Bump BCrypt.Net-Next and 25 others by dependabot[bot] · Pull Request #241 · reigithub/unity6-portfolio

dependabot · 2026-07-11T13:54:20Z

Updated BCrypt.Net-Next from 4.1.0 to 4.2.0.

Release notes

Sourced from BCrypt.Net-Next's releases.

4.2.0

Drops dotnet 2.0 / 3.5 support (as msft ripped it out of windows 11 and set the new standalone installers minimum windows version to an inside release https://devblogs.microsoft.com/dotnet/dotnet-framework-3-5-moves-to-standalone-deployment-in-new-versions-of-windows/)
Renames assembly-name to remove dots as it causes PRI249 warning

Full Changelog: BcryptNet/bcrypt.net@v4.1.0...v4.2.0

Commits viewable in compare view.

Updated coverlet.collector from 10.0.0 to 10.0.1.

Release notes

Sourced from coverlet.collector's releases.

10.0.1

Improvements

Coverlet with MTP 2 doesn't show test coverage statistic in console #1907
Avoid unnecessary testhost restarts #1912 by https://github.com/mawosoft

Fixed

Fix inconsistent paths in cobertura reports #1723
Fix when using "is" with "and" in pattern matching, branch coverage is lower than normal #1313
Fix Coverlet flagging a branch for an async functions finally block where none exists #1337
Fix Coverlet Tracker Missing CompilerGeneratedAttribute #1828

Maintenance

Add architecture docs and diagrams for all integrations #1927
Update NuGet packages and .NET SDK versions #1933

Diff between 10.0.0 and 10.0.1

Commits viewable in compare view.

Updated Dapper from 2.1.72 to 2.1.79.

Release notes

Sourced from Dapper's releases.

2.1.79 What's Changed

fix CI by @mgravell in fix CI DapperLib/Dapper#2196
Fix segfault when ICustomQueryParameter is a value type (#2189) by @andreasblueher in Fix segfault when ICustomQueryParameter is a value type (#2189) DapperLib/Dapper#2198
Update dependencies by @mgravell in Update dependencies DapperLib/Dapper#2202
Make private & internal classes sealed and less enumeration of lists & LINQ by @Henr1k80 in Make private & internal classes sealed and less enumeration of lists & LINQ DapperLib/Dapper#2197
Fix/prefer typehandlers for enums by @andreasblueher in Fix/prefer typehandlers for enums DapperLib/Dapper#2200
keep deps up to date by @mgravell in keep deps up to date DapperLib/Dapper#2204
Add ReferenceTrimmer and remove unused references by @dfederm in Add ReferenceTrimmer and remove unused references DapperLib/Dapper#2191

New Contributors

@andreasblueher made their first contribution in Fix segfault when ICustomQueryParameter is a value type (#2189) DapperLib/Dapper#2198
@Henr1k80 made their first contribution in Make private & internal classes sealed and less enumeration of lists & LINQ DapperLib/Dapper#2197
@dfederm made their first contribution in Add ReferenceTrimmer and remove unused references DapperLib/Dapper#2191

Full Changelog: DapperLib/Dapper@2.1.72...2.1.79

Commits viewable in compare view.

Pinned Google.Apis.Auth at 1.75.0.

Release notes

Sourced from Google.Apis.Auth's releases.

1.75.0

Features:

#3171 Supports caching request parameter property info

1.74.0

Bug fixes:

#3156 Use a single instance of the default serializer.
#3151 Do not duplicate quota project header on retries.

Features:

#3091 Expose helper methots to build a credential from JsonParameters.

Commits viewable in compare view.

Pinned Google.Protobuf at 3.35.1.

Release notes

Sourced from Google.Protobuf's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Google.Protobuf from 3.34.1 to 3.35.1.

Release notes

Sourced from Google.Protobuf's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Google.Protobuf.Tools from 3.34.1 to 3.35.1.

Release notes

Sourced from Google.Protobuf.Tools's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Grpc.AspNetCore.Server from 2.76.0 to 2.80.0.

Release notes

Sourced from Grpc.AspNetCore.Server's releases.

2.80.0 What's Changed

Update .NET 10, System.CommandLine 2.0.0, fix warnings by @JamesNK in Update .NET 10, System.CommandLine 2.0.0, fix warnings grpc/grpc-dotnet#2677
Fix System.CommandLine 2.0.0 Uri parsing in GrpcClient benchmark app by @ilonatommy in Fix System.CommandLine 2.0.0 Uri parsing in GrpcClient benchmark app grpc/grpc-dotnet#2695
Implement GrpcServiceEndpointConventionBuilder.Finally by @halter73 in Implement GrpcServiceEndpointConventionBuilder.Finally grpc/grpc-dotnet#2693
Bump axios from 1.11.0 to 1.12.2 in /testassets/InteropTestsGrpcWebWebsite/Tests by @dependabot[bot] in Bump axios from 1.11.0 to 1.12.2 in /testassets/InteropTestsGrpcWebWebsite/Tests grpc/grpc-dotnet#2669
Bump webpack from 5.101.0 to 5.105.0 in /examples/Browser/Server/wwwroot by @dependabot[bot] in Bump webpack from 5.101.0 to 5.105.0 in /examples/Browser/Server/wwwroot grpc/grpc-dotnet#2689
Bump lodash from 4.17.21 to 4.17.23 in /testassets/InteropTestsGrpcWebWebsite/Tests by @dependabot[bot] in Bump lodash from 4.17.21 to 4.17.23 in /testassets/InteropTestsGrpcWebWebsite/Tests grpc/grpc-dotnet#2687
Bump glob from 10.4.5 to 10.5.0 in /testassets/InteropTestsGrpcWebWebsite/Tests by @dependabot[bot] in Bump glob from 10.4.5 to 10.5.0 in /testassets/InteropTestsGrpcWebWebsite/Tests grpc/grpc-dotnet#2679
Bump basic-ftp from 5.0.5 to 5.2.0 in /testassets/InteropTestsGrpcWebWebsite/Tests by @dependabot[bot] in Bump basic-ftp from 5.0.5 to 5.2.0 in /testassets/InteropTestsGrpcWebWebsite/Tests grpc/grpc-dotnet#2698
Bump serialize-javascript and terser-webpack-plugin in /examples/Browser/Server/wwwroot by @dependabot[bot] in Bump serialize-javascript and terser-webpack-plugin in /examples/Browser/Server/wwwroot grpc/grpc-dotnet#2699
Bump minimatch in /testassets/InteropTestsGrpcWebWebsite/Tests by @dependabot[bot] in Bump minimatch in /testassets/InteropTestsGrpcWebWebsite/Tests grpc/grpc-dotnet#2700
Bump axios from 1.12.2 to 1.13.6 in /testassets/InteropTestsGrpcWebWebsite/Tests by @dependabot[bot] in Bump axios from 1.12.2 to 1.13.6 in /testassets/InteropTestsGrpcWebWebsite/Tests grpc/grpc-dotnet#2701
Bump js-yaml in /testassets/InteropTestsGrpcWebWebsite/Tests by @dependabot[bot] in Bump js-yaml in /testassets/InteropTestsGrpcWebWebsite/Tests grpc/grpc-dotnet#2702
Handle Trailers-Only OK responses in streaming calls without exception handling by @michaelmccord in Handle Trailers-Only OK responses in streaming calls without exception handling grpc/grpc-dotnet#2697
Bump picomatch in /testassets/InteropTestsGrpcWebWebsite/Tests by @dependabot[bot] in Bump picomatch in /testassets/InteropTestsGrpcWebWebsite/Tests grpc/grpc-dotnet#2703
Implement v1 reflection service and clean up integration by @JamesNK in Implement v1 reflection service and clean up integration grpc/grpc-dotnet#2704
Bump brace-expansion in /testassets/InteropTestsGrpcWebWebsite/Tests by @dependabot[bot] in Bump brace-expansion in /testassets/InteropTestsGrpcWebWebsite/Tests grpc/grpc-dotnet#2706
Fix flaky PickAsync_UpdateAddressesWhileRequestingConnection_DoesNotDeadlock test by @JamesNK in Fix flaky PickAsync_UpdateAddressesWhileRequestingConnection_DoesNotDeadlock test grpc/grpc-dotnet#2705
Bump Tools Version prep for release v2.80.0 by @asheshvidyut in Bump Tools Version prep for release v2.80.0 grpc/grpc-dotnet#2707
[Release v2.80.x] Fix the version number - Step 3 by @asheshvidyut in [Release v2.80.x] Fix the version number - Step 3 grpc/grpc-dotnet#2711
Rel (v1.80.0) Prep for stable release by @asheshvidyut in Rel (v1.80.0) Prep for stable release grpc/grpc-dotnet#2723

New Contributors

@ilonatommy made their first contribution in Fix System.CommandLine 2.0.0 Uri parsing in GrpcClient benchmark app grpc/grpc-dotnet#2695
@halter73 made their first contribution in Implement GrpcServiceEndpointConventionBuilder.Finally grpc/grpc-dotnet#2693
@michaelmccord made their first contribution in Handle Trailers-Only OK responses in streaming calls without exception handling grpc/grpc-dotnet#2697

Full Changelog: grpc/grpc-dotnet@v2.76.0...v2.80.0

2.80.0-pre1

What's Changed

Update .NET 10, System.CommandLine 2.0.0, fix warnings by @JamesNK in Update .NET 10, System.CommandLine 2.0.0, fix warnings grpc/grpc-dotnet#2677
Fix System.CommandLine 2.0.0 Uri parsing in GrpcClient benchmark app by @ilonatommy in Fix System.CommandLine 2.0.0 Uri parsing in GrpcClient benchmark app grpc/grpc-dotnet#2695
Implement GrpcServiceEndpointConventionBuilder.Finally by @halter73 in Implement GrpcServiceEndpointConventionBuilder.Finally grpc/grpc-dotnet#2693
Bump axios from 1.11.0 to 1.12.2 in /testassets/InteropTestsGrpcWebWebsite/Tests by @dependabot[bot] in Bump axios from 1.11.0 to 1.12.2 in /testassets/InteropTestsGrpcWebWebsite/Tests grpc/grpc-dotnet#2669
Bump webpack from 5.101.0 to 5.105.0 in /examples/Browser/Server/wwwroot by @dependabot[bot] in Bump webpack from 5.101.0 to 5.105.0 in /examples/Browser/Server/wwwroot grpc/grpc-dotnet#2689
Bump lodash from 4.17.21 to 4.17.23 in /testassets/InteropTestsGrpcWebWebsite/Tests by @dependabot[bot] in Bump lodash from 4.17.21 to 4.17.23 in /testassets/InteropTestsGrpcWebWebsite/Tests grpc/grpc-dotnet#2687
Bump glob from 10.4.5 to 10.5.0 in /testassets/InteropTestsGrpcWebWebsite/Tests by @dependabot[bot] in Bump glob from 10.4.5 to 10.5.0 in /testassets/InteropTestsGrpcWebWebsite/Tests grpc/grpc-dotnet#2679
Bump basic-ftp from 5.0.5 to 5.2.0 in /testassets/InteropTestsGrpcWebWebsite/Tests by @dependabot[bot] in Bump basic-ftp from 5.0.5 to 5.2.0 in /testassets/InteropTestsGrpcWebWebsite/Tests grpc/grpc-dotnet#2698
Bump serialize-javascript and terser-webpack-plugin in /examples/Browser/Server/wwwroot by @dependabot[bot] in Bump serialize-javascript and terser-webpack-plugin in /examples/Browser/Server/wwwroot grpc/grpc-dotnet#2699
Bump minimatch in /testassets/InteropTestsGrpcWebWebsite/Tests by @dependabot[bot] in Bump minimatch in /testassets/InteropTestsGrpcWebWebsite/Tests grpc/grpc-dotnet#2700
Bump axios from 1.12.2 to 1.13.6 in /testassets/InteropTestsGrpcWebWebsite/Tests by @dependabot[bot] in Bump axios from 1.12.2 to 1.13.6 in /testassets/InteropTestsGrpcWebWebsite/Tests grpc/grpc-dotnet#2701
Bump js-yaml in /testassets/InteropTestsGrpcWebWebsite/Tests by @dependabot[bot] in Bump js-yaml in /testassets/InteropTestsGrpcWebWebsite/Tests grpc/grpc-dotnet#2702
Handle Trailers-Only OK responses in streaming calls without exception handling by @michaelmccord in Handle Trailers-Only OK responses in streaming calls without exception handling grpc/grpc-dotnet#2697
Bump picomatch in /testassets/InteropTestsGrpcWebWebsite/Tests by @dependabot[bot] in Bump picomatch in /testassets/InteropTestsGrpcWebWebsite/Tests grpc/grpc-dotnet#2703
Implement v1 reflection service and clean up integration by @JamesNK in Implement v1 reflection service and clean up integration grpc/grpc-dotnet#2704
Bump brace-expansion in /testassets/InteropTestsGrpcWebWebsite/Tests by @dependabot[bot] in Bump brace-expansion in /testassets/InteropTestsGrpcWebWebsite/Tests grpc/grpc-dotnet#2706
Fix flaky PickAsync_UpdateAddressesWhileRequestingConnection_DoesNotDeadlock test by @JamesNK in Fix flaky PickAsync_UpdateAddressesWhileRequestingConnection_DoesNotDeadlock test grpc/grpc-dotnet#2705
Bump Tools Version prep for release v2.80.0 by @asheshvidyut in Bump Tools Version prep for release v2.80.0 grpc/grpc-dotnet#2707
[Release v2.80.x] Fix the version number - Step 3 by @asheshvidyut in [Release v2.80.x] Fix the version number - Step 3 grpc/grpc-dotnet#2711

New Contributors

@ilonatommy made their first contribution in Fix System.CommandLine 2.0.0 Uri parsing in GrpcClient benchmark app grpc/grpc-dotnet#2695
@halter73 made their first contribution in Implement GrpcServiceEndpointConventionBuilder.Finally grpc/grpc-dotnet#2693
@michaelmccord made their first contribution in Handle Trailers-Only OK responses in streaming calls without exception handling grpc/grpc-dotnet#2697

Full Changelog: grpc/grpc-dotnet@v2.76.0...v2.80.0-pre1

Commits viewable in compare view.

Pinned MagicOnion.Abstractions at 7.10.2.

Release notes

Sourced from MagicOnion.Abstractions's releases.

7.10.2 What's Changed

Other Changes

ci: avoid using run-inputs-context-direct-use detected by seiton by @guitarrapc in ci: avoid using run-inputs-context-direct-use detected by seiton Cysharp/MagicOnion#1073
Bump MessagePack to 3.1.7 to address vulnerability. by @jeff-at-trimble in Bump MessagePack to 3.1.7 to address vulnerability. Cysharp/MagicOnion#1076

Full Changelog: Cysharp/MagicOnion@7.10.1...7.10.2

7.10.1 What's Changed

Other Changes

docs: fix Unary client example in getting-started.md (remove await and receiver) by @biboete in docs: fix Unary client example in getting-started.md (remove await and receiver) Cysharp/MagicOnion#1072
Fix and unit test for #1055 by @pixsperdavid in Fix and unit test for #1055 Cysharp/MagicOnion#1056
- Source generated client code with MemoryPack serializer does not handle enum formatter registration correctly
  #1055

Housekeeping

chore: add groups for dependabot by @guitarrapc in chore: add groups for dependabot Cysharp/MagicOnion#1040
ci: add codeql advanced to handle configuration by @guitarrapc in ci: add codeql advanced to handle configuration Cysharp/MagicOnion#1041
ci: change CodeQL to scan with manusl. not no or autobuild by @guitarrapc in ci: change CodeQL to scan with manusl. not no or autobuild Cysharp/MagicOnion#1042
fix: benchmark always fail due to version missing by @guitarrapc in fix: benchmark always fail due to version missing Cysharp/MagicOnion#1044
chore: benchmark cleanup timeout often happen on many clients scenario by @guitarrapc in chore: benchmark cleanup timeout often happen on many clients scenario Cysharp/MagicOnion#1045
chore: benchmark NuGet server publish failed, due to API change by @guitarrapc in chore: benchmark NuGet server publish failed, due to API change Cysharp/MagicOnion#1046
chore(deps): bump the dependencies group across 1 directory with 5 updates by @dependabot[bot] in chore(deps): bump the dependencies group across 1 directory with 5 updates Cysharp/MagicOnion#1052
ci: use OIDC for NuGet package push authentication by @guitarrapc in ci: use OIDC for NuGet package push authentication Cysharp/MagicOnion#1058
Configure Dependabot for npm in docs directory by @guitarrapc in Configure Dependabot for npm in docs directory Cysharp/MagicOnion#1066
chore(deps): bump the dependencies group in /docs with 9 updates by @dependabot[bot] in chore(deps): bump the dependencies group in /docs with 9 updates Cysharp/MagicOnion#1067
chore(deps): bump the dependencies group across 1 directory with 3 updates by @dependabot[bot] in chore(deps): bump the dependencies group across 1 directory with 3 updates Cysharp/MagicOnion#1057
chore(deps): bump github/codeql-action from 4.35.1 to 4.36.0 in the dependencies group by @dependabot[bot] in chore(deps): bump github/codeql-action from 4.35.1 to 4.36.0 in the dependencies group Cysharp/MagicOnion#1068
ci: remove non-use actions by @guitarrapc in ci: remove non-use actions Cysharp/MagicOnion#1069
ci: fix run-env-context-direct-use by @guitarrapc in ci: fix run-env-context-direct-use Cysharp/MagicOnion#1071

New Contributors

@biboete made their first contribution in docs: fix Unary client example in getting-started.md (remove await and receiver) Cysharp/MagicOnion#1072
@pixsperdavid made their first contribution in Fix and unit test for #1055 Cysharp/MagicOnion#1056

Full Changelog: Cysharp/MagicOnion@7.10.0...7.10.1

Commits viewable in compare view.

Updated MagicOnion.Server from 7.10.0 to 7.10.2.

Release notes

Sourced from MagicOnion.Server's releases.

7.10.2 What's Changed

Other Changes

ci: avoid using run-inputs-context-direct-use detected by seiton by @guitarrapc in ci: avoid using run-inputs-context-direct-use detected by seiton Cysharp/MagicOnion#1073
Bump MessagePack to 3.1.7 to address vulnerability. by @jeff-at-trimble in Bump MessagePack to 3.1.7 to address vulnerability. Cysharp/MagicOnion#1076

Full Changelog: Cysharp/MagicOnion@7.10.1...7.10.2

7.10.1 What's Changed

Other Changes

docs: fix Unary client example in getting-started.md (remove await and receiver) by @biboete in docs: fix Unary client example in getting-started.md (remove await and receiver) Cysharp/MagicOnion#1072
Fix and unit test for #1055 by @pixsperdavid in Fix and unit test for #1055 Cysharp/MagicOnion#1056
- Source generated client code with MemoryPack serializer does not handle enum formatter registration correctly
  #1055

Housekeeping

chore: add groups for dependabot by @guitarrapc in chore: add groups for dependabot Cysharp/MagicOnion#1040
ci: add codeql advanced to handle configuration by @guitarrapc in ci: add codeql advanced to handle configuration Cysharp/MagicOnion#1041
ci: change CodeQL to scan with manusl. not no or autobuild by @guitarrapc in ci: change CodeQL to scan with manusl. not no or autobuild Cysharp/MagicOnion#1042
fix: benchmark always fail due to version missing by @guitarrapc in fix: benchmark always fail due to version missing Cysharp/MagicOnion#1044
chore: benchmark cleanup timeout often happen on many clients scenario by @guitarrapc in chore: benchmark cleanup timeout often happen on many clients scenario Cysharp/MagicOnion#1045
chore: benchmark NuGet server publish failed, due to API change by @guitarrapc in chore: benchmark NuGet server publish failed, due to API change Cysharp/MagicOnion#1046
chore(deps): bump the dependencies group across 1 directory with 5 updates by @dependabot[bot] in chore(deps): bump the dependencies group across 1 directory with 5 updates Cysharp/MagicOnion#1052
ci: use OIDC for NuGet package push authentication by @guitarrapc in ci: use OIDC for NuGet package push authentication Cysharp/MagicOnion#1058
Configure Dependabot for npm in docs directory by @guitarrapc in Configure Dependabot for npm in docs directory Cysharp/MagicOnion#1066
chore(deps): bump the dependencies group in /docs with 9 updates by @dependabot[bot] in chore(deps): bump the dependencies group in /docs with 9 updates Cysharp/MagicOnion#1067
chore(deps): bump the dependencies group across 1 directory with 3 updates by @dependabot[bot] in chore(deps): bump the dependencies group across 1 directory with 3 updates Cysharp/MagicOnion#1057
chore(deps): bump github/codeql-action from 4.35.1 to 4.36.0 in the dependencies group by @dependabot[bot] in chore(deps): bump github/codeql-action from 4.35.1 to 4.36.0 in the dependencies group Cysharp/MagicOnion#1068
ci: remove non-use actions by @guitarrapc in ci: remove non-use actions Cysharp/MagicOnion#1069
ci: fix run-env-context-direct-use by @guitarrapc in ci: fix run-env-context-direct-use Cysharp/MagicOnion#1071

New Contributors

@biboete made their first contribution in docs: fix Unary client example in getting-started.md (remove await and receiver) Cysharp/MagicOnion#1072
@pixsperdavid made their first contribution in Fix and unit test for #1055 Cysharp/MagicOnion#1056

Full Changelog: Cysharp/MagicOnion@7.10.0...7.10.1

Commits viewable in compare view.

Updated MagicOnion.Server.Redis from 7.10.0 to 7.10.2.

Release notes

Sourced from MagicOnion.Server.Redis's releases.

7.10.2 What's Changed

Other Changes

ci: avoid using run-inputs-context-direct-use detected by seiton by @guitarrapc in ci: avoid using run-inputs-context-direct-use detected by seiton Cysharp/MagicOnion#1073
Bump MessagePack to 3.1.7 to address vulnerability. by @jeff-at-trimble in Bump MessagePack to 3.1.7 to address vulnerability. Cysharp/MagicOnion#1076

Full Changelog: Cysharp/MagicOnion@7.10.1...7.10.2

7.10.1 What's Changed

Other Changes

docs: fix Unary client example in getting-started.md (remove await and receiver) by @biboete in docs: fix Unary client example in getting-started.md (remove await and receiver) Cysharp/MagicOnion#1072
Fix and unit test for #1055 by @pixsperdavid in Fix and unit test for #1055 Cysharp/MagicOnion#1056
- Source generated client code with MemoryPack serializer does not handle enum formatter registration correctly
  #1055

Housekeeping

chore: add groups for dependabot by @guitarrapc in chore: add groups for dependabot Cysharp/MagicOnion#1040
ci: add codeql advanced to handle configuration by @guitarrapc in ci: add codeql advanced to handle configuration Cysharp/MagicOnion#1041
ci: change CodeQL to scan with manusl. not no or autobuild by @guitarrapc in ci: change CodeQL to scan with manusl. not no or autobuild Cysharp/MagicOnion#1042
fix: benchmark always fail due to version missing by @guitarrapc in fix: benchmark always fail due to version missing Cysharp/MagicOnion#1044
chore: benchmark cleanup timeout often happen on many clients scenario by @guitarrapc in chore: benchmark cleanup timeout often happen on many clients scenario Cysharp/MagicOnion#1045
chore: benchmark NuGet server publish failed, due to API change by @guitarrapc in chore: benchmark NuGet server publish failed, due to API change Cysharp/MagicOnion#1046
chore(deps): bump the dependencies group across 1 directory with 5 updates by @dependabot[bot] in chore(deps): bump the dependencies group across 1 directory with 5 updates Cysharp/MagicOnion#1052
ci: use OIDC for NuGet package push authentication by @guitarrapc in ci: use OIDC for NuGet package push authentication Cysharp/MagicOnion#1058
Configure Dependabot for npm in docs directory by @guitarrapc in Configure Dependabot for npm in docs directory Cysharp/MagicOnion#1066
chore(deps): bump the dependencies group in /docs with 9 updates by @dependabot[bot] in chore(deps): bump the dependencies group in /docs with 9 updates Cysharp/MagicOnion#1067
chore(deps): bump the dependencies group across 1 directory with 3 updates by @dependabot[bot] in chore(deps): bump the dependencies group across 1 directory with 3 updates Cysharp/MagicOnion#1057
chore(deps): bump github/codeql-action from 4.35.1 to 4.36.0 in the dependencies group by @dependabot[bot] in chore(deps): bump github/codeql-action from 4.35.1 to 4.36.0 in the dependencies group Cysharp/MagicOnion#1068
ci: remove non-use actions by @guitarrapc in ci: remove non-use actions Cysharp/MagicOnion#1069
ci: fix run-env-context-direct-use by @guitarrapc in ci: fix run-env-context-direct-use Cysharp/MagicOnion#1071

New Contributors

@biboete made their first contribution in docs: fix Unary client example in getting-started.md (remove await and receiver) Cysharp/MagicOnion#1072
@pixsperdavid made their first contribution in Fix and unit test for #1055 Cysharp/MagicOnion#1056

Full Changelog: Cysharp/MagicOnion@7.10.0...7.10.1

Commits viewable in compare view.

Updated MessagePack from 3.1.4 to 3.1.7.

Release notes

Sourced from MessagePack's releases.

3.1.7 What's Changed

Add scoped to MessagePackWriter.Write(ReadOnlySpan<T>) methods by @AArnott in Add scoped to MessagePackWriter.Write(ReadOnlySpan<T>) methods MessagePack-CSharp/MessagePack-CSharp#2271
Fix security issues in master by @AArnott in Fix security issues in master MessagePack-CSharp/MessagePack-CSharp#2274

Security release details

This release fixes 3 high severity and 9 moderate severity security vulnerabilities.

High severity advisory fixes

26d4e743 GHSA-382j-8mxh-c7x2 Reject invalid DateTime ext lengths for CWE-789
b9cb6050 GHSA-vh6j-jc39-fggf Use iteration for skipping msgpack structures for CWE-674
719e690a GHSA-hv8m-jj95-wg3x Bound LZ4 input reads for CWE-125

Moderage severity advisory fixes

2b5a500a GHSA-v72x-2h86-7f8m Guard LZ4 decompression length for CWE-409
f093bdc1 GHSA-qhmf-xw27-6rqr Reject nested typeless blocklist bypass for CWE-502
f077798e GHSA-2f33-pr97-265q Default MVC input formatter to UntrustedData for CWE-1188
25a3493e GHSA-2x83-8g95-xh59 Limit untrusted ExpandoObject maps for CWE-407
b414e6df GHSA-wfr3-xj75-pfwh Guard dynamic union depth for CWE-674
0555f07c GHSA-w567-gjr2-hm5j Validate Unity blit lengths for CWE-789
9b5783a7 GHSA-cxmj-83gh-fp49 Fix CWE-789 multidimensional array allocation validation
f96fcf05 GHSA-q2h6-ghwm-5qm8 Use secure lookup comparer for CWE-407
b3af7cf7 GHSA-cj9g-3mj2-g8vv Guard JSON conversion depth for CWE-674
66ad0894 GHSA-cj9g-3mj2-g8vv Avoid JSON separator recursion for CWE-674
082ba7da GHSA-cj9g-3mj2-g8vv Guard typeless JSON depth for CWE-674

Fixes with no security advisory

fb0fe9f0 Honor TypeFormatter options hooks for CWE-470
c1c06a6f Fix WriteRawX methods to advance by written length
46c6a0fe Fix CWE-190 map header length overflow

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v3.1.6...v3.1.7

3.1.6 What's Changed

Add several known unsafe 'gadgets' to the disallow list by @AArnott in Add several known unsafe 'gadgets' to the disallow list MessagePack-CSharp/MessagePack-CSharp#2270

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v3.1.5...v3.1.6

3.1.5 What's Changed

Remove unneeded GetTypeInfo() calls by @Bykiev in Remove unneeded GetTypeInfo() calls MessagePack-CSharp/MessagePack-CSharp#2206
Use 'Write' instead of 'WriteInt32' for union type keys by @VictorNicollet in Use 'Write' instead of 'WriteInt32' for union type keys MessagePack-CSharp/MessagePack-CSharp#2212
Fix various disposable issues by @Bykiev in Fix various disposable issues MessagePack-CSharp/MessagePack-CSharp#2224
fix: prevent StackOverflow in Equals with recursive generic constraints by @khuongntrd in fix: prevent StackOverflow in Equals with recursive generic constraints MessagePack-CSharp/MessagePack-CSharp#2226
Add more types to the default disallow list of named types to be deserialized by @AArnott in Add more types to the default disallow list of named types to be deserialized MessagePack-CSharp/MessagePack-CSharp#2256
Fix release workflow by @AArnott in Fix release workflow MessagePack-CSharp/MessagePack-CSharp#2268
~~Fix Incorrect DateTimeOffset Serializer by @T0PP1ng in Fix Incorrect DateTimeOffset Serializer MessagePack-CSharp/MessagePack-CSharp#2225~~
Revert DateTimeOffset encoding change by @AArnott in Revert DateTimeOffset encoding change MessagePack-CSharp/MessagePack-CSharp#2262

New Contributors

@Bykiev made their first contribution in Remove unneeded GetTypeInfo() calls MessagePack-CSharp/MessagePack-CSharp#2206
@VictorNicollet made their first contribution in Use 'Write' instead of 'WriteInt32' for union type keys MessagePack-CSharp/MessagePack-CSharp#2212
@T0PP1ng made their first contribution in Fix Incorrect DateTimeOffset Serializer MessagePack-CSharp/MessagePack-CSharp#2225
@khuongntrd made their first contribution in fix: prevent StackOverflow in Equals with recursive generic constraints MessagePack-CSharp/MessagePack-CSharp#2226

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v3.1.4...v3.1.5

Commits viewable in compare view.

Updated MessagePack from 3.1.4 to 3.1.8.

Release notes

Sourced from MessagePack's releases.

3.1.7 What's Changed

Add scoped to MessagePackWriter.Write(ReadOnlySpan<T>) methods by @AArnott in Add scoped to MessagePackWriter.Write(ReadOnlySpan<T>) methods MessagePack-CSharp/MessagePack-CSharp#2271
Fix security issues in master by @AArnott in Fix security issues in master MessagePack-CSharp/MessagePack-CSharp#2274

Security release details

This release fixes 3 high severity and 9 moderate severity security vulnerabilities.

High severity advisory fixes

26d4e743 GHSA-382j-8mxh-c7x2 Reject invalid DateTime ext lengths for CWE-789
b9cb6050 GHSA-vh6j-jc39-fggf Use iteration for skipping msgpack structures for CWE-674
719e690a GHSA-hv8m-jj95-wg3x Bound LZ4 input reads for CWE-125

Moderage severity advisory fixes

2b5a500a GHSA-v72x-2h86-7f8m Guard LZ4 decompression length for CWE-409
f093bdc1 GHSA-qhmf-xw27-6rqr Reject nested typeless blocklist bypass for CWE-502
f077798e GHSA-2f33-pr97-265q Default MVC input formatter to UntrustedData for CWE-1188
25a3493e GHSA-2x83-8g95-xh59 Limit untrusted ExpandoObject maps for CWE-407
b414e6df GHSA-wfr3-xj75-pfwh Guard dynamic union depth for CWE-674
0555f07c GHSA-w567-gjr2-hm5j Validate Unity blit lengths for CWE-789
9b5783a7 GHSA-cxmj-83gh-fp49 Fix CWE-789 multidimensional array allocation validation
f96fcf05 GHSA-q2h6-ghwm-5qm8 Use secure lookup comparer for CWE-407
b3af7cf7 GHSA-cj9g-3mj2-g8vv Guard JSON conversion depth for CWE-674
66ad0894 GHSA-cj9g-3mj2-g8vv Avoid JSON separator recursion for CWE-674
082ba7da GHSA-cj9g-3mj2-g8vv Guard typeless JSON depth for CWE-674

Fixes with no security advisory

fb0fe9f0 Honor TypeFormatter options hooks for CWE-470
c1c06a6f Fix WriteRawX methods to advance by written length
46c6a0fe Fix CWE-190 map header length overflow

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v3.1.6...v3.1.7

3.1.6 What's Changed

Add several known unsafe 'gadgets' to the disallow list by @AArnott in Add several known unsafe 'gadgets' to the disallow list MessagePack-CSharp/MessagePack-CSharp#2270

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v3.1.5...v3.1.6

3.1.5 What's Changed

Remove unneeded GetTypeInfo() calls by @Bykiev in Remove unneeded GetTypeInfo() calls MessagePack-CSharp/MessagePack-CSharp#2206
Use 'Write' instead of 'WriteInt32' for union type keys by @VictorNicollet in Use 'Write' instead of 'WriteInt32' for union type keys MessagePack-CSharp/MessagePack-CSharp#2212
Fix various disposable issues by @Bykiev in Fix various disposable issues MessagePack-CSharp/MessagePack-CSharp#2224
fix: prevent StackOverflow in Equals with recursive generic constraints by @khuongntrd in fix: prevent StackOverflow in Equals with recursive generic constraints MessagePack-CSharp/MessagePack-CSharp#2226
Add more types to the default disallow list of named types to be deserialized by @AArnott in Add more types to the default disallow list of named types to be deserialized MessagePack-CSharp/MessagePack-CSharp#2256
Fix release workflow by @AArnott in Fix release workflow MessagePack-CSharp/MessagePack-CSharp#2268
~~Fix Incorrect DateTimeOffset Serializer by @T0PP1ng in Fix Incorrect DateTimeOffset Serializer MessagePack-CSharp/MessagePack-CSharp#2225~~
Revert DateTimeOffset encoding change by @AArnott in Revert DateTimeOffset encoding change MessagePack-CSharp/MessagePack-CSharp#2262

New Contributors

@Bykiev made their first contribution in Remove unneeded GetTypeInfo() calls MessagePack-CSharp/MessagePack-CSharp#2206
@VictorNicollet made their first contribution in Use 'Write' instead of 'WriteInt32' for union type keys MessagePack-CSharp/MessagePack-CSharp#2212
@T0PP1ng made their first contribution in Fix Incorrect DateTimeOffset Serializer MessagePack-CSharp/MessagePack-CSharp#2225
@khuongntrd made their first contribution in fix: prevent StackOverflow in Equals with recursive generic constraints MessagePack-CSharp/MessagePack-CSharp#2226

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v3.1.4...v3.1.5

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 9.0.15 to 9.0.18.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

9.0.18

Release

What's Changed

Update branding to 9.0.18 by @vseanreesermsft in Update branding to 9.0.18 dotnet/aspnetcore#66983
[release/9.0] (deps): Bump src/submodules/googletest from d72f9c8 to a721f1b by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from d72f9c8 to a721f1b dotnet/aspnetcore#66974
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#66717
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#66640
[release/9.0] Update dependencies from dotnet/source-build-assets by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#66992
[release/9.0] Add 1ES Unofficial pipeline for Components E2E tests by @wtgodbe in [release/9.0] Add 1ES Unofficial pipeline for Components E2E tests dotnet/aspnetcore#66988
[release/9.0] Bump Crypto.Xml to 8.0.3 for RepoTasks by @wtgodbe in [release/9.0] Bump Crypto.Xml to 8.0.3 for RepoTasks dotnet/aspnetcore#66765
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#67104
[release/9.0] Update npm dependencies by @wtgodbe in [release/9.0] Update npm dependencies dotnet/aspnetcore#67143
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#67057
[release/9.0] Update Microsoft Identity Web package versions to 3.15.1 by @wtgodbe in [release/9.0] Update Microsoft Identity Web package versions to 3.15.1 dotnet/aspnetcore#67163
[release/9.0] (deps): Bump src/submodules/googletest from a721f1b to 7140cd4 by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from a721f1b to 7140cd4 dotnet/aspnetcore#67217
[release/9.0] Update dependencies from dotnet/source-build-assets by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#67113
[release/9.0] Reject ASCII control characters in cookie auth return URLs by @github-actions[bot] in [release/9.0] Reject ASCII control characters in cookie auth return URLs dotnet/aspnetcore#67156

Full Changelog: dotnet/aspnetcore@v9.0.17...v9.0.18

9.0.17

Release

What's Changed

Update branding to 9.0.17 by @vseanreesermsft in Update branding to 9.0.17 dotnet/aspnetcore#66590
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#66482
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#66371
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#66661

Full Changelog: dotnet/aspnetcore@v9.0.16...v9.0.17

9.0.16

Release

What's Changed

[release/9.0] Update branding to 9.0.16 by @vseanreesermsft in [release/9.0] Update branding to 9.0.16 dotnet/aspnetcore#66206
[release/9.0] Update NPM dependencies by @wtgodbe in [release/9.0] Update NPM dependencies dotnet/aspnetcore#66051
[release/9.0] Move off of dead-lettered Windows preview helix queue by @wtgodbe in [release/9.0] Move off of dead-lettered Windows preview helix queue dotnet/aspnetcore#66219
[release/9.0] (deps): Bump src/submodules/googletest from 73a63ea to d72f9c8 by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from 73a63ea to d72f9c8 dotnet/aspnetcore#66088
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#65906
[release/9.0] Fix lodash CVE by adding npm override for >=4.18.0 by @wtgodbe in [release/9.0] Fix lodash CVE by adding npm override for >=4.18.0 dotnet/aspnetcore#66224
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#65907
[release/9.0] Update azure/msal-browser by @github-actions[bot] in [release/9.0] Update azure/msal-browser dotnet/aspnetcore#66234
[release/9.0] Stop overwriting Arcade default MicrosoftTemplateEngineAuthoringTasks… by @wtgodbe in [release/9.0] Stop overwriting Arcade default MicrosoftTemplateEngineAuthoringTasks… dotnet/aspnetcore#66235
[release/9.0] Use source-build-assets repo by @NikolaMilosavljevic in [release/9.0] Use source-build-assets repo dotnet/aspnetcore#66278
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#66288
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#66316

Full Changelog: dotnet/aspnetcore@v9.0.15...v9.0.16

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 9.0.15 to 9.0.18.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

9.0.18

Release

What's Changed

Update branding to 9.0.18 by @vseanreesermsft in Update branding to 9.0.18 dotnet/aspnetcore#66983
[release/9.0] (deps): Bump src/submodules/googletest from d72f9c8 to a721f1b by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from d72f9c8 to a721f1b dotnet/aspnetcore#66974
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#66717
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#66640
[release/9.0] Update dependencies from dotnet/source-build-assets by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#66992
[release/9.0] Add 1ES Unofficial pipeline for Components E2E tests by @wtgodbe in [release/9.0] Add 1ES Unofficial pipeline for Components E2E tests dotnet/aspnetcore#66988
[release/9.0] Bump Crypto.Xml to 8.0.3 for RepoTasks by @wtgodbe in [release/9.0] Bump Crypto.Xml to 8.0.3 for RepoTasks dotnet/aspnetcore#66765
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#67104
[release/9.0] Update npm dependencies by @wtgodbe in [release/9.0] Update npm dependencies dotnet/aspnetcore#67143
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#67057
[release/9.0] Update Microsoft Identity Web package versions to 3.15.1 by @wtgodbe in [release/9.0] Update Microsoft Identity Web package versions to 3.15.1 dotnet/aspnetcore#67163
[release/9.0] (deps): Bump src/submodules/googletest from a721f1b to 7140cd4 by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from a721f1b to 7140cd4 dotnet/aspnetcore#67217
[release/9.0] Update dependencies from dotnet/source-build-assets by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#67113
[release/9.0] Reject ASCII control characters in cookie auth return URLs by @github-actions[bot] in [release/9.0] Reject ASCII control characters in cookie auth return URLs dotnet/aspnetcore#67156

Full Changelog: dotnet/aspnetcore@v9.0.17...v9.0.18

9.0.17

Release

What's Changed

Update branding to 9.0.17 by @vseanreesermsft in Update branding to 9.0.17 dotnet/aspnetcore#66590
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#66482
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#66371
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#66661

Full Changelog: dotnet/aspnetcore@v9.0.16...v9.0.17

9.0.16

Release

What's Changed

[release/9.0] Update branding to 9.0.16 by @vseanreesermsft in [release/9.0] Update branding to 9.0.16 dotnet/aspnetcore#66206
[release/9.0] Update NPM dependencies by @wtgodbe in [release/9.0] Update NPM dependencies dotnet/aspnetcore#66051
[release/9.0] Move off of dead-lettered Windows preview helix queue by @wtgodbe in [release/9.0] Move off of dead-lettered Windows preview helix queue dotnet/aspnetcore#66219
[release/9.0] (deps): Bump src/submodules/googletest from 73a63ea to d72f9c8 by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from 73a63ea to d72f9c8 dotnet/aspnetcore#66088
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#65906
[release/9.0] Fix lodash CVE by adding npm override for >=4.18.0 by @wtgodbe in [release/9.0] Fix lodash CVE by adding npm override for >=4.18.0 dotnet/aspnetcore#66224
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#65907
[release/9.0] Update azure/msal-browser by @github-actions[bot] in [release/9.0] Update azure/msal-browser dotnet/aspnetcore#66234
[release/9.0] Stop overwriting Arcade default MicrosoftTemplateEngineAuthoringTasks… by @wtgodbe in [release/9.0] Stop overwriting Arcade default MicrosoftTemplateEngineAuthoringTasks… dotnet/aspnetcore#66235
[release/9.0] Use source-build-assets repo by @NikolaMilosavljevic in [release/9.0] Use source-build-assets repo dotnet/aspnetcore#66278
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#66288
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#66316

Full Changelog: dotnet/aspnetcore@v9.0.15...v9.0.16

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 9.0.15 to 9.0.18.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

9.0.18

Release

What's Changed

Update branding to 9.0.18 by @vseanreesermsft in Update branding to 9.0.18 dotnet/aspnetcore#66983
[release/9.0] (deps): Bump src/submodules/googletest from d72f9c8 to a721f1b by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from d72f9c8 to a721f1b dotnet/aspnetcore#66974
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#66717
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#66640
[release/9.0] Update dependencies from dotnet/source-build-assets by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#66992
[release/9.0] Add 1ES Unofficial pipeline for Components E2E tests by @wtgodbe in [release/9.0] Add 1ES Unofficial pipeline for Components E2E tests dotnet/aspnetcore#66988
[release/9.0] Bump Crypto.Xml to 8.0.3 for RepoTasks by @wtgodbe in [release/9.0] Bump Crypto.Xml to 8.0.3 for RepoTasks dotnet/aspnetcore#66765
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#67104
[release/9.0] Update npm dependencies by @wtgodbe in [release/9.0] Update npm dependencies dotnet/aspnetcore#67143
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#67057
[release/9.0] Update Microsoft Identity Web package versions to 3.15.1 by @wtgodbe in [release/9.0] Update Microsoft Identity Web package versions to 3.15.1 dotnet/aspnetcore#67163
[release/9.0] (deps): Bump src/submodules/googletest from a721f1b to 7140cd4 by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from a721f1b to 7140cd4 dotnet/aspnetcore#67217
[release/9.0] Update dependencies from dotnet/source-build-assets by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#67113
[release/9.0] Reject ASCII control characters in cookie auth return URLs by @github-actions[bot] in [release/9.0] Reject ASCII control characters in cookie auth return URLs dotnet/aspnetcore#67156

Full Changelog: dotnet/aspnetcore@v9.0.17...v9.0.18

9.0.17

Release

What's Changed

Update branding to 9.0.17 by @vseanreesermsft in Update branding to 9.0.17 dotnet/aspnetcore#66590
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#66482
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#66371
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#66661

Full Changelog: dotnet/aspnetcore@v9.0.16...v9.0.17

9.0.16

Release

What's Changed

[release/9.0] Update branding to 9.0.16 by @vseanreesermsft in [release/9.0] Update branding to 9.0.16 dotnet/aspnetcore#66206
[release/9.0] Update NPM dependencies by @wtgodbe in [release/9.0] Update NPM dependencies dotnet/aspnetcore#66051
[release/9.0] Move off of dead-lettered Windows preview helix queue by @wtgodbe in [release/9.0] Move off of dead-lettered Windows preview helix queue dotnet/aspnetcore#66219
[release/9.0] (deps): Bump src/submodules/googletest from 73a63ea to d72f9c8 by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from 73a63ea to d72f9c8 dotnet/aspnetcore#66088
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#65906
[release/9.0] Fix lodash CVE by adding npm override for >=4.18.0 by @wtgodbe in [release/9.0] Fix lodash CVE by adding npm override for >=4.18.0 dotnet/aspnetcore#66224
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#65907
[release/9.0] Update azure/msal-browser by @github-actions[bot] in [release/9.0] Update azure/msal-browser dotnet/aspnetcore#66234
[release/9.0] Stop overwriting Arcade default MicrosoftTemplateEngineAuthoringTasks… by @wtgodbe in [release/9.0] Stop overwriting Arcade default MicrosoftTemplateEngineAuthoringTasks… dotnet/aspnetcore#66235
[release/9.0] Use source-build-assets repo by @NikolaMilosavljevic in [release/9.0] Use source-build-assets repo dotnet/aspnetcore#66278
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#66288
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#66316

Full Changelog: dotnet/aspnetcore@v9.0.15...v9.0.16

Commits viewable in compare view.

Updated Microsoft.AspNetCore.SignalR.Protocols.MessagePack from 9.0.15 to 9.0.18.

Release notes

Sourced from Microsoft.AspNetCore.SignalR.Protocols.MessagePack's releases.

9.0.18

Release

What's Changed

Update branding to 9.0.18 by @vseanreesermsft in Update branding to 9.0.18 dotnet/aspnetcore#66983
[release/9.0] (deps): Bump src/submodules/googletest from d72f9c8 to a721f1b by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from d72f9c8 to a721f1b dotnet/aspnetcore#66974
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#66717
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#66640
[release/9.0] Update dependencies from dotnet/source-build-assets by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#66992
[release/9.0] Add 1ES Unofficial pipeline for Components E2E tests by @wtgodbe in [release/9.0] Add 1ES Unofficial pipeline for Components E2E tests dotnet/aspnetcore#66988
[release/9.0] Bump Crypto.Xml to 8.0.3 for RepoTasks by @wtgodbe in [release/9.0] Bump Crypto.Xml to 8.0.3 for RepoTasks dotnet/aspnetcore#66765
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#67104
[release/9.0] Update npm dependencies by @wtgodbe in [release/9.0] Update npm dependencies dotnet/aspnetcore#67143
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#67057
[release/9.0] Update Microsoft Identity Web package versions to 3.15.1 by @wtgodbe in [release/9.0] Update Microsoft Identity Web package versions to 3.15.1 dotnet/aspnetcore#67163
[release/9.0] (deps): Bump src/submodules/googletest from a721f1b to 7140cd4 by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from a721f1b to 7140cd4 dotnet/aspnetcore#67217
[release/9.0] Update dependencies from dotnet/source-build-assets by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#67113
[release/9.0] Reject ASCII control characters in cookie auth return URLs by @github-actions[bot] in [release/9.0] Reject ASCII control characters in cookie auth return URLs dotnet/aspnetcore#67156

Full Changelog: dotnet/aspnetcore@v9.0.17...v9.0.18

9.0.17

Release

What's Changed

Update branding to 9.0.17 by @vseanreesermsft in Update branding to 9.0.17 dotnet/aspnetcore#66590
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#66482
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#66371
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#66661

Full Changelog: dotnet/aspnetcore@v9.0.16...v9.0.17

9.0.16

Release

What's Changed

[release/9.0] Update branding to 9.0.16 by @vseanreesermsft in [release/9.0] Update branding to 9.0.16 dotnet/aspnetcore#66206
[release/9.0] Update NPM dependencies by @wtgodbe in [release/9.0] Update NPM dependencies dotnet/aspnetcore#66051
[release/9.0] Move off of dead-lettered Windows preview helix queue by @wtgodbe in [release/9.0] Move off of dead-lettered Windows preview helix queue dotnet/aspnetcore#66219
[release/9.0] (deps): Bump src/submodules/googletest from 73a63ea to d72f9c8 by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from 73a63ea to d72f9c8 dotnet/aspnetcore#66088
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#65906
[release/9.0] Fix lodash CVE by adding npm override for >=4.18.0 by @wtgodbe in [release/9.0] Fix lodash CVE by adding npm override for >=4.18.0 dotnet/aspnetcore#66224
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#65907
[release/9.0] Update azure/msal-browser by @github-actions[bot] in [release/9.0] Update azure/msal-browser dotnet/aspnetcore#66234
[release/9.0] Stop overwriting Arcade default MicrosoftTemplateEngineAuthoringTasks… by @wtgodbe in [release/9.0] Stop overwriting Arcade default MicrosoftTemplateEngineAuthoringTasks… dotnet/aspnetcore#66235
[release/9.0] Use source-build-assets repo by @NikolaMilosavljevic in [release/9.0] Use source-build-assets repo dotnet/aspnetcore#66278
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#66288
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#66316

Full Changelog: dotnet/aspnetcore@v9.0.15...v9.0.16

Commits viewable in compare view.

Updated Microsoft.CodeAnalysis.NetAnalyzers from 10.0.202 to 10.0.302.

Release notes

Sourced from Microsoft.CodeAnalysis.NetAnalyzers's releases.

10.0.302

You can build .NET 10.0 from the repository by cloning the release tag v10.0.302 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.