Bump BCrypt.Net-Next and 18 others - #17
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps BCrypt.Net-Next from 4.0.3 to 4.2.0 Bumps coverlet.collector from 6.0.3 to 6.0.4 Bumps Dapper from 2.1.35 to 2.1.89 Bumps FluentValidation.DependencyInjectionExtensions from 11.11.0 to 11.12.0 Bumps MediatR from 12.4.1 to 12.5.0 Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.0 to 10.0.12 Bumps Microsoft.AspNetCore.OpenApi from 10.0.0 to 10.0.12 Bumps Microsoft.Data.SqlClient from 6.0.1 to 6.1.7 Bumps Microsoft.Extensions.Configuration from 10.0.0 to 10.0.12 Bumps Microsoft.Extensions.DependencyInjection to 9.0.20, 10.0.12 Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.0 to 10.0.12 Bumps Microsoft.IdentityModel.Tokens from 8.14.0 to 8.23.0 Bumps Microsoft.NET.Test.Sdk from 17.12.0 to 17.14.1 Bumps Microsoft.OpenApi to 2.12.0, 2.12.2 Bumps Moq from 4.20.72 to 4.21.0 Bumps Scalar.AspNetCore from 2.3.1 to 2.17.10 Bumps Serilog.Sinks.Console from 6.0.0 to 6.1.1 Bumps System.IdentityModel.Tokens.Jwt from 8.4.0 to 8.23.0 Bumps xunit from 2.9.0 to 2.9.3 --- updated-dependencies: - dependency-name: BCrypt.Net-Next dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Dapper dependency-version: 2.1.89 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: FluentValidation.DependencyInjectionExtensions dependency-version: 11.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: MediatR dependency-version: 12.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.OpenApi dependency-version: 2.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.Data.SqlClient dependency-version: 6.1.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.Configuration dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.Configuration dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.DependencyInjection dependency-version: 9.0.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.DependencyInjection dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.IdentityModel.Tokens dependency-version: 8.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.OpenApi dependency-version: 2.12.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Scalar.AspNetCore dependency-version: 2.17.10 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Serilog.Sinks.Console dependency-version: 6.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: System.IdentityModel.Tokens.Jwt dependency-version: 8.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: coverlet.collector dependency-version: 6.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 17.14.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Moq dependency-version: 4.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: xunit dependency-version: 2.9.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Pinned BCrypt.Net-Next at 4.2.0.
Release notes
Sourced from BCrypt.Net-Next's releases.
4.2.0
Full Changelog: BcryptNet/bcrypt.net@v4.1.0...v4.2.0
4.1.0
What's Changed
New Contributors
Full Changelog: BcryptNet/bcrypt.net@4.0.3...v4.1.0
Commits viewable in compare view.
Updated coverlet.collector from 6.0.3 to 6.0.4.
Release notes
Sourced from coverlet.collector's releases.
6.0.4
Fixed
Diff between 6.0.3 and 6.0.4
Commits viewable in compare view.
Pinned Dapper at 2.1.89.
Release notes
Sourced from Dapper's releases.
2.1.89
What's Changed
New Contributors
Full Changelog: DapperLib/Dapper@2.1.86...2.1.89
2.1.86
What's Changed
Full Changelog: DapperLib/Dapper@2.1.79...2.1.86
2.1.79
What's Changed
New Contributors
Full Changelog: DapperLib/Dapper@2.1.72...2.1.79
2.1.72
What's Changed
New Contributors
Full Changelog: DapperLib/Dapper@2.1.66...2.1.72
2.1.66
WARNING:
DateOnly/TimeOnlysupport, added in 2.1.37, had multiple failure modes, and was quickly reverted pending finding the time to investigate what went wrong. The impacted packages were unlisted, with 2.1.35 being the last listed version. This is the first version after that debacle, which means if you are using the impacted 2.1.37 or similar: this version will effectively remove functionality (although it was actually disabled a very long time ago).What's Changed
New Contributors
Full Changelog: DapperLib/Dapper@2.1.44...2.1.66
2.1.44
(fixes NuGet readme)
Full Changelog: DapperLib/Dapper@2.1.42...2.1.44
2.1.42
What's Changed
Full Changelog: DapperLib/Dapper@2.1.37...2.1.42
2.1.37
What's Changed
Full Changelog: DapperLib/Dapper@2.1.35...2.1.37
Commits viewable in compare view.
Pinned FluentValidation.DependencyInjectionExtensions at 11.12.0.
Release notes
Sourced from FluentValidation.DependencyInjectionExtensions's releases.
No release notes found for this version range.
Commits viewable in compare view.
Pinned MediatR at 12.5.0.
Release notes
Sourced from MediatR's releases.
12.5.0
What's Changed
Nullableproperty fromMediatR.Contractsby @jithu7432 in Remove duplicateNullableproperty fromMediatR.ContractsLuckyPennySoftware/MediatR#1061New Contributors
Nullableproperty fromMediatR.ContractsLuckyPennySoftware/MediatR#1061Full Changelog: LuckyPennySoftware/MediatR@v12.4.1...v12.5.0
Commits viewable in compare view.
Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.0 to 10.0.12.
Release notes
Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.AspNetCore.OpenApi from 10.0.0 to 10.0.12.
Release notes
Sourced from Microsoft.AspNetCore.OpenApi's releases.
No release notes found for this version range.
Commits viewable in compare view.
Pinned Microsoft.Data.SqlClient at 6.1.7.
Release notes
Sourced from Microsoft.Data.SqlClient's releases.
6.1.7
This update brings the following changes since the 6.1.6 release:
Changed
Microsoft.Data.SqlClient.SNIandMicrosoft.Data.SqlClient.SNI.runtimedependencies to 6.0.3 (was 6.0.2).(#4598)
Fixed
Fixed
ServerCertificatevalidation on the managed SNI path so the configured certificate is compared against the server certificate even when the server certificate passes chain and host-name validation. When certificate validation is enabled, a missing, unreadable, or invalid certificate file, a certificate mismatch, or a missing server certificate now causes the TLS handshake to fail instead of bypassing the configured certificate check. (net8.0/net9.0 only)(#4445, #4584)
Fixed Always Encrypted VSM/HGS enclave attestation to verify that the enclave public key used to establish a session matches the key committed to by the signed attestation report. Missing, malformed, or mismatched key-binding data now causes attestation to fail before the session secret is derived.
(#4532, #4552)
Fixed
SqlConnection.AccessTokenCallbacknot disabling Transparent Network IP Resolution by default, making it consistent withSqlConnection.AccessToken. An explicitly configuredTransparentNetworkIPResolutionconnection-string value still takes precedence. (net462 only)(#4520, #4560)
Fixed token authentication state handling so clearing
SqlConnection.AccessTokenpreserves an existingAccessTokenCallbackin the connection pool key, and clearingAccessTokenCallbackpreserves an existingAccessToken. Callback-based authentication now also follows the same prelogin server-certificate validation rules as an explicitly supplied access token.(#4520, #4560)
Fixed configurable retry logic installing a permanent, process-wide assembly-resolution handler that could interfere with unrelated assembly loading. The handler is now active only while an explicitly configured custom retry provider is resolved and constructed, and probes
AppContext.BaseDirectoryinstead of the current working directory. Place custom retry assemblies in the application base directory; dependencies loaded after provider construction must be resolvable through normal application dependency resolution or an application-provided handler. (net8.0/net9.0 only)(#2214, #4547, #4664)
Target Platform Support
Full details: release-notes/6.1/6.1.7.md
6.1.6
This update brings the following changes since the 6.1.5 release:
Added
WAM broker support for the supported Entra ID authentication modes (Windows only)
What Changed:
ActiveDirectoryAuthenticationProviderOptionsoptions bag and a correspondingActiveDirectoryAuthenticationProvider(ActiveDirectoryAuthenticationProviderOptions options)constructor were introduced, exposing aUseWamBrokerproperty (alongsideApplicationClientIdandDeviceCodeFlowCallback).(#4288, #4387)
SetParentActivityOrWindowFunc(Func<object> parentActivityOrWindowFunc)method so callers can supply a parent window handle on Windows or a parentActivity/UIViewControlleron Android/iOS/MAUI.Who Benefits:
ActiveDirectoryInteractiveand other supported Entra ID authentication modes on Windows benefit from the WAM broker's improved security (tokens are brokered by the OS), single sign-on with the logged-in Windows account, and support for Conditional Access and Windows Hello.Impact:
ApplicationClientId, WAM is opt-in viaActiveDirectoryAuthenticationProviderOptions.UseWamBroker. Consider enabling it when you want OS-brokered tokens, single sign-on with the signed-in Windows account, Windows Hello, and Conditional Access support.UseWamBrokeris a Windows-only setting and has no effect on non-Windows platforms, where interactive Entra ID flows always use the system browser.Changed
Hardened TDS token parsing with data-length bounds checks
What Changed:
(#4340, #4359)
Who Benefits:
Impact:
... (truncated)
6.1.5
This update brings the following changes since the 6.1.4 release:
Fixed
ExecuteScalarto properly propagate errors when the server sends data followed by an error token. Previously, errors such as conversion failures duringWHEREclause evaluation were silently consumed duringSqlDataReader.Close()instead of being thrown to the caller, which could result in transactions being unexpectedly zombied. (#3736, #3947)SqlDataReader.GetFieldTypeandSqlDataReader.GetProviderSpecificFieldTypeto return the correct type (SqlVector<float>) for vector float32 columns. Previously, these methods did not follow the same type-resolution logic asGetValue, returning an incorrect type for vector columns. (#4104, #4151)Target Platform Support
Dependencies
.NET Framework 4.6.2
.NET 8.0
.NET 9.0
... (truncated)
6.1.4
This update brings the following changes since the 6.1.3 release:
Fixed
SqlDataAdapterwhen processing batch scenarios where certain SQL RPC calls may not include system parameters.(#3877)
(#3776)
Added
AppContext Switch for enabling MultiSubnetFailover
What Changed:
Switch.Microsoft.Data.SqlClient.EnableMultiSubnetFailoverByDefaultto setMultiSubnetFailover=trueby default in connection string.(#3851)
Who Benefits:
Impact:
Changed
SqlStatisticsexecution timing by usingEnvironment.TickCountinstead of more expensive timing mechanisms.... (truncated)
6.1.3
This update includes the following changes since the 6.1.2 release:
Added
App Context Switch for Ignoring Server-Provided Failover Partner
What Changed:
Switch.Microsoft.Data.SqlClient.IgnoreServerProvidedFailoverPartnerwas introduced to let the client ignore server-provided failover partner info in Basic Availability Groups (BAGs). When the switch is enabled, only the failover partner specified in the connection string is used; server-supplied partner values are skipped. This context switch was introduced in PR #3702.Who Benefits:
Impact:
tcp:host,port) so that the client uses that instead of the server's suggestion.Fixed
Target Platform Support
Dependencies
.NET Framework 4.6.2+
... (truncated)
6.1.2
This update brings the below changes over the previous stable release:
Fixed
System.InvalidOperationException#36296.1.1
This update includes the following changes since the 6.1.0 release:
Fixed
SqlVector<T>.NullAPI signature in Reference assembly. #3521Changed
Azure.Identityand other dependencies to newer versions. (#3538) (#3552)6.1.0
Release Notes
Stable Release 6.1.0 - 2025-07-25
This update brings the following changes since the 6.0.2 stable release:
Added
Added dedicated SQL Server vector datatype support
What Changed:
Who Benefits:
Impact:
Revived .NET Standard 2.0 target support
What Changed:
Who Benefits:
... (truncated)
6.1.0-preview2
Preview Release 6.1.0-preview2.25178.5 - 2025-06-27
This update brings the following changes since the 6.1.0-preview1 release:
Added
Added dedicated SQL Server vector datatype support
What Changed:
Who Benefits:
Impact:
Revived .NET Standard 2.0 target support
What Changed:
Who Benefits:
Impact:
... (truncated)
6.1.0-preview1
This update brings the following changes over the previous release:
Added
Fixed
Data Sourceparameter begins with a comma. #3250.Changed
SqlBulkCopyto explicitly identify mismatched column names. #3183.IBufferWriter<byte>. #2452.byte[]withstringfor SNI to improve efficiency. #2790.New Contributors
DockerLinuxTest/Program.csreference dotnet/SqlClient#30416.0.5
[Stable release 6.0.5] - 2026-01-15
This update brings the below changes over the previous stable release:
Fixed
SqlDataAdapterwhen processing batch scenarios where certain SQL RPC calls may not include system parameters.(#3878)
Added
What Changed:
Switch.Microsoft.Data.SqlClient.EnableMultiSubnetFailoverByDefaultto setMultiSubnetFailover=trueby default in connection string.(#3852)
Who Benefits:
Impact:
Changed
... (truncated)
6.0.4
This update brings the below changes over the 6.0.3 release:
Added
App Context Switch for Ignoring Server-Provided Failover Partner
What Changed:
Switch.Microsoft.Data.SqlClient.IgnoreServerProvidedFailoverPartnerwas introduced to let the client ignore server-provided failover partner info in Basic Availability Groups (BAGs). When the switch is enabled, only the failover partner specified in the connection string is used; server-supplied partner values are skipped. This context switch was introduced in PR #3703.Who Benefits:
Impact:
tcp:host,port) so that the client uses that instead of the server's suggestion.Target Platform Support
Dependencies
.NET Framework
.NET 8
... (truncated)
6.0.3
This update brings the below changes over the previous stable release:
Fixed
Changed
SqlDecimalimplementation to improve code compliance #34666.0.2
This update brings the below changes over the previous release:
Fixed
NullPointerExceptionduring socket receive #3283Changed
Commits viewable in compare view.
Updated Microsoft.Extensions.Configuration from 10.0.0 to 10.0.12.
Release notes
Sourced from Microsoft.Extensions.Configuration's releases.
No release notes found for this version range.
Commits viewable in compare view.
Pinned Microsoft.Extensions.DependencyInjection at 9.0.20.
Release notes
Sourced from Microsoft.Extensions.DependencyInjection's releases.
9.0.20
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.19...v9.0.20
9.0.19
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.18...v9.0.19
9.0.18
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.17...v9.0.18
9.0.17
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.16...v9.0.17
9.0.16
Release
9.0.15
Release
9.0.14
Release
9.0.13
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.12...v9.0.13
9.0.12
Release
9.0.11
Release
What's Changed
UnsafeAccessor- ambiguous name and signature match by @AaronRobinsonMSFT in [release/9.0-staging]UnsafeAccessor- ambiguous name and signature match dotnet/runtime#120011Description has been truncated