Bump Azure.Extensions.AspNetCore.DataProtection.Blobs and 18 others by dependabot[bot] · Pull Request #37 · frasermolyneux/trip-side-kick

dependabot · 2026-09-13T08:41:18Z

Updated Azure.Extensions.AspNetCore.DataProtection.Blobs from 1.5.3 to 1.5.4.

Release notes

Sourced from Azure.Extensions.AspNetCore.DataProtection.Blobs's releases.

1.5.4 1.5.4 (2026-09-08)

Other Changes

Updated Azure.Core dependency from 1.55.0 to 1.61.0.
Updated Microsoft.AspNetCore.DataProtection to patched versions that resolve System.Security.Cryptography.Xml advisories GHSA-g8r8-53c2-pm3f, GHSA-8q5v-6pqq-x66h, GHSA-23rf-6693-g89p, GHSA-cvvh-rhrc-wg4q, and GHSA-mmjf-rqrv-855v: from 8.0.26 to 8.0.29 for net8.0, and from 10.0.7 to 10.0.10 for all other target frameworks.

Commits viewable in compare view.

Updated Azure.Storage.Blobs from 12.29.1 to 12.29.2.

Release notes

Sourced from Azure.Storage.Blobs's releases.

12.29.2 12.29.2 (2026-08-24)

Bugs Fixed

Fixed a bug where client-side encryption 2.0 could not detect a rearrangement of otherwise-untampered authenticated regions in blob content. This is now detected and exceptions are thrown. For data recovery purposes, this behavior can be reverted by enabling "Azure.Storage.CseV2AllowMisorderedAuthRegions" in the AppContext switch or "AZURE_STORAGE_CSE_V2_ALLOW_MISORDERED_AUTH_REGIONS" in environment variables.
Fixed a bug in client-side encryption where version downgrades were only detected at the start of a download.

Commits viewable in compare view.

Updated dotnet-ef from 10.0.0 to 10.0.12.

Release notes

Sourced from dotnet-ef's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.SqlServer from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.EntityFrameworkCore.SqlServer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Memory from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Caching.Memory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Abstractions from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Options.ConfigurationExtensions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.8.1 to 18.10.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.10.0 What's Changed

Drop Mono fallback, run .NET Framework tests on Windows only by @nohwnd in Drop Mono fallback, run .NET Framework tests on Windows only microsoft/vstest#16158
Run Microsoft.Testing.Platform test apps under vstest.console and datacollector by @nohwnd in Run Microsoft.Testing.Platform test apps under vstest.console and datacollector microsoft/vstest#16201
Fix test output eaten by MSBuild terminal logger by @nohwnd in [fix] Fix test output eaten by MSBuild terminal logger microsoft/vstest#16223
Remove the experimental test session feature by @nohwnd in Remove the experimental test session feature microsoft/vstest#16231
Skip a single bad executor instead of failing all executor loading by @nohwnd in Skip a single bad executor instead of failing all executor loading microsoft/vstest#16239
Assert apartment state instead of using Clipboard in UI tests by @nohwnd in Assert apartment state instead of using Clipboard in UI tests microsoft/vstest#16270
Surface test host crashes during protocol negotiation by @nohwnd in Surface test host crashes during protocol negotiation microsoft/vstest#16285
Pass the inferred target platform to the host in run settings by @nohwnd in Pass the inferred target platform to the host in run settings microsoft/vstest#16271
Report raw invalid IsTargetPlatformInferred value, cover host x64 forcing by @nohwnd in Report raw invalid IsTargetPlatformInferred value, cover host x64 forcing microsoft/vstest#16295
Disable the MTP testhost by default (#16337) by @nohwnd in [rel/18.10] Disable the MTP testhost by default (#16337) microsoft/vstest#16341

Full Changelog: microsoft/vstest@v18.9.0...v18.10.0

18.9.0 What's Changed

Fix tilde/exclamation characters corrupted in TerminalLogger test output by @nohwnd in [fix] Fix tilde/exclamation characters corrupted in TerminalLogger test output microsoft/vstest#16046
Make TranslationLayer Native AOT-compatible by @drewnoakes in Make TranslationLayer Native AOT-compatible microsoft/vstest#16045
Guard GenerateProgramFile target against UseWinUI/UseUwpTools evaluation order by @nohwnd in [fix] fix: guard GenerateProgramFile target against UseWinUI/UseUwpTools evaluation order microsoft/vstest#16072
Add RequestingAssembly to AssemblyResolveEventArgs for binary compat by @nohwnd in [fix] fix: add RequestingAssembly to AssemblyResolveEventArgs for binary compat microsoft/vstest#16076
Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect from testhost.x86 and datacollector by @Evangelink in Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect from testhost.x86 and datacollector microsoft/vstest#16082
Fix TRX attachment paths when LogFileName contains a subdirectory by @nohwnd in [fix] Fix TRX attachment paths when LogFileName contains a subdirectory microsoft/vstest#15791
Fix missing dumps for .NET Framework child processes in NetClientHangDumper by @nohwnd in [fix] Fix missing dumps for .NET Framework child processes in NetClientHangDumper microsoft/vstest#16098
Fix data collection channels to use negotiated protocol version instead of V1 by @nohwnd in [fix] Fix data collection channels to use negotiated protocol version instead of V1 microsoft/vstest#16096
Fix race condition in BlameCollector: skip hang dump when testhost hasn't launched yet by @nohwnd in [fix] Fix race condition in BlameCollector: skip hang dump when testhost hasn't launched yet microsoft/vstest#16065
Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in auto-generated Program files by @nohwnd in [fix] Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in auto-generated Program files microsoft/vstest#16101
Include testhost process path in crash error messages by @nohwnd in [fix] Include testhost process path in crash error messages microsoft/vstest#16108
Fix DataDriven test results being double-counted in TRX logger totals by @nohwnd in [fix] Fix DataDriven test results being double-counted in TRX logger totals microsoft/vstest#15766
Fix datacollector crash visibility: replace Assert with throwable exceptions by @nohwnd in [fix] Fix datacollector crash visibility: replace Assert with throwable exceptions microsoft/vstest#16048
Add TreatErrorMessagesAsWarnings parameter to TRX logger by @nohwnd in [fix] Add TreatErrorMessagesAsWarnings parameter to TRX logger microsoft/vstest#16106
Wait for testhost stderr to drain before reading its crash output by @nohwnd in Wait for testhost stderr to drain before reading its crash output microsoft/vstest#16128
Handle runtimeconfig.dev.json without additionalProbingPaths by @tmat in Handle runtimeconfig.dev.json without additionalProbingPaths microsoft/vstest#16166
Suggest Microsoft.NET.Test.Sdk when a managed test project brings no testhost by @nohwnd in Suggest Microsoft.NET.Test.Sdk when a managed test project brings no testhost microsoft/vstest#16169
Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1) when run via vstest.console.exe directly (#16151) by @azat-msft in Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1) when run via vstest.console.exe directly (#16151) microsoft/vstest#16156
Preserve the real exception (type + stack trace) when a test run aborts in BaseRunTests by @nohwnd in [fix] Preserve the real exception (type + stack trace) when a test run aborts in BaseRunTests microsoft/vstest#16167

New Contributors

@drewnoakes made their first contribution in Make TranslationLayer Native AOT-compatible microsoft/vstest#16045

Full Changelog: microsoft/vstest@v18.8.0...v18.9.0

Commits viewable in compare view.

Updated Microsoft.OpenApi from 2.11.0 to 2.12.0.

Release notes

Sourced from Microsoft.OpenApi's releases.

2.12.0 2.12.0 (2026-08-12)

Features

adds deserialization of the example extension (095ae3b)
serialize license identifier as extension for earlier versions (d5cdce8)
serialize license identifier as extension for earlier versions (fde38d8)

Bug Fixes

better nullability round-tripping (7a25659)
bound YAML anchor/alias expansion to prevent OOM (billion laughs) (#3000) (a361360)
bound YAML anchor/alias expansion to prevent OOM (billion laughs) (#3000) (4db9af0)
library: serialize multiple schema types as anyOf/oneOf for OpenAPI 3.0 (6568896)
marks deprecated properties from the specification as obsolete (26aba69)
marks deprecated properties from the specification as obsolete (abc5301)
schema: serialize compatibility examples from examples list (be57a7c)
serialize examples as extension in v2/v3 (d27141b)

Commits viewable in compare view.

Updated Microsoft.OpenApi from 2.11.0 to 3.10.2.

Release notes

Sourced from Microsoft.OpenApi's releases.

3.10.2 3.10.2 (2026-08-20)

Bug Fixes

duplicate schema example when serializing to v2 (#3045) (50f5a2b)

3.10.1 3.10.1 (2026-08-19)

Bug Fixes

circular ref guard (#3033) (8018d40)
harden yaml parsing (#3027) (e0d5e9d)

3.10.0 3.10.0 (2026-08-11)

Features

adds deserialization of the example extension (e5a1080)
do not ignore multiple types when serializing to 3.0 (#2960) (ebaf27a)
serialize license identifier as extension for earlier versions (d090989)
serialize license identifier as extension for earlier versions (60971ba)

Bug Fixes

better nullability round-tripping (655c2c8)
bound YAML anchor/alias expansion to prevent OOM (billion laughs) (#3000) (2179326)
deserialize metadata url from extension in earlier version (9387b01)
marks deprecated properties from the specification as obsolete (787b045)
marks deprecated properties from the specification as obsolete (953c22a)
schema: serialize compatibility examples from examples list (5d8ec3a)
serialize examples as extension in v2/v3 (ff1dbc9)
serialize examples as extension in v2/v3 (edf3c67)

3.9.0 3.9.0 (2026-07-15)

Features

adds support for anchor and id external resolution (1591007)
schema: resolve bare $dynamicRef via $dynamicAnchor index (#2913) (eacc2fc)
support relative URI resolution in $dynamicRef (#2928) (#2945) (821053b)

Bug Fixes

adds explicit error message for invalid json pointers (63fc55d)
adds explicit error message for invalid json pointers (bc93efe)
default mapping is not being serialized with the correct shape (fe4a25f)
differentiate unset value from null value in OpenApiSchema.Const (#2936) (07b525f)
handle nullability more accurately during serialization for 3.0/2.0 (#2933) (0ace243)
validate required properties of security scheme before serialization (#2952) (f31b192)

3.8.0 3.8.0 (2026-07-03)

Features

add JsonConverter for OpenApiSchema System.Text.Json serialization (#2915) (2f8b3d2)
library: support schema keywords on references (434b2f8)
library: support schema keywords on references (66a9d04), closes #2903

Bug Fixes

Don't silently skip null assignment to OpenApiDocument.Tags (3764142)
handling of nullable enums for 3.0 (#2920) (beb68f5)
library: keep v3 schema references ref-only (c938727)
preserve JSON Schema 2020-12 keyword siblings on $ref schemas for OAS 3.1+ (#2896) (08160c8)
use async method for crypto flush (6e675d9)

3.7.0 3.7.0 (2026-06-10)

Features

add contains/minContains/maxContains members (78475e3)
add contains/minContains/maxContains members (1a974f8)
library: add missing json schema properties (9b1aed6)
library: add missing json schema properties (82f84e0)

Bug Fixes

library: always copy unevaluated properties (4907d1c)
library: avoid false circular refs for external schema re-exports (b635242)
library: avoid false circular refs for external schema re-exports (7a443c2)
library: remove unshipped schema extension fallback (cf54bb3)
library: use version-specific schema keyword callbacks (6e22ec6)
library: use x-jsonschema schema extensions (eb1891a)

3.6.0 3.6.0 (2026-06-01)

Features

reader: remove ParseNode infrastructure (9b4f45b)
Significant performance improvements resulting ~40% reduced allocations when parsing JSON descriptions, ~25% for YAML.

3.5.5 3.5.5 (2026-05-28)

Bug Fixes

reader: preserve Null flag when nullable appears before type in V3.0/V3.1/V3.2 deserializers (2b9d7f4)

3.5.4 3.5.4 (2026-05-26)

Bug Fixes

library: handle circular schema references (b3cd42b)
library: handle circular schema references (91a989f)

3.5.3 3.5.3 (2026-04-27)

Bug Fixes

null reference exception for boolean component schemas (f97f91a)
null reference exception for boolean component schemas (fe0b50a)
schema: support boolean schemas in deserializer for OpenAPI 3.1/3.2 (05b44be)

Performance Improvements

schema: optimize boolean schema deserialization (7316e3f)

3.5.2 3.5.2 (2026-04-14)

Bug Fixes

hidi: update Microsoft.OpenApi.OData to 3.2.1 (b0a68fb)
hidi: update Microsoft.OpenApi.OData to 3.2.1 (8c22ab2), closes #2811

3.5.1 3.5.1 (2026-03-31)

Bug Fixes

security scheme references serialization (a5acb89)

3.5.0 3.5.0 (2026-03-20)

Features

library: add Extensions support for schema references in v3.1/v3.2; add SerializeAsV32 with loop detection (9b422bf)

Bug Fixes

a bug where path parameter validation would fail if they contained forbidden JSON pointer characters (ef55b2c)
a bug where path parameter validation would fail if they contained forbidden JSON pointer characters (4b3164a)
double encoding of json pointer for invalid reference rule (b246cd0)
encoding of special characters for JSON paths (4c757e1)
library: do not emit unevaluatedProperties for non-object schemas (852fb4c)
library: do not emit unevaluatedProperties for non-object schemas (19538aa)
library: enforce spec-compliant $ref serialization; add Extensions support for schema references in v3.1/v3.2 (9bf61de)
potential double encoding of paths (471a61a)

3.4.0 3.4.0 (2026-03-04)

Features

library: preserve PatternProperties as x-jsonschema-patternProperties extension for OpenAPI v2/v3.0 serialization (d969fdc)
library: Preserve PatternProperties via x-jsonschema-patternProperties extension for OpenAPI v2/v3.0 (16ab5e4)
securityscheme: add oauth2MetadataUrl support (OpenAPI 3.2) (4509488)

Bug Fixes

implement unevaluatedProperties as schema per JSON Schema 2020-12 (#2728) (7c13fb3)
library: serialize additionalProperties schema in OpenAPI V2 (f3165fa)
library: serialize additionalProperties schema in OpenAPI V2 documents (3d07756)
optimize parsing V3.1 documents by reducing GetLocation method allocation on hot path(#2748) (f690681)

3.3.1 3.3.1 (2026-01-22)

Features

models: add shared Content interface (#2695) (338566f)

Bug Fixes

broken binary compatibility due to interface changes in previous version (d96bba7)

3.3.0 3.3.0 (2026-01-21)

Features

models: add shared Content interface (9e13b25)
models: add shared Content interface (#2695) (9e13b25)
models: support mutualTLS security scheme (a4efdfe)

3.2.0 3.2.0 (2026-01-19)

Features

hidi validate command now logs warnings (76a3c0f)
hidi validate command now logs warnings (62e7d56)

Bug Fixes

discriminator property validation fails any/allOf cases when it shouldn't (fb6cecc)
discriminator property validation fails any/allOf cases when it shouldn't (a8fb81c)

3.1.3 3.1.3 (2026-01-16)

Bug Fixes

Support custom tag ordering (008576c)
Support custom tag ordering (7610d07)

3.1.2 3.1.2 (2026-01-06)

Bug Fixes

correct error pointer when extension parser throws OpenApiException (43c75a9)
wrap extension parser calls in try-catch to ensure correct error pointers (50b44aa)

3.1.1 3.1.1 (2025-12-18)

Bug Fixes

schema: always serialize additionalProperties: false (6651c36)
schema: always serialize additionalProperties: false (e36fc95)

3.1.0 3.1.0 (2025-12-17)

Features

Add type: "null" downcasting when in oneOf and anyOf for OpenAPI v3 (782cf8d)

3.0.3 3.0.3 (2025-12-16)

Bug Fixes

load JSON documents that are preceded by multiple whitespace (6461bac)
non-seekable json streams would fail to load as a document (2436d73)
reading streams in an asp.net context would cause async exceptions (f9e5248)

3.0.2 3.0.2 (2025-12-08)

Bug Fixes

additional properties serialization should not emit a schema in v2 (946cba9)
additional properties serialization should not emit booleans in v3.1+ (946cba9)

3.0.1 3.0.1 (2025-11-17)

Bug Fixes

empty strings should be quoted in yaml (8d215f9)
empty strings should be quoted in yaml (0ca10db)

3.0.0 3.0.0 (2025-11-11)

⚠ BREAKING CHANGES

adds support for OpenAPI 3.2.0

Note: Please refer to the upgrade guide for a detailed description of the breaking changes.

Note: ASP.net users should remain on version 1.X for ASP.net < 10, and version 2.X for ASP.net 10, this new major version will be implemented in a future version of ASP.net, more information

Features

adds support for OpenAPI 3.2.0 (765a8dd)

Special thanks

Matthieu Costabello

2.12.2 2.12.2 (2026-08-20)

Bug Fixes

duplicate schema example when serializing to v2 (#3046) (a6366be)

2.12.1 2.12.1 (2026-08-19)

Bug Fixes

circular ref guard (#3033) (#3039) (406e6fd)
harden yaml parsing (#3034) (fdc5718)

2.12.0 2.12.0 (2026-08-12)

Features

adds deserialization of the example extension (095ae3b)
serialize license identifier as extension for earlier versions (d5cdce8)
serialize license identifier as extension for earlier versions (fde38d8)

Bug Fixes

better nullability round-tripping (7a25659)
bound YAML anchor/alias expansion to prevent OOM (billion laughs) (#3000) (a361360)
bound YAML anchor/alias expansion to prevent OOM (billion laughs) (#3000) (4db9af0)
library: serialize multiple schema types as anyOf/oneOf for OpenAPI 3.0 (6568896)
marks deprecated properties from the specification as obsolete (26aba69)
marks deprecated properties from the specification as obsolete (abc5301)
schema: serialize compatibility examples from examples list (be57a7c)
serialize examples as extension in v2/v3 (d27141b)

Commits viewable in compare view.

Updated MX.Observability.ApplicationInsights.AspNetCore from 1.1.28 to 1.1.31.

Release notes

Sourced from MX.Observability.ApplicationInsights.AspNetCore's releases.

1.1.31 What's Changed

Migrate solution to .slnx and add DI/startup test coverage for observability registrations by @frasermolyneux with @Copilot in Migrate solution to .slnx and add DI/startup test coverage for observability registrations observability-appinsights#25

New Contributors

@frasermolyneux with @Copilot made their first contribution in Migrate solution to .slnx and add DI/startup test coverage for observability registrations observability-appinsights#25

Full Changelog: frasermolyneux/observability-appinsights@v1.1.29...v1.1.31

1.1.29 What's Changed

Bump the all-updates group with 3 updates by @dependabot[bot] in Bump the all-updates group with 3 updates observability-appinsights#23

Full Changelog: frasermolyneux/observability-appinsights@v1.1.28...v1.1.29

Commits viewable in compare view.

Updated System.Security.Cryptography.Xml from 10.0.10 to 10.0.12.

Release notes

Sourced from System.Security.Cryptography.Xml's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Testcontainers.MsSql from 4.13.0 to 4.15.0.

Release notes

Sourced from Testcontainers.MsSql's releases.

4.15.0

What's Changed

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #45594466.

🚀 Features

feat: Add options to the Docker Compose up and down command (#1759) @HofmeisterAn
feat: Add QuestDB module (#1618) @FortuneN, @HofmeisterAn
feat: Add Compose support (#1750) @HofmeisterAn
fix(Couchbase): Treat an already provisioned cluster as configured (#1736) @arnelirobles, @HofmeisterAn
feat: Retry transient Docker image pull failures (#1734) @thomhurst, @HofmeisterAn
chore(deps): Split Dependabot NuGet jobs and bump test dependencies (#1746) @HofmeisterAn
feat(MongoDb): Resolve the MongoDb shell file path once (#1745) @HofmeisterAn

🐛 Bug Fixes

fix: Detach from the container output before stopping or removing it (#1755) @HofmeisterAn
fix(GCloud): Bump test image version (#1752) @HofmeisterAn

📖 Documentation

docs: Update CONTRIBUTING.md (#1744) @HofmeisterAn

🧹 Housekeeping

chore: Improve null check, test typing, and IDE settings (#1757) @HofmeisterAn
fix(GCloud): Bump test image version (#1752) @HofmeisterAn
chore: Resolve Sonar findings (#1751) @HofmeisterAn
chore(deps): Revert Dependabot NuGet jobs (#1748) @HofmeisterAn
feat: Prepare next release cycle (4.15.0) (#1742) @HofmeisterAn

📦 Dependency Updates

chore(deps): Bump mkdocs-material from 9.7.2 to 9.7.7 (#1758) @dependabot[bot]
chore(deps): Bump the actions group with 5 updates (#1754) @dependabot[bot]
chore(deps): Bump the actions group across 1 directory with 7 updates (#1747) @dependabot[bot]
chore(deps): Revert Dependabot NuGet jobs (#1748) @HofmeisterAn
chore(deps): Split Dependabot NuGet jobs and bump test dependencies (#1746) @HofmeisterAn

4.14.0

What's Changed

I published this version because several developers asked for a release addressing the SSH.NET vulnerability. As an interim fix, you can also bump the transitive dependency, which should work fine.

Unfortunately, I had to run the release CI pipeline twice (1, 2). The change #1725 introduced a regression that caused the pipeline to attempt to publish the Cake build project, which correctly failed (partially published).

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #40693051.

🚀 Features

feat: Add possibility to select MSSQL database (instead of master) (#1737) @0xced, @HofmeisterAn
feat: Add Mailpit module (#1727) @0xced, @feslima, @HofmeisterAn

🐛 Bug Fixes

fix(MongoDb): Probe the server instead of counting log messages before initiating (#1735) @arnelirobles, @HofmeisterAn
fix(MongoDb): Treat an already initiated replica set as success (#1731) @arnelirobles, @HofmeisterAn

🧹 Housekeeping

chore: Cleanup and align tests (#1740) @HofmeisterAn
chore: Set Cake build solution file path to Testcontainers.slnx (#1728) @0xced
chore: Keep Testcontainers.slnx solution file only (#1725) @0xced
feat: Prepare next release cycle (4.14.0) (#1726) @HofmeisterAn

📦 Dependency Updates

chore(deps): Bump SSH.NET to 2026.0.0 and BouncyCastle.Cryptography to 2.7.0 (#1739) @markmario
chore(deps): Bump the actions group with 10 updates (#1730) @dependabot[bot]

Commits viewable in compare view.

Updated xunit.runner.visualstudio from 3.1.5 to 4.0.0.

Release notes

Sourced from xunit.runner.visualstudio's releases.

4.0.0

Release notes: https://xunit.net/releases/visualstudio/4.0.0

4.0.0-pre.5

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.5

4.0.0-pre.4

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.4

4.0.0-pre.3

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.3

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Azure.Extensions.AspNetCore.DataProtection.Blobs from 1.5.3 to 1.5.4 Bumps Azure.Storage.Blobs from 12.29.1 to 12.29.2 Bumps dotnet-ef from 10.0.0 to 10.0.12 Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.10 to 10.0.12 Bumps Microsoft.AspNetCore.OpenApi from 10.0.10 to 10.0.12 Bumps Microsoft.EntityFrameworkCore.Design from 10.0.10 to 10.0.12 Bumps Microsoft.EntityFrameworkCore.SqlServer from 10.0.10 to 10.0.12 Bumps Microsoft.Extensions.Caching.Memory from 10.0.10 to 10.0.12 Bumps Microsoft.Extensions.Configuration.Abstractions from 10.0.10 to 10.0.12 Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.10 to 10.0.12 Bumps Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.10 to 10.0.12 Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.10 to 10.0.12 Bumps Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.10 to 10.0.12 Bumps Microsoft.NET.Test.Sdk from 18.8.1 to 18.10.0 Bumps Microsoft.OpenApi to 2.12.0, 3.10.2 Bumps MX.Observability.ApplicationInsights.AspNetCore from 1.1.28 to 1.1.31 Bumps System.Security.Cryptography.Xml from 10.0.10 to 10.0.12 Bumps Testcontainers.MsSql from 4.13.0 to 4.15.0 Bumps xunit.runner.visualstudio from 3.1.5 to 4.0.0 --- updated-dependencies: - dependency-name: dotnet-ef dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Azure.Storage.Blobs dependency-version: 12.29.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Extensions.Caching.Memory dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Extensions.Configuration.Abstractions dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.EntityFrameworkCore.SqlServer dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Azure.Extensions.AspNetCore.DataProtection.Blobs dependency-version: 1.5.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.OpenApi dependency-version: 2.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.OpenApi dependency-version: 3.10.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-updates - dependency-name: MX.Observability.ApplicationInsights.AspNetCore dependency-version: 1.1.31 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: System.Security.Cryptography.Xml dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: Testcontainers.MsSql dependency-version: 4.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: xunit.runner.visualstudio dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-updates ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-09-13T08:41:29Z

Dependabot Auto-Merge Policy

Auto-merge is currently blocked by policy for this pull request.

Reason: Dependabot auto-merge is blocked for update type: version-update:semver-major. Manual review required. Added run-prd-plan label.
Policy code: blocked_update_type
Update type: version-update:semver-major
Dependencies: dotnet-ef, Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.Logging.Abstractions, Azure.Storage.Blobs, Microsoft.EntityFrameworkCore.Design, Microsoft.Extensions.Caching.Memory, Microsoft.Extensions.Configuration.Abstractions, Microsoft.EntityFrameworkCore.SqlServer, Microsoft.Extensions.Diagnostics.HealthChecks, Microsoft.Extensions.Options.ConfigurationExtensions, Azure.Extensions.AspNetCore.DataProtection.Blobs, Microsoft.AspNetCore.OpenApi, Microsoft.OpenApi, Microsoft.EntityFrameworkCore.Design, Microsoft.OpenApi, MX.Observability.ApplicationInsights.AspNetCore, Microsoft.AspNetCore.Mvc.Testing, Microsoft.NET.Test.Sdk, System.Security.Cryptography.Xml, Testcontainers.MsSql, xunit.runner.visualstudio
Label added by policy: run-prd-plan

Next action: manual review and merge is required.

This comment is maintained automatically by the dependabot-policy action.

github-actions · 2026-09-13T08:41:30Z

Dependency Review

The following issues were found:

✅ 0 vulnerable package(s)
✅ 0 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
⚠️ 1 package(s) with unknown licenses.

See the Details below.

License Issues

src/MX.TripSideKick.Web/MX.TripSideKick.Web.csproj

Package	Version	License	Issue Type
MX.Observability.ApplicationInsights.AspNetCore	1.1.31	Null	Unknown License

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

nuget/Microsoft.Extensions.DependencyInjection.Abstractions

10.0.12

Unknown

nuget/Microsoft.Extensions.Logging.Abstractions

10.0.12

Unknown

nuget/Azure.Storage.Blobs

12.29.2

Unknown

nuget/Microsoft.EntityFrameworkCore.Design

10.0.12

Unknown

nuget/Microsoft.EntityFrameworkCore.SqlServer

10.0.12

Unknown

nuget/Microsoft.Extensions.Caching.Memory

10.0.12

Unknown

nuget/Microsoft.Extensions.Configuration.Abstractions

10.0.12

Unknown

nuget/Microsoft.Extensions.Diagnostics.HealthChecks

10.0.12

Unknown

nuget/Microsoft.Extensions.Options.ConfigurationExtensions

10.0.12

Unknown

nuget/Microsoft.AspNetCore.Mvc.Testing

10.0.12

Unknown

nuget/Microsoft.NET.Test.Sdk

18.10.0

🟢 5.9

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Code-Review	🟢 7	Found 22/28 approved changesets -- score normalized to 7
Security-Policy	🟢 10	security policy file detected
Binary-Artifacts	⚠️ 0	binaries present in source code
License	🟢 10	license file detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	🟢 10	all dependencies are pinned
Branch-Protection	⚠️ 1	branch protection is not maximal on development and all release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

nuget/System.Security.Cryptography.Xml

10.0.12

Unknown

nuget/Testcontainers.MsSql

4.15.0

🟢 8.4

Details

Check	Score	Reason
Code-Review	🟢 3	Found 10/26 approved changesets -- score normalized to 3
Maintained	🟢 10	30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Token-Permissions	🟢 10	GitHub workflow tokens follow principle of least privilege
Binary-Artifacts	🟢 10	no binaries found in the repo
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
License	🟢 10	license file detected
CII-Best-Practices	🟢 5	badge detected: Passing
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 10	SAST tool is run on all commits
Vulnerabilities	🟢 9	1 existing vulnerabilities detected
Signed-Releases	⚠️ -1	no releases found
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Branch-Protection	🟢 8	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	29 out of 29 merged PRs checked by a CI test -- score normalized to 10
Contributors	🟢 10	project has 14 contributing companies or organizations

nuget/xunit.runner.visualstudio

4.0.0

Unknown

nuget/Azure.Extensions.AspNetCore.DataProtection.Blobs

1.5.4

Unknown

nuget/MX.Observability.ApplicationInsights.AspNetCore

1.1.31

Unknown

nuget/Microsoft.AspNetCore.OpenApi

10.0.12

Unknown

nuget/Microsoft.EntityFrameworkCore.Design

10.0.12

Unknown

nuget/Microsoft.OpenApi

3.10.2

Unknown

Scanned Files

src/MX.TripSideKick.Application/MX.TripSideKick.Application.csproj
src/MX.TripSideKick.Infrastructure/MX.TripSideKick.Infrastructure.csproj
src/MX.TripSideKick.Web.Tests/MX.TripSideKick.Web.Tests.csproj
src/MX.TripSideKick.Web/MX.TripSideKick.Web.csproj

dependabot Bot assigned frasermolyneux Sep 13, 2026

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Sep 13, 2026

github-actions Bot added the run-prd-plan Run prd Terraform plan label Sep 13, 2026

Navigation Menu

Bump Azure.Extensions.AspNetCore.DataProtection.Blobs and 18 others - #37

Bump Azure.Extensions.AspNetCore.DataProtection.Blobs and 18 others#37
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/all-updates-60f231855d

dependabot Bot commented on behalf of github Sep 13, 2026

Uh oh!

github-actions Bot commented Sep 13, 2026

Uh oh!

github-actions Bot commented Sep 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 13, 2026

1.5.4

1.5.4 (2026-09-08)

Other Changes

12.29.2

12.29.2 (2026-08-24)

Bugs Fixed

18.10.0

What's Changed

18.9.0

What's Changed

New Contributors

2.12.0

2.12.0 (2026-08-12)

Features

Bug Fixes

3.10.2

3.10.2 (2026-08-20)

Bug Fixes

3.10.1

3.10.1 (2026-08-19)

Bug Fixes

3.10.0

3.10.0 (2026-08-11)

Features

Bug Fixes

3.9.0

3.9.0 (2026-07-15)

Features

Bug Fixes

3.8.0

3.8.0 (2026-07-03)

Features

Bug Fixes

3.7.0

3.7.0 (2026-06-10)

Features

Bug Fixes

3.6.0

3.6.0 (2026-06-01)

Features

3.5.5

3.5.5 (2026-05-28)

Bug Fixes

3.5.4

3.5.4 (2026-05-26)

Bug Fixes

3.5.3

3.5.3 (2026-04-27)

Bug Fixes

Performance Improvements

3.5.2

3.5.2 (2026-04-14)

Bug Fixes

3.5.1

3.5.1 (2026-03-31)

Bug Fixes

3.5.0

3.5.0 (2026-03-20)

Features

Bug Fixes

3.4.0

3.4.0 (2026-03-04)

Features

Bug Fixes

3.3.1

3.3.1 (2026-01-22)

Features

Bug Fixes

3.3.0

3.3.0 (2026-01-21)

Features

3.2.0

3.2.0 (2026-01-19)

Features

Bug Fixes

3.1.3

3.1.3 (2026-01-16)

Bug Fixes