Bump the nuget-minor-and-patch group with 5 updates

[dependabot]

Updated Google.Protobuf from 3.35.1 to 3.36.1.

Release notes

Sourced from Google.Protobuf's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Grpc.Tools from 2.82.0 to 2.83.0.

Release notes

Sourced from Grpc.Tools's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated JsonSchema.Net from 9.2.2 to 9.4.0.

Release notes

Sourced from JsonSchema.Net's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.28 to 8.0.31.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

8.0.31

Release

What's Changed

• [release/8.0] Update branding to 8.0.31 by @​dotnet-bot in [release/8.0] Update branding to 8.0.31 dotnet/aspnetcore#68235
• [release/8.0] Backport FormsInputDateTest fixes by @​ilonatommy in [release/8.0] Backport FormsInputDateTest fixes dotnet/aspnetcore#68125
• [release/8.0] (deps): Bump src/submodules/googletest from 3064a60 to 3940de9 by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from 3064a60 to 3940de9 dotnet/aspnetcore#68173
• [release/8.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#68189
• [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#67801
• [release/8.0] Quarantine System_UsesProvidedCertificateNotFromStore by @​wtgodbe in [release/8.0] Quarantine System_UsesProvidedCertificateNotFromStore dotnet/aspnetcore#68242
• [8.0] Fix Debian package descriptions by @​wtgodbe in [8.0] Fix Debian package descriptions dotnet/aspnetcore#68255
• Remove Publish-Build-Assets variable group from release/8.0 by @​missymessa in Remove Publish-Build-Assets variable group from release/8.0 dotnet/aspnetcore#68265
• [release/8.0] Drop Microsoft.AspNetCore.Grpc.Swagger by @​Youssef1313 with @​Copilot in [release/8.0] Drop Microsoft.AspNetCore.Grpc.Swagger dotnet/aspnetcore#67955
• Merging internal commits for release/8.0 by @​dotnet-bot in Merging internal commits for release/8.0 dotnet/aspnetcore#68361
• [release/8.0] Update OpenAPI to latest by @​Youssef1313 in [release/8.0] Update OpenAPI to latest dotnet/aspnetcore#68491

Full Changelog: dotnet/aspnetcore@v8.0.30...v8.0.31

8.0.30

Release

What's Changed

• [release/8.0] Update branding to 8.0.30 by @​dotnet-bot in [release/8.0] Update branding to 8.0.30 dotnet/aspnetcore#67621
• [release/8.0] (deps): Bump src/submodules/googletest from 7140cd4 to 973323e by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from 7140cd4 to 973323e dotnet/aspnetcore#67525
• [release/8.0] (deps): Bump src/submodules/MessagePack-CSharp from 9614e6f to 365965f by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/MessagePack-CSharp from 9614e6f to 365965f dotnet/aspnetcore#67524
• Update ws package version to 7.5.11 by @​birarroshan in Update ws package version to 7.5.11 dotnet/aspnetcore#67408
• [release/8.0] Update CI pipeline to use Windows 2022 image by @​github-actions[bot] in [release/8.0] Update CI pipeline to use Windows 2022 image dotnet/aspnetcore#67289
• [release/8.0] Update Selenium and Playwright versions to match main by @​wtgodbe in [release/8.0] Update Selenium and Playwright versions to match main dotnet/aspnetcore#67273
• [release/8.0] improve CI flakiness by @​wtgodbe in [release/8.0] improve CI flakiness dotnet/aspnetcore#67645
• [release/8.0] (deps): Bump src/submodules/googletest from 973323e to 3064a60 by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from 973323e to 3064a60 dotnet/aspnetcore#67654
• Merging internal commits for release/8.0 by @​dotnet-bot in Merging internal commits for release/8.0 dotnet/aspnetcore#67796
• Use build identity (System.AccessToken) for internal feed creds instead of expired dn-bot-dnceng-artifact-feeds-rw PAT (release/8.0) by @​missymessa in Use build identity (System.AccessToken) for internal feed creds instead of expired dn-bot-dnceng-artifact-feeds-rw PAT (release/8.0) dotnet/aspnetcore#67854
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#67943

New Contributors

• @​birarroshan made their first contribution in Update ws package version to 7.5.11 dotnet/aspnetcore#67408

Full Changelog: dotnet/aspnetcore@v8.0.29...v8.0.30

8.0.29

Release

What's Changed

• Update branding to 8.0.29 by @​vseanreesermsft in Update branding to 8.0.29 dotnet/aspnetcore#66982
• [release/8.0] (deps): Bump src/submodules/googletest from d72f9c8 to a721f1b by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from d72f9c8 to a721f1b dotnet/aspnetcore#66973
• [release/8.0] Update System.Security.Cryptography.Xml in RepoTasks by @​wtgodbe in [release/8.0] Update System.Security.Cryptography.Xml in RepoTasks dotnet/aspnetcore#66766
• [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#66699
• [release/8.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#66664
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#66946
• [release/8.0] Add 1ES Unofficial pipeline for Components E2E tests by @​wtgodbe in [release/8.0] Add 1ES Unofficial pipeline for Components E2E tests dotnet/aspnetcore#66989
• Merging internal commits for release/8.0 by @​vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#67105
• [release/8.0] Update npm dependencies by @​wtgodbe in [release/8.0] Update npm dependencies dotnet/aspnetcore#67144
• [release/8.0] Update Microsoft Identity Web package versions to 3.15.1 by @​wtgodbe in [release/8.0] Update Microsoft Identity Web package versions to 3.15.1 dotnet/aspnetcore#67164
• [release/8.0] (deps): Bump src/submodules/googletest from a721f1b to 7140cd4 by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from a721f1b to 7140cd4 dotnet/aspnetcore#67222
• [release/8.0] Backport docker image fix by @​wtgodbe in [release/8.0] Backport docker image fix dotnet/aspnetcore#67279
• [release/8.0] Reject ASCII control characters in cookie auth return URLs by @​github-actions[bot] in [release/8.0] Reject ASCII control characters in cookie auth return URLs dotnet/aspnetcore#67157

Full Changelog: dotnet/aspnetcore@v8.0.28...v8.0.29

Commits viewable in compare view.

Updated Microsoft.Data.SqlClient from 7.0.2 to 7.0.3.

Release notes

Sourced from Microsoft.Data.SqlClient's releases.

7.0.3

This update brings the following changes since the 7.0.2 release:

The core driver and its companion packages ship together as version 7.0.3. Update the companion packages you use alongside the driver to 7.0.3. Assembly versions remain 7.0.0.0, unchanged from 7.0.2.

Companion package release notes

• Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider 7.0.3
• Microsoft.Data.SqlClient.Extensions.Azure 7.0.3 — includes the Entra ID authority parsing fix for Dataverse/Dynamics 365 connections.
• Microsoft.Data.SqlClient.Extensions.Abstractions 7.0.3
• Microsoft.Data.SqlClient.Internal.Logging 7.0.3

Changed

• Updated the Microsoft.Data.SqlClient.SNI and Microsoft.Data.SqlClient.SNI.runtime dependencies to 6.0.3 (was 6.0.2).
  (#​4599)

Fixed

• Fixed a SqlBulkCopy regression in environments where the application login cannot read sys.all_columns. Bulk copy now falls back to the earlier column-discovery behavior when that permission is unavailable. Support for hidden columns and SQL Graph column aliases still requires access to the metadata view.
  (#​4370, #​4306, #​4402)

• Fixed a memory-allocation regression in connection and command operations caused by formatting diagnostic strings even when tracing was disabled. Also corrected trace messages that reported an incorrect object ID or could throw FormatException when traced values contained braces.
  (#​4528, #​4533)

• Fixed ServerCertificate validation on the managed SNI path so the configured certificate is compared against the server certificate even when the server certificate passes chain and host-name validation. When certificate validation is enabled, a missing, unreadable, or invalid certificate file, a certificate mismatch, or a missing server certificate now causes the TLS handshake to fail instead of bypassing the configured certificate check. (net8.0/net9.0 only)
  (#​4445, #​4583)

• Fixed Always Encrypted VSM/HGS enclave attestation to verify that the enclave public key used to establish a session matches the key committed to by the signed attestation report. Missing, malformed, or mismatched key-binding data now causes attestation to fail before the session secret is derived.
  (#​4532, #​4553)

• Fixed SqlConnection.AccessTokenCallback not disabling Transparent Network IP Resolution by default, making it consistent with SqlConnection.AccessToken. An explicitly configured TransparentNetworkIPResolution connection-string value still takes precedence. (net462 only)
  (#​4520, #​4561)

• Fixed authentication state handling so clearing SqlConnection.AccessToken, AccessTokenCallback, or SspiContextProvider preserves the other authentication values in the connection pool key. Cloning a connection or updating its credential also preserves its SspiContextProvider. Combining a non-null SspiContextProvider with AccessToken or AccessTokenCallback now throws InvalidOperationException instead of silently discarding authentication state; applications must use one authentication mechanism at a time.
  (#​4520, #​4561, #​4644)

• Fixed configurable retry logic installing a permanent, process-wide assembly-resolution handler that could interfere with unrelated assembly loading. The handler is now active only while an explicitly configured custom retry provider is resolved and constructed, and probes AppContext.BaseDirectory instead of the current working directory. Place custom retry assemblies in the application base directory; dependencies loaded after provider construction must be resolvable through normal application dependency resolution or an application-provided handler. (net8.0/net9.0 only)
  (#​2214, #​4547, #​4663)

Contributors

We thank the following public contributors. Their efforts toward this project are very much appreciated.

• edwardneal

Target Platform Support

• .NET Framework 4.6.2+ (Windows x86, Windows x64, Windows ARM64)
• .NET 8.0+ (Windows x86, Windows x64, Windows ARM, Windows ARM64, Linux, macOS)

... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions