Bump the all-packages group with 23 updates by dependabot[bot] · Pull Request #536 · UKHO/exchange-set-service

Expose MsalServiceException.ErrorCodesForLogging for diagnostics in #6138
Expose WithOtelTagsEnricher for managed identity requests in #6144
Forward OpenTelemetry tags enricher to the client-assertion callback in #6142
Add client-side opaque-token log scrubber in #6119
Populate ExecutionResult.Exception for non-MSAL failures in #6139
Use PSS padding in KeyGuard liveness probe (CodeQL SM03799) in #6141
Remove managed identity support from WithClaimsFromClient (confidential-client only) in #6113
Remove experimental features from client setup in #6143
Update Azure Arc managed identity API version from 2019-11-01 to 2020-06-01 in #6130

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.86.1...4.87.0

4.86.1

Bug Fixes

Fixed the mTLS Proof-of-Possession token cache to key on the certificate's full DER (x5t#S256) instead of only the public key, preventing a stale token (and AADSTS500181) after a same-key certificate renewal. #6123
Fell back to RS256 when a certificate's PSS signing operation is rejected by RSACryptoServiceProvider, rebuilding the client assertion so authentication can proceed. #6126
Detect and reject symbolic links in the Unix cache-file write path (lstat pre-check plus O_NOFOLLOW), closing a TOCTOU window. #6115
Corrected misleading "region required" error messages and doc comments in the mTLS PoP flow. #6127

4.86.0 What's Changed

Propagate KeyGuard attestation failures and bridge native MAA logs to the MSAL logger by @gladjohn in Propagate KeyGuard attestation failures and bridge native MAA logs to the MSAL logger AzureAD/microsoft-authentication-library-for-dotnet#6081
Token Binding Demo Helper by @gladjohn in Token Binding Demo Helper AzureAD/microsoft-authentication-library-for-dotnet#6097
Include ManagedIdentitySource in managed identity error messages and request-failure logs by @Robbie-Microsoft in Include ManagedIdentitySource in managed identity error messages and request-failure logs AzureAD/microsoft-authentication-library-for-dotnet#6101
Remove Mooncake (AzureChinaCloud) lab client from WAM dev apps by @RyAuld in Remove Mooncake (AzureChinaCloud) lab client from WAM dev apps AzureAD/microsoft-authentication-library-for-dotnet#6103
Surface token-acquisition failure metadata on MsalException by @neha-bhargava in Surface token-acquisition failure metadata on MsalException AzureAD/microsoft-authentication-library-for-dotnet#6096
Skip IMDS lookup for explicit regions by @4gust in Skip IMDS lookup for explicit regions AzureAD/microsoft-authentication-library-for-dotnet#6092
Fix region failure-metadata test broken by explicit-region IMDS skip by @neha-bhargava in Fix region failure-metadata test broken by explicit-region IMDS skip AzureAD/microsoft-authentication-library-for-dotnet#6105

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.85.2...4.86.0

4.85.2 What's Changed

Delegate IMDSv2 mTLS-PoP token leg to internal TokenClient exchange (MSIv2 WithClaimsFromClient) by @Robbie-Microsoft in Delegate IMDSv2 mTLS-PoP token leg to internal TokenClient exchange (MSIv2 WithClaimsFromClient) AzureAD/microsoft-authentication-library-for-dotnet#6070
Enforce mTLS PoP minimum binding strength for Managed Identity (#6049 Phase 2) by @Robbie-Microsoft in Enforce mTLS PoP minimum binding strength for Managed Identity (#6049 Phase 2) AzureAD/microsoft-authentication-library-for-dotnet#6059
Add refresh token cache partitioning support by @iNinja in Add refresh token cache partitioning support AzureAD/microsoft-authentication-library-for-dotnet#6077
Detach ImdsV2ManagedIdentitySource from AbstractManagedIdentity (refused-bequest cleanup) by @Robbie-Microsoft in Detach ImdsV2ManagedIdentitySource from AbstractManagedIdentity (refused-bequest cleanup) AzureAD/microsoft-authentication-library-for-dotnet#6089

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.85.1...4.85.2

4.85.1 What's Changed

Migrate OBO tests from old lab to ID4SLAB1 by @RyAuld in Migrate OBO tests from old lab to ID4SLAB1 AzureAD/microsoft-authentication-library-for-dotnet#6021
Mark regional SNI mTLS PoP test inconclusive on AAD test-slice Bearer downgrade by @neha-bhargava in Mark regional SNI mTLS PoP test inconclusive on AAD test-slice Bearer downgrade AzureAD/microsoft-authentication-library-for-dotnet#6084
Expose canonical tag names per-metric by @ssmelov in Expose canonical tag names per-metric AzureAD/microsoft-authentication-library-for-dotnet#6076

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.85.0...4.85.1

4.85.0 What's Changed

Fix proactive token refresh bypassing cancellation, leading to unbounded semaphore wait by @jayesh-a-shah in Fix proactive token refresh bypassing cancellation, leading to unbounded semaphore wait AzureAD/microsoft-authentication-library-for-dotnet#6054
Add GovFr, GovDe, GovSg to AzureCloudInstance enum by @bgavrilMS in Add GovFr, GovDe, GovSg to AzureCloudInstance enum AzureAD/microsoft-authentication-library-for-dotnet#6023
Take home account from request, if not available elsewhere. by @yowl in Take home account from request, if not available elsewhere. AzureAD/microsoft-authentication-library-for-dotnet#5657
Validate Azure region format to prevent region poisoning (fixes #6060) by @Robbie-Microsoft in Validate Azure region format to prevent region poisoning (fixes #6060) AzureAD/microsoft-authentication-library-for-dotnet#6061
Promote MsalServiceException.SubError to public by @neha-bhargava in Promote MsalServiceException.SubError to public AzureAD/microsoft-authentication-library-for-dotnet#6063
Migrate region discovery to IMDS /compute JSON endpoint (#6039) by @Robbie-Microsoft in Migrate region discovery to IMDS /compute JSON endpoint (#6039) AzureAD/microsoft-authentication-library-for-dotnet#6057
fix: Service Fabric MI sends principalId for ObjectId; reject ClientId/ResourceId (mirror of #6066) by @neha-bhargava in fix: Service Fabric MI sends principalId for ObjectId; reject ClientId/ResourceId (mirror of #6066) AzureAD/microsoft-authentication-library-for-dotnet#6069
Exclude caller SDK telemetry from access token cache keys by @bgavrilMS in Exclude caller SDK telemetry from access token cache keys AzureAD/microsoft-authentication-library-for-dotnet#6074
Add MSAL.NET telemetry enrichment by @ssmelov in Add MSAL.NET telemetry enrichment AzureAD/microsoft-authentication-library-for-dotnet#6071

New Contributors

@jayesh-a-shah made their first contribution in Fix proactive token refresh bypassing cancellation, leading to unbounded semaphore wait AzureAD/microsoft-authentication-library-for-dotnet#6054
@yowl made their first contribution in Take home account from request, if not available elsewhere. AzureAD/microsoft-authentication-library-for-dotnet#5657

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.84.2...4.85.0

Commits viewable in compare view.

Updated Microsoft.IdentityModel.Logging from 8.19.1 to 8.22.0.

Release notes

Sourced from Microsoft.IdentityModel.Logging's releases.

8.22.0 What's Changed

Promote exception to property, add test by @westin-m in [cherry-pick] promote exception to property, add test (#3471) AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3486
Add IgnoreCaseWhenValidatingAudience flag to audience validation by @cpp11nullptr in Backport: Add IgnoreCaseWhenValidatingAudience flag to audience validation (#3558) AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3563

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.21.0...8.22.0

8.21.0 Performance Improvements

Add JsonWebToken header-replacement path to avoid re-parsing payload. See PR #3553.
Add claims dictionary preallocation. See PR #3550.

Bug Fixes

Fix CI build failures: remove unused log message and add missing DPoP API entries. See PR #3551.

8.19.2 What's Changed

Improve serializer and JWE key unwrap handling by @iNinja in Improve serializer and JWE key unwrap handling AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3544

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.19.1...8.19.2

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.6.0 to 18.8.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.8.1 What's Changed

Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) by @nohwnd in Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) microsoft/vstest#16281

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0 What's Changed

Migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) by @nohwnd in feat: migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) microsoft/vstest#15687
- For more detail refer to https://devblogs.microsoft.com/dotnet/vs-test-is-removing-its-newtonsoft-json-dependency/
Create source-only filter package by @Youssef1313 in Create source-only filter package microsoft/vstest#15638
Add ARM64 msdia140.dll support to test platform packages by @nohwnd in Cherry-pick: Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15692
Fix mutex cleanup crash on macOS/Linux by @nohwnd in Fix mutex cleanup crash on macOS/Linux microsoft/vstest#15684
Restrict artifact temp directory permissions on Unix by @nohwnd in Restrict artifact temp directory permissions on Unix microsoft/vstest#15729
Add support for filtering uncategorized tests with TestCategory=None by @Evangelink in Add support for filtering uncategorized tests with TestCategory=None microsoft/vstest#15727
Fix SCI binding failure in DTA hosts (main) by @nohwnd in Fix SCI binding failure in DTA hosts (main) microsoft/vstest#15724
Fix HTML logger parallel file collision by @nohwnd in [fix] Fix HTML logger parallel file collision microsoft/vstest#15435
Improve error message when testhost cannot be found by @nohwnd in [fix] Improve error message when testhost cannot be found microsoft/vstest#16053
Fix HTML logger exception on invalid XML chars in test display names by @nohwnd in [fix] Fix HTML logger exception on invalid XML chars in test display names microsoft/vstest#16051

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

18.7.0 What's Changed

Add ARM64 msdia140.dll support to test platform packages by @jamesmcroft in Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15689
Update System.Memory from 4.5.5 to 4.6.3 by @nohwnd in Update System.Memory from 4.5.5 to 4.6.3 microsoft/vstest#15706

New Contributors

@jamesmcroft made their first contribution in Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15689

Full Changelog: microsoft/vstest@v18.6.0...v18.7.0

Commits viewable in compare view.

Updated Serilog from 4.3.1 to 4.4.0.

Release notes

Sourced from Serilog's releases.

4.4.0 What's Changed

Emit SelfLog warning when extra arguments are provided by @matantsach in Emit SelfLog warning when extra arguments are provided serilog/serilog#2222
dont WriteQuotedJsonString for null by @SimonCropp in dont WriteQuotedJsonString for null serilog/serilog#2216
Pin System.Security.Cryptography.Xml to 8.0.3 in tests by @ArieGato in Pin System.Security.Cryptography.Xml to 8.0.3 in tests serilog/serilog#2232
Route optional interfaces through OptionalInterfaceForwardingSink for restricted sinks by @ArieGato in Route optional interfaces through OptionalInterfaceForwardingSink for restricted sinks serilog/serilog#2234
SelfMetrics by @nblumhardt in SelfMetrics serilog/serilog#2237

New Contributors

@matantsach made their first contribution in Emit SelfLog warning when extra arguments are provided serilog/serilog#2222
@ArieGato made their first contribution in Pin System.Security.Cryptography.Xml to 8.0.3 in tests serilog/serilog#2232

Full Changelog: serilog/serilog@v4.3.1...v4.4.0

Commits viewable in compare view.

Updated System.IdentityModel.Tokens.Jwt from 8.19.1 to 8.22.0.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

8.22.0 What's Changed

Promote exception to property, add test by @westin-m in [cherry-pick] promote exception to property, add test (#3471) AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3486
Add IgnoreCaseWhenValidatingAudience flag to audience validation by @cpp11nullptr in Backport: Add IgnoreCaseWhenValidatingAudience flag to audience validation (#3558) AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3563

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.21.0...8.22.0

8.21.0 Performance Improvements

Add JsonWebToken header-replacement path to avoid re-parsing payload. See PR #3553.
Add claims dictionary preallocation. See PR #3550.

Bug Fixes

Fix CI build failures: remove unused log message and add missing DPoP API entries. See PR #3551.

8.19.2 What's Changed

Improve serializer and JWE key unwrap handling by @iNinja in Improve serializer and JWE key unwrap handling AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3544

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.19.1...8.19.2

Commits viewable in compare view.

Updated System.IO.Abstractions from 22.1.1 to 22.2.0.

Release notes

Sourced from System.IO.Abstractions's releases.

22.2.0 What's Changed

chore(deps): update dependency sharpcompress to 0.47.4 by @renovate[bot] in chore(deps): update dependency sharpcompress to 0.47.4 TestableIO/System.IO.Abstractions#1458
chore(deps): update dependency githubactionstestlogger to 3.0.3 by @renovate[bot] in chore(deps): update dependency githubactionstestlogger to 3.0.3 TestableIO/System.IO.Abstractions#1457
chore(deps): update dotnet monorepo by @renovate[bot] in chore(deps): update dotnet monorepo TestableIO/System.IO.Abstractions#1459
chore(deps): update dependency microsoft.net.test.sdk to 18.4.0 by @renovate[bot] in chore(deps): update dependency microsoft.net.test.sdk to 18.4.0 TestableIO/System.IO.Abstractions#1460
chore(deps): update dependency testably.abstractions.filesystem.interface to 10.2.0 by @renovate[bot] in chore(deps): update dependency testably.abstractions.filesystem.interface to 10.2.0 TestableIO/System.IO.Abstractions#1462
chore(deps): update dependency nunit3testadapter to 6.2.0 by @renovate[bot] in chore(deps): update dependency nunit3testadapter to 6.2.0 TestableIO/System.IO.Abstractions#1461
chore(deps): update softprops/action-gh-release action to v3 by @renovate[bot] in chore(deps): update softprops/action-gh-release action to v3 TestableIO/System.IO.Abstractions#1463
chore(deps): update dependency coverlet.collector to v10 by @renovate[bot] in chore(deps): update dependency coverlet.collector to v10 TestableIO/System.IO.Abstractions#1464
chore(deps): update dependency system.text.json to 10.0.7 by @renovate[bot] in chore(deps): update dependency system.text.json to 10.0.7 TestableIO/System.IO.Abstractions#1466
chore(deps): update dependency dotnet-sdk to v10.0.203 by @renovate[bot] in chore(deps): update dependency dotnet-sdk to v10.0.203 TestableIO/System.IO.Abstractions#1467
chore(deps): update dependency microsoft.net.test.sdk to 18.5.0 by @renovate[bot] in chore(deps): update dependency microsoft.net.test.sdk to 18.5.0 TestableIO/System.IO.Abstractions#1468
chore(deps): update dependency microsoft.net.test.sdk to 18.5.1 by @renovate[bot] in chore(deps): update dependency microsoft.net.test.sdk to 18.5.1 TestableIO/System.IO.Abstractions#1469
chore: bump Mockolate and aweXpect.Mockolate to v3.0.0 by @vbreuss in chore: bump Mockolate and aweXpect.Mockolate to v3.0.0 TestableIO/System.IO.Abstractions#1472
chore(deps): update dependency mockolate to 3.1.0 by @renovate[bot] in chore(deps): update dependency mockolate to 3.1.0 TestableIO/System.IO.Abstractions#1471
chore(deps): update dependency githubactionstestlogger to 3.0.4 by @renovate[bot] in chore(deps): update dependency githubactionstestlogger to 3.0.4 TestableIO/System.IO.Abstractions#1473
chore(deps): update dependency nunit.analyzers to 4.13.0 by @renovate[bot] in chore(deps): update dependency nunit.analyzers to 4.13.0 TestableIO/System.IO.Abstractions#1474
chore(deps): update dependency nunit to 4.6.0 by @renovate[bot] in chore(deps): update dependency nunit to 4.6.0 TestableIO/System.IO.Abstractions#1475
chore(deps): update dependency sharpcompress to 0.48.0 by @renovate[bot] in chore(deps): update dependency sharpcompress to 0.48.0 TestableIO/System.IO.Abstractions#1476
chore(deps): update dependency awexpect.mockolate to 3.1.0 by @renovate[bot] in chore(deps): update dependency awexpect.mockolate to 3.1.0 TestableIO/System.IO.Abstractions#1477
chore(deps): update dependency awexpect to 2.32.0 by @renovate[bot] in chore(deps): update dependency awexpect to 2.32.0 TestableIO/System.IO.Abstractions#1478
chore(deps): update dependency awexpect to 2.33.0 by @renovate[bot] in chore(deps): update dependency awexpect to 2.33.0 TestableIO/System.IO.Abstractions#1479
chore(deps): update dependency mockolate to 3.2.0 by @renovate[bot] in chore(deps): update dependency mockolate to 3.2.0 TestableIO/System.IO.Abstractions#1480
chore(deps): update dependency system.text.json to 10.0.8 by @renovate[bot] in chore(deps): update dependency system.text.json to 10.0.8 TestableIO/System.IO.Abstractions#1481
chore(deps): update dependency dotnet-sdk to v10.0.300 by @renovate[bot] in chore(deps): update dependency dotnet-sdk to v10.0.300 TestableIO/System.IO.Abstractions#1482
chore(deps): update dependency sharpcompress to 0.48.1 by @renovate[bot] in chore(deps): update dependency sharpcompress to 0.48.1 TestableIO/System.IO.Abstractions#1483
chore(deps): update dependency awexpect to 2.34.0 by @renovate[bot] in chore(deps): update dependency awexpect to 2.34.0 TestableIO/System.IO.Abstractions#1484
chore(deps): update dependency coverlet.collector to 10.0.1 by @renovate[bot] in chore(deps): update dependency coverlet.collector to 10.0.1 TestableIO/System.IO.Abstractions#1485
chore(deps): update dependency awexpect.testably to 0.14.0 by @renovate[bot] in chore(deps): update dependency awexpect.testably to 0.14.0 TestableIO/System.IO.Abstractions#1486
chore(deps): update dependency nunit to 4.6.1 by @renovate[bot] in chore(deps): update dependency nunit to 4.6.1 TestableIO/System.IO.Abstractions#1487
chore(deps): update dependency awexpect.testably to 0.15.0 by @renovate[bot] in chore(deps): update dependency awexpect.testably to 0.15.0 TestableIO/System.IO.Abstractions#1488
chore(deps): update dependency mockolate to 3.2.1 by @renovate[bot] in chore(deps): update dependency mockolate to 3.2.1 TestableIO/System.IO.Abstractions#1489
chore(deps): update dependency microsoft.net.test.sdk to 18.6.0 by @renovate[bot] in chore(deps): update dependency microsoft.net.test.sdk to 18.6.0 TestableIO/System.IO.Abstractions#1490
chore(deps): update dependency sharpcompress to 0.49.0 by @renovate[bot] in chore(deps): update dependency sharpcompress to 0.49.0 TestableIO/System.IO.Abstractions#1491
chore(deps): update dependency sharpcompress to 0.49.1 by @renovate[bot] in chore(deps): update dependency sharpcompress to 0.49.1 TestableIO/System.IO.Abstractions#1492
chore(deps): update dependency nunit.analyzers to 4.14.0 by @renovate[bot] in chore(deps): update dependency nunit.analyzers to 4.14.0 TestableIO/System.IO.Abstractions#1493
chore(deps): update dotnet monorepo to v10 by @renovate[bot] in chore(deps): update dotnet monorepo to v10 TestableIO/System.IO.Abstractions#1494
chore(deps): update dotnet monorepo to v10.0.9 by @renovate[bot] in chore(deps): update dotnet monorepo to v10.0.9 TestableIO/System.IO.Abstractions#1495
chore(deps): update dotnet monorepo to v10.0.301 by @renovate[bot] in chore(deps): update dotnet monorepo to v10.0.301 TestableIO/System.IO.Abstractions#1496
chore(deps): update dependency awexpect to 2.35.0 by @renovate[bot] in chore(deps): update dependency awexpect to 2.35.0 TestableIO/System.IO.Abstractions#1498
chore(deps): update dotnet monorepo to v10 by @renovate[bot] in chore(deps): update dotnet monorepo to v10 TestableIO/System.IO.Abstractions#1500
chore(deps): update dotnet monorepo to 10.0.9 by @renovate[bot] in chore(deps): update dotnet monorepo to 10.0.9 TestableIO/System.IO.Abstractions#1497
chore(deps): update dependency awexpect.testably to v1 by @renovate[bot] in chore(deps): update dependency awexpect.testably to v1 TestableIO/System.IO.Abstractions#1499
chore(deps): update actions/checkout action to v7 by @renovate[bot] in chore(deps): update actions/checkout action to v7 TestableIO/System.IO.Abstractions#1501
chore(deps): update dependency mockolate to 3.3.0 by @renovate[bot] in chore(deps): update dependency mockolate to 3.3.0 TestableIO/System.IO.Abstractions#1502
chore(deps): update vstest monorepo by @renovate[bot] in chore(deps): update vstest monorepo TestableIO/System.IO.Abstractions#1503
chore: bump Testably.Abstractions.FileSystem.Interface to v10.3.0 by @vbreuss in chore: bump Testably.Abstractions.FileSystem.Interface to v10.3.0 TestableIO/System.IO.Abstractions#1504
ci(mergify): upgrade configuration to current format by @mergify[bot] in ci(mergify): upgrade configuration to current format TestableIO/System.IO.Abstractions#1505
refactor: Switch to fork of NUKE: Fallout by @vbreuss in refactor: Switch to fork of NUKE: Fallout TestableIO/System.IO.Abstractions#1506
fix: handle shared file contents across handles by @vbreuss in fix: handle shared file contents across handles TestableIO/System.IO.Abstractions#1507
... (truncated)

Commits viewable in compare view.

Updated System.Text.Encoding.CodePages from 9.0.17 to 9.0.18.

Release notes

Sourced from System.Text.Encoding.CodePages's releases.

9.0.18

Release

What's Changed

[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#125099
[release/9.0-staging] Update dependencies from dotnet/runtime-assets by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/runtime-assets dotnet/runtime#125410
[release/9.0-staging] Update dependencies from dotnet/roslyn by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/roslyn dotnet/runtime#125816
[release/9.0-staging] Update dependencies from dotnet/hotreload-utils by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/hotreload-utils dotnet/runtime#126200
[backport/9.0-staging] Disable WASI CI by @maraf with @Copilot in [backport/9.0-staging] Disable WASI CI dotnet/runtime#128775
Replace OSX.14.Arm64.Open with OSX.15.Arm64.Open queues by @akoeplinger in Replace OSX.14.Arm64.Open with OSX.15.Arm64.Open queues dotnet/runtime#128853
[release/9.0-staging] Update dependencies from dotnet/xharness by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/xharness dotnet/runtime#128312
[release/9.0-staging] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/arcade dotnet/runtime#128618
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#128794
Update branding to 9.0.18 by @vseanreesermsft in Update branding to 9.0.18 dotnet/runtime#128915
[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#128880
[release/9.0-staging] Update dependencies from dotnet/runtime-assets by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/runtime-assets dotnet/runtime#128934
[release/9.0-staging] [TestOnly] Fix NumberFormatInfoGroupSize test by @svick in [release/9.0-staging] [TestOnly] Fix NumberFormatInfoGroupSize test dotnet/runtime#128578
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/runtime#126341
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/runtime#129194
[release/9.0-staging] Update dependencies from dotnet/xharness by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/xharness dotnet/runtime#129116
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#128224
[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#129150
[automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#128216
Merge release/9.0-staging into release/9.0 by @steveisok in Merge release/9.0-staging into release/9.0 dotnet/runtime#129251

Full Changelog: dotnet/runtime@v9.0.17...v9.0.18

Commits viewable in compare view.

Updated System.Text.Json from 10.0.9 to 10.0.10.

Release notes

Sourced from System.Text.Json's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Azure.Storage.Blobs from 12.29.0 to 12.29.1 Bumps Azure.Storage.Queues from 12.27.0 to 12.27.1 Bumps Elastic.Apm from 1.34.3 to 1.34.5 Bumps Elastic.Apm.Azure.Storage from 1.34.3 to 1.34.5 Bumps Elastic.Apm.NetCoreAll from 1.34.3 to 1.34.5 Bumps JWT from 11.0.0 to 11.1.0 Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.28 to 8.0.29 Bumps Microsoft.AspNetCore.HeaderPropagation from 8.0.28 to 8.0.29 Bumps Microsoft.AspNetCore.Mvc.NewtonsoftJson from 8.0.28 to 8.0.29 Bumps Microsoft.Azure.WebJobs.Extensions.Storage from 5.3.7 to 5.3.8 Bumps Microsoft.Extensions.Configuration from 9.0.17 to 9.0.18 Bumps Microsoft.Extensions.Configuration.Binder from 9.0.17 to 9.0.18 Bumps Microsoft.Extensions.Configuration.Json from 9.0.17 to 9.0.18 Bumps Microsoft.Extensions.Http.Polly from 9.0.17 to 9.0.18 Bumps Microsoft.Extensions.Logging.AzureAppServices from 8.0.28 to 8.0.29 Bumps Microsoft.Identity.Client from 4.84.2 to 4.87.0 Bumps Microsoft.IdentityModel.Logging from 8.19.1 to 8.22.0 Bumps Microsoft.NET.Test.Sdk from 18.6.0 to 18.8.1 Bumps Serilog from 4.3.1 to 4.4.0 Bumps System.IdentityModel.Tokens.Jwt from 8.19.1 to 8.22.0 Bumps System.IO.Abstractions from 22.1.1 to 22.2.0 Bumps System.Text.Encoding.CodePages from 9.0.17 to 9.0.18 Bumps System.Text.Json from 10.0.9 to 10.0.10 --- updated-dependencies: - dependency-name: Azure.Storage.Blobs dependency-version: 12.29.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Azure.Storage.Queues dependency-version: 12.27.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Elastic.Apm dependency-version: 1.34.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Elastic.Apm.Azure.Storage dependency-version: 1.34.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Elastic.Apm.NetCoreAll dependency-version: 1.34.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: JWT dependency-version: 11.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 8.0.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Microsoft.AspNetCore.HeaderPropagation dependency-version: 8.0.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Microsoft.AspNetCore.HeaderPropagation dependency-version: 8.0.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Microsoft.AspNetCore.Mvc.NewtonsoftJson dependency-version: 8.0.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Microsoft.Azure.WebJobs.Extensions.Storage dependency-version: 5.3.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Microsoft.Extensions.Configuration dependency-version: 9.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Microsoft.Extensions.Configuration.Binder dependency-version: 9.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Microsoft.Extensions.Configuration.Json dependency-version: 9.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Microsoft.Extensions.Http.Polly dependency-version: 9.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Microsoft.Extensions.Logging.AzureAppServices dependency-version: 8.0.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Microsoft.Identity.Client dependency-version: 4.87.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: Microsoft.IdentityModel.Logging dependency-version: 8.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: Serilog dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: System.IdentityModel.Tokens.Jwt dependency-version: 8.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: System.IO.Abstractions dependency-version: 22.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: System.Text.Encoding.CodePages dependency-version: 9.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: System.Text.Json dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: System.Text.Json dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages ... Signed-off-by: dependabot[bot] <support@github.com>

snyk-io-eu · 2026-08-01T14:44:59Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 1, 2026

dependabot Bot requested review from MuhammadJawad-Mastek, Raj29-Mastek, jaibheem22 and rockydevnet as code owners August 1, 2026 14:44

dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Aug 1, 2026

Navigation Menu

Uh oh!

Bump the all-packages group with 23 updates - #536

Bump the all-packages group with 23 updates#536
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/UKHO.ExchangeSetService.API/UKHO.ExchangeSetService.API.FunctionalTests/all-packages-b99e373287

dependabot Bot commented on behalf of github Aug 1, 2026

Uh oh!

snyk-io-eu Bot commented Aug 1, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 1, 2026

1.34.5

What's Changed

Fixes

1.34.4

What's Changed

Bug fixes

New Contributors

1.34.5

What's Changed

Fixes

1.34.4

What's Changed

Bug fixes

New Contributors

1.34.5

What's Changed

Fixes

1.34.4

What's Changed

Bug fixes

New Contributors

8.0.29

What's Changed

8.0.29

What's Changed

8.0.29

What's Changed

9.0.18

What's Changed

9.0.18

What's Changed

9.0.18

What's Changed

9.0.18

What's Changed

8.0.29

What's Changed

4.87.0

What's Changed

4.86.1

Bug Fixes

4.86.0

What's Changed

4.85.2

What's Changed

4.85.1

What's Changed

4.85.0

What's Changed

New Contributors

8.22.0

What's Changed

8.21.0

Performance Improvements

Bug Fixes

8.19.2

What's Changed

18.8.1

What's Changed

18.8.0

What's Changed

18.7.0

What's Changed

New Contributors

4.4.0

What's Changed

New Contributors

8.22.0

What's Changed

8.21.0

Performance Improvements

Bug Fixes

8.19.2

What's Changed

22.2.0

What's Changed

9.0.18

snyk-io-eu Bot commented Aug 1, 2026 •

edited

Loading