/13.6] Pin MessagePack to 2.5.307 for security fixes microsoft/aspire#21156

Full Changelog: microsoft/aspire@v13.6.1...v13.6.2

Commits viewable in compare view.

Updated Aspire.Hosting.PostgreSQL from 13.6.1 to 13.6.4.

Release notes

Sourced from Aspire.Hosting.PostgreSQL's releases.

13.6.4 What's New in Aspire 13.6.4

Patch release for Aspire 13.6 that improves resource startup reliability, fixes Azure publishing with parameterized enum properties in TypeScript AppHosts, and tightens CLI diagnostic log permissions on Unix.

🐛 Fixes

🖥️ Resources could fail to start after a DCP create request timed out — AppHost now checks whether a resource was created before retrying a timed-out or HTTP 504 request, avoiding a premature FailedToStart state when DCP completed the operation. API operations default to a 40-second timeout with an additional 20-second allowance before the first successful operation, and resource creation has a two-minute recovery budget. These limits can be configured through DcpPublisher:KubernetesApiTimeout, DcpPublisher:KubernetesInitializationAdditionalTimeout, and DcpPublisher:KubernetesCreateRecoveryTimeout. Established watch and log streams are not limited by these operation timeouts. Addresses startup timeouts reported in 13.6. Fixes #20691. (#20868, backport of #20752, @danegsta)
☁️ TypeScript AppHosts could fail to publish parameterized Azure enum properties — Assigning a bicep().parameter(...) expression to an enum-valued provisioning property, such as an Azure Storage SKU name, now works instead of failing with a type-assignment error. Type checking for literal values and incompatible expression types is preserved. Fixes a scenario introduced with the Azure provisioning proxy feature in 13.6. (#20767, backport of #20557, @sebastienros)
🔒 CLI diagnostic logs now use owner-only permissions on Unix — Log files are restricted to owner read/write access (0600), including reused files, and the dedicated Aspire logs directory uses owner-only access (0700), repairing existing permissions when needed. Newly created custom log directories also use 0700; existing custom parent directories and Windows permission behavior are unchanged. Diagnostic logs can contain sensitive data, including dashboard login URLs, so review them before sharing. (#21282, backport of #21276, @mitchdenny)

Full Changelog: v13.6.3...v13.6.4

Full commit: c89352703f78ae46de90fbf751ed8b52b77b89bf

13.6.3 What's New in Aspire 13.6.3

Patch release for Aspire 13.6 that improves resource orchestration reliability by preventing unread resource watches from stalling resource updates and operations.

🐛 Fixes

🖥️ Resource operations could stall when a watch stopped being read — AppHost now closes abandoned watch connections when setup is canceled and keeps reading resource events even when event handlers are slow. Resource event ordering, lifecycle callback dispatch, and the existing periodic reconnection safeguard are preserved. (#21002, backport of #20972, @danegsta)
🔄 Slow watchers could block other resource updates or watcher shutdown — The bundled Developer Control Plane (DCP) is updated to 0.26.6, which keeps internal lifecycle watches draining and uses bounded, asynchronous watch delivery to prevent unread watches from blocking resource-change publication and unrelated watcher shutdown. (#21215, @danegsta; includes microsoft/dcp#307)

Full Changelog: v13.6.2...v13.6.3

Full commit: 38294b1b31552dae42a516cffa0cbc737ec08976

13.6.2

Full commit: af07e33f8d1ef733645138b3f8e36067d073148d

What's Changed

[release/13.6] Bump version to 13.6.2 by @danegsta with @Copilot in [release/13.6] Bump version to 13.6.2 microsoft/aspire#20877
[release/13.6] Pin MessagePack to 2.5.307 for security fixes by @eerhardt in [release/13.6] Pin MessagePack to 2.5.307 for security fixes microsoft/aspire#21156

Full Changelog: microsoft/aspire@v13.6.1...v13.6.2

Commits viewable in compare view.

Updated Aspire.Hosting.RabbitMQ from 13.6.1 to 13.6.4.

Release notes

Sourced from Aspire.Hosting.RabbitMQ's releases.

13.6.4 What's New in Aspire 13.6.4

Patch release for Aspire 13.6 that improves resource startup reliability, fixes Azure publishing with parameterized enum properties in TypeScript AppHosts, and tightens CLI diagnostic log permissions on Unix.

🐛 Fixes

🖥️ Resources could fail to start after a DCP create request timed out — AppHost now checks whether a resource was created before retrying a timed-out or HTTP 504 request, avoiding a premature FailedToStart state when DCP completed the operation. API operations default to a 40-second timeout with an additional 20-second allowance before the first successful operation, and resource creation has a two-minute recovery budget. These limits can be configured through DcpPublisher:KubernetesApiTimeout, DcpPublisher:KubernetesInitializationAdditionalTimeout, and DcpPublisher:KubernetesCreateRecoveryTimeout. Established watch and log streams are not limited by these operation timeouts. Addresses startup timeouts reported in 13.6. Fixes #20691. (#20868, backport of #20752, @danegsta)
☁️ TypeScript AppHosts could fail to publish parameterized Azure enum properties — Assigning a bicep().parameter(...) expression to an enum-valued provisioning property, such as an Azure Storage SKU name, now works instead of failing with a type-assignment error. Type checking for literal values and incompatible expression types is preserved. Fixes a scenario introduced with the Azure provisioning proxy feature in 13.6. (#20767, backport of #20557, @sebastienros)
🔒 CLI diagnostic logs now use owner-only permissions on Unix — Log files are restricted to owner read/write access (0600), including reused files, and the dedicated Aspire logs directory uses owner-only access (0700), repairing existing permissions when needed. Newly created custom log directories also use 0700; existing custom parent directories and Windows permission behavior are unchanged. Diagnostic logs can contain sensitive data, including dashboard login URLs, so review them before sharing. (#21282, backport of #21276, @mitchdenny)

Full Changelog: v13.6.3...v13.6.4

Full commit: c89352703f78ae46de90fbf751ed8b52b77b89bf

13.6.3 What's New in Aspire 13.6.3

Patch release for Aspire 13.6 that improves resource orchestration reliability by preventing unread resource watches from stalling resource updates and operations.

🐛 Fixes

🖥️ Resource operations could stall when a watch stopped being read — AppHost now closes abandoned watch connections when setup is canceled and keeps reading resource events even when event handlers are slow. Resource event ordering, lifecycle callback dispatch, and the existing periodic reconnection safeguard are preserved. (#21002, backport of #20972, @danegsta)
🔄 Slow watchers could block other resource updates or watcher shutdown — The bundled Developer Control Plane (DCP) is updated to 0.26.6, which keeps internal lifecycle watches draining and uses bounded, asynchronous watch delivery to prevent unread watches from blocking resource-change publication and unrelated watcher shutdown. (#21215, @danegsta; includes microsoft/dcp#307)

Full Changelog: v13.6.2...v13.6.3

Full commit: 38294b1b31552dae42a516cffa0cbc737ec08976

13.6.2

Full commit: af07e33f8d1ef733645138b3f8e36067d073148d

What's Changed

[release/13.6] Bump version to 13.6.2 by @danegsta with @Copilot in [release/13.6] Bump version to 13.6.2 microsoft/aspire#20877
[release/13.6] Pin MessagePack to 2.5.307 for security fixes by @eerhardt in [release/13.6] Pin MessagePack to 2.5.307 for security fixes microsoft/aspire#21156

Full Changelog: microsoft/aspire@v13.6.1...v13.6.2

Commits viewable in compare view.

Updated Aspire.Hosting.Redis from 13.6.1 to 13.6.4.

Release notes

Sourced from Aspire.Hosting.Redis's releases.

13.6.4 What's New in Aspire 13.6.4

Patch release for Aspire 13.6 that improves resource startup reliability, fixes Azure publishing with parameterized enum properties in TypeScript AppHosts, and tightens CLI diagnostic log permissions on Unix.

🐛 Fixes

🖥️ Resources could fail to start after a DCP create request timed out — AppHost now checks whether a resource was created before retrying a timed-out or HTTP 504 request, avoiding a premature FailedToStart state when DCP completed the operation. API operations default to a 40-second timeout with an additional 20-second allowance before the first successful operation, and resource creation has a two-minute recovery budget. These limits can be configured through DcpPublisher:KubernetesApiTimeout, DcpPublisher:KubernetesInitializationAdditionalTimeout, and DcpPublisher:KubernetesCreateRecoveryTimeout. Established watch and log streams are not limited by these operation timeouts. Addresses startup timeouts reported in 13.6. Fixes #20691. (#20868, backport of #20752, @danegsta)
☁️ TypeScript AppHosts could fail to publish parameterized Azure enum properties — Assigning a bicep().parameter(...) expression to an enum-valued provisioning property, such as an Azure Storage SKU name, now works instead of failing with a type-assignment error. Type checking for literal values and incompatible expression types is preserved. Fixes a scenario introduced with the Azure provisioning proxy feature in 13.6. (#20767, backport of #20557, @sebastienros)
🔒 CLI diagnostic logs now use owner-only permissions on Unix — Log files are restricted to owner read/write access (0600), including reused files, and the dedicated Aspire logs directory uses owner-only access (0700), repairing existing permissions when needed. Newly created custom log directories also use 0700; existing custom parent directories and Windows permission behavior are unchanged. Diagnostic logs can contain sensitive data, including dashboard login URLs, so review them before sharing. (#21282, backport of #21276, @mitchdenny)

Full Changelog: v13.6.3...v13.6.4

Full commit: c89352703f78ae46de90fbf751ed8b52b77b89bf

13.6.3 What's New in Aspire 13.6.3

Patch release for Aspire 13.6 that improves resource orchestration reliability by preventing unread resource watches from stalling resource updates and operations.

🐛 Fixes

🖥️ Resource operations could stall when a watch stopped being read — AppHost now closes abandoned watch connections when setup is canceled and keeps reading resource events even when event handlers are slow. Resource event ordering, lifecycle callback dispatch, and the existing periodic reconnection safeguard are preserved. (#21002, backport of #20972, @danegsta)
🔄 Slow watchers could block other resource updates or watcher shutdown — The bundled Developer Control Plane (DCP) is updated to 0.26.6, which keeps internal lifecycle watches draining and uses bounded, asynchronous watch delivery to prevent unread watches from blocking resource-change publication and unrelated watcher shutdown. (#21215, @danegsta; includes microsoft/dcp#307)

Full Changelog: v13.6.2...v13.6.3

Full commit: 38294b1b31552dae42a516cffa0cbc737ec08976

13.6.2

Full commit: af07e33f8d1ef733645138b3f8e36067d073148d

What's Changed

[release/13.6] Bump version to 13.6.2 by @danegsta with @Copilot in [release/13.6] Bump version to 13.6.2 microsoft/aspire#20877
[release/13.6] Pin MessagePack to 2.5.307 for security fixes by @eerhardt in [release/13.6] Pin MessagePack to 2.5.307 for security fixes microsoft/aspire#21156

Full Changelog: microsoft/aspire@v13.6.1...v13.6.2

Commits viewable in compare view.

Updated Marten from 9.49.0 to 9.55.0.

Release notes

Sourced from Marten's releases.

9.55.0 Read before upgrading

Apps running under a Turkish or Azerbaijani culture (tr-TR, az-AZ) with document types whose names contain an uppercase I. Document aliases (#5778), DdlTemplate lookups and flat-table upsert function names (#5783) are now lowered with the invariant culture. Before this release, those cultures turned I into a dotless ı, so a document type Invoice was stored in mt_doc_ınvoice. From 9.55.0 it maps to mt_doc_invoice, and Marten will create that table empty. Rename the existing tables (and their upsert functions) to the invariant name before upgrading, or the existing documents will appear to be missing. Apps on any other culture are unaffected: the names they generate are unchanged.

Behaviour change: StoredDocument.Version for projection documents (#5773). For a mapping that uses UseVersionFromMatchingStream with revisions, the diagnostics version token is now <mt_version>:<mt_last_modified as epoch microseconds> (or an md5 of the document body when last-modified tracking is disabled). It used to be mt_version alone, which did not change when the daemon rewrote the document at the same stream version. Anything that parsed the token as an integer must be updated. Undeleting a projection document through the diagnostics writer also no longer bumps mt_version past the stream's version.

Fixes worth calling out

HiLo ids recover after an outage (#5784). If the first id allocation on a fresh store hit a database outage, every later allocation on that store rethrew the same exception after the database came back. Thanks to @kentcooper for the report and the reproduction the regression test is built from.
Subclass queries use nested duplicated-field columns (#5777). A query on a subclass now uses the duplicated column for a nested member such as x.Inner.Value, instead of falling back to the JSONB path.
Verbose connection tracing (#5772). With TrackConnections = TrackLevel.Verbose, a marten.append.event activity event is now emitted on every append route, including the Quick routes that are the V9 default. Expect more events per append than before.
Weasel 9.47.1 fixes index readback for a DatabaseSchemaName that is a reserved word or contains uppercase. Before, every schema apply after the first failed with 42P07 (weasel#750, contributed by @marc-RocketRez).
StreamPagedByCursor writes each page's bytes directly and disposes its pooled stream (#5776, @chrisbbe).

What's Changed

Docs: no links to the private CritterWatch repo by @jeremydmiller in Docs: no links to the private CritterWatch repo JasperFx/marten#5775
Bobcat 1.0.0 and JasperFx 2.96.0 by @jeremydmiller in Bobcat 1.0.0 and JasperFx 2.96.0 JasperFx/marten#5774
StreamPagedByCursor: write the page's bytes instead of re-encoding them, and dispose the pooled stream by @chrisbbe in StreamPagedByCursor: write the page's bytes instead of re-encoding them, and dispose the pooled stream JasperFx/marten#5776
JasperFx 2.96.1: required members on a missing aggregate (jasperfx#1087) by @jeremydmiller in JasperFx 2.96.1: required members on a missing aggregate (jasperfx#1087) JasperFx/marten#5779
Diagnostics writer: a projection document's version token moves on every write (#5773) by @jeremydmiller in Diagnostics writer: a projection document's version token moves on every write (#5773) JasperFx/marten#5781
Verbose tracing emits marten.append.event on every append route (#5772) by @jeremydmiller in Verbose tracing emits marten.append.event on every append route (#5772) JasperFx/marten#5782
Culture-invariant DDL template lookup and flat-table function names by @jeremydmiller in Culture-invariant DDL template lookup and flat-table function names JasperFx/marten#5783
Weasel 9.47.1 by @jeremydmiller in Weasel 9.47.1 JasperFx/marten#5785
Subclass queries resolve nested duplicated fields to their columns (#5777) by @jeremydmiller in Subclass queries resolve nested duplicated fields to their columns (#5777) JasperFx/marten#5780
Bug_5270 flake: read the version-guard indexes without pg_get_indexdef() by @jeremydmiller in Bug_5270 flake: read the version-guard indexes without pg_get_indexdef() JasperFx/marten#5786
Fix culture-dependent document alias casing by @alpercelik in Fix culture-dependent document alias casing JasperFx/marten#5778
Don't cache a failed HiLo factory build across an outage (#5784) by @jeremydmiller in Don't cache a failed HiLo factory build across an outage (#5784) JasperFx/marten#5787
Retry should_catch_marten_command_exceptions like its sibling by @jeremydmiller in Retry should_catch_marten_command_exceptions like its sibling JasperFx/marten#5789
Bump version to 9.55.0 by @jeremydmiller in Bump version to 9.55.0 JasperFx/marten#5790

New Contributors

@alpercelik made their first contribution in Fix culture-dependent document alias casing JasperFx/marten#5778

Full Changelog: JasperFx/marten@v9.54.2...V9.55.0

9.54.2 What's Changed

Bobcat 1.0.0-rc.4 by @jeremydmiller in Bobcat 1.0.0-rc.4 JasperFx/marten#5769
Match tabs and line breaks in string.IsNullOrWhiteSpace() queries by @johnkaram02 in Match tabs and line breaks in string.IsNullOrWhiteSpace() queries JasperFx/marten#5760
Escape LIKE wildcards in EqualsIgnoreCase() queries by @johnkaram02 in Escape LIKE wildcards in EqualsIgnoreCase() queries JasperFx/marten#5758
Pin that removing a tenant from its shard takes its natural key rows by @lahma in Pin that removing a tenant from its shard takes its natural key rows JasperFx/marten#5770
Weasel 9.47.0 by @jeremydmiller in Weasel 9.47.0 JasperFx/marten#5771
Read back the seq_id a per-event Start draws, so a failed batch tombstones it (#5454 follow-up) by @vpetrevski in Read back the seq_id a per-event Start draws, so a failed batch tombstones it (#5454 follow-up) JasperFx/marten#5755

New Contributors

@johnkaram02 made their first contribution in Match tabs and line breaks in string.IsNullOrWhiteSpace() queries JasperFx/marten#5760

Full Changelog: JasperFx/marten@V9.54.1...v9.54.2

9.54.1

Full Changelog: JasperFx/marten@V9.54.0...V9.54.1

9.54.0

Full Changelog: JasperFx/marten@v9.53.0...V9.54.0

9.53.0

9.53.0 is a minor release. It picks up JasperFx 2.94.0 and implements the three members that release adds, for CritterWatch's Document Store Explorer and Event Store Explorer (#5756).

New

IReadOnlyEventStore.QueryEventData<T>(tenantId) (jasperfx#1073): store-agnostic LINQ over the bodies of one event type, across every stream. It runs through the shared DocumentQueryableExtensions terminators (ToListAsync, CountAsync, AnyAsync, FirstOrDefaultAsync).
- It is QueryRawEventDataOnly<T>() under the shared name. Events in archived streams are excluded, as they are there.
- An untranslatable member is refused with BadLinqExpressionException naming it.
- The tenant rule is the same as QueryStreamStates:
  - a non-null tenant without conjoined event tenancy throws NotSupportedException;
  - with conjoined tenancy, a non-null tenant scopes the query to that tenant;
  - null uses the session's tenant.
IDocumentStoreDiagnosticsWriter.PreviewDocumentJsonAsync (jasperfx#1071): a dry run of SaveDocumentJsonAsync.
- It shares the save's type resolution, deserialization and id check, so it refuses exactly what a save refuses.
- It returns the JSON as the store's serializer (System.Text.Json or Newtonsoft) would store it, so a console can show that a member is about to be dropped.
- It opens no session and ignores ExpectedVersion.
DocumentTypeRef.IsSoftDeleted (jasperfx#1070): IDocumentStoreDiagnostics.DocumentTypesAsync reports whether each type uses DeleteStyle.SoftDelete. A sub-class reports its root mapping's delete style.

Compliance

EventDataQueryCompliance is newly enrolled.
The ReportsDocumentDeleteStyle and SupportsDocumentWritePreview gates are on.

Dependencies

JasperFx, JasperFx.Events, JasperFx.Events.ComplianceTests, JasperFx.SourceGenerator and JasperFx.Events.SourceGenerator: 2.93.1 → 2.94.0 (release notes).

9.52.0 Highlights and behaviour changes

Built on JasperFx 2.93.1.

New table: mt_event_projection_floors. Every event store gets this table as a schema migration on its next
apply (#5740). It holds the persisted projection start floors behind the new AsyncOptions.SubscribeFromFirstRun().
A database whose schema has not been migrated yet keeps starting its projections exactly as before. Floors survive
DeleteAllDocumentsAsync, DeleteAllEventDataAsync and ResetAllData, and they are removed along with a tenant.
New option: StoreOptions.Advanced.ExceptionTransforms (#5682). Register your own exception transforms, consulted
before Marten's built-in ones, to turn a PostgresException with your own SQLSTATE into a typed exception.
Document diagnostics for CritterWatch (#5740): restore a soft-deleted document (UndeleteDocumentAsync), and order
a document page by last modified, numeric revision or created time ("newest first").
A permanent database error in projection code is now attributed to the event that hit it (#5741). The paused
shard reports ShardFailureCategory.ApplyEvent and names the event, where it used to report Other with no event.
It is still not dead-lettered, and it was never retried before either.
IEventStore.PreviewHighWaterAdvanceAsync / AdvanceHighWaterMarkToLatestAsync (#5738): preview, then
advance, the high-water mark to the latest event, the store-agnostic operation CritterWatch calls.
Fixes:
- removing a tenant under UseTenantPartitionedEvents no longer fails with 23503, whether the store has DCB tag
  rows (#5720) or a [NaturalKey] aggregate (#5742);
- a multi-stream projection's revision is no longer truncated through int past int.MaxValue, so ILongVersioned
  works as #4526 advised (#5723);
- UndoDeleteWhere / HardDeleteWhere no longer cause a false ConcurrencyException on a numeric-revision write
  later in the same session (#5743).
The Aspire sample now uses Aspire.AppHost.Sdk 13.6.3 with a PostgreSQL resource. The NuGet publish workflow no
longer installs the obsolete aspire workload (#5724).

What's Changed

LocalGate: the tests.yml suites locally through Bobcat's Gate (Bobcat 1.0.0-rc.3) by @jeremydmiller in LocalGate: the tests.yml suites locally through Bobcat's Gate (Bobcat 1.0.0-rc.3) JasperFx/marten#5726
Bump follow-redirects from 1.16.0 to 1.16.1 by @dependabot[bot] in Bump follow-redirects from 1.16.0 to 1.16.1 JasperFx/marten#5722
GH-5738 Implement IEventStore high water preview/advance (jasperfx#1031) by @jeremydmiller in GH-5738 Implement IEventStore high water preview/advance (jasperfx#1031) JasperFx/marten#5739
Delete a removed tenant's DCB tag rows before dropping its mt_events partition by @lahma in Delete a removed tenant's DCB tag rows before dropping its mt_events partition JasperFx/marten#5720
Pin that a re-added tenant's agent started before its first append projects every event by @lahma in Pin that a re-added tenant's agent started before its first append projects every event JasperFx/marten#5721
Pin subscription rewind under per-tenant partitioning end to end by @lahma in Pin subscription rewind under per-tenant partitioning end to end JasperFx/marten#5719
Implement the JasperFx 2.93 members: undelete, metadata ordering, soft-delete/metadata compliance, projection start floors (#5740) by @jeremydmiller in Implement the JasperFx 2.93 members: undelete, metadata ordering, soft-delete/metadata compliance, projection start floors (#5740) JasperFx/marten#5744
Delete a tenant's natural-key rows before its partition drop (#5742) by @jeremydmiller in Delete a tenant's natural-key rows before its partition drop (#5742) JasperFx/marten#5746
Stop truncating a projection's revision through int in StoreProjection (#5723) by @jeremydmiller in Stop truncating a projection's revision through int in StoreProjection (#5723) JasperFx/marten#5747
Move the Aspire sample to Aspire.AppHost.Sdk 13.6.3 with a PostgreSQL resource; drop the workload step (#5724) by @jeremydmiller in Move the Aspire sample to Aspire.AppHost.Sdk 13.6.3 with a PostgreSQL resource; drop the workload step (#5724) JasperFx/marten#5748
StatementOperation is a NoDataReturnedCall: no false ConcurrencyException after UndoDeleteWhere / HardDeleteWhere (#5743) by @jeremydmiller in StatementOperation is a NoDataReturnedCall: no false ConcurrencyException after UndoDeleteWhere / HardDeleteWhere (#5743) JasperFx/marten#5749
Let applications register their own exception transforms (#5682) by @jeremydmiller in Let applications register their own exception transforms (#5682) JasperFx/marten#5750
Bump dompurify from 3.4.16 to 3.4.17 by @dependabot[bot] in Bump dompurify from 3.4.16 to 3.4.17 JasperFx/marten#5752
Bump markdown-it from 14.3.1 to 14.3.3 by @dependabot[bot] in Bump markdown-it from 14.3.1 to 14.3.3 JasperFx/marten#5753
Stop registering NpgsqlException / MartenCommandException as transient for projection code (#5741) by @jeremydmiller in Stop registering NpgsqlException / MartenCommandException as transient for projection code (#5741) JasperFx/marten#5745
Bump version to 9.52.0 by @jeremydmiller in Bump version to 9.52.0 JasperFx/marten#5751

Full Changelog: JasperFx/marten@v9.51.0...v9.52.0

9.51.0 What's Changed

Skip the database when LoadManyAsync is given no ids by @lahma in Skip the database when LoadManyAsync is given no ids JasperFx/marten#5681
Supervised CI on Bobcat 0.60.4: worker lanes, per-lane databases, opt-in retries, committed ledger (bobcat#565) by @jeremydmiller in Supervised CI on Bobcat 0.60.4: worker lanes, per-lane databases, opt-in retries, committed ledger (bobcat#565) JasperFx/marten#5687
DaemonTests on Bobcat 1.0.0-alpha.1: rendered daemon specs and diagnosed catch-up waits (bobcat#562) by @jeremydmiller in DaemonTests on Bobcat 1.0.0-alpha.1: rendered daemon specs and diagnosed catch-up waits (bobcat#562) JasperFx/marten#5690
Bobcat 1.0.0-rc.1 by @jeremydmiller in Bobcat 1.0.0-rc.1 JasperFx/marten#5697
Roll back cancelled saves and write tombstones off the failed save's path (#5688) by @jeremydmiller in Roll back cancelled saves and write tombstones off the failed save's path (#5688) JasperFx/marten#5699
Master-table and sharded tenancy: the tenancy's own AutoCreate picks the apply mode, not only whether to apply by @lahma in Master-table and sharded tenancy: the tenancy's own AutoCreate picks the apply mode, not only whether to apply JasperFx/marten#5692
IMartenStorage.ApplyAllConfiguredChangesToDatabaseAsync: pass the AutoCreate override on to each database by @lahma in IMartenStorage.ApplyAllConfiguredChangesToDatabaseAsync: pass the AutoCreate override on to each database JasperFx/marten#5693
Delete the DCB tag rows of the events Marten deletes, and index the tag tables on seq_id by @lahma in Delete the DCB tag rows of the events Marten deletes, and index the tag tables on seq_id JasperFx/marten#5694
Read only the named stream for Guid.Empty, an empty key and a null key, and refuse them in CompactStreamAsync by @lahma in Read only the named stream for Guid.Empty, an empty key and a null key, and refuse them in CompactStreamAsync JasperFx/marten#5695
Scope MarkEventsAsSkipped to a tenant under UseTenantPartitionedEvents (#5234 follow-up) by @lahma in Scope MarkEventsAsSkipped to a tenant under UseTenantPartitionedEvents (#5234 follow-up) JasperFx/marten#5698
Start per-tenant subscription agents whose starting position seeds their progress (UseTenantPartitionedEvents) by @lahma in Start per-tenant subscription agents whose starting position seeds their progress (UseTenantPartitionedEvents) JasperFx/marten#5700
An empty tenant list, not 42P01, before the first tenant is registered (UseTenantPartitionedEvents) by @lahma in An empty tenant list, not 42P01, before the first tenant is registered (UseTenantPartitionedEvents) JasperFx/marten#5701
ShardedTenancy: resolve a shard's database id instead of registering it as a tenant by @lahma in ShardedTenancy: resolve a shard's database id instead of registering it as a tenant JasperFx/marten#5702
Treat an inline array literal as a value in LINQ Contains(), including a compiled query's own members (supersedes #5691) by @jeremydmiller in Treat an inline array literal as a value in LINQ Contains(), including a compiled query's own members (supersedes #5691) JasperFx/marten#5712
Upgrade JasperFx to 2.91.0 by @jeremydmiller in Upgrade JasperFx to 2.91.0 JasperFx/marten#5713
Upgrade Weasel to 9.46.0 by @jeremydmiller in Upgrade Weasel to 9.46.0 JasperFx/marten#5714
Pin #5704: the high-water agent survives an outage that hangs connections by @jeremydmiller in Pin #5704: the high-water agent survives an outage that hangs connections JasperFx/marten#5715
Add AddMartenHighWaterHealthCheck() for stores registered with AddMartenStore by @jeremydmiller in Add AddMartenHighWaterHealthCheck<TStore>() for stores registered with AddMartenStore JasperFx/marten#5716
Compiled queries: plan from a generated template, and refuse values computed from the query object (#5711, options 2 and 3) by @jeremydmiller in Compiled queries: plan from a generated template, and refuse values computed from the query object (#5711, options 2 and 3) JasperFx/marten#5717
Bump version to 9.51.0 by @jeremydmiller in Bump version to 9.51.0 JasperFx/marten#5718

Full Changelog: JasperFx/marten@V9.50.3...v9.51.0

9.50.3

The Native AOT and hard-delete release. One new feature on the event store, two schema-naming fixes that could not be worked around, and three behaviour changes — read those before upgrading.

Note on these notes. They were rewritten after publication. 9.50.3 was cut as the JasperFx 2.90.1 dependency bump, but five pull requests had merged in the minutes before the tag, so the tag carried all of them too. The original notes described only the dependency bump and said no code change was needed. Everything below is what 9.50.3 actually contains; nothing about the published packages changed.

New

TombstoneStream — a hard stream delete (#5673, #5674). session.Events.TombstoneStream(id) queues a single-statement delete of a stream's tag rows, its events and its stream row — plus the mt_streams_identity row under strict identity enforcement — scoped to the session tenant under conjoined tenancy. The event sequence is never touched, and projected documents are deliberately left alone. Queued until SaveChangesAsync, like every other write.

It is on the shared IEventStoreOperations contract as a default member that throws NotSupportedException, so a store without a hard delete stays source-compatible, and the shared StreamTombstoningCompliance suite now runs against Marten.
DCB tag types can be registered for Native AOT (#5649, #5674, #5676). RegisterTagType<TTag>() discovers the tag's inner type by reflecting over its members and closes a generic registration at runtime, neither of which a native image can do — so a store with a DCB tag type could not even be configured under AOT.
```
opts.Events.RegisterTagType<StudentId, Guid>(x => x.Value, "student")
    .ForAggregate<StudentCourseEnrollment>();
```
Naming the inner type closes the generic at compile time and the unwrapper replaces the reflection. The suffix is optional and defaults to the tag type's own name, so for a tag the inferring overload could register, this one registers the same inner type and the same table. It works identically under a JIT.

The inferring overloads are now annotated [RequiresUnreferencedCode]/[RequiresDynamicCode], and — because an analyzer warning only reaches an application that is itself AOT-analyzed, while a store configured from inside a library gets nothing — a failure at runtime now throws naming the exact line to write, keeping the original exception as its inner exception. Automatic tag registration from projection identities logs a warning naming the same line, including the projection's ForAggregate<T>().

With explicit registrations, tagging, tag rules, EventTagQuery, EventsExistAsync, AggregateByTagsAsync and FetchForWritingByTags into a [BoundaryAggregate] all run from a native binary. A CI job publishes and runs them.

Fixed

A custom foreign key name is no longer discarded under conjoined tenancy (#5672, #5678). Moving tenant_id to the front of a document foreign key regenerated the key's name unconditionally, so a name set through the foreignKeyConfiguration callback was thrown away. That is what made the identifier-length failure unfixable: the exception tells you to override the database object name, and overriding it had no effect. A generated name is still regenerated; a chosen one survives, as does the name of a ForeignKey added by hand.
Archiving a tagged stream no longer fails with a foreign key violation (#5675, #5679). With UseArchivedStreamPartitioning on and any DCB tag type registered, ArchiveStream came back as 23503. Each mt_event_tag_* table is partitioned by is_archived and carries a composite foreign key to mt_events; mt_archive_stream moved the events between partitions without moving the tag rows that referenced them. It now moves them, in the order that keeps both sides of a non-deferrable key consistent at every statement.
AllObjects() no longer applies the Hi-Lo DDL (#5665, #5670). Describing the schema provisioned part of it. The describing seam is now separate from the applying one, and is proven offline against an unreachable host.
A failed Rebuild-mode run can be restarted and finished from its committed progress (#5668, #5669).

Performance

A commit that only starts streams no longer queries for a snapshot that cannot exist (#5671, thanks @lahma). An inline single-stream projection asks storage only for the ids of streams being appended to, so a start-only commit passed an empty id array — and still paid a round trip on id = ANY($1) that could only return no rows, plus a second connection with the default UseIdentityMapForAggregates = false. The same guard removes a wasted round trip from an async daemon batch whose slices all hit the aggregate write cache.

Behaviour changes

An empty DCB tag table suffix is refused. RegisterTagType<T>("") used to be accepted and named mt_event_tag_ — a real table that every tag type registered that way would share. Pass a suffix, or null for the tag type's own name.
A tag type that cannot be read now throws InvalidOperationException, with the original InvalidValueTypeException as its inner exception, and a message naming the explicit registration. This happens whether or not dynamic code is available, because the same exception means "not a single-value wrapper" under a JIT and "the members were trimmed away" in a trimmed image, and nothing at runtime tells those apart.
Document foreign key and index names longer than 63 characters are shortened with a deterministic hash suffix, the same treatment the document table's primary key already got. If you raised PostgreSQL's NAMEDATALEN and have a foreign key or index whose generated name is between 64 characters and your own limit, that object will be renamed and you will see it in a migration diff.

Known, not fixed

DCB tag queries return archived events, where every other event query excludes them by default — #5677. It matters most for EventsExistAsync, which is what a consistency boundary assertion is built on: an archived stream still answers yes. Independent of storage mode and of archived-stream partitioning.

Dependencies

... (truncated)

9.50.2

A maintenance release. Nothing in a shipped Marten package changed, and nothing here requires a configuration or code change.

Dependencies

The NuGet vulnerability audit is clean (#5666). Marten's shipped packages were never affected by GHSA-846f-f764-76mx (CVE-2026-84008, System.Security.Cryptography.Pkcs). Npgsql doesn't bring that package in. Every finding was in the Nuke build tool or the samples:
- The build tool now uses patched System.Security.Cryptography.Pkcs, System.Security.Cryptography.Xml and NuGet.Packaging.
- The OpenTelemetry packages used by the EventPublisher sample and the Aspire sample moved from 1.8.x to 1.19.x.

The same advisory does reach Polecat and Weasel's SQL Server and Oracle packages, through their database drivers. Those are fixed in Polecat 5.40.2 and Weasel 9.45.1.

9.50.1

A patch release with one addition, for Wolverine's agent assignment. Nothing here requires a configuration or code change.

Event store

IEventStore.TryDescribeDatabasesAsync() is answered straight from the tenancy (#5664). JasperFx 2.87.1 adds this narrower call, the database half of TryCreateUsage(). It returns each database's server, name and tenant ids without reading the highest event sequence or describing every projection, subscription, event type and tag type. Wolverine 6.50.0 asks for it on every leader heartbeat, for every store, where it used to build the full usage (JasperFx/wolverine#5002). It follows on from #5652, so thanks again to @uniquelau for a report that came with the heartbeat maths already done.

Dependencies

JasperFx 2.87.1.

9.50.0

A bug-fix release. Nothing here requires a configuration or code change, but three things change what an application observes — read the box below before upgrading.

Observable changes

TotalResults changes value for Stats() + Include() + Select() + Take(). It was reporting the size of the page; it now reports the number of matches (#5654). If you compute page counts from it, those counts change — to the correct ones.

A new warning may appear at startup if tag-type auto-discovery cannot register a projection's identity type. That condition is not new; it was previously silent (#5649).

db-patch drop files no longer DROP ... CASCADE every schema — they roll back only what the patch touched (Weasel 9.45.0, weasel#706). This is the one to look at if you apply drop files in an environment you care about.

LINQ — `Include()` joined on the queried document's own id

Three separate defects in the same corner, found by pulling on the first one. An Include() joined on the queried document's own id builds a temp table, and that temp table was missing the id it is joined on.

#5650 — failed with 42703: column d.id does not exist in a query session when the queried document had any duplicated field. Lightweight, identity-map and dirty-tracked sessions were unaffected. Thanks to @Blackclaws for the report and the fix (#5651).
#5653 — the same 42703, in a query session, when the query also called Stats(). Unlike #5650 this did not depend on a duplicated field; Stats() wraps the select clause, which hid it from the check that puts the id back.
#5654 — Stats() with an Include() and a Select() projection reported TotalResults as the size of the page rather than the number of matches, whenever Take() was used. No exception, just a wrong number, on every session kind. The temp table already held the correct count — PostgreSQL evaluates a window function before LIMIT — but re-applying the projection emitted a second count(*) over() against the already-truncated temp table.

If you page a projected grid with Stats() and Include(), #5654 is the one to read.

Event store

#5652 — a store with no event types and no projections never has its event tables migrated, so building a usage descriptor asked Postgres for a table that was not there. Marten swallowed the failure, but Postgres logged an ERROR for every attempt; under UseWolverineManagedEventSubscriptionDistribution the leader does this for every store on a ten-second heartbeat, which is tens of thousands of server-side ERROR lines a day for a store that can never hold an event. Marten now asks the catalog first, so nothing reaches the server log. Thanks to @uniquelau for a report that came with the heartbeat maths already done.
#5658 — IEventStore.FindDatabaseForTenantAsync, so a caller waiting on or querying a single tenant touches only that tenant's database instead of all of them. Goes through ITenancy.TryFindDatabase, never FindOrCreateDatabase, so a lookup cannot bring an unknown tenant into existence.

Native AOT

#5649 (partial) — a DCB [BoundaryAggregate] fetch failed natively with MissingMethodException, because EventGraph.Build<TDoc>() closed SingleStreamProjection<,> at runtime even though both type arguments were known at compile time. And tag-type auto-discovery swallowed the AOT failure in the same breath as a benign one, leaving a store running with the tag type quietly absent; it now says so. Verified by publishing and running the native binary, not by a clean publish.

Still open: RegisterTagType<TTag>() closes its own open generic and remains broken under Native AOT. That needs a reflection-free construction path in JasperFx.Events plus a new overload — see the discussion on #5649. Thanks to @skoging for an unusually thorough report, with native runs and three costed alternatives.

Dependencies

Weasel 9.45.0 — db-patch drop files no longer drop every schema with CASCADE; they roll back only what the patch touched (weasel#706). This changes what an existing drop file does. Primary keys can also now be added to and removed from existing tables (weasel#707).
JasperFx 2.87.0 — across all five packages.

Known issue

Stats() with Include() and a Select() projection is fixed here, but note that the Include() itself still follows the page, not the match set — it reads from the same truncated temp table. Only the statistics column outlives the Take(). That is existing, intended behaviour; it is called out because #5654 makes the distinction visible for the first time.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.Google from 10.0.12 to 10.0.14.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.Google's releases.