Skip to content

Bump BCrypt.Net-Next and 17 others - #211

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/DevFlow.Api/minor-and-patch-55b5849bef
Closed

Bump BCrypt.Net-Next and 17 others#211
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/DevFlow.Api/minor-and-patch-55b5849bef

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubSep 5, 2026•
edited
Loading

Copy link
Copy Markdown
Contributor

Pinned BCrypt.Net-Next at 4.2.0.

Release notes

Sourced from BCrypt.Net-Next's releases.

4.2.0

Full Changelog: BcryptNet/bcrypt.net@v4.1.0...v4.2.0

4.1.0

What's Changed

New Contributors

Full Changelog: BcryptNet/bcrypt.net@4.0.3...v4.1.0

Commits viewable in compare view.

Pinned ClosedXML at 0.105.1.

Release notes

Sourced from ClosedXML's releases.

0.105.1

  • fix: bound SixLabors.Fonts to version range [1.0.0,3.0.0) by @​igitur in #​2870

Full Changelog: ClosedXML/ClosedXML@0.105.0...0.105.1

0.105.0

What's Changed

Major enhancements

Automatic fixer of function names

Correct name for newer functions (post 2013) is not what is seen in the GUI (e.g. correct name for CONCAT is _xlfn.CONCAT). That is rather obscure fact not known to most developers. The formula setters (e.g. IXLCell.FormulaA1) now automatically fix function names, so it is stored correctly in the file.

usingvarwb=newXLWorkbook();varws=wb.AddWorksheet();// Originally required "_xlfn.CONCAT(\"hello\", \" world!\")";ws.Cell("A1").FormulaA1="CONCAT(\"hello\", \" world!\")";

Pre-0.105
image
0.105
image

Sorting updates references

In many cases, the sorted area has a column with references. The formula often references another row. Pre-0.105, the references in the formulas weren't updated correctly.
image

usingvarwb=newXLWorkbook();varws=wb.AddWorksheet();ws.Cell("A1").Value=4;ws.Cell("B1").FormulaA1="A1+1";ws.Cell("A2").Value=2;ws.Cell("B2").FormulaA1="A2+1";ws.Cell("A3").Value=1;ws.Cell("B3").FormulaA1="A3+1";ws.Range("A1:B3").Sort(1,XLSortOrder.Ascending);

Reimplementation/refactoring of old function infrastructure

Basically all implemented functions should be more faithful to how Excel behaves and evaluation of functions should be faster. implemented functions should be "complete" in sense that they correctly work for various arguments (e.g. various forms of ROMAN or pattern search in SUMIFS).

The functions (before refactoring) had serious problems with ranges, errors or type coercion or structured references. The original parser back then didn't even parse literal arrays ({1,2,3;4,5,6}). Parser and other things were updated, but because there was ~180 functions, original implementation was kept and functions were functions were reused through an adapter. Except the adapter never worked right and there were some other serious problems.

Changes

Bugfixes

0.105.0-rc

What's Changed

Major enhancements

Automatic fixer of function names

Correct name for newer functions (post 2013) is not what is seen in the GUI (e.g. correct name for CONCAT is _xlfn.CONCAT). That is rather obscure fact not known to most developers. The formula setters (e.g. IXLCell.FormulaA1) now automatically fix function names, so it is stored correctly in the file.

usingvarwb=newXLWorkbook();varws=wb.AddWorksheet();// Originally required "_xlfn.CONCAT(\"hello\", \" world!\")";ws.Cell("A1").FormulaA1="CONCAT(\"hello\", \" world!\")";

Pre-0.105
image
0.105
image

Sorting updates references

In many cases, the sorted area has a column with references. The formula often references another row. Pre-0.105, the references in the formulas weren't updated correctly.
image

usingvarwb=newXLWorkbook();varws=wb.AddWorksheet();ws.Cell("A1").Value=4;ws.Cell("B1").FormulaA1="A1+1";ws.Cell("A2").Value=2;ws.Cell("B2").FormulaA1="A2+1";ws.Cell("A3").Value=1;ws.Cell("B3").FormulaA1="A3+1";ws.Range("A1:B3").Sort(1,XLSortOrder.Ascending);

Reimplementation/refactoring of old function infrastructure

Basically all implemented functions should be more faithful to how Excel behaves and evaluation of functions should be faster. implemented functions should be "complete" in sense that they correctly work for various arguments (e.g. various forms of ROMAN or pattern search in SUMIFS).

The functions (before refactoring) had serious problems with ranges, errors or type coercion or structured references. The original parser back then didn't even parse literal arrays ({1,2,3;4,5,6}). Parser and other things were updated, but because there was ~180 functions, original implementation was kept and functions were functions were reused through an adapter. Except the adapter never worked right and there were some other serious problems.

Changes

Bugfixes

0.104.2

What's Changed

Full Changelog: ClosedXML/ClosedXML@0.104.1...0.104.2

0.104.1

Release notes from 0.102.1 to the 0.104.1.

Summary of breaking changes is available at docs.closedxml.io:

OpenXML SDK

OpenXML SDK has released version 3. The 0.104.0 uses it as a dependency.

XLParser replaced with ClosedParser

The XLParser has been replaced with ClosedParser. The key benefits are

  • performance - ~2μs/formula, it's likely formulas will be parseable on the demand, necessary for construction of dependency tree
  • A1/R1C1 parsing parity - both modes can be parsed with no problems
  • AST oriented - it's likely a construction of AST in memory won't even be necessary, just use AST factory to evaluate formula directly

There is also a visualizer to display AST in a browser at https://parser.closedxml.io

image

Formula Calculation

In previous version, formulas used to be calculated recursively. Each formula checked it's supporting cells for other formulas and if there were some, they were recursively evaluated. There was some logic to decrease number of evaluations. That works for a very simple cases, but isn't very good for various non-happy paths (i.e. cells weren't calculated when they should be).

This version has replaced it with a standard

  • dependency tree for checking which formulas are dirty and need to be recalculated
  • calculation chain that manages dependencies and order of formulas during calculation

For more info, see docs, the Microsoft has a page about principles Excel Recalculation
and there is one with API at docs.closedxml.io.

image

Structured references

New parser also allows a basic evaluation of structured references. Format of structured reference must use official grammar, not Excel friendly names (e.g. Pastry[@​Name] is user-friendly name for Pastry[[#This Row],[Name]]). It's now possible to

usingvarwb=newXLWorkbook();varws=wb.AddWorksheet();ws.Cell("A1").InsertTable(newPastry[]{new("Cake",14),new("Waffle",3),},"Pastry");ws.Cell("D1").FormulaA1="SUM(Pastry[Price])";ws.Cell("D3").FormulaA1="\"Pastry \" & Pastry[[#This Row],[Name]]";wb.RecalculateAllFormulas();
...(truncated)
## 0.104-rc1
A release candidate 1for0.104.0.*[Migrationfrom0.102 to 0.103](https://docs.closedxml.io/en/latest/migrations/migrate-to-0.103.html)*[Migrationfrom0.103 to 0.104](https://docs.closedxml.io/en/latest/migrations/migrate-to-0.104.html)Ofcourse,this includes all stufffrom[0.103.0-beta](https://github.com/ClosedXML/ClosedXML/releases/tag/0.103.0-beta). Version 0.103 never got a non-beta release.
# OpenXMLSDK
OpenXML SDK has released version 3.0.1.The0.104-rc1 uses it as a dependency. # Pivot tables
The internal structure of pivot tables, along with most other features, has been completely overhauled. This update should significantly reduce crashes when loading and saving workbooks containing pivot tables.
The main issue with the previous internal structure was that it didn't align with the structure used by OOXML. This was problematic because we need to support all valid files. As a result, we have to handle a wide range of inputs and correctly convert them to our internal structure,whichisratherhard. A more clear 1:1mappingwith OOXML ismuchsimpler and morereliable.
# AutoFilter
The Autofilter feature has been revamped,whichincludes some API changes. Its behavior is now more closely aligned with how Excel operates. The XML documentation provides detailed explanations,andthereisa[dedicateddocumentation page](https://docs.closedxml.io/en/latest/features/autofilter.html). Several bugs have also been fixed.Formore details,referto the [Autofiltersection of the migration guide](https://docs.closedxml.io/en/latest/migrations/migrate-to-0.104.html#autofilter).
# CommonCrawldataset
When workbook is a valid one,ClosedXMLshouldn't throwonload. That is a rather high priority (morethan saving or manipulation). Unfortunately,thatishard to find such areas that cause most problems.
One of activities that was goinginabackgroundistrying to use excel files around the internet(foundby CommonCrawl) to evaluate how bad it is.Therearen't resultsyet,butitissomethingthatisgoingon.
# What's Changed
## Breaking changes*First page number can be negative -> change API type to int by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2237*Rename IXLNamedRange to IXLDefinedName by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2258
## AutoFilter
* AutoFilter rework -1/?-Regular filter matches string.by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2238*AutoFilter rework -2/?-fix types for custom filters by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2239*AutoFilter rework -3/?-Top and average filter refactor,remove setters of internal state by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2240*AutoFilter rework -4/?-Top/Average filters work after loading by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2241*AutoFilter rework -5/?-Unify Regular and DateTimeGrouping filters by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2242*AutoFilter rework -6/7-Add tests by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2243*AutoFilter rework -7/7-Add documentation by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2245
## Formulas
* Update ClosedXML.Parser to 1.0 by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2250*Implement structured references by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2251*Replace regex-powered code for A1-R1C1 formula conversion with AST-based one by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2253
...(truncated)
## 0.104.0-preview2Second test release for checking SourceLink support on nuget (firstfailed due to fody/PDB checksum) https://github.com/ClosedXML/ClosedXML/issues/2070
## 0.104.0-preview1Test release for checking SourceLink support #​2070 ## 0.103.0-beta
There won't be a non-beta release for0.103. The production release will be 0.104, not 0.103. This milestone was about fixing technical debt, but ultimately it needs some more time to mature before it is sent to the users.
There are some nice performance updates, so in spirit of release early, release often, there will be a beta package on nuget. # Breaking changes
Rich text isnow immutable behind the scenes(andwill likely be turned into immutable inthefuture).It should be transparent to the user,though `IXLPhonetic` no longer has a setter for its `IXLPhonetic.Text`, `IXLPhonetic.Start` and `IXLPhonetic.End` properties.New calculation engine just worksina different way and will behave differently.
# Significant changes
## XLParser replaced withClosedParser
The [*XLParser*](https://github.com/spreadsheetlab/XLParser) has been replaced with [*ClosedParser*](https://github.com/ClosedXML/ClosedXML.Parser). The key benefits are*performance-~2μs/formula,it's likely formulas will be parseable on the demand,necessaryfor construction of dependency tree
* A1/R1C1 parsing parity - both modes can be parsed with no problems
* AST oriented - it's likely a construction of AST in memory won't even be necessary,justuse AST factory to evaluate formula directly
There is also a visualizer to display AST inabrowser at **[https://parser.closedxml.io](https://parser.closedxml.io)**![image](https://github.com/ClosedXML/ClosedXML.Parser/assets/7634052/4beaab23-4599-44d4-be7b-705178b69f99)
## Formula Calculation In previous version,formulasused to be calculated recursively. Each formula checked it's supporting cells for other formulas and if there were some,theywere recursively evaluated. There was some logic to decrease number of evaluations. That works for a very simple cases,butisn't very good for various non-happy paths (i.e. cells weren't calculated when they should be).This version has replaced itwitha standard *dependency tree forchecking which formulas are dirty and need to be recalculated
*calculation chain that manages dependencies and order of formulas during calculation
For moreinfo,seedocs,theMicrosoft has a page about principles [Excel Recalculation](https://learn.microsoft.com/en-us/office/client-developer/excel/excel-recalculation)
and there is one with API at [docs.closedxml.io](https://docs.closedxml.io/en/latest/concepts/formula-calculation.html).![image](https://github.com/ClosedXML/ClosedXML/assets/7634052/2a621044-368a-4076-b121-cefb10150a6e)
## Workbook structure
Internal structure has been cleaned up and optimized.The dirty tracking has been moved outofcells to formulas and thus memory taken up by a single cell value is now only 16 bytes instead of 24(?) bytes in0.102. Of course there are some other structures around that take up memory as well,butthe single cell value is now 16 bytes (Ihoped for 8,butnot feasible with `double`, `DateTime` and `TimeSpan` as possible cell values - all take up 8 bytes... not enough bits).The same stringin different instances is now not duplicated,butonly one instance is used. As seen on following test,itcan lead to significant decrease inmemoryconsumption.250k rows with10 text rows (samestring,differentinstance):117MiB om 0.103vs325 MiB in0.102.1.
## `InsertData` performance Insert 250k rows of 10 columns of text and 5 columns of numbers ([gist](https://gist.github.com/jahav/bdc5fe3c90f25544ca6ae1394bbe3561)). |Description|Rows|Columns|Time/Memory to insert data |Save workbook |Total time/memory||-----------------|-----------|------------------------|----------------------------|------------------------------|---||**0.103.0-beta**|250000|15|**1.619sec/117MiB**|6.343sec|477MiB||0.102.1|250000|15|7.160sec/325MiB|6.676sec|692MiB|
...(truncated)
Commits viewable in[compare view](https://github.com/ClosedXML/ClosedXML/compare/0.102.3...0.105.1).</details>
Pinned [FluentValidation](https://github.com/JeremySkinner/fluentvalidation) at 11.12.0.<details><summary>Release notes</summary>
_Sourced from[FluentValidation's releases](https://github.com/JeremySkinner/fluentvalidation/releases)._
No release notes found forthis version range.
Commits viewable in[compare view](https://github.com/JeremySkinner/fluentvalidation/commits).</details>
Pinned [FluentValidation.DependencyInjectionExtensions](https://github.com/JeremySkinner/fluentvalidation) at 11.12.0.<details><summary>Release notes</summary>
_Sourced from[FluentValidation.DependencyInjectionExtensions's releases](https://github.com/JeremySkinner/fluentvalidation/releases)._
No release notes found forthis version range.
Commits viewable in[compare view](https://github.com/JeremySkinner/fluentvalidation/commits).</details>
Pinned [MediatR](https://github.com/jbogard/MediatR) at 12.5.0.<details><summary>Release notes</summary>
_Sourced from[MediatR's releases](https://github.com/jbogard/MediatR/releases)._
## 12.5.0
## What's Changed
* Open behavior multiple registration extensions by @​Emopusta in https://github.com/jbogard/MediatR/pull/1065* Remove duplicate `Nullable` property from `MediatR.Contracts` by @​jithu7432 in https://github.com/jbogard/MediatR/pull/1061* Timeout behavior support by @​zachpainter77 in https://github.com/jbogard/MediatR/pull/1058* GitHub Actions upload-artifacts@​v2 deprecated moving to v4 by @​jithu7432 in https://github.com/jbogard/MediatR/pull/1072* update MinVer from4.3.0 to 6.0.0 by @​adamralph in https://github.com/jbogard/MediatR/pull/1102* Update setup-dotnet package version. by @​Emopusta in https://github.com/jbogard/MediatR/pull/1086* Add test for multiple open behavior registration feature. by @​Emopusta in https://github.com/jbogard/MediatR/pull/1077* Add validation and comments to OpenBehavior entity. by @​Emopusta in https://github.com/jbogard/MediatR/pull/1078* Passing CancellationToken to the call chain by @​podobaas in https://github.com/jbogard/MediatR/pull/1100
## New Contributors
* @​Emopusta made their first contribution in https://github.com/jbogard/MediatR/pull/1065* @​jithu7432 made their first contribution in https://github.com/jbogard/MediatR/pull/1061* @​podobaas made their first contribution in https://github.com/jbogard/MediatR/pull/1100**Full Changelog**: https://github.com/jbogard/MediatR/compare/v12.4.1...v12.5.0
Commits viewable in[compare view](https://github.com/jbogard/MediatR/compare/v12.4.1...v12.5.0).</details>
Updated [Microsoft.AspNetCore.Authentication.JwtBearer](https://github.com/dotnet/aspnetcore) from 8.0.2 to 8.0.30.<details><summary>Release notes</summary>
_Sourced from[Microsoft.AspNetCore.Authentication.JwtBearer's releases](https://github.com/dotnet/aspnetcore/releases)._
## 8.0.30[Release](https://github.com/dotnet/core/releases/tag/v8.0.30)
## What's Changed
*[release/8.0] Update branding to 8.0.30 by @​dotnet-bot in https://github.com/dotnet/aspnetcore/pull/67621*[release/8.0](deps): Bump src/submodules/googletest from `7140cd4` to `973323e` by @​dependabot[bot]in https://github.com/dotnet/aspnetcore/pull/67525*[release/8.0](deps): Bump src/submodules/MessagePack-CSharp from `9614e6f` to `365965f` by @​dependabot[bot]in https://github.com/dotnet/aspnetcore/pull/67524* Update ws package version to 7.5.11 by @​birarroshan in https://github.com/dotnet/aspnetcore/pull/67408*[release/8.0] Update CI pipeline to use Windows 2022 image by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/67289*[release/8.0] Update Selenium and Playwright versions to match main by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/67273*[release/8.0] improve CI flakiness by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/67645*[release/8.0](deps): Bump src/submodules/googletest from `973323e` to `3064a60` by @​dependabot[bot]in https://github.com/dotnet/aspnetcore/pull/67654* Merging internal commits for release/8.0 by @​dotnet-bot in https://github.com/dotnet/aspnetcore/pull/67796* Use build identity (System.AccessToken)for internal feed creds instead of expired dn-bot-dnceng-artifact-feeds-rw PAT (release/8.0) by @​missymessa in https://github.com/dotnet/aspnetcore/pull/67854*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/67943
## New Contributors
* @​birarroshan made their first contribution in https://github.com/dotnet/aspnetcore/pull/67408**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.29...v8.0.30
## 8.0.29[Release](https://github.com/dotnet/core/releases/tag/v8.0.29)
## What's Changed
* Update branding to 8.0.29 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/66982*[release/8.0](deps): Bump src/submodules/googletest from `d72f9c8` to `a721f1b` by @​dependabot[bot]in https://github.com/dotnet/aspnetcore/pull/66973*[release/8.0] Update System.Security.Cryptography.Xml in RepoTasks by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/66766*[release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/66699*[release/8.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/66664*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/66946*[release/8.0] Add 1ES Unofficial pipeline for Components E2E tests by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/66989* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/67105*[release/8.0] Update npm dependencies by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/67144*[release/8.0] Update Microsoft Identity Web package versions to 3.15.1 by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/67164*[release/8.0](deps): Bump src/submodules/googletest from `a721f1b` to `7140cd4` by @​dependabot[bot]in https://github.com/dotnet/aspnetcore/pull/67222*[release/8.0] Backport docker image fix by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/67279*[release/8.0] Reject ASCII control characters in cookie auth return URLs by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/67157**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.28...v8.0.29
## 8.0.28[Release](https://github.com/dotnet/core/releases/tag/v8.0.28)
## What's Changed
* Update branding to 8.0.28 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/66589*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/66556*[release/8.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/66471*[release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/66344*[release/8.0] Strip UTF-8 BOM from template localization files and remove version override by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/66427* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/66662**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.27...v8.0.28
## 8.0.27[Release](https://github.com/dotnet/core/releases/tag/v8.0.27)
## What's Changed
*[release/8.0] Update branding to 8.0.27 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/66205*[release/8.0] Update NPM dependencies by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/66052*[release/8.0] Move off of dead-lettered Windows preview helix queue by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/66220*[release/8.0](deps): Bump src/submodules/googletest from `73a63ea` to `d72f9c8` by @​dependabot[bot]in https://github.com/dotnet/aspnetcore/pull/66087*[release/8.0] Replace dn-bot-dnceng-build-rw-code-rw PAT with WIF service connection in mirror-within-azdo by @​missymessa in https://github.com/dotnet/aspnetcore/pull/66115*[release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/66216*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/66081*[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/66131*[release/8.0] Update @​azure/msal-browser from2.x to 4.x by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/66236*[release/8.0] Use source-build-assets repo by @​NikolaMilosavljevic in https://github.com/dotnet/aspnetcore/pull/66276* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/66317**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.26...v8.0.27
## 8.0.26[Release](https://github.com/dotnet/core/releases/tag/v8.0.26)
## What's Changed
*[release/8.0] Update branding to 8.0.26 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/65635*[release/8.0](deps): Bump src/submodules/googletest from `56efe39` to `73a63ea` by @​dependabot[bot]in https://github.com/dotnet/aspnetcore/pull/65586*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/65581*[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/65621*[release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/65615* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/65730**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.25...v8.0.26
## 8.0.25[Release](https://github.com/dotnet/core/releases/tag/v8.0.25)
## What's Changed
* Update branding to 8.0.25 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/65293*[release/8.0](deps): Bump src/submodules/googletest from `9156d4c` to `56efe39` by @​dependabot[bot]in https://github.com/dotnet/aspnetcore/pull/65289*[release/8.0] Add support for hotfix branding by @​mmitche in https://github.com/dotnet/aspnetcore/pull/65252*[release/8.0] Remove package baseline infrastructure by @​Copilot in https://github.com/dotnet/aspnetcore/pull/65209*[release/8.0] Set network isolation policy for aspnetcore-ci by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/65173*[release/8.0] Fix URL format for JDK download on linux by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/65076*[release/8.0] Disable parallel restore for Grpc JsonTranscoding by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/65073*[release/8.0] Update Ubuntu queue to 22.04 by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/65299*[release/8.0] Re-enable Nuget Audit by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/65328*[release/8.0] Don't use netcoreapp2.1in dotnet-getdocument by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/65331*[release/8.0] Update AzureIdentityVersion to 1.11.4 by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/65332*[release/8.0] Disable parallel restore for linker tests by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/65375* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/65382*[release/8.0] Switch to non-preview 2022 queue by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/65413**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.24...v8.0.25
## 8.0.24[Release](https://github.com/dotnet/core/releases/tag/v8.0.24)
## 8.0.23[Release](https://github.com/dotnet/core/releases/tag/v8.0.23)
## What's Changed
https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs
## 8.0.22[Release](https://github.com/dotnet/core/releases/tag/v8.0.22)
## What's Changed
* Update branding to 8.0.22 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63949*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/63664*[release/8.0](http2): Lower WINDOWS_UPDATE received on (half)closed stream to stream abortion by @​DeagleGross in https://github.com/dotnet/aspnetcore/pull/63903*[release/8.0](deps): Bump src/submodules/googletest from `eb2d85e` to `9706f75` by @​dependabot[bot]in https://github.com/dotnet/aspnetcore/pull/63893*[release/8.0] Fixed devtools url used for debug with chrome and edge by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/62080*[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/63665*[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/63957* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/64035* Mark productVersion.txt as shipping artifact in8.0 by @​Copilot in https://github.com/dotnet/aspnetcore/pull/64067* Revert log level severity for unknown proxy in ForwardedHeadersMiddleware by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/64090**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.21...v8.0.22
## 8.0.21[Release](https://github.com/dotnet/core/releases/tag/v8.0.21)
## What's Changed
* Update branding to 8.0.21 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63509*[release/8.0](deps): Bump src/submodules/googletest from `373af2e` to `eb2d85e` by @​dependabot[bot]in https://github.com/dotnet/aspnetcore/pull/63500*[release/8.0] Make duplicate deb/rpm packages so we can sign them with the new PMC key by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/63250*[release/8.0] Extend Unofficial 1ES template in IdentityModel nightly tests job by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/63466*[release/8.0] Quarantine ResponseBody_WriteContentLength_PassedThrough by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/63534*[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/63261*[release/8.0] Use wait assert in flaky tests by @​ilonatommy in https://github.com/dotnet/aspnetcore/pull/63565*[release/8.0] Update Microsoft.Build versions by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/62507* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63603* backport(8.0): Fix runtime architecture detection logic in ANCM by @​DeagleGross in https://github.com/dotnet/aspnetcore/pull/63706**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.20...v8.0.21
## 8.0.20[Release](https://github.com/dotnet/core/releases/tag/v8.0.20)
## What's Changed
* Update branding to 8.0.20 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63106*[release/8.0](deps): Bump src/submodules/googletest from `c67de11` to `373af2e` by @​dependabot[bot]in https://github.com/dotnet/aspnetcore/pull/63038*[release/8.0] Dispose the certificate chain elements with the chain by @​MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/62994*[release/8.0] Update SignalR Redis tests to use internal Docker Hub mirror by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/63117*[release/8.0][SignalR] Don't throwfor message headers in Java client by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/62784* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63152*[release/8.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/63188*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/63189**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.19...v8.0.20
## 8.0.18[Release](https://github.com/dotnet/core/releases/tag/v8.0.18)
## What's Changed
* Update branding to 8.0.18 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/62241*[release/8.0] Update Alpine helix references by @​github-actions in https://github.com/dotnet/aspnetcore/pull/62243*[release/8.0](deps): Bump src/submodules/googletest from `04ee1b4` to `e9092b1` by @​dependabot in https://github.com/dotnet/aspnetcore/pull/62201*[8.0] Delete src/arcade directory by @​akoeplinger in https://github.com/dotnet/aspnetcore/pull/61994*[Backport 8.0][IIS] Manually parse exe bitness (#​61894) by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/62037*[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/62006*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61944*[release/8.0] Associate tagged keys with entries so replacements are not evicted by @​github-actions in https://github.com/dotnet/aspnetcore/pull/62247*[release/8.0] Block test that is failing after switching to latest-chrome by @​github-actions in https://github.com/dotnet/aspnetcore/pull/62284* backport(net8.0): http.sys on-demand TLS client hello retrieval by @​DeagleGross in https://github.com/dotnet/aspnetcore/pull/62290* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/62302**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.17...v8.0.18
## 8.0.17
## Bug Fixes
-**Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy**([#​61623](https://github.com/dotnet/aspnetcore/pull/61623)) 
The Forwarded Headers Middleware now ignores `X-Forwarded-Headers` sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.
## Dependency Updates
-**Update dependencies from dotnet/arcade**([#​61832](https://github.com/dotnet/aspnetcore/pull/61832)) 
This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.-**Bump src/submodules/googletest from `52204f7` to `04ee1b4`**([#​61761](https://github.com/dotnet/aspnetcore/pull/61761)) 
The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.
## Miscellaneous
-**Update branding to 8.0.17**([#​61830](https://github.com/dotnet/aspnetcore/pull/61830)) 
The project version branding has been updated to reflect the new8.0.17 release, ensuring consistency across build outputs and documentation.-**Merging internal commits for release/8.0**([#​61924](https://github.com/dotnet/aspnetcore/pull/61924)) 
This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.---
This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.16...v8.0.17
## 8.0.16[Release](https://github.com/dotnet/core/releases/tag/v8.0.16)
## What's Changed
* Update branding to 8.0.16 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61283*[release/8.0](deps): Bump src/submodules/googletest from `24a9e94` to `52204f7` by @​dependabot in https://github.com/dotnet/aspnetcore/pull/61260*[release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61281*[release/8.0] Upgrade to Ubuntu 22 by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/61216*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60901*[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60926*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61404* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61398*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61411* Revert "Revert "[release/8.0] Update remnants of azureedge.net"" by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60352*[release/8.0] Fix preserving messages for stateful reconnect with backplane by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/61375*[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61442* fetch TLS client hello message from HTTP.SYS by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/61494**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.15...v8.0.16
## 8.0.15[Release](https://github.com/dotnet/core/releases/tag/v8.0.15)
## What's Changed
*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60355* Update branding to 8.0.15 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60784* Add partitioned to cookie for SignalR browser testing by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/60728*[release/8.0](deps): Bump src/submodules/googletest from `e235eb3` to `24a9e94` by @​dependabot in https://github.com/dotnet/aspnetcore/pull/60677* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60879**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.14...v8.0.15
## 8.0.14[Release](https://github.com/dotnet/core/releases/tag/v8.0.14)
## What's Changed
* Update branding to 8.0.14 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60197*[release/8.0](deps): Bump src/submodules/googletest from `7d76a23` to `e235eb3` by @​dependabot in https://github.com/dotnet/aspnetcore/pull/60150*[release/8.0] Fix java discovery in IdentityModel pipeline by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60075*[release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60199*[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59922*[release/8.0] Readd DiagnosticSource to KestrelServerImpl by @​github-actions in https://github.com/dotnet/aspnetcore/pull/60203*[release/8.0] Update to MacOS 15in Helix by @​github-actions in https://github.com/dotnet/aspnetcore/pull/60239*[release/8.0] Use the latest available JDK by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60233*[release/8.0] Fix skip condition for java tests by @​github-actions in https://github.com/dotnet/aspnetcore/pull/60243*[release/8.0] Update list of helix queues to skip by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60231*[release/8.0][Blazor] Allow cascading value subscribers to get added and removed during change notification by @​github-actions in https://github.com/dotnet/aspnetcore/pull/57288*[release/8.0] Update remnants of azureedge.net by @​sebastienros in https://github.com/dotnet/aspnetcore/pull/60264*[release/8.0] Centralize on one docker container by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60299* Revert "[release/8.0] Update remnants of azureedge.net" by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60324* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60316**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.13...v8.0.14
## 8.0.13[Release](https://github.com/dotnet/core/releases/tag/v8.0.13)
## What's Changed
*[release/8.0] Update dotnetbuilds CDN to new endpoint by @​mmitche in https://github.com/dotnet/aspnetcore/pull/59575* Update branding to 8.0.13 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/59756*[release/8.0] Skip MVC template tests on HelixQueueArmDebian12 by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59295*[release/8.0] Update OSX helix queue by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59742*[release/8.0](deps): Bump src/submodules/googletest from `d144031` to `7d76a23` by @​dependabot in https://github.com/dotnet/aspnetcore/pull/59678*[release/8.0] Skip tests on internal queues too by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59579*[release/8.0] Fix Kestrel host header mismatch handling when port in Url by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/59403* Migrate off of Debian 11 by @​v-firzha in https://github.com/dotnet/aspnetcore/pull/59584*[release/8.0] Pin to S.T.J 8.0.5in Analyzers by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59777*[release/8.0][Blazor WASM standalone] Avoid caching `index.html` during development by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59349* Update to Fedora 41 by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/59817*[release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59811*[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59825*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59864*[release/8.0] Fix/update docker tags by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59867* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/59872**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.12...v8.0.13
## 8.0.12[Release](https://github.com/dotnet/core/releases/tag/v8.0.12)
## What's Changed
* Update branding to 8.0.12 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/58800*[release/8.0](deps): Bump src/submodules/googletest from `6dae7eb` to `1204d63` by @​dependabot in https://github.com/dotnet/aspnetcore/pull/58741* Add scope for internal npm packages by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/58512*[release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58477*[release/8.0] Upgrade `serialize-javascript` transient dependency by @​MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/58466*[release/8.0] Update Messagepack dependency by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/58676* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/58898*[release/8.0] Use MacOS-13in CI by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/58549*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59065*[release/8.0] Fix java discovery in helix-matrix by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59181*[release/8.0] Update dependencies from dotnet/roslyn by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59184*[release/8.0](deps): Bump src/submodules/googletest from `1204d63` to `d144031` by @​dependabot in https://github.com/dotnet/aspnetcore/pull/59033**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.11...v8.0.12
## 8.0.11[Release](https://github.com/dotnet/core/releases/tag/v8.0.11)
## What's Changed
* Update branding to 8.0.11 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/58198*[release/8.0](deps): Bump src/submodules/googletest from `ff233bd` to `6dae7eb` by @​dependabot in https://github.com/dotnet/aspnetcore/pull/58180*[release/8.0] Add explicit conversion for value-type returning handlers with filters by @​captainsafia in https://github.com/dotnet/aspnetcore/pull/57966*[release/8.0] Stop using Mac 11in Helix by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/58063*[release/8.0] Enable TSA/Policheck by @​github-actions in https://github.com/dotnet/aspnetcore/pull/58124*[release/8.0](deps): Bump src/submodules/MessagePack-CSharp from `ecc4e18` to `9511905` by @​dependabot in https://github.com/dotnet/aspnetcore/pull/58179*[Backport] Http.Sys: Clean up Request parsing errors by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/57819*[release/8.0] Update the Microsoft.Identity.Web versions used by project templates by @​halter73 in https://github.com/dotnet/aspnetcore/pull/58229* Add registry search for upgrade policy keys, update dependencies from Arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58278* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/58300*[release/8.0] Remove ProviderKey from Hosting Bundle by @​github-actions in https://github.com/dotnet/aspnetcore/pull/58294*[release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58352*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58347*[release/8.0] Improve dev-certs export error message by @​amcasey in https://github.com/dotnet/aspnetcore/pull/58470*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58474**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.10...v8.0.11
## 8.0.10[Release](https://github.com/dotnet/core/releases/tag/v8.0.10)
## 8.0.8[Release](https://github.com/dotnet/core/releases/tag/v8.0.8)
## 8.0.7[Release](https://github.com/dotnet/core/releases/tag/v8.0.7)
## 8.0.6[Release](https://github.com/dotnet/core/releases/tag/v8.0.6)
## 8.0.5[Release](https://github.com/dotnet/core/releases/tag/v8.0.5)
## What's Changed
*[release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/54744* Update branding to 8.0.5 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/54907*[release/8.0] Convert to 1ES templates by @​RussKie in https://github.com/dotnet/aspnetcore/pull/54660* Increase logs and delays in CanLaunchPhotinoWebViewAndClickButton by @​Eilon in https://github.com/dotnet/aspnetcore/pull/54608*[release/8.0](deps): Bump src/submodules/googletest from `31993df` to `77afe8e` by @​dependabot in https://github.com/dotnet/aspnetcore/pull/54872*[release/8.0] Reduce helix-matrix timeout to 5 hours by @​github-actions in https://github.com/dotnet/aspnetcore/pull/54778*[release/8.0] Preserve RemoteAuthenticationContext during trimming if used in JS interop by @​halter73 in https://github.com/dotnet/aspnetcore/pull/54655*[release/8.0] Improve usage of `Type.GetType` when activating types in data protection by @​github-actions in https://github.com/dotnet/aspnetcore/pull/54762*[release/8.0] Fix route analyzer performance with highly concatenated strings by @​github-actions in https://github.com/dotnet/aspnetcore/pull/54763*[release/8.0] Suppress .ps1 SDL errors by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/54915*[release/8.0] Backport test fixes by @​MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/54912*[release/8.0] Skip SpotBugs for now by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/54952* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/55034*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/55061*[release/8.0] Update Wix version by @​github-actions in https://github.com/dotnet/aspnetcore/pull/55101**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.4...v8.0.5
## 8.0.4[Release](https://github.com/dotnet/core/releases/tag/v8.0.4)
## 8.0.3[Release](https://github.com/dotnet/core/releases/tag/v8.0.3)
Commits viewable in[compare view](https://github.com/dotnet/aspnetcore/compare/v8.0.2...v8.0.30).</details>
Updated [Microsoft.AspNetCore.Mvc.Testing](https://github.com/dotnet/aspnetcore) from 8.0.0 to 8.0.30.<details><summary>Release notes</summary>
_Sourced from[Microsoft.AspNetCore.Mvc.Testing's releases](https://github.com/dotnet/aspnetcore/releases)._
## 8.0.30[Release](https://github.com/dotnet/core/releases/tag/v8.0.30)
## What's Changed
*[release/8.0] Update branding to 8.0.30 by @​dotnet-bot in https://github.com/dotnet/aspnetcore/pull/67621*[release/8.0](deps): Bump src/submodules/googletest from `7140cd4` to `973323e` by @​dependabot[bot]in https://github.com/dotnet/aspnetcore/pull/67525*[release/8.0](deps): Bump src/submodules/MessagePack-CSharp from `9614e6f` to `365965f` by @​dependabot[bot]in https://github.com/dotnet/aspnetcore/pull/67524* Update ws package version to 7.5.11 by @​birarroshan in https://github.com/dotnet/aspnetcore/pull/67408*[release/8.0] Update CI pipeline to use Windows 2022 image by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/67289*[release/8.0] Update Selenium and Playwright versions to match main by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/67273*[release/8.0] improve CI flakiness by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/67645*[release/8.0](deps): Bump src/submodules/googletest from `973323e` to `3064a60` by @​dependabot[bot]in https://github.com/dotnet/aspnetcore/pull/67654* Merging internal commits for release/8.0 by @​dotnet-bot in https://github.com/dotnet/aspnetcore/pull/67796* Use build identity (System.AccessToken)for internal feed creds instead of expired dn-bot-dnceng-artifact-feeds-rw PAT (release/8.0) by @​missymessa in https://github.com/dotnet/aspnetcore/pull/67854*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/67943
## New Contributors
* @​birarroshan made their first contribution in https://github.com/dotnet/aspnetcore/pull/67408**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.29...v8.0.30
## 8.0.29[Release](https://github.com/dotnet/core/releases/tag/v8.0.29)
## What's Changed
* Update branding to 8.0.29 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/66982*[release/8.0](deps): Bump src/submodules/googletest from `d72f9c8` to `a721f1b` by @​dependabot[bot]in https://github.com/dotnet/aspnetcore/pull/66973*[release/8.0] Update System.Security.Cryptography.Xml in RepoTasks by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/66766*[release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/66699*[release/8.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/66664*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/66946*[release/8.0] Add 1ES Unofficial pipeline for Components E2E tests by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/66989* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/67105*[release/8.0] Update npm dependencies by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/67144*[release/8.0] Update Microsoft Identity Web package versions to 3.15.1 by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/67164*[release/8.0](deps): Bump src/submodules/googletest from `a721f1b` to `7140cd4` by @​dependabot[bot]in https://github.com/dotnet/aspnetcore/pull/67222*[release/8.0] Backport docker image fix by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/67279*[release/8.0] Reject ASCII control characters in cookie auth return URLs by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/67157**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.28...v8.0.29
## 8.0.28[Release](https://github.com/dotnet/core/releases/tag/v8.0.28)
## What's Changed
* Update branding to 8.0.28 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/66589*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/66556*[release/8.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/66471*[release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/66344*[release/8.0] Strip UTF-8 BOM from template localization files and remove version override by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/66427* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/66662**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.27...v8.0.28
## 8.0.27[Release](https://github.com/dotnet/core/releases/tag/v8.0.27)
## What's Changed
*[release/8.0] Update branding to 8.0.27 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/66205*[release/8.0] Update NPM dependencies by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/66052*[release/8.0] Move off of dead-lettered Windows preview helix queue by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/66220*[release/8.0](deps): Bump src/submodules/googletest from `73a63ea` to `d72f9c8` by @​dependabot[bot]in https://github.com/dotnet/aspnetcore/pull/66087*[release/8.0] Replace dn-bot-dnceng-build-rw-code-rw PAT with WIF service connection in mirror-within-azdo by @​missymessa in https://github.com/dotnet/aspnetcore/pull/66115*[release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/66216*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/66081*[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/66131*[release/8.0] Update @​azure/msal-browser from2.x to 4.x by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/66236*[release/8.0] Use source-build-assets repo by @​NikolaMilosavljevic in https://github.com/dotnet/aspnetcore/pull/66276* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/66317**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.26...v8.0.27
## 8.0.26[Release](https://github.com/dotnet/core/releases/tag/v8.0.26)
## What's Changed
*[release/8.0] Update branding to 8.0.26 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/65635*[release/8.0](deps): Bump src/submodules/googletest from `56efe39` to `73a63ea` by @​dependabot[bot]in https://github.com/dotnet/aspnetcore/pull/65586*[release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/65581*[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/65621*[release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot]in https://github.com/dotnet/aspnetcore/pull/65615* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/65730**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.25...v8.0.26
## 8.0.25[Release](https://github.com/dotnet/core/releases/tag/v8.0.25)
## What's Changed
* Update branding to 8.0.25 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/65293*[release/8.0](deps): Bump src/submodules/googletest from `9156d4c` to `56efe39` by @​dependabot[bot]in https://github.com/dotnet/aspnetcore/pull/65289*[release/8.0] Add support for hotfix branding by @​mmitche in https://github.com/dotnet/aspnetcore/pull/65252*[release/8.0] Remove package baseline infrastructure by @​Copilot in https://github.com/dotnet/aspnetcore/pull/65209*[release/8.0] Set network isolation policy for aspnetcore-ci by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/65173*[release/8.0] Fix URL format for JDK download on linux by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/65076*[release/8.0] Disable parallel restore for Grpc JsonTranscoding by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/65073*[release/8.0] Update Ubuntu queue to 22.04 by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/65299*[release/8.0] Re-enable Nuget Audit by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/65328*[release/8.0] Don't use netcoreapp2.1in dotnet-getdocument by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/65331*[release/8.0] Update AzureIdentityVersion to 1.11.4 by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/65332*[release/8.0] Disable parallel restore for linker tests by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/65375* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/65382*[release/8.0] Switch to non-preview 2022 queue by @​github-actions[bot]in https://github.com/dotnet/aspnetcore/pull/65413**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.24...v8.0.25
## 8.0.24[Release](https://github.com/dotnet/core/releases/tag/v8.0.24)
## 8.0.23[Release](https://github.com/dotnet/core/releases/tag/v8.0.23)
## What's Changed
https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-...
_Description has been truncated_

@dependabot
Bump BCrypt.Net-Next and 17 others
99fb0e3
Bumps BCrypt.Net-Next from 4.0.3 to 4.2.0
Bumps ClosedXML from 0.102.3 to 0.105.1
Bumps FluentValidation from 11.11.0 to 11.12.0
Bumps FluentValidation.DependencyInjectionExtensions from 11.11.0 to 11.12.0
Bumps MediatR from 12.4.1 to 12.5.0
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.2 to 8.0.30
Bumps Microsoft.AspNetCore.Mvc.Testing from 8.0.0 to 8.0.30
Bumps Microsoft.EntityFrameworkCore from 8.0.11 to 8.0.30
Bumps Microsoft.EntityFrameworkCore.Design from 8.0.11 to 8.0.30
Bumps Microsoft.EntityFrameworkCore.InMemory from 8.0.0 to 8.0.30
Bumps Microsoft.Extensions.Logging.Abstractions from 8.0.2 to 8.0.3
Bumps Microsoft.NET.Test.Sdk from 17.8.0 to 17.14.1
Bumps NSubstitute from 5.1.0 to 5.3.0
Bumps Swashbuckle.AspNetCore from 6.6.2 to 6.9.0
Bumps System.IdentityModel.Tokens.Jwt from 8.0.2 to 8.22.0
Bumps Testcontainers.PostgreSql from 3.6.0 to 3.10.0
Bumps xunit from 2.5.3 to 2.9.3
Bumps xunit.runner.visualstudio from 2.5.3 to 2.8.2
---
updated-dependencies:
- dependency-name: BCrypt.Net-Next
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: ClosedXML
dependency-version: 0.105.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: FluentValidation
dependency-version: 11.12.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: FluentValidation.DependencyInjectionExtensions
dependency-version: 11.12.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: MediatR
dependency-version: 12.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
dependency-version: 8.0.30
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: Microsoft.EntityFrameworkCore
dependency-version: 8.0.30
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: Microsoft.EntityFrameworkCore.Design
dependency-version: 8.0.30
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Logging.Abstractions
dependency-version: 8.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: Swashbuckle.AspNetCore
dependency-version: 6.9.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: System.IdentityModel.Tokens.Jwt
dependency-version: 8.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
dependency-version: 8.0.30
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: Microsoft.EntityFrameworkCore.InMemory
dependency-version: 8.0.30
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: Testcontainers.PostgreSql
dependency-version: 3.10.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: xunit
dependency-version: 2.9.3
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: xunit.runner.visualstudio
dependency-version: 2.8.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: Microsoft.NET.Test.Sdk
dependency-version: 17.14.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: NSubstitute
dependency-version: 5.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: xunit
dependency-version: 2.9.3
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: xunit.runner.visualstudio
dependency-version: 2.8.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Sep 5, 2026
@vercel

vercelBot commented Sep 5, 2026•
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated
devflow-platformReadyReadyPreviewSep 5, 2026 6:32am UTC

@dependabot@github

dependabotBot commented on behalf of githubSep 5, 2026

Copy link
Copy Markdown
ContributorAuthor

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabotdependabotBot closed this Sep 5, 2026
@dependabot
dependabotBot deleted the dependabot/nuget/src/DevFlow.Api/minor-and-patch-55b5849bef branch September 5, 2026 06:39
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependenciesPull requests that update a dependency file.NETPull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants