Bump the patch group with 17 updates #125

Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#61622)
The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues.

Dependency Updates

Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#61762)
Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project.
Update dependencies from dotnet/arcade (#61714)
Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools.
Update dependencies from dotnet/extensions (#61571)
Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries.
Update dependencies from dotnet/extensions (#61877)
Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes.
Update dependencies from dotnet/arcade (#61892)
Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes.

Miscellaneous

Update branding to 9.0.6 (#61831)
Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase.
Merging internal commits for release/9.0 (#61925)
Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v9.0.5...v9.0.6

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 9.0.5 to 9.0.7.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

9.0.7

Release

What's Changed

Update branding to 9.0.7 by @vseanreesermsft in Update branding to 9.0.7 dotnet/aspnetcore#62242
[release/9.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 by @dependabot in [release/9.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 dotnet/aspnetcore#62199
Fix OpenApiJsonSchema array parsing (#62051) by @BrennanConroy in Fix OpenApiJsonSchema array parsing (#62051) dotnet/aspnetcore#62118
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#61986
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61945
[release/9.0] Update Alpine helix references by @wtgodbe in [release/9.0] Update Alpine helix references dotnet/aspnetcore#62240
[Backport 9.0] [IIS] Manually parse exe bitness (#61894) by @BrennanConroy in [Backport 9.0] [IIS] Manually parse exe bitness (#61894) dotnet/aspnetcore#62038
[release/9.0] Associate tagged keys with entries so replacements are not evicted by @github-actions in [release/9.0] Associate tagged keys with entries so replacements are not evicted dotnet/aspnetcore#62248
[release/9.0] Block test that is failing after switching to latest-chrome by @github-actions in [release/9.0] Block test that is failing after switching to latest-chrome dotnet/aspnetcore#62283
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#62281
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#62282
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#62303

Full Changelog: dotnet/aspnetcore@v9.0.6...v9.0.7

9.0.6 Bug Fixes

Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#61622)
The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues.

Dependency Updates

Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#61762)
Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project.
Update dependencies from dotnet/arcade (#61714)
Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools.
Update dependencies from dotnet/extensions (#61571)
Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries.
Update dependencies from dotnet/extensions (#61877)
Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes.
Update dependencies from dotnet/arcade (#61892)
Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes.

Miscellaneous

Update branding to 9.0.6 (#61831)
Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase.
Merging internal commits for release/9.0 (#61925)
Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v9.0.5...v9.0.6

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.Testing from 9.5.0 to 9.7.0.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.Testing's releases.

9.7.0 What's Changed

Branding updates for 9.7 by @joperezr in Branding updates for 9.7 dotnet/extensions#6495
Fix name of genai input/output tokens tag by @stephentoub in Fix name of genai input/output tokens tag dotnet/extensions#6494
[main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade dotnet/extensions#6503
Improve handling of RawRepresentation in OpenAI{Response}ChatClient by @stephentoub in Improve handling of RawRepresentation in OpenAI{Response}ChatClient dotnet/extensions#6500
Bring back AsIChatClient for OpenAI AssistantClient by @stephentoub in Bring back AsIChatClient for OpenAI AssistantClient dotnet/extensions#6501
Add resiliency to Resource Monitoring in Linux by @amadeuszl in Add resiliency to Resource Monitoring in Linux dotnet/extensions#6489
Merging changes from the internal fork by @joperezr in Merging changes from the internal fork dotnet/extensions#6508
Workaround OpenAI assistant's RunCreationOption's tools override by @stephentoub in Workaround OpenAI assistant's RunCreationOption's tools override dotnet/extensions#6512
Add ChatOptions.Instructions by @stephentoub in Add ChatOptions.Instructions dotnet/extensions#6505
Introduce evaluators for agentic workflows by @shyamnamboodiripad in Introduce evaluators for agentic workflows dotnet/extensions#6514
Allow a CachingChatClient to control per-request caching by @stephentoub in Allow a CachingChatClient to control per-request caching dotnet/extensions#6524
Tweak OpenAI JSON schema transforms by @stephentoub in Tweak OpenAI JSON schema transforms dotnet/extensions#6523
Merging changes from release/9.6 branch by @joperezr in Merging changes from release/9.6 branch dotnet/extensions#6516
Augment AIJsonUtilities.CreateJsonSchema for more types and annotations by @stephentoub in Augment AIJsonUtilities.CreateJsonSchema for more types and annotations dotnet/extensions#6540
Added conversions from AIFunction to various OpenAI tools by @KrzysztofCwalina in Added conversions from AIFunction to various OpenAI tools dotnet/extensions#6539
Add SpeechToTextResponse.Usage by @stephentoub in Add SpeechToTextResponse.Usage dotnet/extensions#6546
Implement BLEU score evaluation for NLP tests by @peterwald in Implement BLEU score evaluation for NLP tests dotnet/extensions#6537
[main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade dotnet/extensions#6553
#5962 Change to early return of OS instead of throwing by @juliankock in #5962 Change to early return of OS instead of throwing dotnet/extensions#5963
Mark log sampling & buffering API as stable by @evgenyfedorov2 in Mark log sampling & buffering API as stable dotnet/extensions#6534
Update GenAI otel impl for v1.35 by @stephentoub in Update GenAI otel impl for v1.35 dotnet/extensions#6557
Implement GLEU and F1 NLP evaluators by @peterwald in Implement GLEU and F1 NLP evaluators dotnet/extensions#6555
Update tokenizer algorithm to use is [..] by @peterwald in Update tokenizer algorithm to use is [..] dotnet/extensions#6561
Rename some constants to match convention by @shyamnamboodiripad in Rename some constants to match convention dotnet/extensions#6562
Add DistributedCachingChatClient/EmbeddingGenerator.AdditionalCacheKeyValues by @stephentoub in Add DistributedCachingChatClient/EmbeddingGenerator.AdditionalCacheKeyValues dotnet/extensions#6558

New Contributors

@KrzysztofCwalina made their first contribution in Added conversions from AIFunction to various OpenAI tools dotnet/extensions#6539
@juliankock made their first contribution in #5962 Change to early return of OS instead of throwing dotnet/extensions#5963

Full Changelog: dotnet/extensions@v9.6.0...v9.7.0

9.6.0 What's Changed

Branding updates for 9.6.0 by @joperezr in Branding updates for 9.6.0 dotnet/extensions#6399
Add log buffering info to README.md by @evgenyfedorov2 in Add log buffering info to README.md dotnet/extensions#6403
Fix dynamic config update for log buffering by @evgenyfedorov2 in Fix dynamic config update for log buffering dotnet/extensions#6435
Remove unused select param from CreateRecordsForDocumentAsync by @jongalloway in Remove unused select param from CreateRecordsForDocumentAsync dotnet/extensions#6341
Merge internal changes by @joperezr in Merge internal changes dotnet/extensions#6437
Reduce per-lookup overhead from key validation in HybridCache by @MihaZupan in Reduce per-lookup overhead from key validation in HybridCache dotnet/extensions#6441
[main] Update dependencies from dotnet/arcade by @dotnet-maestro in [main] Update dependencies from dotnet/arcade dotnet/extensions#6443
Merge release/9.5 into main by @joperezr in Merge release/9.5 into main dotnet/extensions#6448
Fix up comments in eval API json files by @shyamnamboodiripad in Fix up comments in eval API json files dotnet/extensions#6452
Remove preview tag on Azure DevOps extension by @peterwald in Remove preview tag on Azure DevOps extension dotnet/extensions#6456
Bump PackageValidation against 9.5.0 and enable for stable MEAI packages by @joperezr in Bump PackageValidation against 9.5.0 and enable for stable MEAI packages dotnet/extensions#6458
Fix paramref tag by @gewarren in Fix paramref tag dotnet/extensions#6459
[main] Update dependencies from dotnet/arcade by @dotnet-maestro in [main] Update dependencies from dotnet/arcade dotnet/extensions#6462
Add a script to diff the contents of folders that match a specific pattern across two branches by @shyamnamboodiripad in Add a script to diff the contents of folders that match a specific pattern across two branches dotnet/extensions#6453
Remove title and description keywords from root-level schemas in AIFunctionFactory. by @eiriktsarpalis in Remove title and description keywords from root-level schemas in AIFunctionFactory. dotnet/extensions#6465
Replace JSON vector store with SQLite by @MackinnonBuck in Replace JSON vector store with SQLite dotnet/extensions#6438
Update chat template Microsoft.SemanticKernel dependency to 1.53.0 by @MackinnonBuck in Update chat template Microsoft.SemanticKernel dependency to 1.53.0 dotnet/extensions#6470
Update chat template external dependencies by @MackinnonBuck in Update chat template external dependencies dotnet/extensions#6471
Exclude provider URI from cache key computation by default by @shyamnamboodiripad in Exclude provider URI from cache key computation by default dotnet/extensions#6473
Make hashing stable w.r.t. indentation settings and property ordering. by @eiriktsarpalis in Make hashing stable w.r.t. indentation settings and property ordering. dotnet/extensions#6476
[main] Update dependencies from dotnet/arcade by @dotnet-maestro in [main] Update dependencies from dotnet/arcade dotnet/extensions#6481
Add default value for namedArg in Microsoft.Gen.Metrics.parser by @BowenYang666 in Add default value for namedArg in Microsoft.Gen.Metrics.parser dotnet/extensions#6238
Update OpenTelemetryChatClient to 1.34 by @stephentoub in Update OpenTelemetryChatClient to 1.34 dotnet/extensions#6466
Delete M.E.AI changelog files by @stephentoub in Delete M.E.AI changelog files dotnet/extensions#6467
Add comma to remarks by @gewarren in Add comma to remarks dotnet/extensions#6485
Implement disk io metrics for linux by @makazeu in Implement disk io metrics for linux dotnet/extensions#6374
Add AIFunction.ReturnJsonSchema by @eiriktsarpalis in Add AIFunction.ReturnJsonSchema dotnet/extensions#6447

New Contributors

@MihaZupan made their first contribution in Reduce per-lookup overhead from key validation in HybridCache dotnet/extensions#6441
@BowenYang666 made their first contribution in Add default value for namedArg in Microsoft.Gen.Metrics.parser dotnet/extensions#6238

Full Changelog: dotnet/extensions@v9.5.0...v9.6.0

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Resilience from 9.5.0 to 9.7.0.

Release notes

Sourced from Microsoft.Extensions.Http.Resilience's releases.

9.7.0 What's Changed

Branding updates for 9.7 by @joperezr in Branding updates for 9.7 dotnet/extensions#6495
Fix name of genai input/output tokens tag by @stephentoub in Fix name of genai input/output tokens tag dotnet/extensions#6494
[main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade dotnet/extensions#6503
Improve handling of RawRepresentation in OpenAI{Response}ChatClient by @stephentoub in Improve handling of RawRepresentation in OpenAI{Response}ChatClient dotnet/extensions#6500
Bring back AsIChatClient for OpenAI AssistantClient by @stephentoub in Bring back AsIChatClient for OpenAI AssistantClient dotnet/extensions#6501
Add resiliency to Resource Monitoring in Linux by @amadeuszl in Add resiliency to Resource Monitoring in Linux dotnet/extensions#6489
Merging changes from the internal fork by @joperezr in Merging changes from the internal fork dotnet/extensions#6508
Workaround OpenAI assistant's RunCreationOption's tools override by @stephentoub in Workaround OpenAI assistant's RunCreationOption's tools override dotnet/extensions#6512
Add ChatOptions.Instructions by @stephentoub in Add ChatOptions.Instructions dotnet/extensions#6505
Introduce evaluators for agentic workflows by @shyamnamboodiripad in Introduce evaluators for agentic workflows dotnet/extensions#6514
Allow a CachingChatClient to control per-request caching by @stephentoub in Allow a CachingChatClient to control per-request caching dotnet/extensions#6524
Tweak OpenAI JSON schema transforms by @stephentoub in Tweak OpenAI JSON schema transforms dotnet/extensions#6523
Merging changes from release/9.6 branch by @joperezr in Merging changes from release/9.6 branch dotnet/extensions#6516
Augment AIJsonUtilities.CreateJsonSchema for more types and annotations by @stephentoub in Augment AIJsonUtilities.CreateJsonSchema for more types and annotations dotnet/extensions#6540
Added conversions from AIFunction to various OpenAI tools by @KrzysztofCwalina in Added conversions from AIFunction to various OpenAI tools dotnet/extensions#6539
Add SpeechToTextResponse.Usage by @stephentoub in Add SpeechToTextResponse.Usage dotnet/extensions#6546
Implement BLEU score evaluation for NLP tests by @peterwald in Implement BLEU score evaluation for NLP tests dotnet/extensions#6537
[main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade dotnet/extensions#6553
#5962 Change to early return of OS instead of throwing by @juliankock in #5962 Change to early return of OS instead of throwing dotnet/extensions#5963
Mark log sampling & buffering API as stable by @evgenyfedorov2 in Mark log sampling & buffering API as stable dotnet/extensions#6534
Update GenAI otel impl for v1.35 by @stephentoub in Update GenAI otel impl for v1.35 dotnet/extensions#6557
Implement GLEU and F1 NLP evaluators by @peterwald in Implement GLEU and F1 NLP evaluators dotnet/extensions#6555
Update tokenizer algorithm to use is [..] by @peterwald in Update tokenizer algorithm to use is [..] dotnet/extensions#6561
Rename some constants to match convention by @shyamnamboodiripad in Rename some constants to match convention dotnet/extensions#6562
Add DistributedCachingChatClient/EmbeddingGenerator.AdditionalCacheKeyValues by @stephentoub in Add DistributedCachingChatClient/EmbeddingGenerator.AdditionalCacheKeyValues dotnet/extensions#6558

New Contributors

@KrzysztofCwalina made their first contribution in Added conversions from AIFunction to various OpenAI tools dotnet/extensions#6539
@juliankock made their first contribution in #5962 Change to early return of OS instead of throwing dotnet/extensions#5963

Full Changelog: dotnet/extensions@v9.6.0...v9.7.0

9.6.0 What's Changed

Branding updates for 9.6.0 by @joperezr in Branding updates for 9.6.0 dotnet/extensions#6399
Add log buffering info to README.md by @evgenyfedorov2 in Add log buffering info to README.md dotnet/extensions#6403
Fix dynamic config update for log buffering by @evgenyfedorov2 in Fix dynamic config update for log buffering dotnet/extensions#6435
Remove unused select param from CreateRecordsForDocumentAsync by @jongalloway in Remove unused select param from CreateRecordsForDocumentAsync dotnet/extensions#6341
Merge internal changes by @joperezr in Merge internal changes dotnet/extensions#6437
Reduce per-lookup overhead from key validation in HybridCache by @MihaZupan in Reduce per-lookup overhead from key validation in HybridCache dotnet/extensions#6441
[main] Update dependencies from dotnet/arcade by @dotnet-maestro in [main] Update dependencies from dotnet/arcade dotnet/extensions#6443
Merge release/9.5 into main by @joperezr in Merge release/9.5 into main dotnet/extensions#6448
Fix up comments in eval API json files by @shyamnamboodiripad in Fix up comments in eval API json files dotnet/extensions#6452
Remove preview tag on Azure DevOps extension by @peterwald in Remove preview tag on Azure DevOps extension dotnet/extensions#6456
Bump PackageValidation against 9.5.0 and enable for stable MEAI packages by @joperezr in Bump PackageValidation against 9.5.0 and enable for stable MEAI packages dotnet/extensions#6458
Fix paramref tag by @gewarren in Fix paramref tag dotnet/extensions#6459
[main] Update dependencies from dotnet/arcade by @dotnet-maestro in [main] Update dependencies from dotnet/arcade dotnet/extensions#6462
Add a script to diff the contents of folders that match a specific pattern across two branches by @shyamnamboodiripad in Add a script to diff the contents of folders that match a specific pattern across two branches dotnet/extensions#6453
Remove title and description keywords from root-level schemas in AIFunctionFactory. by @eiriktsarpalis in Remove title and description keywords from root-level schemas in AIFunctionFactory. dotnet/extensions#6465
Replace JSON vector store with SQLite by @MackinnonBuck in Replace JSON vector store with SQLite dotnet/extensions#6438
Update chat template Microsoft.SemanticKernel dependency to 1.53.0 by @MackinnonBuck in Update chat template Microsoft.SemanticKernel dependency to 1.53.0 dotnet/extensions#6470
Update chat template external dependencies by @MackinnonBuck in Update chat template external dependencies dotnet/extensions#6471
Exclude provider URI from cache key computation by default by @shyamnamboodiripad in Exclude provider URI from cache key computation by default dotnet/extensions#6473
Make hashing stable w.r.t. indentation settings and property ordering. by @eiriktsarpalis in Make hashing stable w.r.t. indentation settings and property ordering. dotnet/extensions#6476
[main] Update dependencies from dotnet/arcade by @dotnet-maestro in [main] Update dependencies from dotnet/arcade dotnet/extensions#6481
Add default value for namedArg in Microsoft.Gen.Metrics.parser by @BowenYang666 in Add default value for namedArg in Microsoft.Gen.Metrics.parser dotnet/extensions#6238
Update OpenTelemetryChatClient to 1.34 by @stephentoub in Update OpenTelemetryChatClient to 1.34 dotnet/extensions#6466
Delete M.E.AI changelog files by @stephentoub in Delete M.E.AI changelog files dotnet/extensions#6467
Add comma to remarks by @gewarren in Add comma to remarks dotnet/extensions#6485
Implement disk io metrics for linux by @makazeu in Implement disk io metrics for linux dotnet/extensions#6374
Add AIFunction.ReturnJsonSchema by @eiriktsarpalis in Add AIFunction.ReturnJsonSchema dotnet/extensions#6447

New Contributors

@MihaZupan made their first contribution in Reduce per-lookup overhead from key validation in HybridCache dotnet/extensions#6441
@BowenYang666 made their first contribution in Add default value for namedArg in Microsoft.Gen.Metrics.parser dotnet/extensions#6238

Full Changelog: dotnet/extensions@v9.5.0...v9.6.0

Commits viewable in compare view.

Updated MongoDB.Driver from 3.4.0 to 3.4.1.

Release notes

Sourced from MongoDB.Driver's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated MongoDB.Driver.Authentication.AWS from 3.4.0 to 3.4.1.

Release notes

Sourced from MongoDB.Driver.Authentication.AWS's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Serilog.Enrichers.ClientInfo from 2.1.2 to 2.3.0.

Release notes

Sourced from Serilog.Enrichers.ClientInfo's releases.

2.3.0 What's Changed

Fix KeyNotFoundException in all enrichers by using TryGetValue instead of direct dictionary access
#49

Full Changelog: serilog-contrib/serilog-enrichers-clientinfo@v2.2.0...v2.3.0

2.2.0 What's Changed

Support for .NET 9.0 by @alexandrejobin #52
Remove Support for .NET 6.0 and .NET 7.0
Update Serilog version to v4.3.0
Fix assembly version by @alexandrejobin #53
Update nuget package dependencies

Full Changelog: serilog-contrib/serilog-enrichers-clientinfo@v2.1.2...v2.2.0

Commits viewable in compare view.

Updated SlimMessageBus.Host.AmazonSQS from 3.2.0 to 3.3.0.

Release notes

Sourced from SlimMessageBus.Host.AmazonSQS's releases.

3.3.0

[Host] Ensure failure to deserialize causes message to fail in the underlying transport #413
[Host.AmazonSQS] Add SNS support #404
[Host.Serialization] Allow Access to Full Message During Deserialization #408
[Tests] Replace FluentAssertions due to it becoming commercial #417

Commits viewable in compare view.

Updated SlimMessageBus.Host.Serialization.SystemTextJson from 3.2.0 to 3.3.0.

Release notes

Sourced from SlimMessageBus.Host.Serialization.SystemTextJson's releases.

3.3.0

[Host] Ensure failure to deserialize causes message to fail in the underlying transport #413
[Host.AmazonSQS] Add SNS support #404
[Host.Serialization] Allow Access to Full Message During Deserialization #408
[Tests] Replace FluentAssertions due to it becoming commercial #417

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.10.0.116381 to 10.15.0.120848.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.15

False Positive

NET-2198 - Fix S1905 FP: Cast of default! expression is required
NET-2197 - Fix S1905 FP: stackalloc and Span conversions
NET-1641 - Fix S1905 FP: casting IEnumerable<string?> to IEnumerable<string>
NET-2157 - Fix S2589 FP: Don't raise an issue after a delegate is invoked
NET-2073 - Fix S2699 FP: Add support for FsCheck property tests
NET-1537 - Fix S6964 FP: Don't raise on properties annotated with the BindRequiredAttribute

Improvement

NET-2112 - Consider ExplodedNodes relevant if a successor would be relevant
NET-2183 - SE: Set constraint on operation when learning from IsPattern

False Negative

NET-429 - Fix S4275 FN: Support partial properties

Task

NET-2208 - Update RSpec before release

10.14

Hey everyone,

This release mostly focuses on mitigating (NET-2196) a performance regression that was introduced in 10.13.

Improvement

NET-2196 - Fix path algorithm for execution flows to mitigate performance regression
NET-2177 - Improve how the Symbolic Execution engine handles exception paths
NET-2135 - Support xUnit V3
NET-2163 - Provide Interface for other plugins to add rules to VB.NET SonarWay profile

False Negative

NET-235 - Fix S2053: Adjust required salt length to be 32 bytes

Task

NET-2170 - Update RSPEC before 10.14 release

10.13

Hello everyone,

In this release, we've focused on:

False positive fixes
Enhancing S2259's secondary locations to provide clearer, step-by-step explanations of null pointer dereferences issues.

False Positives

NET-2099 - Fix S3885 FP: Do not raise in ResolutionEventHandler
NET-2023 - Fix S3257 FP: Array with target-typed new
NET-1646 - Fix S3267 FP: Loops should be simplified with LINQ expressions
NET-1588 - Fix S1066 FP: Combination of dynamic and out should not raise
NET-882 - Fix S3257 FP: Don't raise for C# 10 and later when there's explicit delegate creation

Improvements

NET-2095 - Improve incremental PR analysis path detection
SE: S2259 - Improve secondary locations

10.12

This release brings the VB version of S6418 and a few FP and FN fixes.

New Rule

NET-1379 - New Rule: Implement S6418 Hard-coded secrets are security-sensitive for VB.NET

False Positive

NET-1526 - Fix S3267 FP: Only raise on IEnumerable

False Negative

NET-1260 - Fix S1215 FN: GC.GetTotalMemory(forceFullCollection: true) should not be called
NET-1258 - Fix S6678 FN: Lowercase placeholders in interpolated string
NET-1255 - Fix S3267 FN: Logical operators are not supported

Task

NET-2060 - Update RSPEC before 11.12 release

10.11

Hello everyone!
In this release we fixed a bunch of false positives and false negatives.
Additionally this version adds support for telemetry in order to gather information on feature usage. Telemetry, requires scanner 10.2.0 or greater.

False Positive

NET-1522 - Fix S2068 FP: Do not raise on password:secret
NET-1149 - Fix S3626 FP: Add exception when return statement is preceding local functions

False Negative

NET-1263 - Fix S1871 FN: Nested if .. else if chain
NET-1256 - S2068: Remove word boundary(\b) from regex
NET-1254 - Fix S3878 FN: When params are passed as array through an attribute
NET-1252 - FN S1168: Support IndexerDeclaration and ConversionOperatorDeclaration
NET-459 - Fix S1168 FN: Add support for partial indexers

10.10.1

Bugfix release to fix combability with SonarQube Cloud + a simplification to the ProfileRegistrar

Task

NET-1463 - Update RSPEC before 10.10.1 release
NET-1461 - Make CSharpSonarWayProfile be compatible and simplify ProfileRegistrar

Commits viewable in compare view.

Updated Verify.Xunit from 30.3.1 to 30.5.0.

Release notes

Sourced from Verify.Xunit's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated WireMock.Net.FluentAssertions from 1.8.9 to 1.8.17.

Release notes

Sourced from WireMock.Net.FluentAssertions's releases.

1.8.16 What's Changed

Use correct Handlebars.Net.Helpers.Xslt (2.5.2) by @StefH in Use correct Handlebars.Net.Helpers.Xslt (2.5.2) wiremock/WireMock.Net#1332

Full Changelog: wiremock/WireMock.Net@1.8.15...1.8.16

1.8.15 What's Changed

Correctly map the Pact Interaction Description property by @StefH in Correctly map the Pact Interaction Description property wiremock/WireMock.Net#1331

Full Changelog: wiremock/WireMock.Net@1.8.14...1.8.15

1.8.14 What's Changed

Add method CreateHttpClientFactory by @StefH in Add method CreateHttpClientFactory wiremock/WireMock.Net#1325
Implement IMimeMessageData by @StefH in Implement IMimeMessageData wiremock/WireMock.Net#1326
Fix HandlebarsContext.ParseAndEvaluate by @StefH in Fix HandlebarsContext.ParseAndEvaluate wiremock/WireMock.Net#1329

Full Changelog: wiremock/WireMock.Net@1.8.13...1.8.14

1.8.13 What's Changed

Add Scenario set State method by @StefH in Add Scenario set State method wiremock/WireMock.Net#1322

Full Changelog: wiremock/WireMock.Net@1.8.12...1.8.13

1.8.12 What's Changed

Use default resource cleaning behavior in test by @scrocquesel in Use default resource cleaning behavior in test wiremock/WireMock.Net#1316
Set description when converting MappingModel to IRespondWithAProvider by @BodrickLight in Set description when converting MappingModel to IRespondWithAProvider wiremock/WireMock.Net#1317
Fix TypeLoader by @StefH in Fix TypeLoader wiremock/WireMock.Net#1320

New Contributors

@BodrickLight made their first contribution in Set description when converting MappingModel to IRespondWithAProvider wiremock/WireMock.Net#1317

Full Changelog: wiremock/WireMock.Net@1.8.11...1.8.12

1.8.11

1.8.10

Commits viewable in compare view.

Updated WireMock.Net.RestClient from 1.8.9 to 1.8.17.

Release notes

Sourced from WireMock.Net.RestClient's releases.

1.8.16 What's Changed

Use correct Handlebars.Net.Helpers.Xslt (2.5.2) by @StefH in Use correct Handlebars.Net.Helpers.Xslt (2.5.2) wiremock/WireMock.Net#1332

Full Changelog: wiremock/WireMock.Net@1.8.15...1.8.16

1.8.15 What's Changed

Correctly map the Pact Interaction Description property by @StefH in Correctly map the Pact Interaction Description property wiremock/WireMock.Net#1331

Full Changelog: wiremock/WireMock.Net@1.8.14...1.8.15

1.8.14 What's Changed

Add method CreateHttpClientFactory by @StefH in Add method CreateHttpClientFactory wiremock/WireMock.Net#1325
Implement IMimeMessageData by @StefH in Implement IMimeMessageData wiremock/WireMock.Net#1326
Fix HandlebarsContext.ParseAndEvaluate by @StefH in Fix HandlebarsContext.ParseAndEvaluate wiremock/WireMock.Net#1329

Full Changelog: wiremock/WireMock.Net@1.8.13...1.8.14

1.8.13 What's Changed

Add Scenario set State method by @StefH in Add Scenario set State method wiremock/WireMock.Net#1322

Full Changelog: wiremock/WireMock.Net@1.8.12...1.8.13

1.8.12 What's Changed

Use default resource cleaning behavior in test by @scrocquesel in Use default resource cleaning behavior in test wiremock/WireMock.Net#1316
Set description when converting MappingModel to IRespondWithAProvider by @BodrickLight in Set description when converting MappingModel to IRespondWithAProvider wiremock/WireMock.Net#1317
Fix TypeLoader by @StefH in Fix TypeLoader wiremock/WireMock.Net#1320

New Contributors

@BodrickLight made their first contribution in Set description when converting MappingModel to IRespondWithAProvider wiremock/WireMock.Net#1317

Full Changelog: wiremock/WireMock.Net@1.8.11...1.8.12

1.8.11

1.8.10

Commits viewable in compare view.

Updated xunit.runner.visualstudio from 3.1.0 to 3.1.3.

Release notes

Sourced from xunit.runner.visualstudio's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Defra.TradeImportsDataApi.Domain from 0.23.0-pr-136.743 to 0.25.0 Bumps Elastic.CommonSchema.Serilog from 8.18.1 to 8.18.2 Bumps Elastic.Serilog.Enrichers.Web from 8.18.1 to 8.18.2 Bumps Microsoft.AspNetCore.HeaderPropagation from 9.0.5 to 9.0.7 Bumps Microsoft.AspNetCore.Mvc.Testing to 9.0.7 Bumps Microsoft.Extensions.Diagnostics.Testing from 9.5.0 to 9.7.0 Bumps Microsoft.Extensions.Http.Resilience from 9.5.0 to 9.7.0 Bumps MongoDB.Driver from 3.4.0 to 3.4.1 Bumps MongoDB.Driver.Authentication.AWS from 3.4.0 to 3.4.1 Bumps Serilog.Enrichers.ClientInfo from 2.1.2 to 2.3.0 Bumps SlimMessageBus.Host.AmazonSQS from 3.2.0 to 3.3.0 Bumps SlimMessageBus.Host.Serialization.SystemTextJson from 3.2.0 to 3.3.0 Bumps SonarAnalyzer.CSharp from 10.10.0.116381 to 10.15.0.120848 Bumps Verify.Xunit from 30.3.1 to 30.5.0 Bumps WireMock.Net.FluentAssertions from 1.8.9 to 1.8.17 Bumps WireMock.Net.RestClient from 1.8.9 to 1.8.17 Bumps xunit.runner.visualstudio to 3.1.3 --- updated-dependencies: - dependency-name: Defra.TradeImportsDataApi.Domain dependency-version: 0.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch - dependency-name: Elastic.CommonSchema.Serilog dependency-version: 8.18.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: Elastic.Serilog.Enrichers.Web dependency-version: 8.18.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: Microsoft.AspNetCore.HeaderPropagation dependency-version: 9.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 9.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 9.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 9.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: Microsoft.Extensions.Diagnostics.Testing dependency-version: 9.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch - dependency-name: Microsoft.Extensions.Http.Resilience dependency-version: 9.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch - dependency-name: MongoDB.Driver dependency-version: 3.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: MongoDB.Driver.Authentication.AWS dependency-version: 3.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: Serilog.Enrichers.ClientInfo dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch - dependency-name: SlimMessageBus.Host.AmazonSQS dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch - dependency-name: SlimMessageBus.Host.Serialization.SystemTextJson dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch - dependency-name: SonarAnalyzer.CSharp dependency-version: 10.15.0.120848 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch - dependency-name: Verify.Xunit dependency-version: 30.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch - dependency-name: WireMock.Net.FluentAssertions dependency-version: 1.8.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: WireMock.Net.RestClient dependency-version: 1.8.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: xunit.runner.visualstudio dependency-version: 3.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: xunit.runner.visualstudio dependency-version: 3.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: xunit.runner.visualstudio dependency-version: 3.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-07-29T11:49:41Z

Superseded by #126.

dependabot bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jul 25, 2025

dependabot bot closed this Jul 29, 2025

dependabot bot deleted the dependabot/nuget/patch-9755025543 branch July 29, 2025 11:49

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the patch group with 17 updates #125

Bump the patch group with 17 updates #125

Uh oh!

dependabot bot commented on behalf of github Jul 25, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Jul 29, 2025

Uh oh!

Uh oh!

Bump the patch group with 17 updates #125

Bump the patch group with 17 updates #125

Uh oh!

Conversation

dependabot bot commented on behalf of github Jul 25, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

8.18.2

View the full list of issues and PRs

8.18.2

View the full list of issues and PRs

9.0.7

What's Changed

9.0.6

Bug Fixes

Dependency Updates

Miscellaneous

9.0.7

What's Changed

9.0.6

Bug Fixes

Dependency Updates

Miscellaneous

9.7.0

What's Changed

New Contributors

9.6.0

What's Changed

New Contributors

9.7.0

What's Changed

New Contributors

9.6.0

What's Changed

New Contributors

2.3.0

What's Changed

2.2.0

What's Changed

3.3.0

3.3.0

10.15

False Positive

Improvement

False Negative

Task

10.14

Improvement

False Negative

Task

10.13

False Positives

Improvements

10.12

New Rule

False Positive

False Negative

Task

10.11

False Positive

False Negative

10.10.1

Task

1.8.16

What's Changed

1.8.15

What's Changed

1.8.14

What's Changed

1.8.13

What's Changed

1.8.12

What's Changed

New Contributors

1.8.11

1.8.10

1.8.16

What's Changed

1.8.15

What's Changed

1.8.14

dependabot bot commented on behalf of github Jul 25, 2025 •

edited

Loading