Bump the nuget group with 11 updates

[dependabot]

Updated Aspire.Hosting.AppHost from 13.4.0 to 13.4.3.

Release notes

Sourced from Aspire.Hosting.AppHost's releases.

13.4.3

What's New in Aspire 13.4.3

Patch release for Aspire 13.4 with a fix for persistent container endpoint allocation regressions introduced in 13.4.

🐛 Fixes

• 🔌 Persistent container endpoints had incorrect default behavior — Persistent containers were defaulting to proxyless endpoint behavior instead of the proxied behavior used by normal containers. This caused integrations that depend on endpoint allocation before resource startup (such as the KeyVault emulator) to fail. Persistent containers now default to proxied endpoints matching normal container behavior; opt out with isProxied: false or WithEndpointProxySupport(false). Proxyless container endpoints with only a targetPort specified now also resolve immediately to that port instead of waiting for delayed allocation. (#​17960, @​danegsta)

🏷️ Housekeeping

• 🛠️ Unblocked WinGet manifest publishing on locked-down 1ES agents and updated manifest tags (#​17958)

---

Full Changelog: microsoft/aspire@v13.4.2...v13.4.3

Full commit: 4f218933552e18ff2874d1b6d5dc3fe671e3b6d9

Generated by Generate release notes for a new stable Aspire release · ● 4.7M

13.4.2

What's New in Aspire 13.4.2

Patch release for Aspire 13.4 with a fix for Redis persistent container deadlock on startup when using TLS.

🐛 Fixes

• 🔴 Redis with WithLifetime(ContainerLifetime.Persistent) could deadlock on startup — Redis TLS startup arguments used the public/allocated host ports instead of the internal target ports. When the public port differed from the target port (or was not yet allocated) the container would listen on an unexpected port and become unreachable. The TLS and non-TLS startup arguments now bind to target ports, matching what Redis expects internally. Fixes #​17822. (#​17827, backported via #​17850, @​danegsta)

🏷️ Housekeeping

• 🚀 Bumped branding to 13.4.2 (#​17876)

---

Full Changelog: microsoft/aspire@v13.4.1...v13.4.2

Full commit: d7d0b6759ce4b936c76bc4775814d27db560dd6d

Generated by Generate release notes for a new stable Aspire release · ● 5M

13.4.1

What's New in Aspire 13.4.1

Patch release for Aspire 13.4 with fixes for explicit-start resource lifecycle callbacks, Redis persistent container startup, proxyless endpoint allocation, and a duplicated profiles block in the empty C# AppHost template.

🐛 Fixes

• ⏱️ Explicit-start resources triggered lifecycle callbacks too early — Session-scoped resources marked with WithExplicitStart() were having their execution configuration callbacks (environment variables, arguments, certificates) evaluated at AppHost startup instead of at manual start. This meant user-interaction callbacks such as WithEnvironment(ctx => PromptForValueAsync(...)) were called before the user triggered the resource. DCP registration is now deferred until the user manually starts the resource; persistent explicit-start resources still register immediately but patch the existing DCP record to Start = true rather than deleting and recreating it. Fixes #​17813. (#​17825, backported via #​17826, @​danegsta)
• 🔴 Redis with WithLifetime(ContainerLifetime.Persistent) could deadlock on startup — Redis TLS startup arguments used the public/allocated host ports instead of the internal target ports. When the public port differed from the target port (or was not yet allocated) the container would listen on an unexpected port and become unreachable. The TLS and non-TLS startup arguments now bind to target ports, matching what Redis expects internally. Fixes #​17822. (#​17827, backported via #​17850, @​danegsta)
• 🔌 Proxyless container endpoint could hang when resolved before container creation — Referencing a proxyless container endpoint in an environment variable callback (before the container port spec was finalized) could deadlock. An on-demand allocation path now commits the target port as the fallback host port in that case; once BuildContainerPorts runs, normal DCP dynamic port assignment takes over for any later resolution. (#​17851, backported via #​17859, @​danegsta)
• 📄 Empty C# AppHost template emitted duplicate profiles block — aspire new aspire-empty on 13.4 produced an aspire.config.json with a profiles block that duplicated the content already present in apphost.run.json, causing redundant launch configuration. The embedded template now contains only the required appHost.path binding; profile configuration lives exclusively in apphost.run.json. Fixes #​17660. (#​17781, backported via #​17820, @​mitchdenny)

🏷️ Housekeeping

• 📦 Added Aspire CLI npm package to the release pipeline so the npm distribution is published as part of stable releases. (#​17297, backported via #​17766, @​adamint)
• 🚀 Bumped branding to 13.4.1 (#​17819)

---

Full Changelog: microsoft/aspire@v13.4.0...v13.4.1

Full commit: cf985fa817dd5863e7f62eb74fa1725ab5069ed2

Generated by Generate release notes for a new stable Aspire release · ● 1.0.40

Generated by Generate release notes for a new stable Aspire release · ● 3.9M

Commits viewable in compare view.

Updated Aspire.Hosting.PostgreSQL from 13.4.0 to 13.4.3.

Release notes

Sourced from Aspire.Hosting.PostgreSQL's releases.

13.4.3

What's New in Aspire 13.4.3

Patch release for Aspire 13.4 with a fix for persistent container endpoint allocation regressions introduced in 13.4.

🐛 Fixes

• 🔌 Persistent container endpoints had incorrect default behavior — Persistent containers were defaulting to proxyless endpoint behavior instead of the proxied behavior used by normal containers. This caused integrations that depend on endpoint allocation before resource startup (such as the KeyVault emulator) to fail. Persistent containers now default to proxied endpoints matching normal container behavior; opt out with isProxied: false or WithEndpointProxySupport(false). Proxyless container endpoints with only a targetPort specified now also resolve immediately to that port instead of waiting for delayed allocation. (#​17960, @​danegsta)

🏷️ Housekeeping

• 🛠️ Unblocked WinGet manifest publishing on locked-down 1ES agents and updated manifest tags (#​17958)

---

Full Changelog: microsoft/aspire@v13.4.2...v13.4.3

Full commit: 4f218933552e18ff2874d1b6d5dc3fe671e3b6d9

Generated by Generate release notes for a new stable Aspire release · ● 4.7M

13.4.2

What's New in Aspire 13.4.2

Patch release for Aspire 13.4 with a fix for Redis persistent container deadlock on startup when using TLS.

🐛 Fixes

• 🔴 Redis with WithLifetime(ContainerLifetime.Persistent) could deadlock on startup — Redis TLS startup arguments used the public/allocated host ports instead of the internal target ports. When the public port differed from the target port (or was not yet allocated) the container would listen on an unexpected port and become unreachable. The TLS and non-TLS startup arguments now bind to target ports, matching what Redis expects internally. Fixes #​17822. (#​17827, backported via #​17850, @​danegsta)

🏷️ Housekeeping

• 🚀 Bumped branding to 13.4.2 (#​17876)

---

Full Changelog: microsoft/aspire@v13.4.1...v13.4.2

Full commit: d7d0b6759ce4b936c76bc4775814d27db560dd6d

Generated by Generate release notes for a new stable Aspire release · ● 5M

13.4.1

What's New in Aspire 13.4.1

Patch release for Aspire 13.4 with fixes for explicit-start resource lifecycle callbacks, Redis persistent container startup, proxyless endpoint allocation, and a duplicated profiles block in the empty C# AppHost template.

🐛 Fixes

• ⏱️ Explicit-start resources triggered lifecycle callbacks too early — Session-scoped resources marked with WithExplicitStart() were having their execution configuration callbacks (environment variables, arguments, certificates) evaluated at AppHost startup instead of at manual start. This meant user-interaction callbacks such as WithEnvironment(ctx => PromptForValueAsync(...)) were called before the user triggered the resource. DCP registration is now deferred until the user manually starts the resource; persistent explicit-start resources still register immediately but patch the existing DCP record to Start = true rather than deleting and recreating it. Fixes #​17813. (#​17825, backported via #​17826, @​danegsta)
• 🔴 Redis with WithLifetime(ContainerLifetime.Persistent) could deadlock on startup — Redis TLS startup arguments used the public/allocated host ports instead of the internal target ports. When the public port differed from the target port (or was not yet allocated) the container would listen on an unexpected port and become unreachable. The TLS and non-TLS startup arguments now bind to target ports, matching what Redis expects internally. Fixes #​17822. (#​17827, backported via #​17850, @​danegsta)
• 🔌 Proxyless container endpoint could hang when resolved before container creation — Referencing a proxyless container endpoint in an environment variable callback (before the container port spec was finalized) could deadlock. An on-demand allocation path now commits the target port as the fallback host port in that case; once BuildContainerPorts runs, normal DCP dynamic port assignment takes over for any later resolution. (#​17851, backported via #​17859, @​danegsta)
• 📄 Empty C# AppHost template emitted duplicate profiles block — aspire new aspire-empty on 13.4 produced an aspire.config.json with a profiles block that duplicated the content already present in apphost.run.json, causing redundant launch configuration. The embedded template now contains only the required appHost.path binding; profile configuration lives exclusively in apphost.run.json. Fixes #​17660. (#​17781, backported via #​17820, @​mitchdenny)

🏷️ Housekeeping

• 📦 Added Aspire CLI npm package to the release pipeline so the npm distribution is published as part of stable releases. (#​17297, backported via #​17766, @​adamint)
• 🚀 Bumped branding to 13.4.1 (#​17819)

---

Full Changelog: microsoft/aspire@v13.4.0...v13.4.1

Full commit: cf985fa817dd5863e7f62eb74fa1725ab5069ed2

Generated by Generate release notes for a new stable Aspire release · ● 1.0.40

Generated by Generate release notes for a new stable Aspire release · ● 3.9M

Commits viewable in compare view.

Updated FsCheck.Xunit from 2.16.6 to 3.3.3.

Release notes

Sourced from FsCheck.Xunit's releases.

3.3.3

Add Gen.pick and Gen.tryPick functions.
Fill NullReferenceException when using Replay with an Implies combinator.
Improve behavior of stamps and labels when using And/Or property combinators.

3.3.2

Fixed FsCheck.NUnit failure reporting. (by Brian Rourke Boll)
Added a replay hint to failure message. (by Brian Rourke Boll)

3.3.1

Update xunit.v3.extensibility.core to v3.0.1 to fix a test discovery issue. (by Hyogeol Lee)

3.3.0

Added FsCheck.Xunit.v3. (by JohSand)

3.2.0

Support C# struct record generation. (by Brian Rourke Boll)
Xunit Property respects IAsyncLifetime. (by Arialdo Martini)

3.1.0

Support Async<'Testable> & Task<'Testable>. Slight behavior change: an explicit upcast to non-generic Task (:> Task) is now needed for tests involving Task<'T> where 'T is not itself a testable type. (by Brian Rourke Boll)

3.0.1

• FsCheck.Xunit: target net462 explicitly, so xunit picks the right runner on .NET Framework.

3.0.0

• Fix stamp missing for final test. (by Calum Sieppert)

• FsCheck.NUnit: updated to NUnit 4. (with David Naylor)

• FsCheck.NUnit: implement PropertiesAttribute. (by Oleksandr Bogomaz)

• FsCheck.NUnit: handle NUnit's signalling exceptions. (by Oleksandr Bogomaz)

• FsCheck.Xunit: fixed MissingMethodException caused by integration issue with xunit 2.9.x.

3.0.0-rc3

• Breaking change: confusingly named StringNoNnulls is renamed to StringNoNullChar.
• Breaking change: The operators |@, @| and %> are removed. Please use Prop.label instead.
• Added more ForAll overloads for various Task types.
• The collections types NonEmptySet, NonEmptyArray and FixedLengthArray now implement IEnnumerable to avoid a call to Get in common scenarios.
• Enabled source linking and deterministic builds. (by Patrick Stevens)

3.0.0-rc2

• Negative decimals are now also generated. (by Stephen Smith)

• Relax FsCheck.Xunit's restriction on xUnit versions. (by Tom Rijnbeek)

• Made Gen.choose64 public.

