Skip to content

Bump AspNetCore.HealthChecks.NpgSql and 12 others - #74

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/dotnet-500d2d684d
Closed

Bump AspNetCore.HealthChecks.NpgSql and 12 others#74
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/dotnet-500d2d684d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 9, 2026

Copy link
Copy Markdown
Contributor

Pinned AspNetCore.HealthChecks.NpgSql at 8.0.2.

Release notes

Sourced from AspNetCore.HealthChecks.NpgSql's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned AspNetCore.HealthChecks.UI at 8.0.2.

Release notes

Sourced from AspNetCore.HealthChecks.UI's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned AspNetCore.HealthChecks.UI.Client at 8.0.1.

Release notes

Sourced from AspNetCore.HealthChecks.UI.Client's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned AspNetCore.HealthChecks.UI.InMemory.Storage at 8.0.1.

Release notes

Sourced from AspNetCore.HealthChecks.UI.InMemory.Storage's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned BCrypt.Net-Next at 4.2.0.

Release notes

Sourced from BCrypt.Net-Next's releases.

4.2.0

Full Changelog: BcryptNet/bcrypt.net@v4.1.0...v4.2.0

4.1.0

What's Changed

New Contributors

Full Changelog: BcryptNet/bcrypt.net@4.0.3...v4.1.0

Commits viewable in compare view.

Updated FluentAssertions from 8.0.0 to 8.10.0.

Release notes

Sourced from FluentAssertions's releases.

8.10.0

What's Changed

Improvements

Documentation

Others

Full Changelog: fluentassertions/fluentassertions@8.9.0...8.10.0

8.9.0

[!WARNING]
For projects targeting .NET 9, you need at least .NET SDK 9.0.200 as earlier versions will trigger compile errors because of invalid overload resolution. See #​3225

What's Changed

New features

Improvements

Fixes

Documentation

Others

8.8.0

What's Changed

New features

Improvements

Documentation

Others

Full Changelog: fluentassertions/fluentassertions@8.7.1...8.8.0

8.7.1

What's Changed

Others

Full Changelog: fluentassertions/fluentassertions@8.7.0...8.7.1

8.7.0

What's Changed

New features

Others

Full Changelog: fluentassertions/fluentassertions@8.6.0...8.7.0

8.6.0

What's Changed

Improvements

Others

New Contributors

Full Changelog: fluentassertions/fluentassertions@8.5.0...8.6.0

8.5.0

What's Changed

New features

Fixes

Others

Full Changelog: fluentassertions/fluentassertions@8.4.0...8.5.0

8.4.0

What's Changed

Improvements

Others

New Contributors

Full Changelog: fluentassertions/fluentassertions@8.3.0...8.4.0

8.3.0

What's Changed

Improvements

Others

Full Changelog: fluentassertions/fluentassertions@8.2.0...8.3.0

8.2.0

What's Changed

Improvements

Fixes

Others

Full Changelog: fluentassertions/fluentassertions@8.1.1...8.2.0

8.1.1

What's Changed

Fixes

Full Changelog: fluentassertions/fluentassertions@8.1.0...8.1.1

8.1.0

What's Changed

Improvements

Fixes

Documentation

Others

New Contributors

Full Changelog: fluentassertions/fluentassertions@8.0.1...8.1.0

8.0.1

What's Changed

Improvements

Others

Full Changelog: fluentassertions/fluentassertions@8.0.0...8.0.1

Commits viewable in compare view.

Pinned Marten at 8.37.4.

Release notes

Sourced from Marten's releases.

8.37.4

Security release. Fixes SQL injection in the LINQ provider via unescaped string literals.

Several LINQ code paths interpolated a runtime, potentially attacker-influenced value into generated SQL as a single-quoted literal without escaping or parameterization; a value containing a single quote could break out and inject SQL. The primary vector — a Dictionary<,> indexer key in a Where filter — was reported privately with an executed proof-of-concept (filter / multi-tenant authorization bypass, blind exfiltration).

Fixed sinks (this 8.x line):

  • DictionaryItemMember — dictionary indexer key
  • DictionaryContainsKeyFilterContainsKey key (Newtonsoft serializer + Enum branch)
  • SelectParser — constant string projected via Select(...)

All users on 8.x should upgrade. A GitHub Security Advisory (with CVE) is being coordinated.

Back-port of #​4911 (9.x).

8.37.3

Maintenance release on the 8.0 line.

Fixes

  • #​4718 — projections rebuild must skip subscriptions. When an event subscription was registered (e.g. Wolverine's PublishEventsToWolverine(...) with SubscribeFromPresent()), dotnet run -- projections rebuild threw No registered projection matches the name '...'. A subscription is Async, so its name was fed into the rebuild path → RebuildProjectionAsyncTryFindProjection (which only searches projections). The rebuild path now skips event subscriptions and Live-lifecycle projections. Subscriptions still run continuously and still appear in projections list; only rebuild skips them, and a subscription name passed explicitly to rebuild is a clean no-op.

    Backported to the JasperFx 1.x line in JasperFx.Events 1.36.2 (JasperFx/jasperfx#​460, tracked by JasperFx/jasperfx#​459).

Dependencies

  • JasperFx.Events 1.35.01.36.2
  • JasperFx 1.29.11.31.0

8.37.2

Patch release containing #​4599: EnumerableContains.Parse crash on programmatically-built Contains() receivers (e.g. HotChocolate's [UseFiltering] in operator) when the wrapper type overrides ToString(). See #​4600 (master) and #​4601 (8.0 backport).

8.37.1

What's Changed

Full Changelog: JasperFx/marten@V8.37.0...V8.37.1

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 8.0.0 to 8.0.30.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

8.0.30

Release

What's Changed

New Contributors

Full Changelog: dotnet/aspnetcore@v8.0.29...v8.0.30

8.0.29

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.28...v8.0.29

8.0.28

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.27...v8.0.28

8.0.27

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.26...v8.0.27

8.0.26

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.25...v8.0.26

8.0.25

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.24...v8.0.25

8.0.24

Release

8.0.23

Release

What's Changed

https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs

8.0.22

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.21...v8.0.22

8.0.21

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.19...v8.0.20

8.0.18

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

  • Update dependencies from dotnet/arcade (#​61832)
    This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
    The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

  • Update branding to 8.0.17 (#​61830)
    The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

  • Merging internal commits for release/8.0 (#​61924)
    This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.


This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

8.0.13

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.11...v8.0.12

8.0.11

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.10...v8.0.11

8.0.10

Release

8.0.8

Release

8.0.7

Release

8.0.6

Release

8.0.5

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.4...v8.0.5

8.0.4

Release

8.0.3

Release

8.0.2

Release

8.0.1

Release

Commits viewable in compare view.

Pinned Microsoft.Extensions.Http.Resilience at 10.9.0.

Release notes

Sourced from Microsoft.Extensions.Http.Resilience's releases.

10.9.0

Vers...

Description has been truncated

@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 9, 2026
@dependabot
dependabot Bot requested a review from arnelirobles as a code owner August 9, 2026 08:28
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Aug 9, 2026
@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@dependabot dependabot Bot changed the title Bump the dotnet group with 13 updates Bump AspNetCore.HealthChecks.NpgSql and 12 others Aug 11, 2026
@dependabot
dependabot Bot force-pushed the dependabot/nuget/dotnet-500d2d684d branch from 3923884 to 4e9cff4 Compare August 11, 2026 04:48
Bumps AspNetCore.HealthChecks.NpgSql from 8.0.0 to 8.0.2
Bumps AspNetCore.HealthChecks.UI from 8.0.0 to 8.0.2
Bumps AspNetCore.HealthChecks.UI.Client from 8.0.0 to 8.0.1
Bumps AspNetCore.HealthChecks.UI.InMemory.Storage from 8.0.0 to 8.0.1
Bumps BCrypt.Net-Next from 4.0.3 to 4.2.0
Bumps FluentAssertions from 8.0.0 to 8.10.0
Bumps Marten from 8.37.0 to 8.37.4
Bumps Microsoft.AspNetCore.Mvc.Testing from 8.0.0 to 8.0.29
Bumps Microsoft.Extensions.Http.Resilience from 10.1.0 to 10.8.0
Bumps Microsoft.NET.Test.Sdk from 17.11.1 to 17.14.1
Bumps Otp.NET from 1.4.0 to 1.4.1
Bumps Testcontainers.Minio from 4.9.0 to 4.13.0
Bumps Testcontainers.PostgreSql from 4.9.0 to 4.13.0

---
updated-dependencies:
- dependency-name: AspNetCore.HealthChecks.NpgSql
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: AspNetCore.HealthChecks.UI
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: AspNetCore.HealthChecks.UI.Client
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: AspNetCore.HealthChecks.UI.InMemory.Storage
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: BCrypt.Net-Next
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: FluentAssertions
  dependency-version: 8.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Marten
  dependency-version: 8.37.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 8.0.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 10.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Otp.NET
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Testcontainers.Minio
  dependency-version: 4.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Testcontainers.PostgreSql
  dependency-version: 4.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/nuget/dotnet-500d2d684d branch from 4e9cff4 to 3edb101 Compare August 11, 2026 05:11
@dependabot @github

dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant