Skip to content

chore(deps): Bump the nuget group with 13 updates - #22

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/nuget-3445ad58b5
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/nuget-3445ad58b5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 13, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.Data.SqlClient from 7.0.2 to 7.0.3.

Release notes

Sourced from Microsoft.Data.SqlClient's releases.

7.0.3

This update brings the following changes since the 7.0.2 release:

The core driver and its companion packages ship together as version 7.0.3. Update the companion packages you use alongside the driver to 7.0.3. Assembly versions remain 7.0.0.0, unchanged from 7.0.2.

Companion package release notes

Changed

  • Updated the Microsoft.Data.SqlClient.SNI and Microsoft.Data.SqlClient.SNI.runtime dependencies to 6.0.3 (was 6.0.2).
    (#​4599)

Fixed

  • Fixed a SqlBulkCopy regression in environments where the application login cannot read sys.all_columns. Bulk copy now falls back to the earlier column-discovery behavior when that permission is unavailable. Support for hidden columns and SQL Graph column aliases still requires access to the metadata view.
    (#​4370, #​4306, #​4402)

  • Fixed a memory-allocation regression in connection and command operations caused by formatting diagnostic strings even when tracing was disabled. Also corrected trace messages that reported an incorrect object ID or could throw FormatException when traced values contained braces.
    (#​4528, #​4533)

  • Fixed ServerCertificate validation on the managed SNI path so the configured certificate is compared against the server certificate even when the server certificate passes chain and host-name validation. When certificate validation is enabled, a missing, unreadable, or invalid certificate file, a certificate mismatch, or a missing server certificate now causes the TLS handshake to fail instead of bypassing the configured certificate check. (net8.0/net9.0 only)
    (#​4445, #​4583)

  • Fixed Always Encrypted VSM/HGS enclave attestation to verify that the enclave public key used to establish a session matches the key committed to by the signed attestation report. Missing, malformed, or mismatched key-binding data now causes attestation to fail before the session secret is derived.
    (#​4532, #​4553)

  • Fixed SqlConnection.AccessTokenCallback not disabling Transparent Network IP Resolution by default, making it consistent with SqlConnection.AccessToken. An explicitly configured TransparentNetworkIPResolution connection-string value still takes precedence. (net462 only)
    (#​4520, #​4561)

  • Fixed authentication state handling so clearing SqlConnection.AccessToken, AccessTokenCallback, or SspiContextProvider preserves the other authentication values in the connection pool key. Cloning a connection or updating its credential also preserves its SspiContextProvider. Combining a non-null SspiContextProvider with AccessToken or AccessTokenCallback now throws InvalidOperationException instead of silently discarding authentication state; applications must use one authentication mechanism at a time.
    (#​4520, #​4561, #​4644)

  • Fixed configurable retry logic installing a permanent, process-wide assembly-resolution handler that could interfere with unrelated assembly loading. The handler is now active only while an explicitly configured custom retry provider is resolved and constructed, and probes AppContext.BaseDirectory instead of the current working directory. Place custom retry assemblies in the application base directory; dependencies loaded after provider construction must be resolvable through normal application dependency resolution or an application-provided handler. (net8.0/net9.0 only)
    (#​2214, #​4547, #​4663)

Contributors

We thank the following public contributors. Their efforts toward this project are very much appreciated.

Target Platform Support

  • .NET Framework 4.6.2+ (Windows x86, Windows x64, Windows ARM64)
  • .NET 8.0+ (Windows x86, Windows x64, Windows ARM, Windows ARM64, Linux, macOS)

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.Data.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Binder from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration.Binder's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration.EnvironmentVariables's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Json from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration.Json's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.9.0 to 18.10.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.10.0

What's Changed

Full Changelog: microsoft/vstest@v18.9.0...v18.10.0

Commits viewable in compare view.

Updated Microsoft.Testing.Extensions.CodeCoverage from 18.10.0 to 18.11.2.

Release notes

Sourced from Microsoft.Testing.Extensions.CodeCoverage's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Testing.Extensions.TrxReport from 2.3.3 to 2.4.0.

Release notes

Sourced from Microsoft.Testing.Extensions.TrxReport's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated System.Reflection.MetadataLoadContext from 10.0.11 to 10.0.12.

Release notes

Sourced from System.Reflection.MetadataLoadContext's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Testcontainers.MsSql from 4.14.0 to 4.15.0.

Release notes

Sourced from Testcontainers.MsSql's releases.

4.15.0

What's Changed

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​45594466.

🚀 Features

  • feat: Add options to the Docker Compose up and down command (#​1759) @​HofmeisterAn
  • feat: Add QuestDB module (#​1618) @​FortuneN, @​HofmeisterAn
  • feat: Add Compose support (#​1750) @​HofmeisterAn
  • fix(Couchbase): Treat an already provisioned cluster as configured (#​1736) @​arnelirobles, @​HofmeisterAn
  • feat: Retry transient Docker image pull failures (#​1734) @​thomhurst, @​HofmeisterAn
  • chore(deps): Split Dependabot NuGet jobs and bump test dependencies (#​1746) @​HofmeisterAn
  • feat(MongoDb): Resolve the MongoDb shell file path once (#​1745) @​HofmeisterAn

🐛 Bug Fixes

  • fix: Detach from the container output before stopping or removing it (#​1755) @​HofmeisterAn
  • fix(GCloud): Bump test image version (#​1752) @​HofmeisterAn

📖 Documentation

  • docs: Update CONTRIBUTING.md (#​1744) @​HofmeisterAn

🧹 Housekeeping

  • chore: Improve null check, test typing, and IDE settings (#​1757) @​HofmeisterAn
  • fix(GCloud): Bump test image version (#​1752) @​HofmeisterAn
  • chore: Resolve Sonar findings (#​1751) @​HofmeisterAn
  • chore(deps): Revert Dependabot NuGet jobs (#​1748) @​HofmeisterAn
  • feat: Prepare next release cycle (4.15.0) (#​1742) @​HofmeisterAn

📦 Dependency Updates

  • chore(deps): Bump mkdocs-material from 9.7.2 to 9.7.7 (#​1758) @​dependabot[bot]
  • chore(deps): Bump the actions group with 5 updates (#​1754) @​dependabot[bot]
  • chore(deps): Bump the actions group across 1 directory with 7 updates (#​1747) @​dependabot[bot]
  • chore(deps): Revert Dependabot NuGet jobs (#​1748) @​HofmeisterAn
  • chore(deps): Split Dependabot NuGet jobs and bump test dependencies (#​1746) @​HofmeisterAn

Commits viewable in compare view.

Updated Testcontainers.PostgreSql from 4.14.0 to 4.15.0.

Release notes

Sourced from Testcontainers.PostgreSql's releases.

4.15.0

What's Changed

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​45594466.

🚀 Features

  • feat: Add options to the Docker Compose up and down command (#​1759) @​HofmeisterAn
  • feat: Add QuestDB module (#​1618) @​FortuneN, @​HofmeisterAn
  • feat: Add Compose support (#​1750) @​HofmeisterAn
  • fix(Couchbase): Treat an already provisioned cluster as configured (#​1736) @​arnelirobles, @​HofmeisterAn
  • feat: Retry transient Docker image pull failures (#​1734) @​thomhurst, @​HofmeisterAn
  • chore(deps): Split Dependabot NuGet jobs and bump test dependencies (#​1746) @​HofmeisterAn
  • feat(MongoDb): Resolve the MongoDb shell file path once (#​1745) @​HofmeisterAn

🐛 Bug Fixes

  • fix: Detach from the container output before stopping or removing it (#​1755) @​HofmeisterAn
  • fix(GCloud): Bump test image version (#​1752) @​HofmeisterAn

📖 Documentation

  • docs: Update CONTRIBUTING.md (#​1744) @​HofmeisterAn

🧹 Housekeeping

  • chore: Improve null check, test typing, and IDE settings (#​1757) @​HofmeisterAn
  • fix(GCloud): Bump test image version (#​1752) @​HofmeisterAn
  • chore: Resolve Sonar findings (#​1751) @​HofmeisterAn
  • chore(deps): Revert Dependabot NuGet jobs (#​1748) @​HofmeisterAn
  • feat: Prepare next release cycle (4.15.0) (#​1742) @​HofmeisterAn

📦 Dependency Updates

  • chore(deps): Bump mkdocs-material from 9.7.2 to 9.7.7 (#​1758) @​dependabot[bot]
  • chore(deps): Bump the actions group with 5 updates (#​1754) @​dependabot[bot]
  • chore(deps): Bump the actions group across 1 directory with 7 updates (#​1747) @​dependabot[bot]
  • chore(deps): Revert Dependabot NuGet jobs (#​1748) @​HofmeisterAn
  • chore(deps): Split Dependabot NuGet jobs and bump test dependencies (#​1746) @​HofmeisterAn

Commits viewable in compare view.

Updated Verify.XunitV3 from 31.28.0 to 33.0.1.

Release notes

Sourced from Verify.XunitV3's releases.

33.0.1

33.0.0

  • #​1848 xunit3 v4
  • #​1882 Sponsor check
  • #​1883 Upgrade Argon to 0.36.0
  • #​1884 Parse the built in ISO date format with the invariant culture
  • #​1885 Fix appended file reuse
  • #​1886 Rename the misnamed NUnit VerifyBase.ThrowsValueTask overload
  • #​1887 Fix combination callbacks
  • #​1888 Track verified files nested under the indexed target namespace
  • #​1889 Overlap the two reads when comparing binary snapshots
  • #​1890 Cache whether a type is a collection
  • #​1891 Re-run WriteVerifyAttributes when the values change
  • #​1892 Read VerifyResult.Text with the configured encoding
  • #​1893 Validate UseTextForParameters as a file name
  • #​1894 Guard TUnit parameter binding and null TestContext
  • #​1895 Stop copied settings sharing mutations of the source serialization
  • #​1896 Allow a recording to be started again once consumed
  • #​1897 Format fallback parameter names with the invariant culture
  • #​1898 Release named recording state on dispose
  • #​1899 Compile the MSTest generator against the Roslyn version it is packed for
  • #​1900 Resolve the OS platform on demand
  • #​1901 Drop the null forgiving operator from generated TestContext getter
  • #​1902 Describe the real Fixie setup in the No State found error
  • #​1903 Run before callbacks from the file level InnerVerifier constructor
  • #​1904 Never report the current process as locking a file
  • #​1905 Always write an object for ClaimsPrincipal
  • #​1906 Key the date scrubber caches on DateTimeFormat
  • #​1907 Do not let a clipboard failure replace the snapshot diff
  • #​1908 Format UTC offsets with invariant culture
  • #​1909 Nest snapshots under razor parents and Content items
  • #​1916 Bump DiffEngine to 20.3.0

33.0.0-beta.11

33.0.0-beta.10

33.0.0-beta.9

33.0.0-beta.8

33.0.0-beta.7

33.0.0-beta.6

33.0.0-beta.5

33.0.0-beta.4

33.0.0-beta.3

33.0.0-beta.1

32.0.0

  • #​1832 Add Inline snpashot support
  • #​1835 Add SettingsTask.AddContext
  • #​1847 Honor explicit DefaultValueHandling for bools
  • #​1850 Stray extension-less snapshot file crashes every run of its test
  • #​1851 Static UniqueForTargetFramework(Assembly) overloads ignore the assembly passed to them
  • #​1852 Appended files skip scrubbing and newline normalization when a stream converter is registered
  • #​1853 IgnoreParameters() ignore-all sentinel is lost when combined with another ignore source
  • #​1854 Format UTC offsets with the invariant culture
  • #​1855 Format UTC offsets with invariant culture
  • #​1856 Use ticks to decide date precision
  • #​1857 Clean # out of file name parameters
  • #​1858 Escape one character trimmed date formats
  • #​1859 Prefer the exact type when resolving a member converter
  • #​1860 Keep empty collections ignored alongside instance predicates
  • #​1861 Key the combinations name cache by reference
  • #​1862 Match MSTest overloads against the test data
  • #​1863 Report deletes as directory relative paths
  • #​1864 Name the guarded API in ThrowIfVerifyHasBeenRun
  • #​1865 Keep stack frames that have no parameter list
  • #​1866 Generate the TestContext property for record test classes
  • #​1867 Fix two CombinationResultsConverter edge cases
  • #​1868 Sign sub-hour UTC offsets
  • #​1869 Write the received file from the stream for handle based FileStreams
  • #​1870 Compare prefixes ignoring case
  • #​1871 Guard the counter value caches with a lock
  • #​1872 Sign sub-hour UTC offsets

32.0.0-beta.16

32.0.0-beta.15

32.0.0-beta.14

32.0.0-beta.13

32.0.0-beta.12

32.0.0-beta.10

32.0.0-beta.8

32.0.0-beta.7

32.0.0-beta.6

32.0.0-beta.5

32.0.0-beta.4

32.0.0-beta.3

32.0.0-beta.2

32.0.0-beta.1

Commits viewable in compare view.

Updated xunit.v3 from 4.0.0 to 4.0.1.

Release notes

Sourced from xunit.v3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Microsoft.Data.SqlClient from 7.0.2 to 7.0.3
Bumps Microsoft.Data.Sqlite from 10.0.11 to 10.0.12
Bumps Microsoft.Extensions.Configuration.Binder from 10.0.11 to 10.0.12
Bumps Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.11 to 10.0.12
Bumps Microsoft.Extensions.Configuration.Json from 10.0.11 to 10.0.12
Bumps Microsoft.NET.Test.Sdk from 18.9.0 to 18.10.0
Bumps Microsoft.Testing.Extensions.CodeCoverage from 18.10.0 to 18.11.2
Bumps Microsoft.Testing.Extensions.TrxReport from 2.3.3 to 2.4.0
Bumps System.Reflection.MetadataLoadContext from 10.0.11 to 10.0.12
Bumps Testcontainers.MsSql from 4.14.0 to 4.15.0
Bumps Testcontainers.PostgreSql from 4.14.0 to 4.15.0
Bumps Verify.XunitV3 from 31.28.0 to 33.0.1
Bumps xunit.v3 from 4.0.0 to 4.0.1

---
updated-dependencies:
- dependency-name: Microsoft.Data.SqlClient
  dependency-version: 7.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.Configuration.Binder
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.Configuration.EnvironmentVariables
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Microsoft.Testing.Extensions.CodeCoverage
  dependency-version: 18.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Microsoft.Testing.Extensions.TrxReport
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: System.Reflection.MetadataLoadContext
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Testcontainers.MsSql
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Testcontainers.PostgreSql
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Verify.XunitV3
  dependency-version: 33.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
- dependency-name: xunit.v3
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Sep 13, 2026
@github-actions

github-actions Bot commented Sep 13, 2026

Copy link
Copy Markdown

❌ NSchema.Gauntlet

❌ Build

The solution failed to build.

Compiler output
/home/runner/.nuget/packages/verify/33.0.1/buildTransitive/Verify.targets(86,5): error SC021: No license specified. Package 'Verify' requires a SponsorCheck license property. 'Verify' is published in owner mode, so sponsorship is configured once via an MSBuild property (in Directory.Build.props or the consuming project).
/home/runner/.nuget/packages/verify/33.0.1/buildTransitive/Verify.targets(86,5): error SC021: [/home/runner/work/NSchema.Gauntlet/NSchema.Gauntlet/tests/NSchema.Gauntlet/NSchema.Gauntlet.csproj]
/home/runner/.nuget/packages/verify/33.0.1/buildTransitive/Verify.targets(86,5): error SC021: Set ONE of the following properties (in a <PropertyGroup> in Directory.Build.props or the consuming project):
/home/runner/.nuget/packages/verify/33.0.1/buildTransitive/Verify.targets(86,5): error SC021: Option — Sponsor on GitHub Sponsors (https://github.com/VerifyTests/Verify/blob/main/docs/maintenance-fee.md):
/home/runner/.nuget/packages/verify/33.0.1/buildTransitive/Verify.targets(86,5): error SC021: <Verify_GitHubSponsorAccount><your-github-account></Verify_GitHubSponsorAccount>
/home/runner/.nuget/packages/verify/33.0.1/buildTransitive/Verify.targets(86,5): error SC021: Option — Sponsor privately (a private or incognito sponsorship is never bundled, so declare an end month alongside the account; at most 12 months out):
/home/runner/.nuget/packages/verify/33.0.1/buildTransitive/Verify.targets(86,5): error SC021: <Verify_SponsorshipPrivateUntil>yyyy-MM</Verify_SponsorshipPrivateUntil>
/home/runner/.nuget/packages/verify/33.0.1/buildTransitive/Verify.targets(86,5): error SC021: Option — Time-bounded license (replace yyyy-MM with the last covered month):
/home/runner/.nuget/packages/verify/33.0.1/buildTransitive/Verify.targets(86,5): error SC021: <Verify_SponsorshipLicensedUntil>yyyy-MM</Verify_SponsorshipLicensedUntil>
/home/runner/.nuget/packages/verify/33.0.1/buildTransitive/Verify.targets(86,5): error SC021: Option — Claim a publisher-defined exemption (replace the name with one offered by the publisher):
/home/runner/.nuget/packages/verify/33.0.1/buildTransitive/Verify.targets(86,5): error SC021: <Verify_SponsorshipExemption>MaintainerConsulting</Verify_SponsorshipExemption>
/home/runner/.nuget/packages/verify/33.0.1/buildTransitive/Verify.targets(86,5): error SC021: <Verify_SponsorshipExemptionUntil>yyyy-MM</Verify_SponsorshipExemptionUntil>
/home/runner/.nuget/packages/verify/33.0.1/buildTransitive/Verify.targets(86,5): error SC021: Option — Mark as ignored (you accept that the build is in breach of the package license):
/home/runner/.nuget/packages/verify/33.0.1/buildTransitive/Verify.targets(86,5): error SC021: <Verify_SponsorshipLicenseIgnored>true</Verify_SponsorshipLicenseIgnored>
/home/runner/.nuget/packages/verify/33.0.1/buildTransitive/Verify.targets(86,5): error SC021: Sponsor at https://github.com/VerifyTests/Verify/blob/main/docs/maintenance-fee.md
/home/runner/.nuget/packages/verify/33.0.1/buildTransitive/Verify.targets(86,5): error SC021: See: https://github.com/SimonCropp/SponsorCheck/blob/main/docs/VerifierDiagnosticCodes.md#sc021

View the run logs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants