Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 28, 2025

Updated Aspire.Npgsql from 8.2.2 to 9.3.1.

Release notes

Sourced from Aspire.Npgsql's releases.

9.3.1

What's Changed

Full Changelog: dotnet/aspire@v9.3.0...v9.3.1

9.3.0

We are excited to share that our 9.3.0 release of .NET Aspire has shipped! All of the packages are available in NuGet.org now. Find out what is new here.

What's Changed

9.2.1

We are excited to share that our 9.2.1 release of .NET Aspire has shipped! All of the packages are available in NuGet.org now. Try it out and share your feedback 😃

What's Changed

Full Changelog: dotnet/aspire@v9.2.0...v9.2.1

9.2.0

We are excited to share that our 9.2.0 release of .NET Aspire has shipped! All of the packages are available in NuGet.org now. Please check out what's new in this release. Try it out and share your feedback 😃

What's Changed

9.1.0

We are excited to share that our 9.1.0 release of .NET Aspire has shipped! All of the packages are available in NuGet.org now. Please check out what's new in this release. Try it out and share your feedback 😃

What's Changed

9.0.0

We are excited to share that our 9.0.0 release of .NET Aspire has shipped! All of the packages are available in NuGet.org now. Please check out what's new in this release. Try it out and share your feedback 😃

What's Changed

9.0.0-rc.1.24511.1

This represents the first prerelease of 9.0.0 which is packed of cool features 😃. For all of the details on this release as well as info on how to try it out, please check out our release blog post.

What's Changed

Commits viewable in compare view.

Updated Grpc.AspNetCore from 2.66.0 to 2.71.0.

Release notes

Sourced from Grpc.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated MediatR from 12.4.1 to 13.0.0.

Release notes

Sourced from MediatR's releases.

13.0.0

Full Changelog: LuckyPennySoftware/MediatR@v12.5.0...v13.0.0

  • Added support for .NET Standard 2.0
  • Requiring license key
  • Moving from Apache license to dual commercial/OSS license

To set your license key:

services.AddMediatR(cfg => {
    cfg.LicenseKey = "<License key here>";
});

You can obtain your license key at MediatR.io

12.5.0

What's Changed

New Contributors

Full Changelog: LuckyPennySoftware/MediatR@v12.4.1...v12.5.0

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.8 to 8.0.18.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

8.0.18

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

  • Update dependencies from dotnet/arcade (#​61832)
    This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
    The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

  • Update branding to 8.0.17 (#​61830)
    The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

  • Merging internal commits for release/8.0 (#​61924)
    This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.


This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

8.0.13

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.11...v8.0.12

8.0.11

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.10...v8.0.11

8.0.10

Release

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection.Abstractions from 9.0.0 to 9.0.7.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

9.0.7

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.6...v9.0.7

9.0.6

Bug Fixes

  • Read messages from binlog if process output is missing build finished message (#​114676)
    Improves reliability of the WebAssembly build process by reading messages from the binlog when the process output does not contain the expected build finished message, preventing build failures in certain scenarios.

  • Fix debugger app hangs related to thread exit (#​114917)
    Resolves an issue where applications could hang during debugging when threads exit, ensuring smoother debugging experiences and preventing deadlocks.

  • [Mono] Workaround MSVC miscompiling sgen_clz (#​114903)
    Addresses a compiler miscompilation issue in MSVC affecting the Mono garbage collector, improving runtime stability and correctness on affected platforms.

  • Do not set the salt or info if they are NULL for OpenSSL HKDF (#​114877)
    Fixes a cryptographic issue by ensuring that the salt or info parameters are not set when they are NULL in OpenSSL HKDF, preventing potential errors or unexpected behavior in key derivation.

  • [Test Only] Fix Idn tests (#​115032)
    Corrects issues in Internationalized Domain Name (Idn) tests, ensuring accurate and reliable test results for domain name handling.

  • JIT: revised fix for fp division issue in profile synthesis (#​115026)
    Provides a more robust fix for floating-point division issues in JIT profile synthesis, improving numerical accuracy and preventing incorrect calculations.

  • Handle OSSL 3.4 change to SAN:othername formatting (#​115361)
    Updates certificate handling to accommodate changes in Subject Alternative Name (SAN) formatting introduced in OpenSSL 3.4, ensuring compatibility and correct parsing of certificates.

  • [Mono] Fix c11 ARM64 atomics to issue full memory barrier (#​115635)
    Fixes atomic operations on ARM64 in Mono to issue a full memory barrier, ensuring correct synchronization and preventing subtle concurrency bugs.

Performance Improvements

  • [WinHTTP] Certificate caching on WinHttpHandler to eliminate extra call to Custom Certificate Validation (#​114678)
    Improves HTTP performance by caching certificates in WinHttpHandler, reducing redundant calls to custom certificate validation and speeding up secure connections.

  • Improve distribute_free_regions (#​115167)
    Optimizes memory management by enhancing the algorithm for distributing free memory regions, leading to better memory utilization and potentially improved application performance.

Technical Improvements

  • Strip trailing slash from source dir for cmake4 (#​114905)
    Refines build scripts by removing trailing slashes from source directories when using CMake 4, preventing potential build path issues and improving build reliability.

  • Don't expose TrustedCertificatesDirectory() and StartNewTlsSessionContext() to NetFx (#​114995)
    Restricts certain internal APIs from being exposed to .NET Framework, reducing surface area and preventing unintended usage.

  • Add support for more libicu versions (#​115376)
    Expands compatibility by supporting additional versions of the International Components for Unicode (ICU) library, enhancing globalization features across more environments.

Infrastructure

  • Run outerloop pipeline only for release branches, not staging/preview (#​115011)
    Optimizes CI/CD resources by limiting the outerloop pipeline to run only on release branches, reducing unnecessary test runs and speeding up development workflows.

... (truncated)

9.0.5

Release

What's Changed

9.0.4

Release

What's Changed

...

Description has been truncated

Bumps Aspire.Npgsql from 8.2.2 to 9.3.1
Bumps Grpc.AspNetCore from 2.66.0 to 2.71.0
Bumps MediatR from 12.4.1 to 13.0.0
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.8 to 8.0.18
Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 9.0.0 to 9.0.7
Bumps Microsoft.Extensions.Http.Resilience from 9.3.0 to 9.7.0
Bumps Microsoft.Extensions.Options from 9.0.0 to 9.0.7
Bumps Microsoft.Extensions.Options.ConfigurationExtensions from 9.0.0 to 9.0.7
Bumps Microsoft.NET.Test.Sdk from 17.12.0 to 17.14.1
Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 8.0.10 to 9.0.4
Bumps NSubstitute from 5.1.0 to 5.3.0
Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.9.0 to 1.12.0
Bumps OpenTelemetry.Extensions.Hosting from 1.10.0 to 1.12.0
Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.9.0 to 1.12.0
Bumps OpenTelemetry.Instrumentation.Http from 1.9.0 to 1.12.0
Bumps OpenTelemetry.Instrumentation.Runtime from 1.10.0 to 1.12.0
Bumps Pgvector from 0.3.0 to 0.3.2
Bumps Pgvector.EntityFrameworkCore from 0.2.1 to 0.2.2
Bumps Polly from 8.5.0 to 8.6.2
Bumps Swashbuckle.AspNetCore from 7.2.0 to 9.0.3
Bumps xunit from 2.9.0 to 2.9.3
Bumps xunit.runner.visualstudio from 2.8.2 to 3.1.3

---
updated-dependencies:
- dependency-name: Aspire.Npgsql
  dependency-version: 9.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Grpc.AspNetCore
  dependency-version: 2.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: MediatR
  dependency-version: 13.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 8.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions
  dependency-version: 9.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 9.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Microsoft.Extensions.Options
  dependency-version: 9.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions
  dependency-version: 9.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL
  dependency-version: 9.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: NSubstitute
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: OpenTelemetry.Instrumentation.AspNetCore
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: OpenTelemetry.Instrumentation.Http
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: OpenTelemetry.Instrumentation.Runtime
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Pgvector
  dependency-version: 0.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Pgvector.EntityFrameworkCore
  dependency-version: 0.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Polly
  dependency-version: 8.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jul 28, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 4, 2025

Superseded by #124.

@dependabot dependabot bot closed this Aug 4, 2025
@dependabot dependabot bot deleted the dependabot/nuget/multi-e258a697bb branch August 4, 2025 11:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants