Bump the nuget-minor-and-patch group with 12 updates by dependabot[bot] · Pull Request #141 · SEPP-2026/ReviewPortal-API

dependabot · 2026-06-29T08:18:15Z

Updated Azure.Storage.Blobs from 12.27.0 to 12.29.1.

Release notes

Sourced from Azure.Storage.Blobs's releases.

12.29.1 12.29.1 (2026-06-23)

Bugs Fixed

Fixed an issue where the GenerateSasUri and GenerateUserDelegationSasUri convenience methods on blob clients did not honor the RequestHeaders and RequestQueryParameters properties, and where GenerateUserDelegationSasUri did not honor DelegatedUserObjectId, set on the supplied BlobSasBuilder.
Fixed an issue where structured-message Uploads with checksum validation could fail with a ArgumentOutOfRangeException for empty content

12.29.0 12.29.0 (2026-06-04)

Features Added

Includes all features from 12.29.0-beta.1

Bugs Fixed

Added validation for length-prefixed fields when parsing Blob Query responses to prevent excessive memory allocation from malformed or untrusted payloads.

12.28.0 12.28.0 (2026-06-04)

Features Added

This release contains bug fixes to improve quality.

12.27.1 12.27.1 (2026-06-23)

Bugs Fixed

Fixed an issue where the GenerateSasUri and GenerateUserDelegationSasUri convenience methods on Data Lake clients did not honor the RequestHeaders and RequestQueryParameters properties, and where GenerateUserDelegationSasUri did not honor DelegatedUserObjectId, set on the supplied DataLakeSasBuilder.

Commits viewable in compare view.

Updated coverlet.collector from 6.0.0 to 6.0.4.

Release notes

Sourced from coverlet.collector's releases.

6.0.4

Fixed

Fix empty coverage report when using include and exclude filters #1726

Diff between 6.0.3 and 6.0.4

6.0.3

Fixed

Fix RuntimeConfigurationReader to support self-contained builds #1705 by https://github.com/pfeigl
Fix inconsistent filenames with UseSourceLink after .NET 8 #1679
Fix hanging tests #989
Fix coverlet instrumentation becomes slow after installing dotnet sdk 8.0.200 #1620
Fix upgrading v6.0.1 to v6.0.2 increases instrumentation time #1649
Fix Unable to instrument module - NET 8 #1631
Fix slow modules filtering process #1646 by https://github.com/BlackGad
Fix incorrect coverage await using in generic method #1490

Improvements

Cache the regex used in InstrumentationHelper #1693
Enable dotnetTool integration tests for linux #660

Diff between 6.0.2 and 6.0.3

6.0.2

Fixed

Threshold-stat triggers error #1634
Fixed coverlet collector 6.0.1 requires dotnet sdk 8 #1625
Type initializer errors after updating from 6.0.0 to 6.0.1 #1629
Exception when multiple exclude-by-attribute filters specified #1624

Improvements

More concise options to specify multiple parameters in coverlet.console #1624

Diff between 6.0.1 and 6.0.2

6.0.1

Fixed

Uncovered lines in .NET 8 for inheriting records #1555
Fix record constructors not covered when SkipAutoProps is true #1561
Fix .NET 7 Method Group branch coverage issue #1447
Fix ExcludeFromCodeCoverage does not exclude method in a partial class #1548
Fix ExcludeFromCodeCoverage does not exclude F# task #1547
Fix issues where ExcludeFromCodeCoverage ignored #1431
Fix issues with ExcludeFromCodeCoverage attribute #1484
Fix broken links in documentation #1514
Fix problem with coverage for .net5 WPF application #1221 by https://github.com/lg2de
Fix unable to instrument module for Microsoft.AspNetCore.Mvc.Razor #1459 by https://github.com/lg2de

Improvements

Extended exclude by attribute feature to work with fully qualified name #1589
Use System.CommandLine instead of McMaster.Extensions.CommandLineUtils #1474 by https://github.com/Bertk
Fix deadlog in Coverlet.Integration.Tests.BaseTest #1541 by https://github.com/Bertk
Add coverlet.msbuild.tasks unit tests #1534 by https://github.com/Bertk

Diff between 6.0.0 and 6.0.1

Commits viewable in compare view.

Updated FluentValidation.DependencyInjectionExtensions from 11.11.0 to 11.12.0.

Release notes

Sourced from FluentValidation.DependencyInjectionExtensions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.0 to 8.0.28.

Release

Update branding to 8.0.18 by @vseanreesermsft in Update branding to 8.0.18 dotnet/aspnetcore#62241
[release/8.0] Update Alpine helix references by @github-actions in [release/8.0] Update Alpine helix references dotnet/aspnetcore#62243
[release/8.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 dotnet/aspnetcore#62201
[8.0] Delete src/arcade directory by @akoeplinger in [8.0] Delete src/arcade directory dotnet/aspnetcore#61994
[Backport 8.0] [IIS] Manually parse exe bitness (#61894) by @BrennanConroy in [Backport 8.0] [IIS] Manually parse exe bitness (#61894) dotnet/aspnetcore#62037
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#62006
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61944
[release/8.0] Associate tagged keys with entries so replacements are not evicted by @github-actions in [release/8.0] Associate tagged keys with entries so replacements are not evicted dotnet/aspnetcore#62247
[release/8.0] Block test that is failing after switching to latest-chrome by @github-actions in [release/8.0] Block test that is failing after switching to latest-chrome dotnet/aspnetcore#62284
backport(net8.0): http.sys on-demand TLS client hello retrieval by @DeagleGross in backport(net8.0): http.sys on-demand TLS client hello retrieval dotnet/aspnetcore#62290
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#62302

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17 Bug Fixes

Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#61623)
The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

Update dependencies from dotnet/arcade (#61832)
This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.
Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#61761)
The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

Update branding to 8.0.17 (#61830)
The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.
Merging internal commits for release/8.0 (#61924)
This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

Release

8.0.7

Release

8.0.6

Release

8.0.5

Release

What's Changed

[release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#54744
Update branding to 8.0.5 by @vseanreesermsft in Update branding to 8.0.5 dotnet/aspnetcore#54907
[release/8.0] Convert to 1ES templates by @RussKie in [release/8.0] Convert to 1ES templates dotnet/aspnetcore#54660
Increase logs and delays in CanLaunchPhotinoWebViewAndClickButton by @Eilon in Increase logs and delays in CanLaunchPhotinoWebViewAndClickButton dotnet/aspnetcore#54608
[release/8.0] (deps): Bump src/submodules/googletest from 31993df to 77afe8e by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 31993df to 77afe8e dotnet/aspnetcore#54872
[release/8.0] Reduce helix-matrix timeout to 5 hours by @github-actions in [release/8.0] Reduce helix-matrix timeout to 5 hours dotnet/aspnetcore#54778
[release/8.0] Preserve RemoteAuthenticationContext during trimming if used in JS interop by @halter73 in [release/8.0] Preserve RemoteAuthenticationContext during trimming if used in JS interop dotnet/aspnetcore#54655
[release/8.0] Improve usage of Type.GetType when activating types in data protection by @github-actions in [release/8.0] Improve usage of Type.GetType when activating types in data protection dotnet/aspnetcore#54762
[release/8.0] Fix route analyzer performance with highly concatenated strings by @github-actions in [release/8.0] Fix route analyzer performance with highly concatenated strings dotnet/aspnetcore#54763
[release/8.0] Suppress .ps1 SDL errors by @wtgodbe in [release/8.0] Suppress .ps1 SDL errors dotnet/aspnetcore#54915
[release/8.0] Backport test fixes by @MackinnonBuck in [release/8.0] Backport test fixes dotnet/aspnetcore#54912
[release/8.0] Skip SpotBugs for now by @wtgodbe in [release/8.0] Skip SpotBugs for now dotnet/aspnetcore#54952
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#55034
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#55061
[release/8.0] Update Wix version by @github-actions in [release/8.0] Update Wix version dotnet/aspnetcore#55101

Full Changelog: dotnet/aspnetcore@v8.0.4...v8.0.5

8.0.4

Release

Update branding to 8.0.18 by @vseanreesermsft in Update branding to 8.0.18 dotnet/aspnetcore#62241
[release/8.0] Update Alpine helix references by @github-actions in [release/8.0] Update Alpine helix references dotnet/aspnetcore#62243
[release/8.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 dotnet/aspnetcore#62201
[8.0] Delete src/arcade directory by @akoeplinger in [8.0] Delete src/arcade directory dotnet/aspnetcore#61994
[Backport 8.0] [IIS] Manually parse exe bitness (#61894) by @BrennanConroy in [Backport 8.0] [IIS] Manually parse exe bitness (#61894) dotnet/aspnetcore#62037
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#62006
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61944
[release/8.0] Associate tagged keys with entries so replacements are not evicted by @github-actions in [release/8.0] Associate tagged keys with entries so replacements are not evicted dotnet/aspnetcore#62247
[release/8.0] Block test that is failing after switching to latest-chrome by @github-actions in [release/8.0] Block test that is failing after switching to latest-chrome dotnet/aspnetcore#62284
backport(net8.0): http.sys on-demand TLS client hello retrieval by @DeagleGross in backport(net8.0): http.sys on-demand TLS client hello retrieval dotnet/aspnetcore#62290
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#62302

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17 Bug Fixes

Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#61623)
The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

Update dependencies from dotnet/arcade (#61832)
This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.
Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#61761)
The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

Update branding to 8.0.17 (#61830)
The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.
Merging internal commits for release/8.0 (#61924)
This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

Update branding to 8.0.12 by @vseanreesermsft in Update branding to 8.0.12 dotnet/aspnetcore#58800
[release/8.0] (deps): Bump src/submodules/googletest from 6dae7eb to 1204d63 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 6dae7eb to 1204d63 dotnet/aspnetcore#58741
Add scope for internal npm packages by @BrennanConroy in Add scope for internal npm packages dotnet/aspnetcore#58512
[release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#58477
[release/8.0] Upgrade serialize-javascript transient dependency by @MackinnonBuck in [release/8.0] Upgrade serialize-javascript transient dependency dotnet/aspnetcore#58466
[release/8.0] Update Messagepack dependency by @wtgodbe in [release/8.0] Update Messagepack dependency dotnet/aspnetcore#58676
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#58898
[release/8.0] Use MacOS-13 in CI by @wtgodbe in [release/8.0] Use MacOS-13 in CI dotnet/aspnetcore#58549
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#59065
[release/8.0] Fix java discovery in helix-matrix by @wtgodbe in [release/8.0] Fix java discovery in helix-matrix dotnet/aspnetcore#59181
[release/8.0] Update dependencies from dotnet/roslyn by @wtgodbe in [release/8.0] Update dependencies from dotnet/roslyn dotnet/aspnetcore#59184
[release/8.0] (deps): Bump src/submodules/googletest from 1204d63 to d144031 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 1204d63 to d144031 dotnet/aspnetcore#59033

Full Changelog: dotnet/aspnetcore@v8.0.11...v8.0.12

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 8.0.11 to 8.0.28.

[release/8.0] Merge release/8.0 => release/8.0-staging by @cincuranet in [release/8.0] Merge release/8.0 => release/8.0-staging dotnet/efcore#36197
Update branding to 8.0.20 by @vseanreesermsft in Update branding to 8.0.20 dotnet/efcore#36497
[release/8.0] Dispose related readers in GroupBySplitQueryingEnumerable (#36484) by @roji in [release/8.0] Dispose related readers in GroupBySplitQueryingEnumerable (#36484) dotnet/efcore#36489
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/efcore#36512
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/arcade dotnet/efcore#36533
[release/8.0] Merge release/8.0-staging to release/8.0 by @cincuranet in [release/8.0] Merge release/8.0-staging to release/8.0 dotnet/efcore#36531

Full Changelog: dotnet/efcore@v8.0.19...v8.0.20

8.0.17 Dependency Updates

Update dependencies from dotnet/arcade (#36085)
Updates the project's dependencies using the latest versions from the dotnet/arcade repository. This ensures that the build infrastructure and related tooling are up to date, which can bring in important bug fixes, security patches, and improvements from upstream.

Miscellaneous

Update branding to 8.0.17 (#36043)
Updates the internal version branding to 8.0.17. This change ensures that the product and its packages correctly reflect the new release version, helping users and developers identify the build.
Merging internal commits for release/8.0 ([#36080](https://github.com/dotnet...

Description has been truncated

Bumps Azure.Storage.Blobs from 12.27.0 to 12.29.1 Bumps coverlet.collector from 6.0.0 to 6.0.4 Bumps FluentValidation.DependencyInjectionExtensions from 11.11.0 to 11.12.0 Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.0 to 8.0.28 Bumps Microsoft.AspNetCore.Mvc.Testing from 8.0.11 to 8.0.28 Bumps Microsoft.EntityFrameworkCore.Design from 8.0.11 to 8.0.28 Bumps Microsoft.EntityFrameworkCore.SqlServer from 8.0.11 to 8.0.28 Bumps Microsoft.EntityFrameworkCore.Tools from 8.0.11 to 8.0.28 Bumps Microsoft.NET.Test.Sdk from 17.8.0 to 17.14.1 Bumps Swashbuckle.AspNetCore from 6.6.2 to 6.9.0 Bumps xunit from 2.5.3 to 2.9.3 Bumps xunit.runner.visualstudio from 2.5.3 to 2.8.2 --- updated-dependencies: - dependency-name: Azure.Storage.Blobs dependency-version: 12.29.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: coverlet.collector dependency-version: 6.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: FluentValidation.DependencyInjectionExtensions dependency-version: 11.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 8.0.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 8.0.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 8.0.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.EntityFrameworkCore.SqlServer dependency-version: 8.0.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.EntityFrameworkCore.Tools dependency-version: 8.0.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 17.14.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: Swashbuckle.AspNetCore dependency-version: 6.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: xunit dependency-version: 2.9.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: xunit.runner.visualstudio dependency-version: 2.8.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-29T08:18:16Z

Labels

The following labels could not be found: dependencies, nuget. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the nuget-minor-and-patch group with 12 updates#141

Bump the nuget-minor-and-patch group with 12 updates#141
dependabot[bot] wants to merge 1 commit into
developmentfrom
dependabot/nuget/src/ReviewPortal.API/development/nuget-minor-and-patch-042e0c94e0

dependabot Bot commented on behalf of github Jun 29, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 29, 2026

12.29.1

12.29.1 (2026-06-23)

Bugs Fixed

12.29.0

12.29.0 (2026-06-04)

Features Added

Bugs Fixed

12.28.0

12.28.0 (2026-06-04)

Features Added

12.27.1

12.27.1 (2026-06-23)

Bugs Fixed

6.0.4

Fixed

6.0.3

Fixed

Improvements

6.0.2

Fixed

Improvements

6.0.1

Fixed

Improvements

8.0.28

What's Changed

8.0.27

What's Changed

8.0.26

What's Changed

8.0.25

What's Changed

8.0.24

8.0.23

What's Changed

8.0.22

What's Changed

8.0.21

What's Changed

8.0.20

What's Changed

8.0.18

What's Changed

8.0.17

Bug Fixes

Dependency Updates

Miscellaneous

8.0.16

What's Changed

8.0.15

What's Changed

8.0.14

What's Changed

8.0.13

What's Changed

8.0.12

What's Changed

8.0.11

What's Changed

8.0.10

8.0.8

8.0.7

8.0.6

8.0.5

What's Changed

8.0.4

8.0.3

8.0.2

8.0.1

8.0.28

What's Changed

8.0.27

What's Changed

8.0.26

What's Changed

8.0.25

What's Changed