Skip to content

Bump the nuget-minor-patch group with 22 updates - #95

Merged
hindermath merged 57 commits into
mainfrom
dependabot/nuget/CtrlWorkerCommon/nuget-minor-patch-03328327f6
Nov 3, 2026
Merged

hindermath merged 57 commits into
mainfrom
dependabot/nuget/CtrlWorkerCommon/nuget-minor-patch-03328327f6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 3, 2026

Copy link
Copy Markdown
Contributor

Updated coverlet.collector from 10.0.0 to 10.1.0.

Release notes

Sourced from coverlet.collector's releases.

10.1.0

Improvements

  • Publish Microsoft.Testing.Platform coverage messages from coverlet.MTP #​2019
  • Implement dynamic exclusion filters for assemblies (Coverlet.MTP) #​1946
  • Replace legacy .sln files with modern .slnx format #​1966
  • coverlet.console: add trace diagnostics and actionable warnings for instrumentation/hit/empty-result failures #​2005
  • Relax auto-property skip logic and improve coverage for records #​1941

Fixed

  • Fix coverlet.MTP does not collect coverage on the .NET Framework portion of a large project #​1980 #​1967
  • Fix Regression in branch coverage for lambda expressions #​1938
  • Fix When using "is" with "or" in pattern matching, branch coverage is lower than normal #​1979
  • Fix silent zero coverage on .NET Framework since 8.0.0 #​1985 by @​tobiwae
  • Fix Race condition between ProcessExit hit-file write and out-of-proc coverage read causes EndOfStreamException #​1987 #​1988 by @​bkoelman
  • Fix Regression TypeInitializationException when targeting .NET Framework - Could not load type 'System.Collections.Concurrent.ConcurrentBag #​2010
  • Fix use --config-file CLI arg in coverlet.MTP #​2030 by alexthornton1
  • Fix silently empty coverage for shared-framework assemblies missing from compileLibraries #​2032 by @​Eljees

Diff between 10.0.1 and 10.1.0

10.0.1

Improvements

Fixed

  • Fix inconsistent paths in cobertura reports #​1723
  • Fix when using "is" with "and" in pattern matching, branch coverage is lower than normal #​1313
  • Fix Coverlet flagging a branch for an async functions finally block where none exists #​1337
  • Fix Coverlet Tracker Missing CompilerGeneratedAttribute #​1828

Maintenance

  • Add architecture docs and diagrams for all integrations #​1927
  • Update NuGet packages and .NET SDK versions #​1933

Diff between 10.0.0 and 10.0.1

Commits viewable in compare view.

Updated Dapper from 2.1.79 to 2.1.89.

Release notes

Sourced from Dapper's releases.

2.1.89

What's Changed

New Contributors

Full Changelog: DapperLib/Dapper@2.1.86...2.1.89

2.1.86

What's Changed

Full Changelog: DapperLib/Dapper@2.1.79...2.1.86

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.11 to 10.0.14.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite from 10.0.11 to 10.0.14.

Release notes

Sourced from Microsoft.Data.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite.Core from 10.0.11 to 10.0.14.

Release notes

Sourced from Microsoft.Data.Sqlite.Core's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 10.0.11 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting.Systemd from 10.0.11 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Hosting.Systemd's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting.WindowsServices from 10.0.11 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Hosting.WindowsServices's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 10.0.11 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.11 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.4.0 to 18.11.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.11.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.10.1...v18.11.0

18.10.1

What's Changed

Full Changelog: microsoft/vstest@v18.10.0...v18.10.1

18.10.0

What's Changed

Full Changelog: microsoft/vstest@v18.9.0...v18.10.0

18.9.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.8.0...v18.9.0

18.8.1

What's Changed

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0

What's Changed

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

18.7.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.6.0...v18.7.0

18.6.0

What's Changed

Changes to tests and infra

18.5.1

What's Changed

Full Changelog: microsoft/vstest@v18.5.0...v18.5.1

18.5.0

⚠️ Unlisted on Nuget, because of #​15718

What's Changed

Full Changelog: microsoft/vstest@v18.4.0...v18.5.0

Commits viewable in compare view.

Updated Microsoft.Playwright.MSTest from 1.59.0 to 1.64.1.

Release notes

Sourced from Microsoft.Playwright.MSTest's releases.

1.64.1

Highlights

#​3391 - chore(driver): bump bundled Node.js to 24.22.1

Browser Versions

  • Chromium 156.0.8078.4
  • Mozilla Firefox 157.0
  • WebKit 27.2

This version was also tested against the following stable channels:

  • Google Chrome 155
  • Microsoft Edge 155

1.64.0

🧰 WebMCP

New page.Webmcp and frame.Webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like
any other part of your app:

var browser = await playwright.Chromium.LaunchAsync(new() { Args = new[] { "--enable-features=WebMCP" } });
var page = await browser.NewPageAsync();
await page.GotoAsync("https://example.com");

foreach (var tool in await page.Webmcp.ToolsAsync())
    Console.WriteLine($"{tool.Name}: {tool.Description}");

var result = await page.Webmcp.CallToolAsync("add", new { a = 2, b = 40 });
Console.WriteLine(result?.GetProperty("content")[0].GetProperty("text")); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

await page.Screencast.StartAsync(new()
{
    Path = "video.webm",
    Size = new() { Width = 1920, Height = 1080 },
    Fps = 60,
});
await page.Screencast.ShowActionsAsync(new()
{
    Style = new()
    {
        Point = "width: 20px; height: 20px; border-radius: 50%; background: red",
        Highlight = "outline: 2px solid #​333; background: rgba(0, 128, 255, .15)",
        Title = "font-size: 16px",
    },
});
  • New RecordVideoFps option and new Fps option in Screencast.StartAsync(). Firefox and WebKit currently capture up to 25 frames per second.
  • New Style option takes CSS declarations for the Point marker, the target Highlight and the action Title. It replaces the FontSize option, which is now deprecated.
    ... (truncated)

1.63.0

🪟 Locate across frames

Page.FrameLocator() and Frame.FrameLocator() called without a selector search in any frame of the
subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await Page.FrameLocator().GetByRole(AriaRole.Button).ClickAsync();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it
matches elements in several frames.

👁️ Visible-only locators

New Locator.Visible returns a locator that matches only visible elements. It is the recommended
replacement for the :visible CSS pseudo-class:

await Page.Locator("button").Visible.ClickAsync();

🖼️ Aria and screen snapshots in traces

New AriaSnapshots and ScreenSnapshots options of Tracing.StartAsync() capture an aria snapshot and a screenshot of the page on every action:

await context.Tracing.StartAsync(new()
{
  Snapshots = true,
  AriaSnapshots = true,
  ScreenSnapshots = true
});

With aria and screen snapshots recorded, the new Display Aria mode in the trace viewer shows the action screenshot
side by side with the aria snapshot, and hovering an aria node highlights it on the screenshot.

New APIs

Browser and Context

Command line

  • pwsh bin/Debug/netX/playwright.ps1 install --no-remove keeps the browsers of other Playwright installations instead of removing them.
  • pwsh bin/Debug/netX/playwright.ps1 codegen --http-credentials records against pages behind HTTP authentication.

Announcements

... (truncated)

1.62.0

🖼️ WebP screenshots

page.screenshot() and locator.screenshot() can now capture screenshots in the WebP format — Playwright infers the format from a .webp file extension, or you can set the type explicitly. Quality 100 (the default) is lossless, while lower values use lossy compression:

await Page.ScreenshotAsync(new() { Path = "homepage.webp", Quality = 50 });

New APIs

  • New Scroll option (Auto | None) on actions to opt out of Playwright's automatic scroll-into-view.
  • New Locator.WaitForFunctionAsync() waits until a function — called with the matching element — returns a truthy value.
  • New APIResponse.TimingAsync() returns resource timing information for an API response.

Announcements

  • 📋 The clipboard is now isolated from the operating system in headless mode, so tests that use navigator.clipboard no longer read or overwrite the clipboard of the machine running them.
  • ⚠️ Debian 11 is not supported anymore.

Browser Versions

  • Chromium 151.0.7922.34
  • Mozilla Firefox 153.0
  • WebKit 26.5

This version was also tested against the following stable channels:

  • Google Chrome 151
  • Microsoft Edge 151

1.61.0

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via BrowserContext.Credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

var context = await browser.NewContextAsync();

// Seed a passkey your backend provisioned for a test user.
await context.Credentials.CreateAsync("example.com", new()
{
    Id = credentialId,
    UserHandle = userHandle,
    PrivateKey = privateKey,
    PublicKey = publicKey,
});
await context.Credentials.InstallAsync();

var page = await context.NewPageAsync();
await page.GotoAsync("https://example.com/login");
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with Credentials.GetAsync(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via Page.LocalStorage and Page.SessionStorage, reads and writes the page's storage for the current origin:

await page.LocalStorage.SetItemAsync("token", "abc");
var token = await page.LocalStorage.GetItemAsync("token");
var items = await page.SessionStorage.ItemsAsync();

New APIs

🛠️ Other improvements

  • Playwright now supports Ubuntu 26.04.
  • HAR and trace recordings now include WebSocket requests.

Browser Versions

  • Chromium 149.0.7827.55
  • Mozilla Firefox 151.0
  • WebKit 26.5

This version was also tested against the following stable channels:
... (truncated)

1.60.0

💬 Custom assertion messages

Expect() overloads now accept a custom message that is prepended to any failure, giving extra context in test reports:

await Expect(page.Locator("#status"), "Should be logged in").ToBeVisibleAsync();

When the assertion fails, the message is prefixed:

Should be logged in
Locator expected to be visible

🌐 HAR recording on Tracing

Tracing.StartHarAsync() / Tracing.StopHarAsync() expose HAR recording as a first-class tracing API, with the same Content, Mode and UrlFilter options as RecordHar:

await context.Tracing.StartHarAsync("trace.har");
var page = await context.NewPageAsync();
await page.GotoAsync("https://playwright.dev");
await context.Tracing.StopHarAsync();

🪝 Drop API

New Locator.DropAsync() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic [DataTransfer] in the page context — works cross-browser and is great for testing upload zones:

await page.Locator("#dropzone").DropAsync(new() {
    Files = new FilePayload() {
        Name = "note.txt",
        MimeType = "text/plain",
        Buffer = Encoding.UTF8.GetBytes("hello"),
    },
});

await page.Locator("#dropzone").DropAsync(new() {
    Data = new Dictionary<string, string> {
        ["text/plain"] = "hello world",
        ["text/uri-list"] = "https://example.com",
    },
});

🎯 Aria snapshots

Commits viewable in compare view.

Updated Microsoft.PowerShell.SDK from 7.6.5 to 7.6.9.

Release notes

Sourced from Microsoft.PowerShell.SDK's releases.

7.6.9

## 7.6.9

Build and Packaging Improvements

Update to .NET SDK 10.0.403

  • Merged PR 42305: [release/v7.6.9] Update branch for release

SHA256 Hashes of the release artifacts

  • hashes.sha256
    • 638E954664D07A29190570FAF862B8A50B35F7E1C10DBD0F0E8A7E0F70138B45
  • powershell-7.6.9-1.azl4.aarch64.rpm
    • FA959724AE0FB6D68731981DDDF5D35C3CD1F7308E9EAE8EC1F3D5159B4350A6
  • powershell-7.6.9-1.azl4.x86_64.rpm
    • 04607223FDA408A26CDF641BFE38F651965C2769EB30CEB17AEC4D4F570EE4FE
  • powershell-7.6.9-1.cm.aarch64.rpm
    • 80C6ED0A0BEA7D3EF827383C7DDB2F369DEA8F8A7FBBA7E32A510D114C980E1B
  • powershell-7.6.9-1.cm.x86_64.rpm
    • A5F9545679C194F8EB9C55B24D06843A148CF27AFFF40CE0DF55751C6A1607CD
  • powershell-7.6.9-1.rh.x86_64.rpm
    • 91C7F3D518389B1042B1465D70D365BCD040B67A3C0F79849658C695B777A6BE
  • powershell-7.6.9-linux-arm32.tar.gz
    • 16C471C8ADCD5AFD9B533C77943AFC347716345B9859654D0EE7A1C4307A478F
  • powershell-7.6.9-linux-arm64.tar.gz
    • 02EB9991AF447C7E7FE881ACDE195961AFD397C40B8EB1C2B3856B84EC2D85F2
  • powershell-7.6.9-linux-musl-x64.tar.gz
    • F83DF6705EDAAE07DB970DCC6C34AD6583D33A2F6199F1B55CDC5354FBB9001C
  • powershell-7.6.9-linux-x64-fxdependent.tar.gz
    • E62256F057E1D17B0626BEB781A3A0913F15B231E4BCC767AA1B00FCD0CC6AB0
  • powershell-7.6.9-linux-x64-musl-noopt-fxdependent.tar.gz
    • 639A79DBDAAA0F17F05A6E89F67795CD00BB008376E98A3581F1B5D1F23B5B68
  • powershell-7.6.9-linux-x64.tar.gz
    • 1DA6D6D6035D651F20E70DDEE7C4C15AC6AB8B9FB40EE92240D91263F28A884B
  • powershell-7.6.9-osx-arm64.pkg
    • 9002562086AD18DCDC4A1156F6CD6467CFB5A91B28206E56491212193B68E5E6
  • powershell-7.6.9-osx-arm64.tar.gz
    ... (truncated)

7.6.8

## 7.6.8

General Cmdlet Updates and Fixes

  • Remove the Update Notification feature from PowerShell (#​28242)

Build and Packaging Improvements

Update to .NET SDK 10.0.402

  • Merged PR 42142: [release/v7.6.8] Update branch for release

SHA256 Hashes of the release artifacts

  • hashes.sha256
    • 8B1E273A18AB7B3AB0D3FB1DC9FDC8F9631FEC092EF48CA4CCFCAF32D6012B24
  • powershell-7.6.8-1.azl4.aarch64.rpm
    • 20658D1269AFBABE57CBD806AF8D96EFF23106C0FDA5665F8AB608512388731C
  • powershell-7.6.8-1.azl4.x86_64.rpm
    • 7AF32201D27E64C0D52EA68E9D6CF5647C50B7E43E08F83CA849ECEA99164737
  • powershell-7.6.8-1.cm.aarch64.rpm
    • 2633A209AFE1511C16D0C6E8914C1AEA4B7F8448A76629392A641A5623F83449
  • powershell-7.6.8-1.cm.x86_64.rpm
    • 43CF78FB105A9F8BCE35E89EEC41B7D92D1D84F7696A90DBBCB0F53B6DB2A5E2
  • powershell-7.6.8-1.rh.x86_64.rpm
    • 0DBE9A3181BE07A9324CD48DB640B0D89B211D08CE9EAFB50FA96F611C308065
  • powershell-7.6.8-linux-arm32.tar.gz
    • 544A57BFF2135E0EB9EE21230017F6FF755DD4E78206510113B2EDEE34A8CEF0
  • powershell-7.6.8-linux-arm64.tar.gz
    • 3179E07FD98F026D39C730EBCB7626D071AAC3351B171DDA13F9F38D99EFCEF0
  • powershell-7.6.8-linux-musl-x64.tar.gz
    • 6530AAE05371E40859315B62D465686560746FEB1F69EDA84A56E3326613BDA6
  • powershell-7.6.8-linux-x64-fxdependent.tar.gz
    • 5DE179711F7D1845A379BA7AEB2E6DA39B0736A83B20655DA00C70A197BC7E3F
  • powershell-7.6.8-linux-x64-musl-noopt-fxdependent.tar.gz
    • 6ACD97CB531E4D732AD55BCC258A10A59FF6478B30F7BC6335BA6AD3406186D4
  • powershell-7.6.8-linux-x64.tar.gz
    ... (truncated)

7.6.7

## [7.6.7]

Engine Updates and Fixes

  • Tolerate IO/JSON errors reading the per-user powershell.config.json (#​28084)

General Cmdlet Updates and Fixes

  • Prevent localization of WPF key gesture strings (#​28097)
  • Allow user to force the default implicit formatting to use AutoSize (#​28096)
  • Handle MSIX installation specially when prepending to PATH (#​28091)
  • Add GetImportModuleCommand method and session restriction check in Show-Command (#​28088)

Tests

  • Fix the PATH test for MSIX installed PowerShell (#​28108)
  • Fix LocProject.json tests and trigger CIs on changes to LocProject.json (#​28104)
  • Mark DSC Profile tests pending on MSIX test runs (#​28092)

Build and Packaging Improvements

Update to .NET SDK 10.0.402

  • Move to the latest Microsoft.PowerShell.Native package and add test (#​28176)
  • Update Microsoft.PowerShell.Native package version (#​28171)
  • Bump CodeQL init and analyze actions to 4.38.2 (#​28156)
  • Add native Azure Linux 4 RPM packaging (#​28154)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2725870 (#​28105)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2734773 (#​28102)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2724482 (#​28101)
  • Simplify Microsoft Store listing metadata (#​28103)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2716742 (#​28100)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2730146 (#​28099)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2726204 (#​28098)
  • Add PDP.xml to the LocProject.json file (#​28095)
  • Add Azure Linux 4 RPM support (#​28039)
  • Revert "Simplify Microsoft Store listing metadata" (#​28094)
  • Simplify Microsoft Store listing metadata (#​28079)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2704971 (#​28080)
  • Change Windows CI to stop using PowerShell 5.1 (#​28081)
  • Support macOS signatures in nonofficial pipelines (#​28076)
  • Bump github/codeql-action from 4.35.4 to 4.36.0 (#​28083)
  • Bump actions/checkout from 6.0.2 to 7.0.1 (#​28153)
  • ... (truncated)

    7.6.6

    ## [7.6.6]

    Engine Updates and Fixes

    • Fix FileOnlyEntry crashing on older versions of Windows (#​27931)
    • Add support for new WLDP setting EnableFileOnlyEntry (#​27922)

    General Cmdlet Updates and Fixes

    • Remove the <assembly> element from CmdletizationCoreResources.resx (#​27932)

    Tests

    • Fix the localization tests for Release Automation (#​27945)

    Build and Packaging Improvements

    Update to .NET SDK 10.0.401

    • Update AppxManifest.xml to only declare en-US for the <Resources> element (#​27941)
    • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2701735 (#​27895) (#​27942)
    • Produce satellite assemblies in Windows release build and properly remove them when they are not required (#​27943)
    • Update the manifest resource names for the localized resources embedded in satellite assemblies (#​27921)
    • Update LocProject.json to list each English resource file directly (#​27937)
    • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2691582 (#​27936)
    • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2684623 (#​27935)
    • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2674492 (#​27930)
    • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2670960 (#​27929)
    • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2661935 (#​27928)
    • Use Custom Validation Policy for vPack Pipeline (#​27914)
    • Fix comments in CmdletizationCoreResources.resx (#​27924)
    • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2660148 (#​27923)
    • Fix install dotnet for non early access release (#​27927)
    • Fix the W3C URIs in .resx resource files (#​27917)
    • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2652124 (#​27918)
    • Prepare for onboarding PowerShell to the Native2Native localization pipeline (#​27916)
    • Add the group 'mscodehub-feed-read-akv' (#​27894)
    • Add the group 'mscodehub-feed-read-general' for MSIXBundle-vpack pipeline (#​27893)
    • Add debug statement for ResGen build (#​27890)

    ... (truncated)

    Commits viewable in compare view.

Updated MongoDB.Driver from 3.11.1 to 3.13.0.

Release notes

Sourced from MongoDB.Driver's releases.

3.13.0

[!IMPORTANT]
This release addresses a number of CVEs reported against the driver, along with a small number of related fixes. Several fixes make the driver stricter about invalid input: it now rejects malformed raw BSON, out-of-range binary subtypes, GeoJSON extra members that collide with declared members, replacement documents that start with an operator, and LINQ field names that the server would reinterpret. A few generated updates and schema patterns also change shape, and BsonSymbolTable and one CSFLE PatternProperty overload are now marked obsolete. Please review the behavior changes listed under each security fix below before upgrading.

This is the general availability release for the 3.13.0 version of the driver.

Security fixes:

  • CSHARP-6157 / CVE-2026-114646: NoSQL command injection via mismatched raw BSON length prefix written verbatim to the wire
    • Behavior change: writing a raw BSON document or array now throws ArgumentException if its declared length is inconsistent with the buffer. Bytes past the declared length are ignored.
  • CSHARP-6162 / CVE-2026-114644: Memory-exhaustion denial of service via unbounded symbol interning during BSON/JSON deserialization
    • Behavior change: BsonSymbol values are no longer interned and BsonSymbolTable is marked obsolete. Use BsonSymbol.Create or the implicit string conversion instead. Equality still compares by name; only reference identity changes.
  • CSHARP-6166 / CVE-2026-114654: BSON output corruption via out-of-range binary subtype bypassing UUID and OldBinary guards
    • Behavior change: BsonBinaryData, the JSON reader (BinData, HexData and legacy $type) and the binary writer now reject binary subtypes outside 0 to 255.
  • CSHARP-6168 / CVE-2026-114652: Update operator injection via single-element list rewriting in the update builder
    • Behavior change: PushEach and AddToSetEach with a single value now always render $each, and PullAll with a single value now always renders $pullAll. Previously a single value was unwrapped or rendered as $pull.
  • CSHARP-6170 / CVE-2026-114651: Cross-document data leak via malformed BSON array parsing in reused thread buffer
  • CSHARP-6174 / CVE-2026-114653: Silent client-side encryption bypass via unescaped field-name regex in CSFLE schema builder
    • Behavior change: the PatternProperty overload that takes a field expression is now obsolete; use Property to configure a specific field. Field names passed to PatternProperty are now matched both as literal field names and as regular expressions.
  • CSHARP-6179 / CVE-2026-114643: Geometry override via duplicate-key BSON injection through GeoJSON extra members
    • Behavior change: GeoJSON serialization now throws BsonSerializationException when an extra member has the same name as a declared member.
  • CSHARP-6180 / CVE-2026-114650: Plaintext exposure of encrypted fields via ANSI code-page corruption of database name
    • Behavior change: automatic encryption now passes the database name to libmongocrypt as UTF-8 instead of the Windows ANSI code page, so databases with non-ASCII names match schema map namespaces correctly.
  • CSHARP-6181 / CVE-2026-114648: Query redirection via unvalidated string keys spliced into LINQ filter field paths
    • Behavior change: LINQ translation now throws NotSupportedException for dictionary keys, BsonDocument keys and Mql.Field names that the server would reinterpret: names containing ".", names starting with "$" at the start of a path, and positional operators.
  • CSHARP-6184 / CVE-2026-114649: Authentication bypass via issuer-and-serial-only certificate equality in shared cluster cache
    • Behavior change: client certificate comparison in SslSettings, which decides whether clients share a cluster, now compares the full certificate (SHA-256 hash) and whether a private key is present, instead of only issuer and serial number.
  • CSHARP-6186 / CVE-2026-114647: NoSQL operator injection via unvalidated replacement document in findOneAndReplace
    • Behavior change: FindOneAndReplace now throws ArgumentException when the first element name of the replacement document starts with $, consistent with ReplaceOne.

Improvements:

  • CSHARP-5030: Only modify TCP buffer sizes if explicitly configured

Fixes:

  • CSHARP-6237: LINQ Concat throws NullReferenceException when the second queryable has no pipeline stages
  • CSHARP-6257: Fix WithTransaction not retrying TransientTransactionError when MongoClientSettings is created with its constructor
  • CSHARP-6220: Prevent cancellation-token retention in pre-.NET 6 WaitAsync

Maintenance:

  • CSHARP-6225: Latest server binary downloads require private S3
  • CSHARP-6263: Fix incorrect XML doc summaries for PullAll and Pop update builders

The full list of issues resolved in this release is available at CSHARP JIRA project.

Documentation on the .NET driver can be found here.

3.12.0

This is the general availability release for the 3.12.0 version of the driver.

The main new features in 3.12.0 include:

  • CSHARP-6214: Implement srvAllowedHostsSuffix URI option

Fixes:

  • CSHARP-6223: Fix client-side projection crash on member-init projections

The full list of issues resolved in this release is available at CSHARP JIRA project.

Documentation on the .NET driver can be found here.

3.11.2

[!IMPORTANT]
This is a security patch release. It addresses two CVEs reported against the driver, along with a small number of related fixes. There are no public API changes and no application code changes are required to upgrade. Note that the shape of some queries generated by the LINQ provider and by GridFS has changed — see the individual tickets below.

This is a patch release that contains fixes and stability improvements:

The full list of issues resolved in this release is available at CSHARP JIRA project.

Documentation on the .NET driver can be found here.

Commits viewable in compare view.

Updated MSTest from 4.2.1 to 4.5.2.

Release notes

Sourced from MSTest's releases.

4.5.2

See the release notes here.

See the Microsoft.Testing.Platform 2.5.2 release notes here.

4.5.1

See the release notes here

4.5.0

See the release notes here

4.4.1

See the release notes here

4.4.0

See the release notes here

4.3.3

See the release notes here

4.3.2

See the release notes here

4.3.0

See the release notes here

4.2.3

See the release notes here

4.2.2

See the release notes here

Commits viewable in compare view.

Updated MSTest.TestAdapter from 4.2.1 to 4.5.2.

Release notes

Sourced from MSTest.TestAdapter's releases.

4.5.2

See the release notes here.

See the Microsoft.Testing.Platform 2.5.2 release notes here.

4.5.1

See the release notes here

4.5.0

See the release notes here

4.4.1

See the release notes here

4.4.0

See the release notes here

4.3.3

See the release notes here

4.3.2

See the release notes here

4.3.0

See the release notes here

4.2.3

See the release notes here

4.2.2

See the release notes here

Commits viewable in compare view.

Updated MSTest.TestFramework from 4.2.1 to 4.5.2.

Release notes

Sourced from MSTest.TestFramework's releases.

4.5.2

See the release notes here.

See the Microsoft.Testing.Platform 2.5.2 release notes here.

4.5.1

See the release notes here

4.5.0

See the release notes here

4.4.1

See the release notes here

4.4.0

See the release notes here

4.3.3

See the release notes here

4.3.2

See the release notes here

4.3.0

See the release notes here

4.2.3

See the release notes here

4.2.2

See the release notes here

Commits viewable in compare view.

Updated RestSharp from 114.0.0 to 114.1.0.

Release notes

Sourced from RestSharp's releases.

114.1.0

What's Changed

New Contributors

Full Changelog: restsharp/RestSharp@114.0.0...114.1.0

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore from 10.2.3 to 10.3.1.

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

10.3.1

What's Changed

Deprecations

[!IMPORTANT]
Swashbuckle.AspNetCore.ApiTesting.Xunit depended on Xunit v2, which is no longer supported.

The package has been removed and no further versions will be released.

New Contributors

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.3.0...v10.3.1

10.3.0

What's Changed

_Descript...

Description has been truncated

dependabot Bot and others added 10 commits November 3, 2026 11:59
Bumps [actions/configure-pages](https://github.com/actions/configure-pages) from 5 to 6.
- [Release notes](https://github.com/actions/configure-pages/releases)
- [Commits](actions/configure-pages@v5...v6)

---
updated-dependencies:
- dependency-name: actions/configure-pages
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from d0d8abe699bfb85fec6de9f7adb5ae17292296ff to d0cc045d04ccac9d8b7881df0226f9e82c39688e.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@d0d8abe...d0cc045)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: d0cc045d04ccac9d8b7881df0226f9e82c39688e
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [gitleaks/gitleaks-action](https://github.com/gitleaks/gitleaks-action) from 2 to 3.
- [Release notes](https://github.com/gitleaks/gitleaks-action/releases)
- [Commits](gitleaks/gitleaks-action@v2...v3)

---
updated-dependencies:
- dependency-name: gitleaks/gitleaks-action
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) from 3 to 5.
- [Release notes](https://github.com/actions/upload-pages-artifact/releases)
- [Commits](actions/upload-pages-artifact@v3...v5)

---
updated-dependencies:
- dependency-name: actions/upload-pages-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the dotnet-sdk-minor-patch group with 1 update: [dotnet-sdk](https://github.com/dotnet/sdk).


Updates `dotnet-sdk` from 10.0.102 to 10.0.403
- [Release notes](https://github.com/dotnet/sdk/releases)
- [Commits](dotnet/sdk@v10.0.102...v10.0.403)

---
updated-dependencies:
- dependency-name: dotnet-sdk
  dependency-version: 10.0.403
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-sdk-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps coverlet.collector from 10.0.0 to 10.1.0
Bumps Dapper from 2.1.79 to 2.1.89
Bumps Microsoft.AspNetCore.OpenApi from 10.0.11 to 10.0.14
Bumps Microsoft.Data.Sqlite from 10.0.11 to 10.0.14
Bumps Microsoft.Data.Sqlite.Core from 10.0.11 to 10.0.14
Bumps Microsoft.Extensions.Hosting from 10.0.11 to 10.0.14
Bumps Microsoft.Extensions.Hosting.Systemd from 10.0.11 to 10.0.14
Bumps Microsoft.Extensions.Hosting.WindowsServices from 10.0.11 to 10.0.14
Bumps Microsoft.Extensions.Logging from 10.0.11 to 10.0.14
Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.11 to 10.0.14
Bumps Microsoft.NET.Test.Sdk from 18.4.0 to 18.11.0
Bumps Microsoft.Playwright.MSTest from 1.59.0 to 1.64.1
Bumps Microsoft.PowerShell.SDK from 7.6.5 to 7.6.9
Bumps MongoDB.Driver from 3.11.1 to 3.13.0
Bumps MSTest from 4.2.1 to 4.5.2
Bumps MSTest.TestAdapter from 4.2.1 to 4.5.2
Bumps MSTest.TestFramework from 4.2.1 to 4.5.2
Bumps RestSharp from 114.0.0 to 114.1.0
Bumps Swashbuckle.AspNetCore from 10.2.3 to 10.3.1
Bumps System.Diagnostics.PerformanceCounter from 10.0.11 to 10.0.14
Bumps System.Management.Automation from 7.6.0 to 7.6.9
Bumps System.ServiceProcess.ServiceController from 10.0.11 to 10.0.14

---
updated-dependencies:
- dependency-name: coverlet.collector
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: coverlet.collector
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: coverlet.collector
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: Dapper
  dependency-version: 2.1.89
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Data.Sqlite.Core
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Data.Sqlite.Core
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Logging
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Logging
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Hosting.Systemd
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Hosting.Systemd
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Hosting.WindowsServices
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Hosting.WindowsServices
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: System.ServiceProcess.ServiceController
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Playwright.MSTest
  dependency-version: 1.64.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.PowerShell.SDK
  dependency-version: 7.6.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: System.Diagnostics.PerformanceCounter
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: System.ServiceProcess.ServiceController
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: MongoDB.Driver
  dependency-version: 3.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: MongoDB.Driver
  dependency-version: 3.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: MSTest
  dependency-version: 4.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: MSTest
  dependency-version: 4.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: MSTest.TestAdapter
  dependency-version: 4.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: MSTest.TestFramework
  dependency-version: 4.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: RestSharp
  dependency-version: 114.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: System.Diagnostics.PerformanceCounter
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: System.Management.Automation
  dependency-version: 7.6.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: System.ServiceProcess.ServiceController
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: System.ServiceProcess.ServiceController
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Nov 3, 2026
…0261103

fix(docs): complete GitHub automation retirement evidence
…ons/configure-pages-6

chore(deps): bump actions/configure-pages from 5 to 6
…ons/upload-artifact-7

chore(deps): bump actions/upload-artifact from 4 to 7
…al-sh/setup-uv-d0cc045d04ccac9d8b7881df0226f9e82c39688e

chore(deps): bump astral-sh/setup-uv from d0d8abe699bfb85fec6de9f7adb5ae17292296ff to d0cc045d04ccac9d8b7881df0226f9e82c39688e
…eaks/gitleaks-action-3

chore(deps): bump gitleaks/gitleaks-action from 2 to 3
…ons/upload-pages-artifact-5

chore(deps): bump actions/upload-pages-artifact from 3 to 5
…dk-minor-patch-03e2594251

chore(deps): bump dotnet-sdk from 10.0.102 to 10.0.403 in the dotnet-sdk-minor-patch group
@hindermath
hindermath merged commit 286a91b into main Nov 3, 2026
24 checks passed
@hindermath
hindermath deleted the dependabot/nuget/CtrlWorkerCommon/nuget-minor-patch-03328327f6 branch November 3, 2026 18:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant