Skip to content

Bump the nuget-all group with 4 updates - #501

Merged
rvanmaanen merged 1 commit into
mainfrom
dependabot/nuget/nuget-all-fc39a96363
Aug 5, 2026
Merged

Bump the nuget-all group with 4 updates#501
rvanmaanen merged 1 commit into
mainfrom
dependabot/nuget/nuget-all-fc39a96363

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 5, 2026

Copy link
Copy Markdown
Contributor

Updated bunit from 2.8.6 to 2.9.0.

Release notes

Sourced from bunit's releases.

2.9.0

Changed

  • Update to stable package of AngleSharp.Css

Commits viewable in compare view.

Updated Handlebars.Net from 2.1.6 to 2.3.0.

Release notes

Sourced from Handlebars.Net's releases.

2.3.0

Changes

  • Nullable Reference Types @​TheConstructor (#​642)

    The entire public API surface is now annotated for Nullable Reference Types.

    Compatibility notes:

    • Binary- and runtime-compatible. Nullability annotations are compile-time metadata only; generated IL is unchanged. Projects without <Nullable>enable</Nullable> are unaffected.
    • Nullable-enabled consumers get compiler-checked null contracts on the public API: Try* methods are annotated with [MaybeNullWhen(false)], optional parameters and nullable returns are declared with ?, etc.
    • If you implement extensibility interfaces, their signatures gained nullability annotations and your existing implementations may produce nullability-mismatch warnings (e.g. CS8767) until you add the matching ? annotations. Affected: IPartialTemplateResolver, ITextEncoder, IMemberAccessor, IHelperResolver, IFormatterProvider, IObjectDescriptorProvider, IHelperDescriptor<T>, and the ViewEngineFileSystem base class.
    • HandlebarsConfiguration.FileSystem is now declared nullable (ViewEngineFileSystem?), matching its actual default.
    • The built-in collection formatters now throw ArgumentNullException with a parameter name instead of a raw NullReferenceException when given a null or mismatched value.

Contributors

@​TheConstructor

Full Changelog: Handlebars-Net/Handlebars.Net@2.2.0...2.3.0

2.2.0

Handlebars.Net 2.2.0

⚠️ Behavior & compatibility changes — please read before upgrading

  • Dropped end-of-life target frameworks. Removed netstandard1.3, net451, and net6. The package now targets netstandard2.0, netstandard2.1, and net8.0. Modern consumers (.NET Framework 4.6.1+, .NET Core 2.0+, .NET 5/8+) are unaffected via netstandard2.0; only consumers on the removed legacy frameworks need to stay on 2.1.x.
  • Single quote (') is now HTML-encoded by default (#​546), matching Handlebars.js behavior. This is invisible when rendering HTML, but changes raw output bytes — review any exact-string or snapshot assertions on rendered output.

Bug fixes

  • Case-sensitive resolution of same-spelling path variables, resolved independently in PathBinder (#​434)
  • Case-sensitive key lookup for IDictionary/Hashtable (#​521) and DictionaryMemberAccessor (#​466)
  • @​partial-block now usable inside #if and as a block partial (#​519)
  • #if with includeZero=true now supported; includeZero honored in built-in conditional blocks (#​285)
  • Parent context traversal inside custom block helpers within #each (#​539)
  • Safe-string flag preserved when helper output crosses a subexpression boundary (#​543)
  • WriteSafeString encoding consistent regardless of helper registration order (#​559)
  • Preserve backslashes in template literal text (#​462) and double backslashes in static text (#​349)
  • Preserve partial indentation (#​614)
  • Handle escaped double-quotes in delimited string literal arguments (#​584)
  • Allow Unicode letters as first character in identifiers (#​416); strip invisible Unicode chars (BOM, etc.) from identifiers (#​605)
  • Clearer error when a partial is registered on the wrong Handlebars instance (#​545)
  • Removed byref/in delegate parameters incompatible with Mono/Xamarin (#​458)
  • Prevent unbounded DictionarySlim growth when replacing existing keys (#​541)
  • Normalize CRLF to LF in StaticConverter for platform-independent output

Maintenance

  • CI moved to windows-latest; bumped deprecated GitHub Actions and SDK versions; pinned third-party actions to commit SHAs
  • Resolved SonarCloud security/quality findings; dev environment updated to .NET 10
  • Added render-time/compile-scaling benchmark suite and Handlebars.js regression coverage

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 4.14.1 to 4.14.2.

Release notes

Sourced from Microsoft.Identity.Web's releases.

4.14.2

Dependencies updates

  • Bump the Microsoft.IdentityModel.* (Wilson) version to 8.22.0. See #​3986.
  • Fix the net8.0 crypto floor to use the patched System.Security.Cryptography.Xml 8.0.4 (and its System.Security.Cryptography.Pkcs 8.0.1 dependency) instead of over-bumping to the 9.0.18 servicing line (CVE-2026-47302, -47304, -50525, -50648). net9.0 (9.0.18) and net10.0 (10.0.10) are unchanged. See #​3989.

Commits viewable in compare view.

Updated Microsoft.Identity.Web.UI from 4.14.1 to 4.14.2.

Release notes

Sourced from Microsoft.Identity.Web.UI's releases.

4.14.2

Dependencies updates

  • Bump the Microsoft.IdentityModel.* (Wilson) version to 8.22.0. See #​3986.
  • Fix the net8.0 crypto floor to use the patched System.Security.Cryptography.Xml 8.0.4 (and its System.Security.Cryptography.Pkcs 8.0.1 dependency) instead of over-bumping to the 9.0.18 servicing line (CVE-2026-47302, -47304, -50525, -50648). net9.0 (9.0.18) and net10.0 (10.0.10) are unchanged. See #​3989.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps bunit from 2.8.6 to 2.9.0
Bumps Handlebars.Net from 2.1.6 to 2.3.0
Bumps Microsoft.Identity.Web from 4.14.1 to 4.14.2
Bumps Microsoft.Identity.Web.UI from 4.14.1 to 4.14.2

---
updated-dependencies:
- dependency-name: bunit
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Handlebars.Net
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Identity.Web
  dependency-version: 4.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-all
- dependency-name: Microsoft.Identity.Web.UI
  dependency-version: 4.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 5, 2026
@dependabot
dependabot Bot requested review from rajbos and rvanmaanen as code owners August 5, 2026 09:57
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Aug 5, 2026
@rvanmaanen
rvanmaanen merged commit e426afe into main Aug 5, 2026
16 of 17 checks passed
@rvanmaanen
rvanmaanen deleted the dependabot/nuget/nuget-all-fc39a96363 branch August 5, 2026 17:42
@github-actions

github-actions Bot commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

✅ PR Preview Environment Removed

The preview environment for this pull request has been removed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant