Bump BCrypt.Net-Next and 25 others by dependabot[bot] · Pull Request #50 · aturzone/T-chat

dependabot · 2026-06-22T11:52:55Z

Updated BCrypt.Net-Next from 4.0.3 to 4.2.0.

Release notes

Sourced from BCrypt.Net-Next's releases.

4.2.0

Drops dotnet 2.0 / 3.5 support (as msft ripped it out of windows 11 and set the new standalone installers minimum windows version to an inside release https://devblogs.microsoft.com/dotnet/dotnet-framework-3-5-moves-to-standalone-deployment-in-new-versions-of-windows/)
Renames assembly-name to remove dots as it causes PRI249 warning

Full Changelog: BcryptNet/bcrypt.net@v4.1.0...v4.2.0

4.1.0 What's Changed

Bump xunit.runner.visualstudio from 2.4.3 to 2.4.4 by @dependabot[bot] in Bump xunit.runner.visualstudio from 2.4.3 to 2.4.4 BcryptNet/bcrypt.net#107
Bump xunit.runner.visualstudio from 2.4.4 to 2.4.5 by @dependabot[bot] in Bump xunit.runner.visualstudio from 2.4.4 to 2.4.5 BcryptNet/bcrypt.net#108
Bump Microsoft.NET.Test.Sdk from 17.1.0 to 17.2.0 by @dependabot[bot] in Bump Microsoft.NET.Test.Sdk from 17.1.0 to 17.2.0 BcryptNet/bcrypt.net#109
Bump System.Memory from 4.5.4 to 4.5.5 by @dependabot[bot] in Bump System.Memory from 4.5.4 to 4.5.5 BcryptNet/bcrypt.net#113
Bump Microsoft.NET.Test.Sdk from 17.2.0 to 17.3.0 by @dependabot[bot] in Bump Microsoft.NET.Test.Sdk from 17.2.0 to 17.3.0 BcryptNet/bcrypt.net#115
Bump xunit from 2.4.1 to 2.4.2 by @dependabot[bot] in Bump xunit from 2.4.1 to 2.4.2 BcryptNet/bcrypt.net#114
Bump Microsoft.NET.Test.Sdk from 17.3.0 to 17.3.1 by @dependabot[bot] in Bump Microsoft.NET.Test.Sdk from 17.3.0 to 17.3.1 BcryptNet/bcrypt.net#118
Bump BenchmarkDotNet from 0.13.2 to 0.13.4 by @dependabot[bot] in Bump BenchmarkDotNet from 0.13.2 to 0.13.4 BcryptNet/bcrypt.net#129
Bump Microsoft.NET.Test.Sdk from 17.3.1 to 17.4.1 by @dependabot[bot] in Bump Microsoft.NET.Test.Sdk from 17.3.1 to 17.4.1 BcryptNet/bcrypt.net#126
Use License Expression for NuGet Package and add URLs by @mus65 in Use License Expression for NuGet Package and add URLs BcryptNet/bcrypt.net#128
Bump BenchmarkDotNet from 0.13.4 to 0.13.5 by @dependabot[bot] in Bump BenchmarkDotNet from 0.13.4 to 0.13.5 BcryptNet/bcrypt.net#131
Bump Microsoft.NET.Test.Sdk from 17.4.1 to 17.5.0 by @dependabot[bot] in Bump Microsoft.NET.Test.Sdk from 17.4.1 to 17.5.0 BcryptNet/bcrypt.net#133
Bump Microsoft.NET.Test.Sdk from 17.5.0 to 17.6.0 by @dependabot[bot] in Bump Microsoft.NET.Test.Sdk from 17.5.0 to 17.6.0 BcryptNet/bcrypt.net#134
Bump Microsoft.NET.Test.Sdk from 17.6.0 to 17.6.1 by @dependabot[bot] in Bump Microsoft.NET.Test.Sdk from 17.6.0 to 17.6.1 BcryptNet/bcrypt.net#135
Bump xunit.runner.visualstudio from 2.4.5 to 2.5.0 by @dependabot[bot] in Bump xunit.runner.visualstudio from 2.4.5 to 2.5.0 BcryptNet/bcrypt.net#140
Bump Microsoft.NET.Test.Sdk from 17.6.1 to 17.6.3 by @dependabot[bot] in Bump Microsoft.NET.Test.Sdk from 17.6.1 to 17.6.3 BcryptNet/bcrypt.net#138
Bump BenchmarkDotNet from 0.13.5 to 0.13.6 by @dependabot[bot] in Bump BenchmarkDotNet from 0.13.5 to 0.13.6 BcryptNet/bcrypt.net#141
Bump Microsoft.Windows.Compatibility from 6.0.0 to 6.0.6 in /IntegrationTest/TestVariousVersionsOfDotNet/WindowsFormAppViaDotnetTools by @dependabot[bot] in Bump Microsoft.Windows.Compatibility from 6.0.0 to 6.0.6 in /IntegrationTest/TestVariousVersionsOfDotNet/WindowsFormAppViaDotnetTools BcryptNet/bcrypt.net#137
Bump xunit from 2.4.2 to 2.5.1 by @dependabot[bot] in Bump xunit from 2.4.2 to 2.5.1 BcryptNet/bcrypt.net#148
Bump BenchmarkDotNet from 0.13.6 to 0.13.8 by @dependabot[bot] in Bump BenchmarkDotNet from 0.13.6 to 0.13.8 BcryptNet/bcrypt.net#146
Bump Microsoft.NET.Test.Sdk from 17.6.3 to 17.7.2 by @dependabot[bot] in Bump Microsoft.NET.Test.Sdk from 17.6.3 to 17.7.2 BcryptNet/bcrypt.net#145
Bump xunit.runner.visualstudio from 2.5.0 to 2.5.1 by @dependabot[bot] in Bump xunit.runner.visualstudio from 2.5.0 to 2.5.1 BcryptNet/bcrypt.net#147
Bump xunit from 2.5.1 to 2.5.3 by @dependabot[bot] in Bump xunit from 2.5.1 to 2.5.3 BcryptNet/bcrypt.net#152
Bump Microsoft.NET.Test.Sdk from 17.7.2 to 17.9.0 by @dependabot[bot] in Bump Microsoft.NET.Test.Sdk from 17.7.2 to 17.9.0 BcryptNet/bcrypt.net#171
Bump xunit from 2.5.3 to 2.8.0 by @dependabot[bot] in Bump xunit from 2.5.3 to 2.8.0 BcryptNet/bcrypt.net#174

New Contributors

@mus65 made their first contribution in Use License Expression for NuGet Package and add URLs BcryptNet/bcrypt.net#128

Full Changelog: BcryptNet/bcrypt.net@4.0.3...v4.1.0

Commits viewable in compare view.

Updated Dapper from 2.1.72 to 2.1.79.

Release notes

Sourced from Dapper's releases.

2.1.79 What's Changed

fix CI by @mgravell in fix CI DapperLib/Dapper#2196
Fix segfault when ICustomQueryParameter is a value type (#2189) by @andreasblueher in Fix segfault when ICustomQueryParameter is a value type (#2189) DapperLib/Dapper#2198
Update dependencies by @mgravell in Update dependencies DapperLib/Dapper#2202
Make private & internal classes sealed and less enumeration of lists & LINQ by @Henr1k80 in Make private & internal classes sealed and less enumeration of lists & LINQ DapperLib/Dapper#2197
Fix/prefer typehandlers for enums by @andreasblueher in Fix/prefer typehandlers for enums DapperLib/Dapper#2200
keep deps up to date by @mgravell in keep deps up to date DapperLib/Dapper#2204
Add ReferenceTrimmer and remove unused references by @dfederm in Add ReferenceTrimmer and remove unused references DapperLib/Dapper#2191

New Contributors

@andreasblueher made their first contribution in Fix segfault when ICustomQueryParameter is a value type (#2189) DapperLib/Dapper#2198
@Henr1k80 made their first contribution in Make private & internal classes sealed and less enumeration of lists & LINQ DapperLib/Dapper#2197
@dfederm made their first contribution in Add ReferenceTrimmer and remove unused references DapperLib/Dapper#2191

Full Changelog: DapperLib/Dapper@2.1.72...2.1.79

Commits viewable in compare view.

Updated FluentAssertions from 8.9.0 to 8.10.0.

Release notes

Sourced from FluentAssertions's releases.

8.10.0 What's Changed

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Relational from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Relational's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Memory from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Caching.Memory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Caching.StackExchangeRedis's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Abstractions from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Configuration.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Binder from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Configuration.Binder's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.Extensions.Http at 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Http's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Http's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Options's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.7 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Options.ConfigurationExtensions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.IdentityModel.Tokens from 8.12.0 to 8.19.1.

Release notes

Sourced from Microsoft.IdentityModel.Tokens's releases.

8.19.1 Bug Fixes

Update JwtSecurityTokenHandler for IssuerSigningKeyResolverUsingConfiguration to take priority over IssuerSigningKeyResolver, matching the documented contract and the correct behavior already present in JsonWebTokenHandler. See PR #3519.

8.19.0 New Features

Add ML-DSA (FIPS 204) post-quantum signature support. See PR #3479.
Cache custom crypto providers in CryptoProviderFactory. See PR #3489.

Bug Fixes

Disable automatic redirects on default HttpClient for JKU retrieval. See PR #3494.
Adjust rented buffer handling in claim set parsing. See PR #3493.
Tidy null handling in SAML conditions validation. See PR #3491.
Improve validation of jku claim. See PR #3481.
Limit telemetry algorithm dimension cardinality. See PR #3490.
Add defensive copy of collections in ValidationParameters. See PR #3492.
Update TokenValidationParameter copy constructor to make a deep copy. See PR #3488.
Update to fail-closed when replay protection isn't configured and other DPoP hardening. See PR #3505.
Apply RFC 3986 section 6.2.2 normalization to DPoP htu comparison. See PR #3509.

8.18.0 New Features

Introduced a new interface IConfigurationEventHandlerContextAware<T> that provides context to the configuration event handler implementation, allowing it to optionally bypass a cache lookup. See PR #3444.
Added Microsoft.IdentityModel.Dpop — a new package implementing DPoP (Demonstrating Proof-of-Possession) per RFC 9449. Provides both client-side and server-side proof validation with no System.Net.Http dependency. See PR #3443.

8.17.0 Dependencies

Downgrade MicrosoftExtensionsLoggingAbstractionsVersion to 8.0.0 on .NET 10. See PR #3435.

8.16.0 New Features

Add telemetry around signature validation. See PR #3415 for details.

Fundamentals

Fix FileVersion format to use two-digit year and day of year. See PR #3389 for details.

8.15.0 New Features

Add ECDsa support in X509SecurityKey and JsonWebKeyConverter.ConvertFromX509SecurityKey
Extended X509SecurityKey and JsonWebKeyConverter.ConvertFromX509SecurityKey to support ECDSA keys.
See PR #2377 for details.

Bug Fixes

Sanitize logs to avoid leaking sensitive data
Updated logging to sanitize sensitive values, reducing the risk of inadvertently exposing secrets or PII in logs.
See PR #3316 for details.
Optimize log sanitization with SearchValues
Improved the performance of the log sanitization logic introduced earlier by using SearchValues, making sanitization more efficient in high-throughput scenarios.
See PR #3341 for details.
Update test for IDX10400
Adjusted the IDX10400 test to align with the current behavior and error messaging.
See PR #3314 for details.

Fundamentals

Add supported algorithm tests
Added new tests to validate the set of supported cryptographic algorithms, increasing confidence in algorithm coverage and compatibility.
See PR #3296 for details.
Migrate repository agent rules from .clinerules to agents.md
Moved repository agent/AI-assist rules into markdown documentation to make them more visible and easier to maintain.
See PR #3313 for details.
Migrate Microsoft.IdentityModel.TestExtensions from Newtonsoft.Json to System.Text.Json
Updated Microsoft.IdentityModel.TestExtensions to use System.Text.Json instead of Newtonsoft.Json, aligning tests with the runtime serialization stack.
See PR #3356 for details.
Disable code coverage comments
Turned off automated code coverage comments on PRs to reduce noise while retaining coverage data elsewhere.
See PR #3349 for details.
Fix CodeQL alerts
Addressed CodeQL-reported issues to improve security posture and static analysis cleanliness.
See PR #3364 for details.

.NET 10 / SDK and tooling updates

Building with .NET 10 preview / RC 1
Updated the repository to build and test against .NET 10.0 preview/RC1, ensuring early compatibility with the upcoming runtime.
See PRs #3287, #3357, and #3358 for details.
Fix .NET 10 test execution consistency
Ensured consistent use of the TargetNetNext parameter across build, test, and pack phases so .NET 10.0 tests execute reliably.
See PR #3337 for details.
Update project files and workflows for .NET 10.0 compatibility
Adjusted project files and CI workflows to correctly target and run on .NET 10.0, including test and pack scenarios.
See PR #3363 for details.
Update .NET version to meet CG compliance
Updated the .NET version references to be compliant with corporate governance (CG) requirements.
See PR #3353 for details.
Update Coverlet collector and test SDK
- Bumped CoverletCollectorVersion to 6.0.4.
  See PR #3333 for details.
- Upgraded Microsoft.NET.Test.Sdk to a newer version for improved test reliability and tooling support.
  ... (truncated)

8.14.0

Bug Fixes

Switch back to use ValidationResult instead of OperationResult when validating a token in a new experimental validation flow. Additionally removed the dependency on Microsoft.IdentityModel.Abstractions. See #3299 for details.

8.13.1

Dependencies

Microsoft.IdentityModel now depends on Microsoft.Identity.Abstractions 9.3.0

Bug Fixes

Fixed a decompression failure happening for large JWE payloads. See #3286 for details.

Work related to redesign of IdentityModel's token validation logic #2711

Update the validation methods to return Microsoft.Identity.Abstractions.OperationResult. See #3284 for details.

8.13.0

Fundamentals

CaseSensitiveClaimsIdentity.SecurityToken setter is now protected internal (was internal). See PR #3278 for details.
Update .NET SDK version to 9.0.108 used when building or running the code. See PR #3274 for details.
Update RsaSecurityKey.cs to replace the Pkcs1 padding by Pss from HasPrivateKey check. See #3280 for details.

What's Changed

Make CaseSensitiveClaimsIdentity.SecurityToken setter protected by @keegan-caruso in Make CaseSensitiveClaimsIdentity.SecurityToken setter protected AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3278
Update .NET SDK version in global.json from 9.0.107 to 9.0.108 by @Copilot in Update .NET SDK version in global.json from 9.0.107 to 9.0.108 AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3274
Update RsaSecurityKey.cs to remove Pkcs 1 by @keegan-caruso in Update RsaSecurityKey.cs to remove Pkcs 1 AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3280
changelog for 8.13 by @jennyf19 in changelog for 8.13 AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3282

New Contributors

@Copilot made their first contribution in Update .NET SDK version in global.json from 9.0.107 to 9.0.108 AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3274

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.12.1...8.13.0

8.12.1

Fundamentals

Update .NET SDK version to 9.0.107 used when building or running the code. See #3263 for details.
To keep our experimental code separate from production code, all files associated with experimental features have been moved to the Experimental folders. See PR #3261 for details.
Experimental code leaked into TokenValidationResult from early prototypes. See PR #3259 for details.

What's Changed

Remove experimental code from TokenValidationResult by @brentschmaltz in Remove experimental code from TokenValidationResult AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3259
Moved files to experimental folder by @brentschmaltz in Moved files to experimental folder AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3261
Update global.json to latest by @jennyf19 in Update global.json to latest AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3263

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.12.0...8.12.1

Commits viewable in compare view.

Updated Microsoft.IdentityModel.Tokens from 8.12.1 to 8.19.1.

Release notes

Sourced from Microsoft.IdentityModel.Tokens's releases.

8.19.1 Bug Fixes

Update JwtSecurityTokenHandler for IssuerSigningKeyResolverUsingConfiguration to take priority over IssuerSigningKeyResolver, matching the documented contract and the correct behavior already present in JsonWebTokenHandler. See PR #3519.

8.19.0 New Features

Add ML-DSA (FIPS 204) post-quantum signature support. See PR #3479.
Cache custom crypto providers in CryptoProviderFactory. See PR #3489.

Bug Fixes

Disable automatic redirects on default HttpClient for JKU retrieval. See PR #3494.
Adjust rented buffer handling in claim set parsing. See PR #3493.
Tidy null handling in SAML conditions validation. See PR #3491.
Improve validation of jku claim. See PR #3481.
Limit telemetry algorithm dimension cardinality. See PR #3490.
Add defensive copy of collections in ValidationParameters. See PR #3492.
Update TokenValidationParameter copy constructor to make a deep copy. See PR #3488.
Update to fail-closed when replay protection isn't configured and other DPoP hardening. See PR #3505.
Apply RFC 3986 section 6.2.2 normalization to DPoP htu comparison. See PR #3509.

8.18.0 New Features

Introduced a new interface IConfigurationEventHandlerContextAware<T> that provides context to the configuration event handler implementation, allowing it to optionally bypass a cache lookup. See PR #3444.
Added Microsoft.IdentityModel.Dpop — a new package implementing DPoP (Demonstrating Proof-of-Possession) per RFC 9449. Provides both client-side and server-side proof validation with no System.Net.Http dependency. See PR #3443.

8.17.0 Dependencies

Downgrade MicrosoftExtensionsLoggingAbstractionsVersion to 8.0.0 on .NET 10. See PR #3435.

8.16.0 New Features

Add telemetry around signature validation. See PR #3415 for details.

Fundamentals

Fix FileVersion format to use two-digit year and day of year. See PR #3389 for details.

8.15.0 New Features

Add ECDsa support in X509SecurityKey and JsonWebKeyConverter.ConvertFromX509SecurityKey
Extended X509SecurityKey and JsonWebKeyConverter.ConvertFromX509SecurityKey to support ECDSA keys.
See PR #2377 for details.

Bug Fixes

Sanitize logs to avoid leaking sensitive data
Updated logging to sanitize sensitive values, reducing the risk of inadvertently exposing secrets or PII in logs.
See PR #3316 for details.
Optimize log sanitization with SearchValues
Improved the performance of the log sanitization logic introduced earlier by using SearchValues, making sanitization more efficient in high-throughput scenarios.
See PR #3341 for details.
Update test for IDX10400
Adjusted the IDX10400 test to align with the current behavior and error messaging.
See PR #3314 for details.

Fundamentals

Add supported algorithm tests
Added new tests to validate the set of supported cryptographic algorithms, increasing confidence in algorithm coverage and compatibility.
See PR #3296 for details.
Migrate repository agent rules from .clinerules to agents.md
Moved repository agent/AI-assist rules into markdown documentation to make them more visible and easier to maintain.
See PR #3313 for details.
Migrate Microsoft.IdentityModel.TestExtensions from Newtonsoft.Json to System.Text.Json
Updated Microsoft.IdentityModel.TestExtensions to use System.Text.Json instead of Newtonsoft.Json, aligning tests with the runtime serialization stack.
See PR #3356 for details.
Disable code coverage comments
Turned off automated code coverage comments on PRs to reduce noise while retaining coverage data elsewhere.
See PR #3349 for details.
Fix CodeQL alerts
Addressed CodeQL-reported issues to improve security posture and static analysis cleanliness.
See PR #3364 for details.

.NET 10 / SDK and tooling updates

Building with .NET 10 preview / RC 1
Updated the repository to build and test against .NET 10.0 preview/RC1, ensuring early compatibility with the upcoming runtime.
See PRs #3287, #3357, and #3358 for details.
Fix .NET 10 test execution consistency
Ensured consistent use of the TargetNetNext parameter across build, test, and pack phases so .NET 10.0 tests execute reliably.
See PR #3337 for details.
Update project files and workflows for .NET 10.0 compatibility
Adjusted project files and CI workflows to correctly target and run on .NET 10.0, including test and pack scenarios.
See PR #3363 for details.
Update .NET version to meet CG compliance
Updated the .NET version references to be compliant with corporate governance (CG) requirements.
See PR #3353 for details.
Update Coverlet collector and test SDK
- Bumped CoverletCollectorVersion to 6.0.4.
  See PR #3333 for details.
- Upgraded Microsoft.NET.Test.Sdk to a newer version for improved test reliability and tooling support.
  ... (truncated)

8.14.0

Bug Fixes

Switch back to use ValidationResult instead of OperationResult when validating a token in a new experimental validation flow. Additionally removed the dependency on Microsoft.IdentityModel.Abstractions. See #3299 for details.

8.13.1

Dependencies

Microsoft.IdentityModel now depends on Microsoft.Identity.Abstractions 9.3.0

Bug Fixes

Fixed a decompression failure happening for large JWE payloads. See #3286 for details.

Work related to redesign of IdentityModel's token validation logic #2711

Update the validation methods to return Microsoft.Identity.Abstractions.OperationResult. See #3284 for details.

8.13.0

Fundamentals

CaseSensitiveClaimsIdentity.SecurityToken setter is now protected internal (was internal). See PR #3278 for details.
Update .NET SDK version to 9.0.108 used when building or running the code. See PR #3274 for details.
Update RsaSecurityKey.cs to replace the Pkcs1 padding by Pss from HasPrivateKey check. See #3280 for details.

What's Changed

Make CaseSensitiveClaimsIdentity.SecurityToken setter protected by @keegan-caruso in Make CaseSensitiveClaimsIdentity.SecurityToken setter protected AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3278
Update .NET SDK version in global.json from 9.0.107 to 9.0.108 by @Copilot in Update .NET SDK version in global.json from 9.0.107 to 9.0.108 AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3274
Update RsaSecurityKey.cs to remove Pkcs 1 by @keegan-caruso in Update RsaSecurityKey.cs to remove Pkcs 1 AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3280
changelog for 8.13 by @jennyf19 in changelog for 8.13 AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3282

New Contributors

@Copilot made their first contribution in Update .NET SDK version in global.json from 9.0.107 to 9.0.108 AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3274

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.12.1...8.13.0

Commits viewable in compare view.

Updated Minio from 6.0.4 to 7.0.0.

Release notes

Sourced from Minio's releases.

7.0.0 What's Changed

fix cancellation-token-source disposing by @j-hiese in fix cancellation-token-source disposing minio/minio-dotnet#1306
Remove char-set="utf-8-bom" in .editorconfig by @ebozduman in Remove char-set="utf-8-bom" in .editorconfig minio/minio-dotnet#1336
adds the missing invalid access&secret key exceptions by @ebozduman in adds the missing invalid access&secret key exceptions minio/minio-dotnet#1320
fix: multipart upload doesn't contain etag by @0xMALVEE in fix: multipart upload doesn't contain etag minio/minio-dotnet#1339
Fix deserialization with missing XML namespace by @BaerMitUmlaut in Fix deserialization with missing XML namespace minio/minio-dotnet#1327

New Contributors

@j-hiese made their first contribution in fix cancellation-token-source disposing minio/minio-dotnet#1306
@0xMALVEE made their first contribution in fix: multipart upload doesn't contain etag minio/minio-dotnet#1339
@BaerMitUmlaut made their first contribution in Fix deserialization with missing XML namespace minio/minio-dotnet#1327

Full Changelog: minio/minio-dotnet@6.0.5...7.0.0

6.0.5 What's Changed

Fix build by @ramondeklein in Fix build minio/minio-dotnet#1222
Bump MSTest.TestAdapter from 3.5.2 to 3.7.0 by @dependabot in Bump MSTest.TestAdapter from 3.5.2 to 3.7.0 minio/minio-dotnet#1227
Bump MSTest.TestFramework from 3.5.2 to 3.7.0 by @dependabot in Bump MSTest.TestFramework from 3.5.2 to 3.7.0 minio/minio-dotnet#1226
Bump CommunityToolkit.HighPerformance and System.Threading.Tasks.Extensions by @dependabot in Bump CommunityToolkit.HighPerformance and System.Threading.Tasks.Extensions minio/minio-dotnet#1218
Bump Roslynator.Analyzers from 4.12.4 to 4.12.10 by @dependabot in Bump Roslynator.Analyzers from 4.12.4 to 4.12.10 minio/minio-dotnet#1219
Bump Meziantou.Polyfill from 1.0.39 to 1.0.42 by @dependabot in Bump Meziantou.Polyfill from 1.0.39 to 1.0.42 minio/minio-dotnet#1228
Bump Polly from 8.4.1 to 8.5.0 by @dependabot in Bump Polly from 8.4.1 to 8.5.0 minio/minio-dotnet#1230
Bump System.IO.Hashing from 8.0.0 to 9.0.0 by @dependabot in Bump System.IO.Hashing from 8.0.0 to 9.0.0 minio/minio-dotnet#1231
Bump Meziantou.Analyzer from 2.0.163 to 2.0.184 by @dependabot in Bump Meziantou.Analyzer from 2.0.163 to 2.0.184 minio/minio-dotnet#1232
Bump Microsoft.Extensions.DependencyInjection.Abstractions and System.Threading.Tasks.Extensions by @dependabot in Bump Microsoft.Extensions.DependencyInjection.Abstractions and System.Threading.Tasks.Extensions minio/minio-dotnet#1233
Bump Microsoft.NET.Test.Sdk from 17.11.1 to 17.12.0 by @dependabot in Bump Microsoft.NET.Test.Sdk from 17.11.1 to 17.12.0 minio/minio-dotnet#1236
Bump Roslynator.Formatting.Analyzers from 4.12.4 to 4.12.10 by @dependabot in Bump Roslynator.Formatting.Analyzers from 4.12.4 to 4.12.10 minio/minio-dotnet#1237
Bump Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.Logging and System.Threading.Tasks.Extensions by @dependabot in Bump Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.Logging and System.Threading.Tasks.Extensions minio/minio-dotnet#1239
Bump System.Text.Json and System.Threading.Tasks.Extensions by @dependabot in Bump System.Text.Json and System.Threading.Tasks.Extensions minio/minio-dotnet#1240
Bump Nullable.Extended.Analyzer from 1.15.6169 to 1.15.6495 by @dependabot in Bump Nullable.Extended.Analyzer from 1.15.6169 to 1.15.6495 minio/minio-dotnet#1241
Bump Microsoft.CodeAnalysis.Analyzers from 3.3.4 to 3.11.0 by @dependabot in Bump Microsoft.CodeAnalysis.Analyzers from 3.3.4 to 3.11.0 minio/minio-dotnet#1242
stops Headers overrite the user defined ContentType by @ebozduman in stops Headers overrite the user defined ContentType minio/minio-dotnet#1238
Bump Meziantou.Analyzer from 2.0.184 to 2.0.186 by @dependabot in Bump Meziantou.Analyzer from 2.0.184 to 2.0.186 minio/minio-dotnet#1244
Bump MSTest.TestAdapter from 3.7.0 to 3.7.1 by @dependabot in Bump MSTest.TestAdapter from 3.7.0 to 3.7.1 minio/minio-dotnet#1245
Bump MSTest.TestFramework from 3.7.0 to 3.7.1 by @dependabot in Bump MSTest.TestFramework from 3.7.0 to 3.7.1 minio/minio-dotnet#1246
Bump Polly from 8.5.0 to 8.5.1 by @dependabot in Bump Polly from 8.5.0 to 8.5.1 minio/minio-dotnet#1247
Bump Microsoft.Extensions.DependencyInjection.Abstractions and System.Threading.Tasks.Extensions by @dependabot in Bump Microsoft.Extensions.DependencyInjection.Abstractions and System.Threading.Tasks.Extensions minio/minio-dotnet#1248
Bump System.IO.Hashing from 9.0.0 to 9.0.1 by @dependabot in Bump System.IO.Hashing from 9.0.0 to 9.0.1 minio/minio-dotnet#1249
Bump System.Text.Json and System.Threading.Tasks.Extensions by @dependabot in Bump System.Text.Json and System.Threading.Tasks.Extensions minio/minio-dotnet#1250
Bump MSTest.TestFramework from 3.7.1 to 3.7.2 by @dependabot in Bump MSTest.TestFramework from 3.7.1 to 3.7.2 minio/minio-dotnet#1252
Bump Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.Logging and System.Threading.Tasks.Extensions by @dependabot in Bump Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.Logging and System.Threading.Tasks.Extensions minio/minio-dotnet#1254
replaces deprecated v3 of artifact actions with v4 by @ebozduman in replaces deprecated v3 of artifact actions with v4 minio/minio-dotnet#1260
Bump MSTest.TestAdapter from 3.7.1 to 3.7.3 by @dependabot in Bump MSTest.TestAdapter from 3.7.1 to 3.7.3 minio/minio-dotnet#1256
Bump MSTest.TestFramework from 3.7.2 to 3.8.2 by @dependabot in Bump MSTest.TestFramework from 3.7.2 to 3.8.2 minio/minio-dotnet#1269
Bump Roslynator.Formatting.Analyzers from 4.12.10 to 4.13.1 by @dependabot in Bump Roslynator.Formatting.Analyzers from 4.12.10 to 4.13.1 minio/minio-dotnet#1271
Bump Roslynator.Analyzers from 4.12.10 to 4.13.1 by @dependabot in Bump Roslynator.Analyzers from 4.12.10 to 4.13.1 minio/minio-dotnet#1272
Bump Polly from 8.5.1 to 8.5.2 by @dependabot in Bump Polly from 8.5.1 to 8.5.2 minio/minio-dotnet#1278
Bump System.IO.Hashing from 9.0.1 to 9.0.2 by @dependabot in Bump System.IO.Hashing from 9.0.1 to 9.0.2 minio/minio-dotnet#1279
Bump Meziantou.Analyzer from 2.0.186 to 2.0.188 by @dependabot in Bump Meziantou.Analyzer from 2.0.186 to 2.0.188 minio/minio-dotnet#1281
Bump Microsoft.Extensions.DependencyInjection.Abstractions from 9.0.1 to 9.0.3 by @dependabot in Bump Microsoft.Extensions.DependencyInjection.Abstractions from 9.0.1 to 9.0.3 minio/minio-dotnet#1282
Bump Microsoft.Extensions.DependencyInjection.Abstractions and Microsoft.Extensions.Logging by @dependabot in Bump Microsoft.Extensions.DependencyInjection.Abstractions and Microsoft.Extensions.Logging minio/minio-dotnet#1283
Bump System.IO.Hashing from 9.0.2 to 9.0.3 by @dependabot in Bump System.IO.Hashing from 9.0.2 to 9.0.3 minio/minio-dotnet#1284
Bump MSTest.TestFramework from 3.8.2 to 3.8.3 by @dependabot in Bump MSTest.TestFramework from 3.8.2 to 3.8.3 minio/minio-dotnet#1285
Bump Microsoft.Extensions.DependencyInjection.Abstractions and Microsoft.Extensions.Logging by @dependabot in Bump Microsoft.Extensions.DependencyInjection.Abstractions and Microsoft.Extensions.Logging minio/minio-dotnet#1294
Bump System.IO.Hashing from 9.0.3 to 9.0.4 by @dependabot in Bump System.IO.Hashing from 9.0.3 to 9.0.4 minio/minio-dotnet#1295
Bump Meziantou.Polyfill from 1.0.42 to 1.0.43 by @dependabot in Bump Meziantou.Polyfill from 1.0.42 to 1.0.43 minio/minio-dotnet#1297
Bump Meziantou.Analyzer from 2.0.188 to 2.0.196 by @dependabot in Bump Meziantou.Analyzer from 2.0.188 to 2.0.196 minio/minio-dotnet#1298
Bump Meziantou.Polyfill from 1.0.43 to 1.0.48 by @dependabot in Bump Meziantou.Polyfill from 1.0.43 to 1.0.48 minio/minio-dotnet#1299
Bump MSTest.TestAdapter from 3.7.3 to 3.8.3 by @dependabot in Bump MSTest.TestAdapter from 3.7.3 to 3.8.3 minio/minio-dotnet#1303
Bump Microsoft.NET.Test.Sdk from 17.12.0 to 17.13.0 by @dependabot in Bump Microsoft.NET.Test.Sdk from 17.12.0 to 17.13.0 minio/minio-dotnet#1304
Bump Meziantou.Analyzer from 2.0.196 to 2.0.201 by @dependabot in Bump Meziantou.Analyzer from 2.0.196 to 2.0.201 minio/minio-dotnet#1307
Do not use DateTime.Now to compute elapsed time. by @pbolduc in Do not use DateTime.Now to compute elapsed time. minio/minio-dotnet#1315
Fixes the missing exception throw action when an api request is executed, like BucketExistsAsync, etc. by @ebozduman in Fixes the missing exception throw action when an api request is executed, like BucketExistsAsync, etc. minio/minio-dotnet#1141
Fixes #1312 Optimize ReadFullAsync to minimize memory allocations by @pbolduc in Fixes #1312 Optimize ReadFullAsync to minimize memory allocations minio/minio-dotnet#1314
... (truncated)

Commits viewable in compare view.

Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.15.3 to 1.16.0.

Release notes

Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.

1.16.0

For highlights and announcements pertaining to this release see: Release Notes > 1.16.0.

The following changes are from the previous release 1.16.0-rc.1.

NuGet: OpenTelemetry v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.InMemory v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Zipkin v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Extensions.Hosting v1.16.0

No notable changes.

... (truncated)

1.16.0-rc.1

The following changes are from the previous release 1.15.3.

NuGet: OpenTelemetry v1.16.0-rc.1
- Stop validating View-provided metric stream Name against the instrument
  name syntax, per
  spec clarification.
  (#7300)
- Fix incorrect validation of OTEL_BSP_* and OTEL_BLRP_* environment
  variables.
  (#7187)
- Fix observable instrument callbacks running once per reader instead of
  once per collection cycle.
  (#7188)
- Added exception safety for user-supplied ExemplarReservoir implementations.
  Exceptions thrown from Offer are now caught and logged rather than propagating
  out of Counter.Add/Histogram.Record.
  (#7277)
- Update OpenTelemetrySdkEventSource to support the W3C randomness flag.
  (#7301)
- Added ObservedTimestamp property to LogRecord.
  (#6979)
- Breaking Change Explicit histogram boundaries no longer allow more than
  10 million values.
  (#7165)
- Fixed a circular reference which could cause a LoggerProvider to fail to
  resolve when one of its dependencies depends on ILogger or ILoggerFactory.
  As part of this fix the LoggerProvider resolved from dependency injection
  is now created lazily when the first logger is created rather than when
  ILoggerProvider or ILoggerFactory is resolved. A consequence is that any
  invalid configuration now surfaces when the first log record is written instead
  of when the logging services are resolved.
  (#7308)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.16.0-rc.1
- Experimental (pre-release builds only):
  Add support for using environment variables as context propagation carriers.
  (#7174)
- Fix BaggagePropagator to correctly follow Key and Value Encoding rules as per
  ... (truncated)

