chore(deps): Bump the nuget-dependencies group with 4 updates

[dependabot]

Updated Microsoft.NET.Test.Sdk from 18.6.0 to 18.7.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.7.0

What's Changed

• Add ARM64 msdia140.dll support to test platform packages by @​jamesmcroft in Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15689
• Update System.Memory from 4.5.5 to 4.6.3 by @​nohwnd in Update System.Memory from 4.5.5 to 4.6.3 microsoft/vstest#15706

New Contributors

• @​jamesmcroft made their first contribution in Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15689

Full Changelog: microsoft/vstest@v18.6.0...v18.7.0

Commits viewable in compare view.

Updated Microsoft.Playwright.NUnit from 1.60.0 to 1.61.0.

Release notes

Sourced from Microsoft.Playwright.NUnit's releases.

1.61.0

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via BrowserContext.Credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

var context = await browser.NewContextAsync();

// Seed a passkey your backend provisioned for a test user.
await context.Credentials.CreateAsync("example.com", new()
{
    Id = credentialId,
    UserHandle = userHandle,
    PrivateKey = privateKey,
    PublicKey = publicKey,
});
await context.Credentials.InstallAsync();

var page = await context.NewPageAsync();
await page.GotoAsync("https://example.com/login");
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with Credentials.GetAsync(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via Page.LocalStorage and Page.SessionStorage, reads and writes the page's storage for the current origin:

await page.LocalStorage.SetItemAsync("token", "abc");
var token = await page.LocalStorage.GetItemAsync("token");
var items = await page.SessionStorage.ItemsAsync();

New APIs

• APIResponse.SecurityDetailsAsync() and APIResponse.ServerAddrAsync() mirror the browser-side Response.SecurityDetailsAsync() and Response.ServerAddrAsync().
• New option ArtifactsDir in BrowserType.ConnectOverCDPAsync() controls where artifacts such as traces and downloads are stored when attached to an existing browser.
• New option Cursor in Screencast.ShowActionsAsync() controls the cursor decoration rendered for pointer actions.
• The OnFrame callback in Screencast.StartAsync() now receives a Timestamp of when the frame was presented by the browser.

🛠️ Other improvements

• Playwright now supports Ubuntu 26.04.
• HAR and trace recordings now include WebSocket requests.

Browser Versions

• Chromium 149.0.7827.55
• Mozilla Firefox 151.0
• WebKit 26.5

This version was also tested against the following stable channels:
... (truncated)

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.AspNetCore from 1.15.2 to 1.16.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.AspNetCore's releases.

1.16.0

• NuGet: OpenTelemetry.Extensions.AWS v1.16.0

  • Fix sampling behaviour to be compatible with .NET 11.
    (#​4396)

  • Updated OpenTelemetry core component version(s) to 1.16.0.
    (#​4487)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Instrumentation.AWS v1.16.0

  • Add instrumentation scope version and schema URL to metrics and traces.
    (#​4063)

  • Pass AWS attribute values to created meters as tags.
    (#​4063)

  • Capture SNS TopicArn as the aws.sns.topic.arn span attribute.
    (#​4043)

  • Add cloud.region attribute to all AWS SDK client spans.
    (#​4043)

  • Add messaging attributes for AWS SNS and SQS.
    (#​4043)

  • BREAKING: Update latest AWS Semantic Conventions to 1.40.0.
    (#​4043)

  • Fix suppression scope leakage when SuppressDownstreamInstrumentation is
    enabled.
    (#​4304)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Instrumentation.AWSLambda v1.16.0

  • Update System.Text.Json for netstandard2.0 to 8.0.5.
    (#​4154)

  • Add instrumentation scope version and schema URL to traces.
    (#​4063)

  See CHANGELOG for details.

1.16.0-beta.1

• NuGet: OpenTelemetry.Instrumentation.ServiceFabricRemoting v1.16.0-beta.1

  • Raised the minimum required version of Microsoft.ServiceFabric.Actors and
    Microsoft.ServiceFabric.Services.Remoting from 7.1.2448 to 8.4.268, as the
    7.1 Service Fabric runtime is going out of support.
    (#​4510)

  • Updated OpenTelemetry core component version(s) to 1.16.0.
    (#​4487)

  See CHANGELOG for details.

1.16.0-alpha.1

• NuGet: OpenTelemetry.Instrumentation.EventCounters v1.16.0-alpha.1

  • Fixed OnEventWritten processing events from EventSources that were not
    configured via AddEventSources.
    (#​4031)

  • Updated OpenTelemetry core component version(s) to 1.16.0.
    (#​4487)

  See CHANGELOG for details.

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.Http from 1.15.1 to 1.16.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.Http's releases.

1.16.0

• NuGet: OpenTelemetry.Extensions.AWS v1.16.0

  • Fix sampling behaviour to be compatible with .NET 11.
    (#​4396)

  • Updated OpenTelemetry core component version(s) to 1.16.0.
    (#​4487)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Instrumentation.AWS v1.16.0

  • Add instrumentation scope version and schema URL to metrics and traces.
    (#​4063)

  • Pass AWS attribute values to created meters as tags.
    (#​4063)

  • Capture SNS TopicArn as the aws.sns.topic.arn span attribute.
    (#​4043)

  • Add cloud.region attribute to all AWS SDK client spans.
    (#​4043)

  • Add messaging attributes for AWS SNS and SQS.
    (#​4043)

  • BREAKING: Update latest AWS Semantic Conventions to 1.40.0.
    (#​4043)

  • Fix suppression scope leakage when SuppressDownstreamInstrumentation is
    enabled.
    (#​4304)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Instrumentation.AWSLambda v1.16.0

  • Update System.Text.Json for netstandard2.0 to 8.0.5.
    (#​4154)

  • Add instrumentation scope version and schema URL to traces.
    (#​4063)

  See CHANGELOG for details.

1.16.0-beta.1

• NuGet: OpenTelemetry.Instrumentation.ServiceFabricRemoting v1.16.0-beta.1

  • Raised the minimum required version of Microsoft.ServiceFabric.Actors and
    Microsoft.ServiceFabric.Services.Remoting from 7.1.2448 to 8.4.268, as the
    7.1 Service Fabric runtime is going out of support.
    (#​4510)

  • Updated OpenTelemetry core component version(s) to 1.16.0.
    (#​4487)

  See CHANGELOG for details.

1.16.0-alpha.1

• NuGet: OpenTelemetry.Instrumentation.EventCounters v1.16.0-alpha.1

  • Fixed OnEventWritten processing events from EventSources that were not
    configured via AddEventSources.
    (#​4031)

  • Updated OpenTelemetry core component version(s) to 1.16.0.
    (#​4487)

  See CHANGELOG for details.

1.15.2

• NuGet: OpenTelemetry.Exporter.Geneva v1.15.2

  • Updated OpenTelemetry core component version(s) to 1.15.3.
    (#​4166)

  See CHANGELOG for details.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 4 package(s) with unknown licenses.

See the Details below.

License Issues

JD.Writer.E2E/JD.Writer.E2E.csproj

Package	Version	License	Issue Type
Microsoft.NET.Test.Sdk	18.7.0	Null	Unknown License
Microsoft.Playwright.NUnit	1.61.0	Null	Unknown License

JD.Writer.ServiceDefaults/JD.Writer.ServiceDefaults.csproj

Package	Version	License	Issue Type
OpenTelemetry.Instrumentation.AspNetCore	1.16.0	Null	Unknown License
OpenTelemetry.Instrumentation.Http	1.16.0	Null	Unknown License

Denied Licenses:

GPL-2.0, GPL-3.0, AGPL-3.0

OpenSSF Scorecard

Package	Version	Score	Details
nuget/Microsoft.NET.Test.Sdk	18.7.0	🟢 5.2	Details Check Score Reason Code-Review 🟢 9 Found 23/25 approved changesets -- score normalized to 9 Maintained 🟢 10 30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10 Security-Policy 🟢 10 security policy file detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Binary-Artifacts ⚠️ 0 binaries present in source code Branch-Protection ⚠️ 2 branch protection is not maximal on development and all release branches Fuzzing ⚠️ 0 project is not fuzzed Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies 🟢 9 dependency not pinned by hash detected -- score normalized to 9 SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
nuget/Microsoft.Playwright.NUnit	1.61.0	Unknown	Unknown
nuget/OpenTelemetry.Instrumentation.AspNetCore	1.16.0	🟢 8.3	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10 Dependency-Update-Tool 🟢 10 update tool detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies 🟢 9 dependency not pinned by hash detected -- score normalized to 9 CII-Best-Practices 🟢 5 badge detected: Passing Vulnerabilities 🟢 10 0 existing vulnerabilities detected SAST 🟢 10 SAST tool is run on all commits Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Fuzzing ⚠️ 0 project is not fuzzed Packaging 🟢 10 packaging workflow detected License 🟢 10 license file detected Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Security-Policy 🟢 10 security policy file detected CI-Tests 🟢 10 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 Contributors 🟢 10 project has 23 contributing companies or organizations
nuget/OpenTelemetry.Instrumentation.Http	1.16.0	🟢 8.3	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10 Dependency-Update-Tool 🟢 10 update tool detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies 🟢 9 dependency not pinned by hash detected -- score normalized to 9 CII-Best-Practices 🟢 5 badge detected: Passing Vulnerabilities 🟢 10 0 existing vulnerabilities detected SAST 🟢 10 SAST tool is run on all commits Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Fuzzing ⚠️ 0 project is not fuzzed Packaging 🟢 10 packaging workflow detected License 🟢 10 license file detected Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Security-Policy 🟢 10 security policy file detected CI-Tests 🟢 10 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 Contributors 🟢 10 project has 23 contributing companies or organizations

Scanned Files

• JD.Writer.E2E/JD.Writer.E2E.csproj
• JD.Writer.ServiceDefaults/JD.Writer.ServiceDefaults.csproj

[github-actions]

Test Results

26 tests   26 ✅  1m 43s ⏱️
 1 suites   0 💤
 1 files     0 ❌

Results for commit 87cd026.

♻️ This comment has been updated with latest results.