Bump the nuget-production-dependencies group with 20 updates #85

Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#61623)
The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

Update dependencies from dotnet/arcade (#61832)
This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.
Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#61761)
The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

Update branding to 8.0.17 (#61830)
The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.
Merging internal commits for release/8.0 (#61924)
This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Update branding to 8.0.16 by @vseanreesermsft in Update branding to 8.0.16 dotnet/aspnetcore#61283
[release/8.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 dotnet/aspnetcore#61260
[release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#61281
[release/8.0] Upgrade to Ubuntu 22 by @wtgodbe in [release/8.0] Upgrade to Ubuntu 22 dotnet/aspnetcore#61216
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#60901
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#60926
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61404
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#61398
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61411
Revert "Revert "[release/8.0] Update remnants of azureedge.net"" by @wtgodbe in Revert "Revert "[release/8.0] Update remnants of azureedge.net"" dotnet/aspnetcore#60352
[release/8.0] Fix preserving messages for stateful reconnect with backplane by @BrennanConroy in [release/8.0] Fix preserving messages for stateful reconnect with backplane dotnet/aspnetcore#61375
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#61442
fetch TLS client hello message from HTTP.SYS by @BrennanConroy in fetch TLS client hello message from HTTP.SYS dotnet/aspnetcore#61494

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#60355
Update branding to 8.0.15 by @vseanreesermsft in Update branding to 8.0.15 dotnet/aspnetcore#60784
Add partitioned to cookie for SignalR browser testing by @BrennanConroy in Add partitioned to cookie for SignalR browser testing dotnet/aspnetcore#60728
[release/8.0] (deps): Bump src/submodules/googletest from e235eb3 to 24a9e94 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from e235eb3 to 24a9e94 dotnet/aspnetcore#60677
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#60879

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Update branding to 8.0.14 by @vseanreesermsft in Update branding to 8.0.14 dotnet/aspnetcore#60197
[release/8.0] (deps): Bump src/submodules/googletest from 7d76a23 to e235eb3 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 7d76a23 to e235eb3 dotnet/aspnetcore#60150
[release/8.0] Fix java discovery in IdentityModel pipeline by @wtgodbe in [release/8.0] Fix java discovery in IdentityModel pipeline dotnet/aspnetcore#60075
[release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#60199
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#59922
[release/8.0] Readd DiagnosticSource to KestrelServerImpl by @github-actions in [release/8.0] Readd DiagnosticSource to KestrelServerImpl dotnet/aspnetcore#60203
[release/8.0] Update to MacOS 15 in Helix by @github-actions in [release/8.0] Update to MacOS 15 in Helix dotnet/aspnetcore#60239
[release/8.0] Use the latest available JDK by @wtgodbe in [release/8.0] Use the latest available JDK dotnet/aspnetcore#60233
[release/8.0] Fix skip condition for java tests by @github-actions in [release/8.0] Fix skip condition for java tests dotnet/aspnetcore#60243
[release/8.0] Update list of helix queues to skip by @wtgodbe in [release/8.0] Update list of helix queues to skip dotnet/aspnetcore#60231
[release/8.0] [Blazor] Allow cascading value subscribers to get added and removed during change notification by @github-actions in [release/8.0] [Blazor] Allow cascading value subscribers to get added and removed during change notification dotnet/aspnetcore#57288
[release/8.0] Update remnants of azureedge.net by @sebastienros in [release/8.0] Update remnants of azureedge.net dotnet/aspnetcore#60264
[release/8.0] Centralize on one docker container by @wtgodbe in [release/8.0] Centralize on one docker container dotnet/aspnetcore#60299
Revert "[release/8.0] Update remnants of azureedge.net" by @wtgodbe in Revert "[release/8.0] Update remnants of azureedge.net" dotnet/aspnetcore#60324
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#60316

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 17.13.0 to 18.0.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.0.1 What's Changed

Fixing an issue with loading covrun64.dll on systems that have .NET 10 SDK installed: https://learn.microsoft.com/en-us/dotnet/core/compatibility/sdk/10.0/code-coverage-dynamic-native-instrumentation

Disable DynamicNative instrumentation by default by @nohwnd in [rel/18.0] Disable DynamicNative instrumentation by default microsoft/vstest#15298
Update MicrosoftInternalCodeCoveragePackageVersion to 18.0.6 by @nohwnd in Update MicrosoftInternalCodeCoveragePackageVersion to 18.0.6 microsoft/vstest#15312

Internal changes

Update VersionPrefix to 18.0.1 by @nohwnd in Update VersionPrefix to 18.0.1 microsoft/vstest#15301
Update build tools to 17.8.43 by @nohwnd in Update build tools to 17.8.43 microsoft/vstest#15305

Full Changelog: microsoft/vstest@v18.0.0...v18.0.1

18.0.0 What's Changed

Update reporting formatting by @martincostello in Update reporting formatting microsoft/vstest#15082
Fix stack trace for Trace.Fail and Debug.Fail by @nohwnd in Fix stack trace for Trace.Fail and Debug.Fail microsoft/vstest#15103
Add documentation of environment variables by @Copilot in Add documentation of environment variables microsoft/vstest#15095
IFrameworkHandle.LaunchProcessWithDebuggerAttached allows null for workingDirectory in signature but throws by @Copilot in [WIP] IFrameworkHandle.LaunchProcessWithDebuggerAttached allows null for workingDirectory in signature but throws microsoft/vstest#15091
Add Dependabot configuration for .NET SDK updates by @JamieMagee in Add Dependabot configuration for .NET SDK updates microsoft/vstest#15114
Handle dotnet_root in testhost version aware way by @nohwnd in Handle dotnet_root in testhost version aware way microsoft/vstest#15184
Add magic bytes validation for Mach-O binaries in DotnetHostHelper by @Copilot in Add magic bytes validation for Mach-O binaries in DotnetHostHelper microsoft/vstest#15230
using globbing pattern doesn't work on windows with forward slashes by @Copilot in using globbing pattern doesn't work on windows with forward slashes microsoft/vstest#15088
Remove tpv0 by @nohwnd in Remove tpv0 microsoft/vstest#15247
Cache AssemblyName in ManagedNameHelper by @Youssef1313 in Cache AssemblyName in ManagedNameHelper microsoft/vstest#15259
Add ARM64 support to GetArchitectureForSource methods by @Copilot in Add ARM64 support to GetArchitectureForSource methods microsoft/vstest#15278

Internal fixes and updates

Fix formatting in two files by @ViktorHofer in Fix formatting in two files microsoft/vstest#15047
Build TestPlatform packages in VMR by @ViktorHofer in Build TestPlatform packages in VMR microsoft/vstest#15055
Condition property on .NET FX MSBuild by @jaredpar in Condition property on .NET FX MSBuild microsoft/vstest#15054
Migrate to awesome assertions by @nohwnd in Migrate to awesome assertions microsoft/vstest#15056
Revert "Build TestPlatform packages in VMR" by @ViktorHofer in Revert "Build TestPlatform packages in VMR" microsoft/vstest#15057
Update package Category by @ViktorHofer in Update package Category microsoft/vstest#15058
Revert "Write props of tests into trx" by @nohwnd in Revert "Write props of tests into trx" microsoft/vstest#15080
Error on unsupported tfms (#15072) by @nohwnd in Error on unsupported tfms (#15072) microsoft/vstest#15073
Use policies from testfx to align by @nohwnd in Use policies from testfx to align microsoft/vstest#15085
Update enable-auto-merge.yml by @nohwnd in Update enable-auto-merge.yml microsoft/vstest#15102
Revert ignoring environment test by @Copilot in [WIP] Revert ignoring environment test microsoft/vstest#15094
unignore tests by @Copilot in [WIP] unignore tests microsoft/vstest#15093
Update MSTest by @Youssef1313 in Update MSTest microsoft/vstest#15108
Bump dotnet-sdk from 9.0.106 to 9.0.301 by @dependabot[bot] in Bump dotnet-sdk from 9.0.106 to 9.0.301 microsoft/vstest#15179
Use Assert.Equals by @nohwnd in Use Assert.Equals microsoft/vstest#15181
Run VSTest tests with MTP by @Youssef1313 in Run VSTest tests with MTP microsoft/vstest#15079
Use the standard sdk for architecture switch test by @nohwnd in Use the standard sdk for architecture switch test microsoft/vstest#15188
Remove CUIT (Coded UI Test) from NuGet packages and test projects by @Copilot in Remove CUIT (Coded UI Test) from NuGet packages and test projects microsoft/vstest#15177
dump-logs? by @nohwnd in dump-logs? microsoft/vstest#15187
Moving to version 18 by @nohwnd in Moving to version 18 microsoft/vstest#15209
Update fakes version by @drognanar in Update fakes version microsoft/vstest#15227
Microsoft.Intellitrace.Core should be taken from nuget by @nohwnd in Microsoft.Intellitrace.Core should be taken from nuget microsoft/vstest#15229
Remove MSTest.Assert.Extensions by @Youssef1313 in Remove MSTest.Assert.Extensions microsoft/vstest#15178
Sourcebuild fix by @nohwnd in Sourcebuild fix microsoft/vstest#15239
Set dotnet_root_ only when the architecture of dotnet in the path is the same by @nohwnd in Set dotnet_root_<arch> only when the architecture of dotnet in the path is the same microsoft/vstest#15250
Remove fakes v1 from FakesUtilities by @drognanar in Remove fakes v1 from FakesUtilities microsoft/vstest#15251
Update fakes dependencies by @drognanar in Update fakes dependencies microsoft/vstest#15254
Do half the work in GetManagedName by @Youssef1313 in Do half the work in GetManagedName microsoft/vstest#15255
check Vsix only when produced by @nohwnd in check Vsix only when produced microsoft/vstest#15261
Set dotnet_root_ always by @nohwnd in Set dotnet_root_<arch> always microsoft/vstest#15266
Don't hardcode old vswhere version in global.json by @akoeplinger in Don't hardcode old vswhere version in global.json microsoft/vstest#15267
Revert dowgrade of fakes by @nohwnd in Revert dowgrade of fakes microsoft/vstest#15263
Update VSSDK to version with code flow guard by @nohwnd in Update VSSDK to version with code flow guard microsoft/vstest#15279
Update Fakes to version with code flow guard by @nohwnd in Update Fakes to version with code flow guard microsoft/vstest#15273
... (truncated)

17.14.1 What's Changed

Error on unsupported target frameworks to prevent silently not running tests by @nohwnd in Warning on unsupported tfms microsoft/vstest#15072 and Make the warning error, and restore previous props so we attempt to run microsoft/vstest#15078
Revert writing additional properties to TRX by @nohwnd in microsoft/vstest@47eb51b

Full Changelog: microsoft/vstest@v17.14.0...v17.14.1

17.14.0 What's Changed

.NET versions updated

This version of VS Test upgraded .NET to net8 and net9. All projects targeting net6.0 (or other end-of-life .NET target frameworks) should pin their version of Microsoft.NET.Test.SDK to 17.13.0, or update the projects to net8 or newer. We remain backwards compatible with previous versions of Microsoft.NET.Test.SDK. This change does NOT prevent you from:

Updating to the latest VS, and running tests from net6.0 test projects.
Updating to the latest .NET SDK, and running tests from net6.0 test projects.

It also has no impact on .NET Framework projects, where we continue targeting .NET Framework 4.6.2.

Drop unsupported frameworks by @nohwnd in Drop unsupported frameworks microsoft/vstest#10565

Changes

Adding Process Query Flag For UWP .NET 9 Support by @adstep in Adding Process Query Flag For UWP .NET 9 Support microsoft/vstest#15003
Fix builds on WinUI and UWP .NET 9 projects by @Sergio0694 in Fix builds on WinUI and UWP .NET 9 projects microsoft/vstest#15004
don't report communication error on discovery abort by @nohwnd in don't report communication error on discovery abort microsoft/vstest#14992
Add dump minitool to vsix by @nohwnd in Add dump minitool to vsix microsoft/vstest#14707
Make test runners long-path aware (#5179) by @peetw in Make test runners long-path aware (#5179) microsoft/vstest#15014
Fix trace in DataCollectionRequestSender.cs by @stan-sz in Fix trace in DataCollectionRequestSender.cs microsoft/vstest#15025
Fix/readme grammar parallelism by @dellch in Fix/readme grammar parallelism microsoft/vstest#15030
Add binding redirects by @nohwnd in Add binding redirects microsoft/vstest#15041
Write props of tests into trx by @nohwnd in Write props of tests into trx microsoft/vstest#14905

Internal version updates and fixes

Update io.redist by @nohwnd in Update io.redist microsoft/vstest#13872
Use preview image for public build by @nohwnd in Use preview image for public build microsoft/vstest#13888
Remove xcopy-msbuild by @nohwnd in Remove xcopy-msbuild microsoft/vstest#14138
Move to macos14 by @nohwnd in Move to macos14 microsoft/vstest#14137
Update diagnose.md by @nohwnd in Update diagnose.md microsoft/vstest#14776
hash with sha2 for mutex lock by @nohwnd in hash with sha2 for mutex lock microsoft/vstest#14777
Update test projects for vmr by @nohwnd in Update test projects for vmr microsoft/vstest#14894
17.14 branding by @nohwnd in 17.14 branding microsoft/vstest#14903
Update filter.md for NUnit by @OsirisTerje in Update filter.md for NUnit microsoft/vstest#14987
Flag netstandard1.x dependencies in source-build by @ViktorHofer in Flag netstandard1.x dependencies in source-build microsoft/vstest#14986
Use VS dependencies versions from release VS to have archived symbols by @nohwnd in Use VS dependencies versions from release VS to have archived symbols microsoft/vstest#14991
Remove extra ; by @nohwnd in Remove extra ; microsoft/vstest#14995
Use dependencymodel 6.0.2 by @nohwnd in Use dependencymodel 6.0.2 microsoft/vstest#14996
Make Testhost packable only on Windows by @mmitche in Make Testhost packable only on Windows microsoft/vstest#15001
Add system text json to vsix by @nohwnd in Add system text json to vsix microsoft/vstest#15034
Add more files to vsix by @nohwnd in Add more files to vsix microsoft/vstest#15038
Remove unnecessary CA2022 suppressions by @Winniexu01 in Remove unnecessary CA2022 suppressions microsoft/vstest#15035
Update package project url by @mmitche in Update package project url microsoft/vstest#15040

New Contributors

@OsirisTerje made their first contribution in Update filter.md for NUnit microsoft/vstest#14987
@adstep made their first contribution in Adding Process Query Flag For UWP .NET 9 Support microsoft/vstest#15003
... (truncated)

17.14.0-preview-25107-01

What's Changed

.NET versions updated

This version of VS Test upgraded .NET to net8 and net9. All projects targeting net6.0 (or other end-of-life .NET target frameworks) should pin their version of Microsoft.NET.Test.SDK to 17.13.0, or update the projects to net8 or newer. We remain backwards compatible with previous versions of Microsoft.NET.Test.SDK. This change does NOT prevent you from:

Updating to the latest VS, and running tests from net6.0 test projects.
Updating to the latest .NET SDK, and running tests from net6.0 test projects.

It also has no impact on .NET Framework projects, where we continue targeting .NET Framework 4.6.2.

Drop unsupported frameworks by @nohwnd in Drop unsupported frameworks microsoft/vstest#10565

New Contributors

@OsirisTerje made their first contribution in Update filter.md for NUnit microsoft/vstest#14987
@adstep made their first contribution in Adding Process Query Flag For UWP .NET 9 Support microsoft/vstest#15003
@Sergio0694 made their first contribution in Fix builds on WinUI and UWP .NET 9 projects microsoft/vstest#15004

Full Changelog: microsoft/vstest@v17.13.0...v17.14.0-preview-25107-01

Commits viewable in compare view.

Updated OpenFeature from 2.3.1 to 2.11.0.

Release notes

Sourced from OpenFeature's releases.

2.11.0 2.11.0 (2025-12-18)

✨ New Features

Upgrade to dotnet version 10 (#658) (c7be7e0)

2.10.0 2.10.0 (2025-12-01)

🐛 Bug Fixes

Address issue with FeatureClient not being resolved when no Provider added (#607) (a8d12ef)
Address issues when evaluating the context in the InMemoryProvider (#615) (94fcdc1)
Ensure AddPolicyName without adding a Provider does not get stuck in infinite loop (#606) (4b965dd)
Ensure EvaluationContext is reliably added to the injected FeatureClient (#605) (c987b58)

✨ New Features

Add DI for multi provider (#621) (ee862f0)
Add disabled flag support to InMemoryProvider (#632) (df1765c)
Add optional CancellationToken parameter to SetProviderAsync (#638) (a1f7ff6)
Add SourceLink configuration for .NET SDK 8+ to enhance debugging experience (1b40391)
Add SourceLink configuration for .NET to enhance debugging experience (#614) (1b40391)
Add tracking to multi-provider (#612) (186b357)

🔧 Refactoring

Clean up project files by removing TargetFrameworks and formatting (#611) (dfbc3ee)
Pass cancellation tokens to Provider Initialization functions (#640) (8b472d8)
Remove deprecated Dependency Injection code (#626) (a36a906)

2.9.0 2.9.0 (2025-10-16)

🐛 Bug Fixes

update provider status to Fatal during disposal (#580) (76bd94b)

✨ New Features

Add events to the multi provider (#568) (9d8ab03)
Add multi-provider support (#488) (7237053)
Deprecate AddHostedFeatureLifecycle method (#531) (fdf2297)
Implement hooks in multi provider (#594) (95ae7f0)
Support retrieving numeric metadata as either integers or decimals (#490) (12de5f1)

🚀 Performance

Add NativeAOT Support (#554) (acd0486)

2.8.1 2.8.1 (2025-07-31)

🐛 Bug Fixes

expose ValueJsonConverter for generator support and add JsonSourceGenerator test cases (#537) (e03aeba)

2.8.0 2.8.0 (2025-07-30)

🐛 Bug Fixes

update DI lifecycle to use container instead of static instance (#534) (1a3846d)

✨ New Features

Add Hook Dependency Injection extension method with Hook instance (#513) (12396b7)
Add TraceEnricherHookOptions Custom Attributes (#526) (5a91005)
Add Track method to IFeatureClient (#519) (2e70072)
Support JSON Serialize for Value (#529) (6e521d2)
Add Metric Hook Custom Attributes (#512) (8c05d1d)

🧹 Chore

Add comparison to Value (#523) (883f4f3)
deps: update github/codeql-action digest to 181d5ee (#520) (40bec0d)
deps: update github/codeql-action digest to 4e828ff (#532) (20d1f37)
deps: update github/codeql-action digest to d6bbdef (#527) (03d3b9e)
deps: update spec digest to 224b26e (#521) (fbc2645)
deps: update spec digest to baec39b (#528) (a0ae014)
remove redundant rule (now in parent) (929fa74)

📚 Documentation

fix anchor link in readme (#525) (18705c7)
remove curly brace from readme (8c92524)

🔄 Refactoring

Simplify Provider Repository (#515) (2547a57)

2.7.0 2.7.0 (2025-07-03)

🐛 Bug Fixes

Add generic to evaluation event builder (#500) (68af649)
ArgumentNullException when creating a client with optional name (#508) (9151dcd)

✨ New Features

Move OTEL hooks to the SDK (#338) (77f6e1b)

🧹 Chore

deps: update actions/attest-build-provenance action to v2.4.0 (#495) (349c073)
deps: update actions/attest-sbom action to v2.4.0 (#496) (f7ca416)
deps: update dependency benchmarkdotnet to 0.15.0 (#481) (714425d)
deps: update dependency benchmarkdotnet to 0.15.2 (#494) (cab3807)
deps: update dependency microsoft.net.test.sdk to 17.14.0 (#482) (520d383)
deps: update dependency microsoft.net.test.sdk to 17.14.1 (#485) (78bfdbf)
deps: update dependency opentelemetry.instrumentation.aspnetcore to 1.12.0 (#505) (241d880)
deps: update dependency reqnroll.xunit to 2.4.1 (#483) (99f7584)
deps: update dependency system.valuetuple to 4.6.1 (#503) (39f884d)
deps: update github/codeql-action digest to 39edc49 (#504) (08ff43c)
deps: update github/codeql-action digest to ce28f5b (#492) (cce224f)
deps: update github/codeql-action digest to fca7ace (#486) (e18ad50)
deps: update opentelemetry-dotnet monorepo to 1.12.0 (#506) (69dc186)
deps: update spec digest to 1965aae (#499) (2e3dffd)
deps: update spec digest to 42340bb (#493) (909c51d)
deps: update spec digest to c37ac17 (#502) (38f63fc)
deps: update spec digest to f014806 (#479) (dbe8b08)
fix sample build warning (#498) (08a00e1)

📚 Documentation

add XML comment on FeatureClient (#507) (f923cea)
updated contributing link on the README (8435bf7)

2.6.0 2.6.0 (2025-05-23)

✨ New Features

add AddHandler extension method to Dependency Injection package (#462) (ff414b8)
Add Extension Method for adding global Hook via DependencyInjection (#459) (9b04485)
Add OTEL compatible telemetry object builder (#397) (6c44db9)

🧹 Chore

Cleanup .props file (#476) (6d7a535)
deps: update actions/attest-build-provenance action to v2.3.0 (#464) (0a5ab0c)
deps: update codecov/codecov-action action to v5.4.3 (#475) (fbcf3a4)
deps: update github/codeql-action digest to 60168ef (#463) (ea76351)
deps: update github/codeql-action digest to ff0a06e (#473) (af1b20f)
deps: update spec digest to edf0deb (#474) (fc3bdfe)

📚 Documentation

Add AspNetCore sample app (#477) (9742a0d)

2.5.0 2.5.0 (2025-04-25)

✨ New Features

Add support for hook data. (#387) (4563512)

🧹 Chore

add NuGet auditing (#454) (42ab536)
Change file scoped namespaces and cleanup job (#453) (1e74a04)
deps: update codecov/codecov-action action to v5.4.2 (#432) (c692ec2)
deps: update github/codeql-action digest to 28deaed (#446) (dfecd0c)
deps: update spec digest to 18cde17 (#395) (5608dfb)
deps: update spec digest to 2...

_Descripti...

Description has been truncated

Bumps Grpc.AspNetCore from 2.67.0 to 2.76.0 Bumps Grpc.AspNetCore.HealthChecks from 2.67.0 to 2.76.0 Bumps Grpc.Net.Client from 2.67.0 to 2.76.0 Bumps Microsoft.AspNetCore.TestHost from 8.0.13 to 8.0.22 Bumps Microsoft.NET.Test.Sdk from 17.13.0 to 18.0.1 Bumps OpenFeature from 2.3.1 to 2.11.0 Bumps OpenFeature.Contrib.Hooks.Otel from 0.2.0 to 0.2.1 Bumps OpenFeature.Contrib.Providers.Flagd from 0.3.0 to 0.3.4 Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.11.1 to 1.14.0 Bumps OpenTelemetry.Extensions.Hosting from 1.11.1 to 1.14.0 Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.11.0 to 1.14.0 Bumps OpenTelemetry.Instrumentation.GrpcNetClient from 1.11.0-beta.1 to 1.11.0-beta.2 Bumps OpenTelemetry.Instrumentation.Http from 1.11.0 to 1.14.0 Bumps OpenTelemetry.Instrumentation.Process from 1.11.0-beta.1 to 1.11.0-beta.2 Bumps OpenTelemetry.Instrumentation.Runtime from 1.11.0 to 1.14.0 Bumps OpenTelemetry.Instrumentation.StackExchangeRedis from 1.11.0-beta.1 to 1.11.0-beta.2 Bumps OpenTelemetry.Resources.Container from 1.11.0-beta.1 to 1.11.0-beta.2 Bumps OpenTelemetry.Resources.Host from 1.11.0-beta.1 to 1.11.0-beta.2 Bumps StackExchange.Redis from 2.8.24 to 2.10.1 Bumps xunit.runner.visualstudio from 3.0.2 to 3.1.5 --- updated-dependencies: - dependency-name: Grpc.AspNetCore dependency-version: 2.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: Grpc.AspNetCore.HealthChecks dependency-version: 2.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: Grpc.Net.Client dependency-version: 2.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: Microsoft.AspNetCore.TestHost dependency-version: 8.0.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-production-dependencies - dependency-name: OpenFeature dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenFeature.Contrib.Hooks.Otel dependency-version: 0.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: OpenFeature.Contrib.Providers.Flagd dependency-version: 0.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.GrpcNetClient dependency-version: 1.11.0-beta.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.Http dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.Process dependency-version: 1.11.0-beta.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.Runtime dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.StackExchangeRedis dependency-version: 1.11.0-beta.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Resources.Container dependency-version: 1.11.0-beta.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Resources.Host dependency-version: 1.11.0-beta.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: StackExchange.Redis dependency-version: 2.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: xunit.runner.visualstudio dependency-version: 3.1.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: Grpc.AspNetCore dependency-version: 2.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: Grpc.AspNetCore.HealthChecks dependency-version: 2.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenFeature dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenFeature.Contrib.Hooks.Otel dependency-version: 0.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: OpenFeature.Contrib.Providers.Flagd dependency-version: 0.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.GrpcNetClient dependency-version: 1.11.0-beta.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.Http dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.Process dependency-version: 1.11.0-beta.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.Runtime dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.StackExchangeRedis dependency-version: 1.11.0-beta.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Resources.Container dependency-version: 1.11.0-beta.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Resources.Host dependency-version: 1.11.0-beta.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: StackExchange.Redis dependency-version: 2.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: Grpc.AspNetCore dependency-version: 2.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: Grpc.AspNetCore.HealthChecks dependency-version: 2.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: Grpc.Net.Client dependency-version: 2.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: Microsoft.AspNetCore.TestHost dependency-version: 8.0.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-production-dependencies - dependency-name: OpenFeature dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenFeature.Contrib.Hooks.Otel dependency-version: 0.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: OpenFeature.Contrib.Providers.Flagd dependency-version: 0.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.GrpcNetClient dependency-version: 1.11.0-beta.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.Http dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.Process dependency-version: 1.11.0-beta.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.Runtime dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.StackExchangeRedis dependency-version: 1.11.0-beta.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Resources.Container dependency-version: 1.11.0-beta.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Resources.Host dependency-version: 1.11.0-beta.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: StackExchange.Redis dependency-version: 2.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: xunit.runner.visualstudio dependency-version: 3.1.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-12-22T09:34:30Z