Bump dotnet-ef and 17 others

[dependabot]

Updated dotnet-ef from 10.0.10 to 10.0.11.

Release notes

Sourced from dotnet-ef's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned GSS.Authentication.CAS.AspNetCore at 5.8.1.

Release notes

Sourced from GSS.Authentication.CAS.AspNetCore's releases.

5.8.1

Changes

🐛 Bug Fixes

• fix: honor CAS sign-out event (release 5.8.1) (#​1012) @​akunzai
• fix(deps): bump System.Security.Cryptography.Xml to 8.0.4 to fix CVE-2026-50527 (#​1002) @​akunzai

📦 Dependencies

• Bump StackExchange.Redis from 3.1.3 to 3.1.13 (#​1011) @​dependabot[bot], @​akunzai
• Bump NSubstitute from 6.0.0 to 6.1.0 (#​1009) @​dependabot[bot], @​akunzai
• Bump RichardSzalay.MockHttp from 7.0.0 to 7.1.0 (#​1010) @​dependabot[bot], @​akunzai
• build(deps-dev): bump the frontend group in /samples/AspNetCoreReactSample/ClientApp with 2 updates (#​1008) @​dependabot[bot], @​akunzai
• build(deps): bump web-vitals from 6.0.1 to 6.1.0 in /samples/AspNetCoreReactSample/ClientApp in the frontend group across 1 directory (#​1004) @​dependabot[bot], @​akunzai
• Bump StackExchange.Redis from 3.0.25 to 3.1.3 (#​1005) @​dependabot[bot], @​akunzai
• build(deps): bump typescript-eslint from 8.65.0 to 8.66.0 in /samples/AspNetCoreReactSample/ClientApp in the typescript group (#​1003) @​dependabot[bot], @​akunzai

⚙️ CI/CD

• ci(e2e): pin tags, GHA cache warm, deepen Docker layers (#​1006) @​akunzai
• ci: migrate Release Drafter configuration (#​1001) @​akunzai

🔨 Maintenance

• chore(samples): replace ESLint with oxlint and add oxfmt (#​1007) @​akunzai

Commits viewable in compare view.

Pinned Microsoft.AspNetCore.Authentication.JwtBearer at 10.0.11.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Proxies from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Proxies's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Sqlite from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.SqlServer from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.SqlServer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Tools from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Tools's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Abstractions from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Configuration.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Configuration.EnvironmentVariables's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.UserSecrets from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Configuration.UserSecrets's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.8.1 to 18.9.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.9.0

What's Changed

• Fix tilde/exclamation characters corrupted in TerminalLogger test output by @​nohwnd in [fix] Fix tilde/exclamation characters corrupted in TerminalLogger test output microsoft/vstest#16046
• Make TranslationLayer Native AOT-compatible by @​drewnoakes in Make TranslationLayer Native AOT-compatible microsoft/vstest#16045
• Guard GenerateProgramFile target against UseWinUI/UseUwpTools evaluation order by @​nohwnd in [fix] fix: guard GenerateProgramFile target against UseWinUI/UseUwpTools evaluation order microsoft/vstest#16072
• Add RequestingAssembly to AssemblyResolveEventArgs for binary compat by @​nohwnd in [fix] fix: add RequestingAssembly to AssemblyResolveEventArgs for binary compat microsoft/vstest#16076
• Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect from testhost.x86 and datacollector by @​Evangelink in Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect from testhost.x86 and datacollector microsoft/vstest#16082
• Fix TRX attachment paths when LogFileName contains a subdirectory by @​nohwnd in [fix] Fix TRX attachment paths when LogFileName contains a subdirectory microsoft/vstest#15791
• Fix missing dumps for .NET Framework child processes in NetClientHangDumper by @​nohwnd in [fix] Fix missing dumps for .NET Framework child processes in NetClientHangDumper microsoft/vstest#16098
• Fix data collection channels to use negotiated protocol version instead of V1 by @​nohwnd in [fix] Fix data collection channels to use negotiated protocol version instead of V1 microsoft/vstest#16096
• Fix race condition in BlameCollector: skip hang dump when testhost hasn't launched yet by @​nohwnd in [fix] Fix race condition in BlameCollector: skip hang dump when testhost hasn't launched yet microsoft/vstest#16065
• Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in auto-generated Program files by @​nohwnd in [fix] Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in auto-generated Program files microsoft/vstest#16101
• Include testhost process path in crash error messages by @​nohwnd in [fix] Include testhost process path in crash error messages microsoft/vstest#16108
• Fix DataDriven test results being double-counted in TRX logger totals by @​nohwnd in [fix] Fix DataDriven test results being double-counted in TRX logger totals microsoft/vstest#15766
• Fix datacollector crash visibility: replace Assert with throwable exceptions by @​nohwnd in [fix] Fix datacollector crash visibility: replace Assert with throwable exceptions microsoft/vstest#16048
• Add TreatErrorMessagesAsWarnings parameter to TRX logger by @​nohwnd in [fix] Add TreatErrorMessagesAsWarnings parameter to TRX logger microsoft/vstest#16106
• Wait for testhost stderr to drain before reading its crash output by @​nohwnd in Wait for testhost stderr to drain before reading its crash output microsoft/vstest#16128
• Handle runtimeconfig.dev.json without additionalProbingPaths by @​tmat in Handle runtimeconfig.dev.json without additionalProbingPaths microsoft/vstest#16166
• Suggest Microsoft.NET.Test.Sdk when a managed test project brings no testhost by @​nohwnd in Suggest Microsoft.NET.Test.Sdk when a managed test project brings no testhost microsoft/vstest#16169
• Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1) when run via vstest.console.exe directly (#​16151) by @​azat-msft in Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1) when run via vstest.console.exe directly (#16151) microsoft/vstest#16156
• Preserve the real exception (type + stack trace) when a test run aborts in BaseRunTests by @​nohwnd in [fix] Preserve the real exception (type + stack trace) when a test run aborts in BaseRunTests microsoft/vstest#16167

New Contributors

• @​drewnoakes made their first contribution in Make TranslationLayer Native AOT-compatible microsoft/vstest#16045

Full Changelog: microsoft/vstest@v18.8.0...v18.9.0

Commits viewable in compare view.

Updated Microsoft.Playwright.NUnit from 1.61.0 to 1.62.0.

Release notes

Sourced from Microsoft.Playwright.NUnit's releases.

1.62.0

🖼️ WebP screenshots

page.screenshot() and locator.screenshot() can now capture screenshots in the WebP format — Playwright infers the format from a .webp file extension, or you can set the type explicitly. Quality 100 (the default) is lossless, while lower values use lossy compression:

await Page.ScreenshotAsync(new() { Path = "homepage.webp", Quality = 50 });

New APIs

• New Scroll option (Auto | None) on actions to opt out of Playwright's automatic scroll-into-view.
• New Locator.WaitForFunctionAsync() waits until a function — called with the matching element — returns a truthy value.
• New APIResponse.TimingAsync() returns resource timing information for an API response.

Announcements

• 📋 The clipboard is now isolated from the operating system in headless mode, so tests that use navigator.clipboard no longer read or overwrite the clipboard of the machine running them.
• ⚠️ Debian 11 is not supported anymore.

Browser Versions

• Chromium 151.0.7922.34
• Mozilla Firefox 153.0
• WebKit 26.5

This version was also tested against the following stable channels:

• Google Chrome 151
• Microsoft Edge 151

Commits viewable in compare view.

Updated Radzen.Blazor from 11.2.2 to 11.2.8.

Release notes

Sourced from Radzen.Blazor's releases.

11.2.8

11.2.8 - 2026-08-27

Improvements

• RadzenDataGrid - performance optimizations: cell and sort value access goes through cached compiled getters, row-independent cell styles/CSS classes and filter operators are memoized, row membership lookups are O(1), event-arg attributes are created lazily, per-cell allocations are reduced and row click is raised once per row instead of once per cell. Thanks to @​pianomanjh!
• RadzenDataGrid - row membership falls back to a value-equality scan for items whose runtime type overrides GetHashCode so mutated rows (e.g. mutable records) keep their selected, edited and expanded state.
• RadzenDropDown - multiselect selection resolution is now O(items + selected), unchanged items skip re-rendering and in-memory search avoids per-item ToLower allocations. Thanks to @​pianomanjh!
• RadzenDropDown - multiselect resolution coerces bound values to the item value type (restores RadzenDropDownDataGrid enum resolution), matches null values to items with null ValueProperty and ClearAll unhighlights collections cleared in-place with PreserveCollectionOnSelection.
• RadzenAutoComplete - caches the item-text getter for faster rendering.

Fixes

• RadzenDataGrid - an awaited Reload from a column (e.g. reapplying a declared SortOrder after clearing saved settings with LoadData) no longer throws because the column read parameters from an expired ParameterView. Fixes #​2678.

11.2.7

11.2.7 - 2026-08-24

Improvements

• RadzenSpreadsheet - new Change event fires after every workbook mutation - commands, undo, redo, and sheet add/remove/rename/move - so hosts can enable a Save button on first edit or warn about unsaved changes without polling CanUndo. The event passes SpreadsheetChangeEventArgs with a SpreadsheetChangeReason, the affected worksheet and the executed command, and fires only for mutations that actually happened - commands rejected by ReadOnly, Allow* flags, protection or a CommandExecuting veto stay silent. Fixes #​2660

Fixes

• RadzenDataGrid - UseDisplayName now resolves the column header via DisplayAttribute.GetShortName(), so [Display(Name = "Key", ResourceType = typeof(Resources))] renders the localized text instead of the raw resource key, and a localized ShortName takes precedence over Name (#​2674, thanks @​xsainteer)
• RadzenRadioButtonList and RadzenCheckBoxList no longer cascade TValue to descendant components, so a ValidationMessage inside an item Template compiles again - its type parameter is inferred from the For expression as before. Fixes #​2673
• RadzenMarkdown no longer throws for links whose destination is not a valid URI, such as [x](https://) with an empty host - the link text is rendered without a destination instead of a UriFormatException taking down the component tree for stored user content. Fixes #​2671 (thanks @​artnim)
• RadzenSpreadsheet grid size now survives an xlsx export and import round trip - the dimension element is written as the full grid extent and trusted on import, so the sample 26x50 sheet reloads as 26x50 instead of being padded to 100x100, and files from other producers load trimmed to their used range. Fixes #​2670

11.2.6

11.2.6 - 2026-08-20

Improvements

• RadzenDataGrid, RadzenDataFilter and RadzenPivotDataGrid In and NotIn filter operators now filter scalar properties, including nullable value types - previously such filters were silently ignored. Filter values are normalized to the property type, so int[], List<long?> or List<object> values filter a long? property correctly, null or scalar filter values are ignored instead of throwing, and the generated expression translates to SQL with Entity Framework Core. SecondFilterOperator now also supports In and NotIn. Fixes #​2663 (thanks @​simonluebker)

Fixes

• RadzenDataGrid no longer triggers the critical aria-required-children axe violation - the grid role moved to the scrollable data element so it owns only row structure, keyboard navigation and focus behavior are preserved. Fixes #​2669
• Localization - application resx overrides for Radzen strings are now resolved as documented. Overrides embedded as Radzen.Blazor.RadzenStrings.[culture].resources in the application are consulted before the built-in translations, with fallback to the bundled strings for missing keys. Fixes #​2668
• RadzenRangeNavigator handle labels now respect the date FormatString while dragging, including month names, two-digit years, 12-hour clock with AM/PM and quoted literals (#​2666, thanks @​wimsoetens-cmd)

11.2.5

11.2.5 - 2026-08-14

Fixes

• RadzenNumeric no longer swallows keystrokes or registers phantom digits when Immediate and Format are used together. While typing, the input keeps the raw text and the format is applied on change or blur, so the caret no longer jumps and digits are no longer rounded away mid-edit. Digits that are literals in the format string (e.g. ### m2) no longer leak into the parsed value on reparse. Fixes #​2661
• RadzenProfileMenu closes again when clicking outside the menu or when activating a menu item - regression introduced in 11.2.4. Fixes #​2662
• RadzenProfileMenu and RadzenSplitButton are now preserved in the trimmer configuration so their popup-close callbacks keep working in trimmed WebAssembly apps.

11.2.4

11.2.4 - 2026-08-13

Improvements

• RadzenDataGrid - grouping can now be defined declaratively with the new Groups parameter. Thanks to @​Radium001!
• Themes - updated premium themes

Fixes

• RadzenDataGrid - column widths no longer jump when a column is resized - the resize logic used the currently drawn width instead of the intended one, and ColumnResized now reports the intended width. Thanks to @​I-Info!
• RadzenDataGrid - Reset now also clears expanded child data, edit state and the expand-all flag. Fixes #​2651
• RadzenDataGrid - column visibility from before grouping is restored when a group is removed and the intended visibility is saved in settings
• RadzenDataGrid - the CheckBoxList filter no longer shows an empty list after a value is auto-applied - the available values are reloaded and the popup re-rendered on close
• RadzenDatePicker - a cleared time no longer reappears when a new date is selected - clearing the value did not reset the cached time picker state - and pending hour, minute and second edits are now applied together on Ok instead of only the last one
• RadzenDatePicker - the input no longer swallows the first keystroke after pressing Enter - the keydown preventDefault flag was applied client-side one keystroke late, so Ctrl+A, Delete, caret movement or a typed character right after Enter could be lost and clearing the value with the keyboard could silently fail
• RadzenSpreadsheet - unsupported '#' input can no longer overflow the formula parser - the lexer end token is now always emitted. Fixes #​2658
• RadzenSpreadsheet - keyboard navigation now skips hidden rows and columns. Fixes #​2657
• RadzenSpreadsheet - accepting an empty value now clears the cell instead of storing a phantom newline. Fixes #​2656
• RadzenSpreadsheet - the last column and row are now rendered when all others are frozen. Fixes #​2644
• RadzenGantt - Shift+Scroll over the data grid now scrolls it horizontally instead of being forwarded as vertical scroll. Fixes #​2655
• RadzenProfileMenu - the toggle is now handled server-side so clicks before JS initialization work. Fixes #​2653
• RadzenSplitButton - item icons are now centered vertically in Small and ExtraSmall popups. Fixes #​2654

11.2.3

11.2.3 - 2026-08-11

Improvements

• RadzenProgressBar and RadzenProgressBarCircular - new BufferValue parameter displays a secondary buffer indicator ahead of the primary value, e.g. for media buffering. Thanks to @​pfs26!
• DialogService - the generic dialog methods now accept any type implementing IComponent instead of requiring ComponentBase. Thanks to @​drewcav96!
• RadzenSpreadsheet - conditional formatting is now imported from and exported to XLSX files. Fixes #​2645

Fixes

• RadzenSplitButton - the popup now opens reliably on Blazor Server even when the toggle is clicked right after the page loads. Clicks during the JS initialization round trip used to flip server state without showing the popup, leaving the button dead with aria-expanded="true". The popup is now driven entirely server-side and aria-expanded stays in sync when it is closed by clicking outside. Fixes #​2650
• RadzenDatePicker - the popup no longer intermittently stops opening after rapid re-renders - a stale JS dispose could remove the freshly attached click handler. The trigger also works during initial page load on high-latency connections now that it no longer depends on JS handlers attached after render. Fixes #​2646
• RadzenSecurityCode and RadzenSlider - keyboard and drag handlers are no longer removed by a stale JS dispose when the component re-renders rapidly.
• RadzenMenu - submenu clicks are handled by a static listener and now work immediately after page load, even before Blazor becomes interactive.
• Keyboard navigation - opening a popup with a key whose default action scrolls the page (ArrowDown on RadzenSplitButton, Space on RadzenDropDown, RadzenListBox, RadzenColorPicker and RadzenProfileMenu) no longer scrolls and instantly closes the popup on scrollable pages.
• RadzenDataGrid - client-side filtering is no longer applied to self-referencing hierarchies when LoadData is used. Fixes #​2649
• RadzenChart - stacked series render significantly faster - compiled property getters are now cached instead of recompiled on every access.
• RadzenChat - mention search keeps working when the search text contains spaces while a mention is active. Thanks to @​artnim!
• RadzenChat - keyboard navigation in the mention popup now works reliably - render-time preventDefault was replaced with a native keydown guard.
• RadzenSelectBar - background color is now correct in the Material, Default, Humanistic and Software themes.
• TooltipService - no longer modifies the caller's TooltipOptions instance, so shared options objects can be reused safely. Fixes #​2641

Commits viewable in compare view.

Pinned Sentry.AspNetCore at 6.9.0.

Release notes

Sourced from Sentry.AspNetCore's releases.

6.9.0

Features ✨

• feat: Allow users to control Mechanism.Handled for captured exceptions by @​vladbrincoveanu in #​5449

Fixes 🐛

• fix(serilog): logs from application namespaces beginning with "Sentry" are discarded by @​jamescrosswell in #​5456
• fix: rate limit on one data category no longer blocks all others by @​jamescrosswell in #​5482

Dependencies ⬆️

Deps

• chore(deps): update Native SDK to v0.16.3 by @​github-actions in #​5486
• chore(deps): update Cocoa SDK to v9.26.0 by @​github-actions in #​5485
• chore(deps): update Cocoa SDK to v9.25.0 by @​github-actions in #​5472
• chore(deps): update Native SDK to v0.16.2 by @​github-actions in #​5477
• chore(deps): update Java SDK to v8.52.0 by @​github-actions in #​5471
• chore(deps): update Cocoa SDK to v9.24.0 by @​github-actions in #​5460
• chore(deps): update Java SDK to v8.51.0 by @​github-actions in #​5457
• chore(deps): update Native SDK to v0.16.1 by @​github-actions in #​5459
• chore(deps): update Native SDK to v0.16.0 by @​github-actions in #​5452
• chore(deps): update Java SDK to v8.50.1 by @​github-actions in #​5441
• chore(deps): update CLI to v3.6.2 by @​github-actions in #​5443
• chore(deps): update Cocoa SDK to v9.23.0 by @​github-actions in #​5442

Other

• ref: migrate Cocoa bindings from PrivateSentrySDKOnly to SentryObjCSDK.internal by @​jamescrosswell in #​5409

Commits viewable in compare view.

[dependabot]

Superseded by #1480.