1.16.0-beta.1

The following changes are from the previous release 1.15.3-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.16.0-beta.1
- Fixed scrape response cache freshness using monotonic time so it is not
  affected by NTP system clock adjustments.
  (#7253)
- Breaking Change Removed DisableTimestamp property from
  PrometheusAspNetCoreOptions.
  (#7176)
- Fixed the serialization of NaN, PositiveInfinity, and NegativeInfinity
  values in Prometheus metrics to be compliant with the specification.
  (#7179)
- Fixed loss of precision when serializing double and float values in
  Prometheus metrics to be compliant with the specification by using 17
  significant digits to represent such values.
  (#7179)
- Fix non-ASCII characters in metric names and unit strings not being sanitized
  correctly during Prometheus serialization.
  (#7184)
- Fix case where reader tracking could be reset while readers were still active.
  (#7190)
- Improve Accept header handling for format negotiation so OpenMetrics is
  selected correctly by considering whitespace and q weights.
  (#7208)
- Emit OpenMetrics exemplars for counters and histogram buckets.
  (#7222)
- Fix incorrect handling of untyped metrics when using OpenMetrics format.
  (#7219)
- Fix Prometheus/OpenMetrics serialization to emit metric and label names
  containing _ instead of dropping them and prefixing leading digits.
  Invalid characters are replaced with _ instead of being dropped.
  (#7209)
- Add escaping=underscores to the Accept header handling for content
  negotiation so OpenMetrics are handled correctly.
  (#7209)
- Omit histogram _sum and _count in OpenMetrics when negative bucket
  thresholds are present.
  (#7221)
  ... (truncated)

Commits viewable in compare view.

Updated OpenTelemetry.Extensions.Hosting from 1.15.3 to 1.16.0.

Release notes

Sourced from OpenTelemetry.Extensions.Hosting's releases.

1.16.0

For highlights and announcements pertaining to this release see: Release Notes > 1.16.0.

The following changes are from the previous release 1.16.0-rc.1.

NuGet: OpenTelemetry v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.InMemory v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Zipkin v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Extensions.Hosting v1.16.0

No notable changes.

... (truncated)

1.16.0-rc.1

The following changes are from the previous release 1.15.3.

NuGet: OpenTelemetry v1.16.0-rc.1
- Stop validating View-provided metric stream Name against the instrument
  name syntax, per
  spec clarification.
  (#7300)
- Fix incorrect validation of OTEL_BSP_* and OTEL_BLRP_* environment
  variables.
  (#7187)
- Fix observable instrument callbacks running once per reader instead of
  once per collection cycle.
  (#7188)
- Added exception safety for user-supplied ExemplarReservoir implementations.
  Exceptions thrown from Offer are now caught and logged rather than propagating
  out of Counter.Add/Histogram.Record.
  (#7277)
- Update OpenTelemetrySdkEventSource to support the W3C randomness flag.
  (#7301)
- Added ObservedTimestamp property to LogRecord.
  (#6979)
- Breaking Change Explicit histogram boundaries no longer allow more than
  10 million values.
  (#7165)
- Fixed a circular reference which could cause a LoggerProvider to fail to
  resolve when one of its dependencies depends on ILogger or ILoggerFactory.
  As part of this fix the LoggerProvider resolved from dependency injection
  is now created lazily when the first logger is created rather than when
  ILoggerProvider or ILoggerFactory is resolved. A consequence is that any
  invalid configuration now surfaces when the first log record is written instead
  of when the logging services are resolved.
  (#7308)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.16.0-rc.1
- Experimental (pre-release builds only):
  Add support for using environment variables as context propagation carriers.
  (#7174)
- Fix BaggagePropagator to correctly follow Key and Value Encoding rules as per
  ... (truncated)

1.16.0-beta.1

The following changes are from the previous release 1.15.3-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.16.0-beta.1
- Fixed scrape response cache freshness using monotonic time so it is not
  affected by NTP system clock adjustments.
  (#7253)
- Breaking Change Removed DisableTimestamp property from
  PrometheusAspNetCoreOptions.
  (#7176)
- Fixed the serialization of NaN, PositiveInfinity, and NegativeInfinity
  values in Prometheus metrics to be compliant with the specification.
  (#7179)
- Fixed loss of precision when serializing double and float values in
  Prometheus metrics to be compliant with the specification by using 17
  significant digits to represent such values.
  (#7179)
- Fix non-ASCII characters in metric names and unit strings not being sanitized
  correctly during Prometheus serialization.
  (#7184)
- Fix case where reader tracking could be reset while readers were still active.
  (#7190)
- Improve Accept header handling for format negotiation so OpenMetrics is
  selected correctly by considering whitespace and q weights.
  (#7208)
- Emit OpenMetrics exemplars for counters and histogram buckets.
  (#7222)
- Fix incorrect handling of untyped metrics when using OpenMetrics format.
  (#7219)
- Fix Prometheus/OpenMetrics serialization to emit metric and label names
  containing _ instead of dropping them and prefixing leading digits.
  Invalid characters are replaced with _ instead of being dropped.
  (#7209)
- Add escaping=underscores to the Accept header handling for content
  negotiation so OpenMetrics are handled correctly.
  (#7209)
- Omit histogram _sum and _count in OpenMetrics when negative bucket
  thresholds are present.
  (#7221)
  ... (truncated)

Commits viewable in compare view.

Updated Scalar.AspNetCore from 2.14.10 to 2.16.4.

Release notes

Sourced from Scalar.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Serilog.Sinks.Seq from 9.0.0 to 9.1.0.

Release notes

Sourced from Serilog.Sinks.Seq's releases.

9.1.0 What's Changed

Upgrade .NET and dependencies by @liammclennan in Upgrade .NET and dependencies datalust/serilog-sinks-seq#244

Full Changelog: datalust/serilog-sinks-seq@v9.0.0...v9.1.0

Commits viewable in [compare view](https://github.com/...

Description has been truncated

Bumps BCrypt.Net-Next from 4.0.3 to 4.2.0 Bumps Dapper from 2.1.72 to 2.1.79 Bumps FluentAssertions from 8.9.0 to 8.10.0 Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.7 to 10.0.9 Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.7 to 10.0.9 Bumps Microsoft.EntityFrameworkCore from 10.0.7 to 10.0.9 Bumps Microsoft.EntityFrameworkCore.Design from 10.0.7 to 10.0.9 Bumps Microsoft.EntityFrameworkCore.InMemory from 10.0.7 to 10.0.9 Bumps Microsoft.EntityFrameworkCore.Relational from 10.0.7 to 10.0.9 Bumps Microsoft.Extensions.Caching.Memory from 10.0.7 to 10.0.9 Bumps Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.7 to 10.0.9 Bumps Microsoft.Extensions.Configuration.Abstractions from 10.0.7 to 10.0.9 Bumps Microsoft.Extensions.Configuration.Binder from 10.0.7 to 10.0.9 Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.7 to 10.0.9 Bumps Microsoft.Extensions.Http to 10.0.9 Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.7 to 10.0.9 Bumps Microsoft.Extensions.Options from 10.0.7 to 10.0.9 Bumps Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.7 to 10.0.9 Bumps Microsoft.IdentityModel.Tokens to 8.19.1 Bumps Minio from 6.0.4 to 7.0.0 Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.15.3 to 1.16.0 Bumps OpenTelemetry.Extensions.Hosting from 1.15.3 to 1.16.0 Bumps Scalar.AspNetCore from 2.14.10 to 2.16.4 Bumps Serilog.Sinks.Seq from 9.0.0 to 9.1.0 Bumps StackExchange.Redis from 2.12.14 to 3.0.0 Bumps System.IdentityModel.Tokens.Jwt to 8.19.1 --- updated-dependencies: - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore.Relational dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Options dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: BCrypt.Net-Next dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-deps - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore.Relational dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Caching.StackExchangeRedis dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.IdentityModel.Tokens dependency-version: 8.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-deps - dependency-name: StackExchange.Redis dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dotnet-deps - dependency-name: System.IdentityModel.Tokens.Jwt dependency-version: 8.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-deps - dependency-name: BCrypt.Net-Next dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-deps - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore.Relational dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.IdentityModel.Tokens dependency-version: 8.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-deps - dependency-name: System.IdentityModel.Tokens.Jwt dependency-version: 8.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore.Relational dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Http dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Configuration.Abstractions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Dapper dependency-version: 2.1.79 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore.Relational dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Configuration.Abstractions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Caching.StackExchangeRedis dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: StackExchange.Redis dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore.Relational dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Configuration.Binder dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Minio dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore.Relational dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Caching.Memory dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore.Relational dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Configuration.Abstractions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Http dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Configuration.Abstractions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Configuration.Abstractions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Configuration.Abstractions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-deps - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Http dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Options dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: Microsoft.Extensions.Http dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-deps - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-deps - dependency-name: Scalar.AspNetCore dependency-version: 2.16.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-deps - dependency-name: Serilog.Sinks.Seq dependency-version: 9.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-deps - dependency-name: FluentAssertions dependency-version: 8.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore.InMemory dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: FluentAssertions dependency-version: 8.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-deps - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps - dependency-name: System.IdentityModel.Tokens.Jwt dependency-version: 8.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-deps - dependency-name: FluentAssertions dependency-version: 8.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-deps - dependency-name: Microsoft.EntityFrameworkCore.InMemory dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-deps ... Signed-off-by: dependabot[bot] <support@github.com>

github-advanced-security · 2026-06-22T11:53:30Z

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

dependabot · 2026-06-29T11:51:42Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jun 22, 2026

dependabot Bot requested a review from aturzone as a code owner June 22, 2026 11:52

dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Jun 22, 2026

dependabot Bot closed this Jun 29, 2026

dependabot Bot deleted the dependabot/nuget/apps/api/src/Modules/Artifacts/dotnet-deps-e555c876e4 branch June 29, 2026 11:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump BCrypt.Net-Next and 25 others#50

Bump BCrypt.Net-Next and 25 others#50
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/apps/api/src/Modules/Artifacts/dotnet-deps-e555c876e4

dependabot Bot commented on behalf of github Jun 22, 2026 •

edited

Loading

Uh oh!

github-advanced-security AI commented Jun 22, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

4.2.0

4.1.0

What's Changed

New Contributors

2.1.79

What's Changed

New Contributors

8.10.0

What's Changed

Improvements

Documentation

Others

8.19.1

Bug Fixes

8.19.0

New Features

Bug Fixes

8.18.0

New Features

8.17.0

Dependencies

8.16.0

New Features

Fundamentals

8.15.0

New Features

Bug Fixes

Fundamentals

.NET 10 / SDK and tooling updates

8.14.0

8.14.0

Bug Fixes

8.13.1

8.13.1

Dependencies

Bug Fixes

Work related to redesign of IdentityModel's token validation logic #​2711

8.13.0

8.13.0

Fundamentals

What's Changed

New Contributors

8.12.1

8.12.1

Fundamentals

What's Changed

8.19.1

Bug Fixes

8.19.0

New Features

Bug Fixes

8.18.0

New Features

8.17.0

Dependencies

8.16.0

New Features

Fundamentals

8.15.0

New Features

Bug Fixes

Fundamentals

.NET 10 / SDK and tooling updates

8.14.0

8.14.0

Bug Fixes

8.13.1

8.13.1

Dependencies

Bug Fixes

Work related to redesign of IdentityModel's token validation logic #​2711

8.13.0

8.13.0

Fundamentals

What's Changed

New Contributors

7.0.0

dependabot Bot commented on behalf of github Jun 22, 2026 •

edited

Loading

Work related to redesign of IdentityModel's token validation logic #2711

Work related to redesign of IdentityModel's token validation logic #2711