• Remove dependency on FAKE and paket in favor of standard .NET tools. (by Patrick Stevens)cription of the release

3.0.0-rc1

• Enable properties that return Task<T>. (by Mark Seemann)

• Includes all changes up to 2.16.6.

3.0.0-beta2

Fixed bug that caused exceptions not to be propagated to output correctly.
Added a few missing methods in Fluent.Arbitrary.
Add a few missing Prop.ForAll overloads.
Includes changes in 2.16.4.

3.0.0-beta1

Backwards incompatible*: Refactor and split of the Gen and Arbitrary APIs into FsCheck.FSharp and FsCheck.Fluent. This is a first step in splitting the entire API into a functional (for F# consumers) and fluent (for C# and VB.NET consumers) interface. This should be clearer for both kinds of consumers.
By and large, if you are an F# user, now open FsCheck.FSharp in addition to open FsCheck. If you are a C# or VB.NET user, add using FsCheck.Fluent.
Backwards incompatible*: redesigned API for per-type Arbitrary instance discovery and lookup. There is no longer a single global, mutable map of type to Arbitrary instances, instead there are any number of immutable IArbMaps that can be configured at your leisure, and set via Config.WithArbitrary on the test.
Detailed changes to FsCheck.FSharp.Gen: Added RequireQualifiedAccess. Added apply and bind. Renamed collect and sequence to collect/sequenceToList/Array/Seq for clarity. Removed unzip and unzip3 - their implementation is problematic, and it's hard to see a use case for them. Removed subListOfToIlist, subListOfArr - these returned IList<'T> types. Untupled rows,cols arguments in array2DOfDim.
Detailed changes to FsCheck.Fluent.Gen: Split into non-extension methods on Gen and extension methods on Gen<T> type in GenExtensions. Removed Gen.Apply - not useful without partial application. Two, Three, Four and Zip now output ValueTuples, which is idiomatic in modern C#, and are only visible as extension methods on Gen<T>. Removed the overloads of Zip with arity 3. Changed the return type of methods that returned IList<T> previously to List<T>. Split the Sample method with optional arguments in three overloads, this is better for backwards compatibilty going forward.
Detailed changes to FsCheck.FSharp.Arb: Removed fromGenShrinkFunc. Removed register, registerByType, from, generate and shrink - these are replaced by functions on ArbMap, resp. mergeWith, mergeWithType, arbitrary and generate. Made Arb.Default internal. Default types should now be looked up using ArbMap, e.g. ArbMap.defaults |> ArbMap.arbitrary<list<int>>.
Detailed changes to FsCheck.Fluent.Arb: Removed extension method ToArbitrary that took an F# function as argument for the shrinker. Renamad Arb.From methods to Arbitrary.From - C# does not tolerate ambiguity between using two types of the same name in the same namespace. Removed Register, RegisterByType, From, Generate and Shrink - these are replaced by methods on ArbMap, resp. Merge<'T>, Merge, ArbFor and GeneratorFor. Made Arb.Default internal. Default Arbitrary types should now be looked up using ArbMap, e.g. ArbMap.Default.ArbFor<int[]>().
First pass at improving XML docs for Gen API.
Fixed bug in try..with computation expression builder.
Added support for let!...and!... syntax in computation expression builder.

3.0.0-alpha4

Propagate thread-local arbitraries to thread pool threads that are executing tests.

3.0.0-alpha3

NuGet packaging: relax FSharp.Core constraint to 4.0 and higher for .NET Desktop.

3.0.0-alpha2

Remove PCL builds. NET Standard is the way forward. Latest FSharp.Core builds don't even include PCL versions. As a result of the FSharp.Core dependency, FsCheck targets NET Standard 1.6.
Remove Prop.within.
Remove tuple and list testables.
Bug fix: Tasks that were faulted or canceled were not detected as test failures (by chrisoverzero)

3.0.0-alpha1

Update random number generator to SplitMix algorithm. (with thanks to Jack Pappas for making it fast)
Add support for parallel and async testing. (by Sergey - great effort!)
Simplify sampling data: Gen.sample et al.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Components.Web from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.Components.Web's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Identity.EntityFrameworkCore from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.Identity.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Tools from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Tools's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Polly from 8.6.6 to 8.7.0.

Release notes

Sourced from Polly's releases.

8.7.0

Highlights

• Adds caller cancellation token propagation in hedging and timeout strategies by @​DaRosenberg in Adds caller cancellation token propagation in hedging and timeout strategies App-vNext/Polly#3094
• Telemetry refactoring by @​martincostello in Telemetry refactoring App-vNext/Polly#2985

What's Changed

• Update zizmor to 1.22.0 by @​martincostello in Update zizmor to 1.22.0 App-vNext/Polly#2955
• Increase test timeout by @​martincostello in Increase test timeout App-vNext/Polly#2956
• Disable secrets-outside-env audit by @​martincostello in Disable secrets-outside-env audit App-vNext/Polly#2969
• Update zizmor to 1.23.1 by @​martincostello in Update zizmor to 1.23.1 App-vNext/Polly#2970
• Update .NET NuGet packages by @​martincostello in Update .NET NuGet packages App-vNext/Polly#2982
• Add AGENTS.md by @​martincostello in Add AGENTS.md App-vNext/Polly#2983
• Fix typo in HTTP client integrations documentation by @​alexravenna in Fix typo in HTTP client integrations documentation App-vNext/Polly#2984
• Remove unused constant by @​martincostello in Remove unused constant App-vNext/Polly#2986
• Fix non-deterministic branch coverage in HedgingExecutionContext hedging delay tests by @​Copilot in Fix non-deterministic branch coverage in HedgingExecutionContext hedging delay tests App-vNext/Polly#2997
• Bump GitHubActionsTestLogger to 3.0.2 by @​martincostello in Bump GitHubActionsTestLogger to 3.0.2 App-vNext/Polly#3000
• Bump actionlint to v1.7.12 by @​martincostello in Bump actionlint to v1.7.12 App-vNext/Polly#3006
• Bump sign by @​martincostello in Bump sign App-vNext/Polly#3008
• Move Public API baselines by @​martincostello in Move Public API baselines App-vNext/Polly#3016
• Formatting tweaks by @​martincostello in Formatting tweaks App-vNext/Polly#3017
• Formatting tweaks by @​martincostello in Formatting tweaks App-vNext/Polly#3018
• Remove ZIZMOR_VERSION by @​martincostello in Remove ZIZMOR_VERSION App-vNext/Polly#3025
• Assert nullable has result by @​martincostello in Assert nullable has result App-vNext/Polly#3028
• Update deprecated action input by @​martincostello in Update deprecated action input App-vNext/Polly#3035
• Move dependabot to Friday by @​martincostello in Move dependabot to Friday App-vNext/Polly#3044
• Fix tag comment by @​martincostello in Fix tag comment App-vNext/Polly#3045
• Fix dependabot group by @​martincostello in Fix dependabot group App-vNext/Polly#3047
• Pin runner images by @​martincostello in Pin runner images App-vNext/Polly#3065
• Bump Refit to 10.2.0 by @​martincostello in Bump Refit to 10.2.0 App-vNext/Polly#3096
• Disable Azure deployments by @​martincostello in Disable Azure deployments App-vNext/Polly#3105

New Contributors

• @​alexravenna made their first contribution in Fix typo in HTTP client integrations documentation App-vNext/Polly#2984
• @​DaRosenberg made their first contribution in Adds caller cancellation token propagation in hedging and timeout strategies App-vNext/Polly#3094

Full Changelog: App-vNext/Polly@8.6.6...8.7.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions