Skip to content

Bump the dotnet group with 17 updates - #360

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/dotnet-04113618cd
Open

Bump the dotnet group with 17 updates#360
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/dotnet-04113618cd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Updated AWSSDK.Core from 4.0.102.1 to 4.0.102.7.

Release notes

Sourced from AWSSDK.Core's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated dotnet-ef from 10.0.11 to 10.0.12.

Release notes

Sourced from dotnet-ef's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Hangfire.AspNetCore from 1.8.24 to 1.8.25.

Release notes

Sourced from Hangfire.AspNetCore's releases.

1.8.25

Release Notes

Hangfire.Core

  • Fixed – Add missing Persian translations for Dashboard UI (#​2586 by @​mohammad-goroohi).
  • Fixed – Small typo in Swedish translation (#​2590 by @​AntonHoog).
  • Fixed – Grammar and spelling in some user-facing messages (#​2580 by @​net0well).
  • Fixed – Complete "pt-BR" translation (#​2577 @​by net0well).
  • Fixed – Update Russian translation for Dashboard UI (#​2587 by @​akortunov).
  • Project – Add unit tests for DisableConcurrentExecutionAttribute (#​2581 by @​net0well).
  • Project – Use "mailto" scheme for security email in SECURITY.md (#​2588 by @​FirmaSpring).

Hangfire.SqlServer

  • Added – SqlServerStorageOptions.DisableFetchSemaphores option to remove synchronization between workers (0b6ef5043c6681263a9d4f915043a096b139c051).

New Contributors

Full Changelog: HangfireIO/Hangfire@v1.8.24...v1.8.25

Commits viewable in compare view.

Updated Hangfire.Core from 1.8.24 to 1.8.25.

Release notes

Sourced from Hangfire.Core's releases.

1.8.25

Release Notes

Hangfire.Core

  • Fixed – Add missing Persian translations for Dashboard UI (#​2586 by @​mohammad-goroohi).
  • Fixed – Small typo in Swedish translation (#​2590 by @​AntonHoog).
  • Fixed – Grammar and spelling in some user-facing messages (#​2580 by @​net0well).
  • Fixed – Complete "pt-BR" translation (#​2577 @​by net0well).
  • Fixed – Update Russian translation for Dashboard UI (#​2587 by @​akortunov).
  • Project – Add unit tests for DisableConcurrentExecutionAttribute (#​2581 by @​net0well).
  • Project – Use "mailto" scheme for security email in SECURITY.md (#​2588 by @​FirmaSpring).

Hangfire.SqlServer

  • Added – SqlServerStorageOptions.DisableFetchSemaphores option to remove synchronization between workers (0b6ef5043c6681263a9d4f915043a096b139c051).

New Contributors

Full Changelog: HangfireIO/Hangfire@v1.8.24...v1.8.25

Commits viewable in compare view.

Updated Hangfire.SqlServer from 1.8.24 to 1.8.25.

Release notes

Sourced from Hangfire.SqlServer's releases.

1.8.25

Release Notes

Hangfire.Core

  • Fixed – Add missing Persian translations for Dashboard UI (#​2586 by @​mohammad-goroohi).
  • Fixed – Small typo in Swedish translation (#​2590 by @​AntonHoog).
  • Fixed – Grammar and spelling in some user-facing messages (#​2580 by @​net0well).
  • Fixed – Complete "pt-BR" translation (#​2577 @​by net0well).
  • Fixed – Update Russian translation for Dashboard UI (#​2587 by @​akortunov).
  • Project – Add unit tests for DisableConcurrentExecutionAttribute (#​2581 by @​net0well).
  • Project – Use "mailto" scheme for security email in SECURITY.md (#​2588 by @​FirmaSpring).

Hangfire.SqlServer

  • Added – SqlServerStorageOptions.DisableFetchSemaphores option to remove synchronization between workers (0b6ef5043c6681263a9d4f915043a096b139c051).

New Contributors

Full Changelog: HangfireIO/Hangfire@v1.8.24...v1.8.25

Commits viewable in compare view.

Updated HtmlSanitizer from 9.2.995 to 9.2.1039.

Release notes

Sourced from HtmlSanitizer's releases.

9.2.1039

Fix attribute bypass in SanitizeDom(string) wrapper elements

Commits viewable in compare view.

Updated jetbrains.resharper.globaltools from 2026.2.1 to 2026.2.2.

Updated MailKit from 4.17.0 to 4.18.0.

Release notes

Sourced from MailKit's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.9.0 to 18.10.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.10.1

What's Changed

Full Changelog: microsoft/vstest@v18.10.0...v18.10.1

18.10.0

What's Changed

Full Changelog: microsoft/vstest@v18.9.0...v18.10.0

Commits viewable in compare view.

Updated Microsoft.Testing.Extensions.CodeCoverage from 18.10.0 to 18.11.2.

Release notes

Sourced from Microsoft.Testing.Extensions.CodeCoverage's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Testing.Platform from 2.3.3 to 2.4.0.

Release notes

Sourced from Microsoft.Testing.Platform's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Testing.Platform from 2.3.3 to 2.4.1.

Release notes

Sourced from Microsoft.Testing.Platform's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated MimeKit from 4.17.0 to 4.18.0.

Release notes

Sourced from MimeKit's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated MimeKit from 4.17.0 to 4.18.1.

Release notes

Sourced from MimeKit's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated MockQueryable.NSubstitute from 10.0.8 to 10.0.12.

Release notes

Sourced from MockQueryable.NSubstitute's releases.

10.0.12

What's Changed

New Contributors

Full Changelog: ramantsitou/MockQueryable@v10.0.8...v10.0.12

What's Changed

Commits viewable in compare view.

Updated NLog.Web.AspNetCore from 6.2.0 to 6.2.1.

Release notes

Sourced from NLog.Web.AspNetCore's releases.

6.2.1

NLog.Web.AspNetCore

  • #​1190 Updated dependency NLog v6.2.1 (@​snakefoot)
  • #​1187 NLogRequestLoggingOptions - Cancelled client request only warning when slow (@​snakefoot)
  • #​1179 XML Docs for all public properties with setters to include Default value (@​snakefoot)

NLog.Web

  • #​1190 Updated dependency NLog v6.2.1 (@​snakefoot)
  • #​1179 XML Docs for all public properties with setters to include Default value (@​snakefoot)

Commits viewable in compare view.

Updated QuestPDF from 2026.8.0 to 2026.9.0.

Release notes

Sourced from QuestPDF's releases.

2026.9.0

This release is dedicated to text handling improvements

QuestPDF 2026.9.0 improves font management to make document rendering more predictable across development machines, CI, containers, and cloud environments.

Fonts installed on the operating system vary between machines. A document that looks correct during development may use different fallback fonts, display placeholder glyphs, or lose text after deployment. To help catch these problems before a PDF reaches its recipient, QuestPDF now excludes system fonts by default and validates font availability and glyph coverage during document generation.

Upgrading to 2026.9.0

Deploy the required font files with your application and reference them by the family names stored in those files. Fonts in the application directory are registered automatically; you can also register them explicitly through FontManager. Use FontManager.GetRegisteredFonts() to inspect the available family names.

Please compare previous settings with the new defaults:

// previous behavior:
QuestPDF.Settings.UseSystemFonts = true;
QuestPDF.Settings.ThrowOnMissingFontFamilies = false;
QuestPDF.Settings.ThrowOnMissingTextGlyphs = false;
QuestPDF.Settings.EnableDetailedLayoutErrors = false;

// current behavior:
QuestPDF.Settings.UseSystemFonts = false;
QuestPDF.Settings.ThrowOnMissingFontFamilies = true;
QuestPDF.Settings.ThrowOnMissingTextGlyphs = true;
QuestPDF.Settings.EnableDetailedLayoutErrors = true;

Also review the deployment and API changes below. Renamed APIs remain available under their previous names, marked as obsolete with compiler warnings.

Covering additional languages

QuestPDF includes the bundled Lato font, which covers Latin, Greek, and Cyrillic scripts. For other scripts, such as Chinese, Japanese, Korean, Arabic, Hebrew, Thai, or emoji, we recommend additionally deploying the free, open-source Google Noto font family, registering it with FontManager, and configuring it as a font fallback in the default text style of the document.

// at application startup
FontManager.RegisterFontsFromDirectory("Fonts/Noto");

// in the document
Document.Create(document => 
{
    document.Page(page => 
    {
        page.DefaultTextStyle(style => style.FontFamily("Lato", "Noto Sans", "Noto Sans CJK SC", "Noto Emoji"));
    });
});

⚠️ Breaking changes

... (truncated)

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.33.0.1635 to 10.34.0.3385.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.34.0.3385

Release notes - .NET Analyzers - 10.34

Feature

NET-4133 Implement rule S9023: "Include" calls discarded by query reshaping should be fixed

False Positive

NET-3281 Fix S1192 FP: should not raise on DBContext model configuration
NET-4317 Fix S2325 FP: Do not raise on ConfigureServices in classes decorated with [LambdaStartup]
NET-4419 Fix S2737 FP: Do not report known temporary-context rethrow boundaries
NET-4421 Fix S6607 FP: Indexed LINQ Where after OrderBy
NET-4463 Fix S8747 FP: Do not raise when a defaultValue backfills existing NULLs before narrowing to non-nullable
NET-4506 Fix S6967 FP: Recognize manual DataAnnotations validation
NET-4507 Fix S8969 FP: Don't raise in Razor files

False Negative

NET-1883 Files added as symbolic links are not analyzed
NET-4249 Fix S9022 FN: Include before a terminal aggregate/scalar operator not detected as dead code
NET-4379 Fix S2259 FN: void compound assignment operators not flagged as dereference
NET-4383 Fix S9022 FN: Include on a navigation re-projected directly by a later Select/SelectMany is not detected as redundant
NET-4443 Fix S2068 FN: Scope the value passed to the secret-exclusion classifier to the candidate secret
NET-4496 Fix S8949 FN: self-recursion suppression also hides calls already recursive before the suggested fix
NET-4500 Fix S9022 FN: ThenInclude consumed only through a nested Select's rebound element parameter is not detected as redundant

Bug

NET-4483 Fix S3459 FP: Public writable properties in private nested types

Maintenance

NET-4472 Remove S1264 from the C# Sonar way profile
NET-4474 Remove S2692 from the C# Sonar way profile
NET-4480 Remove S3249 from the C# Sonar way profile
NET-4481 Remove S6670 from the C# Sonar way profile
NET-4482 Remove S3885 from the C# Sonar way profile

Commits viewable in compare view.

Updated xunit.v3 from 4.0.0 to 4.0.1.

Release notes

Sourced from xunit.v3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dotnet group with 17 updates
c43a12a 
Bumps AWSSDK.Core from 4.0.102.1 to 4.0.102.7
Bumps dotnet-ef from 10.0.11 to 10.0.12
Bumps Hangfire.AspNetCore from 1.8.24 to 1.8.25
Bumps Hangfire.Core from 1.8.24 to 1.8.25
Bumps Hangfire.SqlServer from 1.8.24 to 1.8.25
Bumps HtmlSanitizer from 9.2.995 to 9.2.1039
Bumps jetbrains.resharper.globaltools from 2026.2.1 to 2026.2.2
Bumps MailKit from 4.17.0 to 4.18.0
Bumps Microsoft.NET.Test.Sdk from 18.9.0 to 18.10.1
Bumps Microsoft.Testing.Extensions.CodeCoverage from 18.10.0 to 18.11.2
Bumps Microsoft.Testing.Platform to 2.4.0, 2.4.1
Bumps MimeKit to 4.18.0, 4.18.1
Bumps MockQueryable.NSubstitute from 10.0.8 to 10.0.12
Bumps NLog.Web.AspNetCore from 6.2.0 to 6.2.1
Bumps QuestPDF from 2026.8.0 to 2026.9.0
Bumps SonarAnalyzer.CSharp from 10.33.0.1635 to 10.34.0.3385
Bumps xunit.v3 from 4.0.0 to 4.0.1

---
updated-dependencies:
- dependency-name: AWSSDK.Core
  dependency-version: 4.0.102.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: dotnet-ef
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Hangfire.AspNetCore
  dependency-version: 1.8.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Hangfire.Core
  dependency-version: 1.8.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Hangfire.SqlServer
  dependency-version: 1.8.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: HtmlSanitizer
  dependency-version: 9.2.1039
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: jetbrains.resharper.globaltools
  dependency-version: 2026.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: MailKit
  dependency-version: 4.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: MimeKit
  dependency-version: 4.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Testing.Extensions.CodeCoverage
  dependency-version: 18.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Testing.Platform
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Testing.Platform
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: MimeKit
  dependency-version: 4.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: MockQueryable.NSubstitute
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: NLog.Web.AspNetCore
  dependency-version: 6.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: QuestPDF
  dependency-version: 2026.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.34.0.3385
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: xunit.v3
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Oct 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants