Skip to content

Bump the minor-and-patch group with 20 updates - #136

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/minor-and-patch-9c72ac8e3f
Open

Bump the minor-and-patch group with 20 updates#136
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/minor-and-patch-9c72ac8e3f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Updated BCrypt.Net-Next from 4.0.3 to 4.2.0.

Release notes

Sourced from BCrypt.Net-Next's releases.

4.2.0

Full Changelog: BcryptNet/bcrypt.net@v4.1.0...v4.2.0

4.1.0

What's Changed

New Contributors

Full Changelog: BcryptNet/bcrypt.net@4.0.3...v4.1.0

Commits viewable in compare view.

Updated ClosedXML from 0.102.3 to 0.105.1.

Release notes

Sourced from ClosedXML's releases.

0.105.1

  • fix: bound SixLabors.Fonts to version range [1.0.0,3.0.0) by @​igitur in #​2870

Full Changelog: ClosedXML/ClosedXML@0.105.0...0.105.1

0.105.0

What's Changed

Major enhancements

Automatic fixer of function names

Correct name for newer functions (post 2013) is not what is seen in the GUI (e.g. correct name for CONCAT is _xlfn.CONCAT). That is rather obscure fact not known to most developers. The formula setters (e.g. IXLCell.FormulaA1) now automatically fix function names, so it is stored correctly in the file.

using var wb = new XLWorkbook();
var ws = wb.AddWorksheet();
// Originally required "_xlfn.CONCAT(\"hello\", \" world!\")";
ws.Cell("A1").FormulaA1 = "CONCAT(\"hello\", \" world!\")"; 

Pre-0.105
image
0.105
image

Sorting updates references

In many cases, the sorted area has a column with references. The formula often references another row. Pre-0.105, the references in the formulas weren't updated correctly.
image

using var wb = new XLWorkbook();
var ws = wb.AddWorksheet();
ws.Cell("A1").Value = 4;
ws.Cell("B1").FormulaA1 = "A1+1";
ws.Cell("A2").Value = 2;
ws.Cell("B2").FormulaA1 = "A2+1";
ws.Cell("A3").Value = 1;
ws.Cell("B3").FormulaA1 = "A3+1";

ws.Range("A1:B3").Sort(1, XLSortOrder.Ascending);

Reimplementation/refactoring of old function infrastructure

Basically all implemented functions should be more faithful to how Excel behaves and evaluation of functions should be faster. implemented functions should be "complete" in sense that they correctly work for various arguments (e.g. various forms of ROMAN or pattern search in SUMIFS).

The functions (before refactoring) had serious problems with ranges, errors or type coercion or structured references. The original parser back then didn't even parse literal arrays ({1,2,3;4,5,6}). Parser and other things were updated, but because there was ~180 functions, original implementation was kept and functions were functions were reused through an adapter. Except the adapter never worked right and there were some other serious problems.

Changes

Bugfixes

0.105.0-rc

What's Changed

Major enhancements

Automatic fixer of function names

Correct name for newer functions (post 2013) is not what is seen in the GUI (e.g. correct name for CONCAT is _xlfn.CONCAT). That is rather obscure fact not known to most developers. The formula setters (e.g. IXLCell.FormulaA1) now automatically fix function names, so it is stored correctly in the file.

using var wb = new XLWorkbook();
var ws = wb.AddWorksheet();
// Originally required "_xlfn.CONCAT(\"hello\", \" world!\")";
ws.Cell("A1").FormulaA1 = "CONCAT(\"hello\", \" world!\")"; 

Pre-0.105
image
0.105
image

Sorting updates references

In many cases, the sorted area has a column with references. The formula often references another row. Pre-0.105, the references in the formulas weren't updated correctly.
image

using var wb = new XLWorkbook();
var ws = wb.AddWorksheet();
ws.Cell("A1").Value = 4;
ws.Cell("B1").FormulaA1 = "A1+1";
ws.Cell("A2").Value = 2;
ws.Cell("B2").FormulaA1 = "A2+1";
ws.Cell("A3").Value = 1;
ws.Cell("B3").FormulaA1 = "A3+1";

ws.Range("A1:B3").Sort(1, XLSortOrder.Ascending);

Reimplementation/refactoring of old function infrastructure

Basically all implemented functions should be more faithful to how Excel behaves and evaluation of functions should be faster. implemented functions should be "complete" in sense that they correctly work for various arguments (e.g. various forms of ROMAN or pattern search in SUMIFS).

The functions (before refactoring) had serious problems with ranges, errors or type coercion or structured references. The original parser back then didn't even parse literal arrays ({1,2,3;4,5,6}). Parser and other things were updated, but because there was ~180 functions, original implementation was kept and functions were functions were reused through an adapter. Except the adapter never worked right and there were some other serious problems.

Changes

Bugfixes

0.104.2

What's Changed

Full Changelog: ClosedXML/ClosedXML@0.104.1...0.104.2

0.104.1

Release notes from 0.102.1 to the 0.104.1.

Summary of breaking changes is available at docs.closedxml.io:

OpenXML SDK

OpenXML SDK has released version 3. The 0.104.0 uses it as a dependency.

XLParser replaced with ClosedParser

The XLParser has been replaced with ClosedParser. The key benefits are

  • performance - ~2μs/formula, it's likely formulas will be parseable on the demand, necessary for construction of dependency tree
  • A1/R1C1 parsing parity - both modes can be parsed with no problems
  • AST oriented - it's likely a construction of AST in memory won't even be necessary, just use AST factory to evaluate formula directly

There is also a visualizer to display AST in a browser at https://parser.closedxml.io

image

Formula Calculation

In previous version, formulas used to be calculated recursively. Each formula checked it's supporting cells for other formulas and if there were some, they were recursively evaluated. There was some logic to decrease number of evaluations. That works for a very simple cases, but isn't very good for various non-happy paths (i.e. cells weren't calculated when they should be).

This version has replaced it with a standard

  • dependency tree for checking which formulas are dirty and need to be recalculated
  • calculation chain that manages dependencies and order of formulas during calculation

For more info, see docs, the Microsoft has a page about principles Excel Recalculation
and there is one with API at docs.closedxml.io.

image

Structured references

New parser also allows a basic evaluation of structured references. Format of structured reference must use official grammar, not Excel friendly names (e.g. Pastry[@​Name] is user-friendly name for Pastry[[#This Row],[Name]]). It's now possible to

using var wb = new XLWorkbook();
var ws = wb.AddWorksheet();
ws.Cell("A1").InsertTable(new Pastry[]
{
    new("Cake", 14),
    new("Waffle", 3),
}, "Pastry");

ws.Cell("D1").FormulaA1 = "SUM(Pastry[Price])";
ws.Cell("D3").FormulaA1 = "\"Pastry \" & Pastry[[#This Row],[Name]]";
wb.RecalculateAllFormulas();
 ... (truncated)

## 0.104-rc1

A release candidate 1 for 0.104.0. 

* [Migration from 0.102 to 0.103](https://docs.closedxml.io/en/latest/migrations/migrate-to-0.103.html)
* [Migration from 0.103 to 0.104](https://docs.closedxml.io/en/latest/migrations/migrate-to-0.104.html)

Of course, this includes all stuff from [0.103.0-beta](https://github.com/ClosedXML/ClosedXML/releases/tag/0.103.0-beta). Version 0.103 never got a non-beta release.

# OpenXML SDK

OpenXML SDK has released version 3.0.1. The 0.104-rc1 uses it as a dependency. 

# Pivot tables

The internal structure of pivot tables, along with most other features, has been completely overhauled. This update should significantly reduce crashes when loading and saving workbooks containing pivot tables.

The main issue with the previous internal structure was that it didn't align with the structure used by OOXML. This was problematic because we need to support all valid files. As a result, we have to handle a wide range of inputs and correctly convert them to our internal structure, which is rather hard. A more clear 1:1 mapping with OOXML is much simpler and more reliable.

# AutoFilter

The Autofilter feature has been revamped, which includes some API changes. Its behavior is now more closely aligned with how Excel operates. The XML documentation provides detailed explanations, and there is a [dedicated documentation page](https://docs.closedxml.io/en/latest/features/autofilter.html). Several bugs have also been fixed.

For more details, refer to the [Autofilter section of the migration guide](https://docs.closedxml.io/en/latest/migrations/migrate-to-0.104.html#autofilter).

# CommonCrawl dataset

When workbook is a valid one, ClosedXML shouldn't throw on load. That is a rather high priority (more than saving or manipulation). Unfortunately, that is hard to find such areas that cause most problems.

One of activities that was going in a background is trying to use excel files around the internet (found by CommonCrawl) to evaluate how bad it is. There aren't results yet, but it is something that is going on.



# What's Changed

## Breaking changes
* First page number can be negative -> change API type to int by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2237
* Rename IXLNamedRange to IXLDefinedName by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2258

## AutoFilter
* AutoFilter rework - 1/? - Regular filter matches string. by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2238
* AutoFilter rework - 2/? - fix types for custom filters by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2239
* AutoFilter rework - 3/? - Top and average filter refactor, remove setters of internal state by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2240
* AutoFilter rework - 4/? - Top/Average filters work after loading by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2241
* AutoFilter rework - 5/? - Unify Regular and DateTimeGrouping filters by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2242
* AutoFilter rework - 6/7 - Add tests by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2243
* AutoFilter rework - 7/7 - Add documentation by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2245

## Formulas
* Update ClosedXML.Parser to 1.0 by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2250
* Implement structured references by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2251
* Replace regex-powered code for A1-R1C1 formula conversion with AST-based one by @​jahav in https://github.com/ClosedXML/ClosedXML/pull/2253
 ... (truncated)

## 0.104.0-preview2

Second test release for checking SourceLink support on nuget (first failed due to fody/PDB checksum) https://github.com/ClosedXML/ClosedXML/issues/2070

## 0.104.0-preview1

Test release for checking SourceLink support #​2070 

## 0.103.0-beta

There won't be a non-beta release for 0.103. The production release will be 0.104, not 0.103. This milestone was about fixing technical debt, but ultimately it needs some more time to mature before it is sent to the users.

There are some nice performance updates, so in spirit of release early, release often, there will be a beta package on nuget. 

# Breaking changes

Rich text is now immutable behind the scenes (and will likely be turned into immutable in the future). It should be transparent to the user, though `IXLPhonetic` no longer has a setter for its `IXLPhonetic.Text`, `IXLPhonetic.Start` and `IXLPhonetic.End` properties.

New calculation engine just works in a different way and will behave differently.

# Significant changes
## XLParser replaced with ClosedParser
The [*XLParser*](https://github.com/spreadsheetlab/XLParser) has been replaced with [*ClosedParser*](https://github.com/ClosedXML/ClosedXML.Parser). The key benefits are
* performance - ~2μs/formula, it's likely formulas will be parseable on the demand, necessary for construction of dependency tree
* A1/R1C1 parsing parity - both modes can be parsed with no problems
* AST oriented - it's likely a construction of AST in memory won't even be necessary, just use AST factory to evaluate formula directly

There is also a visualizer to display AST in a browser at **[https://parser.closedxml.io](https://parser.closedxml.io)**

![image](https://github.com/ClosedXML/ClosedXML.Parser/assets/7634052/4beaab23-4599-44d4-be7b-705178b69f99)

## Formula Calculation 

In previous version, formulas used to be calculated recursively. Each formula checked it's supporting cells for other formulas and if there were some, they were recursively evaluated. There was some  logic to decrease number of evaluations. That works for a very simple cases, but isn't very good for various non-happy paths (i.e. cells weren't calculated when they should be).

This version has replaced it with a standard 
* dependency tree for checking which formulas are dirty and need to be recalculated
* calculation chain that manages dependencies and order of formulas during calculation

For more info, see docs, the Microsoft has a page about principles [Excel Recalculation](https://learn.microsoft.com/en-us/office/client-developer/excel/excel-recalculation)
 and there is one with API at [docs.closedxml.io](https://docs.closedxml.io/en/latest/concepts/formula-calculation.html).

![image](https://github.com/ClosedXML/ClosedXML/assets/7634052/2a621044-368a-4076-b121-cefb10150a6e)

## Workbook structure

Internal structure has been cleaned up and optimized.

The dirty tracking has been moved out of cells to formulas and thus memory taken up by a single cell value is now only 16 bytes instead of 24 (?) bytes in 0.102. Of course there are some other structures around that take up memory as well, but the single cell value is now 16 bytes (I hoped for 8, but not feasible with `double`, `DateTime` and `TimeSpan` as possible cell values - all take up 8 bytes... not enough bits).

The same string in different instances is now not duplicated, but only one instance is used. As seen on following test, it can lead to significant decrease in memory consumption. 250k rows with 10 text rows (same string, different instance): 117 MiB om 0.103 vs 325 MiB in 0.102.1.

## `InsertData` performance 

Insert 250k rows of 10 columns of text and 5 columns of numbers ([gist](https://gist.github.com/jahav/bdc5fe3c90f25544ca6ae1394bbe3561)). 

| Description      |     Rows  |           Columns      | Time/Memory to insert data | Save workbook | Total time/memory | 
|-----------------|-----------|------------------------|----------------------------|------------------------------|---|
| **0.103.0-beta**    |   250 000 | 15 | **1.619 sec / 117 MiB** |  6.343 sec | 477 MiB |
| 0.102.1    |   250 000 | 15 | 7.160 sec / 325 MiB |  6.676 sec | 692 MiB |
 ... (truncated)

Commits viewable in [compare view](https://github.com/ClosedXML/ClosedXML/compare/0.102.3...0.105.1).
</details>

Updated [dotnet-ef](https://github.com/dotnet/efcore) from 8.0.11 to 8.0.30.

<details>
<summary>Release notes</summary>

_Sourced from [dotnet-ef's releases](https://github.com/dotnet/efcore/releases)._

## 8.0.30

[Release](https://github.com/dotnet/core/releases/tag/v8.0.30)

## What's Changed
* [release/8.0] Update Windows CI images to 2022 by @​AndriySvyryd in https://github.com/dotnet/efcore/pull/38526
* [release/8.0] Update branding to 8.0.30 by @​dotnet-bot in https://github.com/dotnet/efcore/pull/38563
* [release/8.0]: Bump Microsoft.Data.SqlClient from 5.1.7 to 5.1.9 by @​dependabot[bot] in https://github.com/dotnet/efcore/pull/38525
* [release/8.0]: Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.21 to 8.0.28 by @​dependabot[bot] in https://github.com/dotnet/efcore/pull/38519
* [release/8.0]: Bump Grpc.AspNetCore from 2.71.0 to 2.80.0 by @​dependabot[bot] in https://github.com/dotnet/efcore/pull/38517
* [release/8.0]: Bump Azure.Identity from 1.17.0 to 1.21.0 by @​dependabot[bot] in https://github.com/dotnet/efcore/pull/38510
* Merging internal commits for release/8.0 by @​dotnet-bot in https://github.com/dotnet/efcore/pull/38624
* [release/8.0] Update SQLitePCLRaw package versions by @​AndriySvyryd with @​Copilot in https://github.com/dotnet/efcore/pull/38605


**Full Changelog**: https://github.com/dotnet/efcore/compare/v8.0.29...v8.0.30

## 8.0.29

[Release](https://github.com/dotnet/core/releases/tag/v8.0.29)

## What's Changed
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in https://github.com/dotnet/efcore/pull/38334
* Update branding to 8.0.29 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/38349
* [release/8.0] Add @​wtgodbe to CODEOWNERS for infrastructure by @​AndriySvyryd in https://github.com/dotnet/efcore/pull/38371
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/38390


**Full Changelog**: https://github.com/dotnet/efcore/compare/v8.0.28...v8.0.29

## 8.0.28

[Release](https://github.com/dotnet/core/releases/tag/v8.0.28)

## What's Changed
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in https://github.com/dotnet/efcore/pull/38204
* Update branding to 8.0.28 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/38227
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/38263


**Full Changelog**: https://github.com/dotnet/efcore/compare/v8.0.27...v8.0.28

## 8.0.27

[Release](https://github.com/dotnet/core/releases/tag/v8.0.27)

## What's Changed
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in https://github.com/dotnet/efcore/pull/38034
* [release/8.0] Update branding to 8.0.27 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/38062
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/38099


**Full Changelog**: https://github.com/dotnet/efcore/compare/v8.0.26...v8.0.27

## 8.0.26

[Release](https://github.com/dotnet/core/releases/tag/v8.0.26)

## What's Changed
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in https://github.com/dotnet/efcore/pull/37816
* [release/8.0] Update branding to 8.0.26 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/37834
* [release/8.0] Update SDK to 8.0.124 by @​AndriySvyryd in https://github.com/dotnet/efcore/pull/37780
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/37900


**Full Changelog**: https://github.com/dotnet/efcore/compare/v8.0.25...v8.0.26

## 8.0.25

[Release](https://github.com/dotnet/core/releases/tag/v8.0.25)

## What's Changed
* Update branding to 8.0.25 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/37613
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/37667


**Full Changelog**: https://github.com/dotnet/efcore/compare/v8.0.24...v8.0.25

## 8.0.24

[Release](https://github.com/dotnet/core/releases/tag/v8.0.24)

## What's Changed
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in https://github.com/dotnet/efcore/pull/37375
* Update branding to 8.0.24 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/37448
* [release/8.0] Disable Analyzer tests by @​AndriySvyryd in https://github.com/dotnet/efcore/pull/37467
* [release/8.0] Fix binskim prereleaseVersion formatting in pipeline config by @​AndriySvyryd in https://github.com/dotnet/efcore/pull/37475
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/37503


**Full Changelog**: https://github.com/dotnet/efcore/compare/v8.0.23...v8.0.24

## 8.0.23

[Release](https://github.com/dotnet/core/tree/v8.0.23)

## What's Changed
* [release/8.0-staging] Merge release/8.0 to release/8.0-staging by @​cincuranet in https://github.com/dotnet/efcore/pull/36948
* [release/8.0] Update dependencies by @​AndriySvyryd in https://github.com/dotnet/efcore/pull/37048
* Update branding to 8.0.23 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/37074
* [automated] Merge branch 'release/8.0-staging' => 'release/8.0' by @​AndriySvyryd in https://github.com/dotnet/efcore/pull/37079
* [release/8.0-staging] Fix 0-byte reads/writes on blobs by @​cincuranet in https://github.com/dotnet/efcore/pull/37067
* [release/8.0] Update BinSkim to 4.3.1 by @​AndriySvyryd in https://github.com/dotnet/efcore/pull/37091
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/37130
* [release/8.0] Change NuGet audit to moderate by @​AndriySvyryd in https://github.com/dotnet/efcore/pull/37138
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in https://github.com/dotnet/efcore/pull/37160
* [release/8.0-staging] Handle .NET 10 MemoryExtensions.Contains overload with comparer by @​roji in https://github.com/dotnet/efcore/pull/37182
* [release/8.0-staging] Update to Mac 15 queues. by @​cincuranet in https://github.com/dotnet/efcore/pull/37097
* Merge release/8.0-staging to release/8.0 by @​AndriySvyryd in https://github.com/dotnet/efcore/pull/37305


**Full Changelog**: https://github.com/dotnet/efcore/compare/v8.0.22...v8.0.23

## 8.0.22

[Release](https://github.com/dotnet/core/releases/tag/v8.0.22)

## What's Changed
* [release/8.0-staging] Merge release/8.0 to release/8.0-staging by @​cincuranet in https://github.com/dotnet/efcore/pull/36798
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in https://github.com/dotnet/efcore/pull/36915
* Update branding to 8.0.22 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/36924
* [release/8.0] Merge release/8.0-staging to release/8.0 by @​cincuranet in https://github.com/dotnet/efcore/pull/36943
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/36968
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in https://github.com/dotnet/efcore/pull/36980


**Full Changelog**: https://github.com/dotnet/efcore/compare/v8.0.21...v8.0.22

## 8.0.21

[Release](https://github.com/dotnet/core/releases/tag/v8.0.21)

## What's Changed
* [release/8.0-staging] Merge release/8.0 to release/8.0-staging by @​cincuranet in https://github.com/dotnet/efcore/pull/36540
* Update branding to 8.0.21 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/36696
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/36727
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in https://github.com/dotnet/efcore/pull/36765
* [release/8.0] Disable Guardian Dotnet Analyzers by @​AndriySvyryd in https://github.com/dotnet/efcore/pull/36776
* [8.0] Resolve query logger from QueryContext in shaper generation (#​36758) by @​roji in https://github.com/dotnet/efcore/pull/36779
* [release/8.0] Merge release/8.0-staging to release/8.0 by @​cincuranet in https://github.com/dotnet/efcore/pull/36788
* [release/8.0] Remove OSX.13.ARM64 from HelixTargetQueues by @​AndriySvyryd in https://github.com/dotnet/efcore/pull/36838
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in https://github.com/dotnet/efcore/pull/36853
* [release/8.0] Remove OSX.13.Amd64 target from HelixTargetQueues by @​AndriySvyryd in https://github.com/dotnet/efcore/pull/36855


**Full Changelog**: https://github.com/dotnet/efcore/compare/v8.0.20...v8.0.21

## 8.0.20

[Release](https://github.com/dotnet/core/releases/tag/v8.0.20)

## What's Changed
* [release/8.0] Merge release/8.0 => release/8.0-staging by @​cincuranet in https://github.com/dotnet/efcore/pull/36197
* Update branding to 8.0.20 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/36497
* [release/8.0] Dispose related readers in GroupBySplitQueryingEnumerable (#​36484) by @​roji in https://github.com/dotnet/efcore/pull/36489
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/36512
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in https://github.com/dotnet/efcore/pull/36533
* [release/8.0] Merge release/8.0-staging to release/8.0 by @​cincuranet in https://github.com/dotnet/efcore/pull/36531


**Full Changelog**: https://github.com/dotnet/efcore/compare/v8.0.19...v8.0.20

## 8.0.17

## Dependency Updates

- **Update dependencies from dotnet/arcade** ([#​36085](https://github.com/dotnet/efcore/pull/36085))  
  Updates the project's dependencies using the latest versions from the dotnet/arcade repository. This ensures that the build infrastructure and related tooling are up to date, which can bring in important bug fixes, security patches, and improvements from upstream.

## Miscellaneous

- **Update branding to 8.0.17** ([#​36043](https://github.com/dotnet/efcore/pull/36043))  
  Updates the internal version branding to 8.0.17. This change ensures that the product and its packages correctly reflect the new release version, helping users and developers identify the build.

- **Merging internal commits for release/8.0** ([#​36080](https://github.com/dotnet/efcore/pull/36080))  
  Integrates various internal commits into the release/8.0 branch. This merge brings together important updates and ensures the release branch is synchronized with recent internal development, maintaining consistency and stability for the release.

---

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: [v8.0.16...v8.0.17](https://github.com/dotnet/efcore/compare/v8.0.16...v8.0.17)

## 8.0.16

[Release](https://github.com/dotnet/core/releases/tag/v8.0.16)

## What's Changed
* Update branding to 8.0.16 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/35888
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/35926
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/efcore/pull/35930


**Full Changelog**: https://github.com/dotnet/efcore/compare/v8.0.15...v8.0.16

## 8.0.15

[Release](https://github.com/dotnet/core/releases/tag/v9.0.3)

## What's Changed
* Merge branch 'release/8.0' into 'release/8.0-staging' by @​AndriySvyryd in https://github.com/dotnet/efcore/pull/35541
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/efcore/pull/35633
* [release/8.0-staging] Improve LoadExtension to work correctly with dotnet run and lib* named libs by @​roji in https://github.com/dotnet/efcore/pull/35718
* [release/8.0-staging] Transform Span-based overloads to Enumerable in funcletizer by @​roji in https://github.com/dotnet/efcore/pull/35720
* Update branding to 8.0.15 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/35738
* Merge branch 'release/8.0-staging' => 'release/8.0'  by @​AndriySvyryd in https://github.com/dotnet/efcore/pull/35742
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/35765
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/efcore/pull/35780


**Full Changelog**: https://github.com/dotnet/efcore/compare/v8.0.14...v8.0.15

## 8.0.14

[Release](https://github.com/dotnet/core/releases/tag/v8.0.14)

## What's Changed
* Update branding to 8.0.14 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/35583
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/35621


**Full Changelog**: https://github.com/dotnet/efcore/compare/v8.0.13...v8.0.14

## 8.0.13

[Release](https://github.com/dotnet/core/releases/tag/v8.0.13

## What's Changed
* [release/8.0] Update Helix queues by @​AndriySvyryd in https://github.com/dotnet/efcore/pull/35408
* Update branding to 8.0.13 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/35427
* Merge branch 'release/8.0-staging' => 'release/8.0' by @​AndriySvyryd in https://github.com/dotnet/efcore/pull/35464
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/35473
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/efcore/pull/35470


**Full Changelog**: https://github.com/dotnet/efcore/compare/v8.0.12...v8.0.13

## 8.0.12

[Release](https://github.com/dotnet/core/releases/tag/v8.0.12)

## What's Changed
* [release/8.0-staging] Update macOS images to 13 by @​AndriySvyryd in https://github.com/dotnet/efcore/pull/35005
* Update branding to 8.0.12 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/35048
* Merge branch 'release/8.0' into release/8.0-staging by @​AndriySvyryd in https://github.com/dotnet/efcore/pull/35055
* Merge branch 'release/8.0-staging' => 'release/8.0' by @​AndriySvyryd in https://github.com/dotnet/efcore/pull/35077
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/efcore/pull/35081


**Full Changelog**: https://github.com/dotnet/efcore/compare/v8.0.11...v8.0.12

Commits viewable in [compare view](https://github.com/dotnet/efcore/compare/v8.0.11...v8.0.30).
</details>

Updated [FluentValidation](https://github.com/JeremySkinner/fluentvalidation) from 11.11.0 to 11.12.0.

<details>
<summary>Release notes</summary>

_Sourced from [FluentValidation's releases](https://github.com/JeremySkinner/fluentvalidation/releases)._

No release notes found for this version range.

Commits viewable in [compare view](https://github.com/JeremySkinner/fluentvalidation/commits).
</details>

Updated [FluentValidation.DependencyInjectionExtensions](https://github.com/JeremySkinner/fluentvalidation) from 11.11.0 to 11.12.0.

<details>
<summary>Release notes</summary>

_Sourced from [FluentValidation.DependencyInjectionExtensions's releases](https://github.com/JeremySkinner/fluentvalidation/releases)._

No release notes found for this version range.

Commits viewable in [compare view](https://github.com/JeremySkinner/fluentvalidation/commits).
</details>

Updated [MediatR](https://github.com/jbogard/MediatR) from 12.4.1 to 12.5.0.

<details>
<summary>Release notes</summary>

_Sourced from [MediatR's releases](https://github.com/jbogard/MediatR/releases)._

## 12.5.0

## What's Changed
* Open behavior multiple registration extensions by @​Emopusta in https://github.com/jbogard/MediatR/pull/1065
* Remove duplicate `Nullable` property from `MediatR.Contracts` by @​jithu7432 in https://github.com/jbogard/MediatR/pull/1061
* Timeout behavior support by @​zachpainter77 in https://github.com/jbogard/MediatR/pull/1058
* GitHub Actions upload-artifacts@​v2 deprecated moving to v4 by @​jithu7432 in https://github.com/jbogard/MediatR/pull/1072
* update MinVer from 4.3.0 to 6.0.0 by @​adamralph in https://github.com/jbogard/MediatR/pull/1102
* Update setup-dotnet package version. by @​Emopusta in https://github.com/jbogard/MediatR/pull/1086
* Add test for multiple open behavior registration feature. by @​Emopusta in https://github.com/jbogard/MediatR/pull/1077
* Add validation and comments to OpenBehavior entity. by @​Emopusta in https://github.com/jbogard/MediatR/pull/1078
* Passing CancellationToken to the call chain by @​podobaas in https://github.com/jbogard/MediatR/pull/1100

## New Contributors
* @​Emopusta made their first contribution in https://github.com/jbogard/MediatR/pull/1065
* @​jithu7432 made their first contribution in https://github.com/jbogard/MediatR/pull/1061
* @​podobaas made their first contribution in https://github.com/jbogard/MediatR/pull/1100

**Full Changelog**: https://github.com/jbogard/MediatR/compare/v12.4.1...v12.5.0

Commits viewable in [compare view](https://github.com/jbogard/MediatR/compare/v12.4.1...v12.5.0).
</details>

Updated [Microsoft.AspNetCore.Authentication.JwtBearer](https://github.com/dotnet/aspnetcore) from 8.0.2 to 8.0.30.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.AspNetCore.Authentication.JwtBearer's releases](https://github.com/dotnet/aspnetcore/releases)._

## 8.0.30

[Release](https://github.com/dotnet/core/releases/tag/v8.0.30)

## What's Changed
* [release/8.0] Update branding to 8.0.30 by @​dotnet-bot in https://github.com/dotnet/aspnetcore/pull/67621
* [release/8.0] (deps): Bump src/submodules/googletest from `7140cd4` to `973323e` by @​dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/67525
* [release/8.0] (deps): Bump src/submodules/MessagePack-CSharp from `9614e6f` to `365965f` by @​dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/67524
* Update ws package version to 7.5.11 by @​birarroshan in https://github.com/dotnet/aspnetcore/pull/67408
* [release/8.0] Update CI pipeline to use Windows 2022 image by @​github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/67289
* [release/8.0] Update Selenium and Playwright versions to match main by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/67273
* [release/8.0] improve CI flakiness by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/67645
* [release/8.0] (deps): Bump src/submodules/googletest from `973323e` to `3064a60` by @​dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/67654
* Merging internal commits for release/8.0 by @​dotnet-bot in https://github.com/dotnet/aspnetcore/pull/67796
* Use build identity (System.AccessToken) for internal feed creds instead of expired dn-bot-dnceng-artifact-feeds-rw PAT (release/8.0) by @​missymessa in https://github.com/dotnet/aspnetcore/pull/67854
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/67943

## New Contributors
* @​birarroshan made their first contribution in https://github.com/dotnet/aspnetcore/pull/67408

**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.29...v8.0.30

## 8.0.29

[Release](https://github.com/dotnet/core/releases/tag/v8.0.29)

## What's Changed
* Update branding to 8.0.29 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/66982
* [release/8.0] (deps): Bump src/submodules/googletest from `d72f9c8` to `a721f1b` by @​dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/66973
* [release/8.0] Update System.Security.Cryptography.Xml in RepoTasks by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/66766
* [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/66699
* [release/8.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/66664
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/66946
* [release/8.0] Add 1ES Unofficial pipeline for Components E2E tests by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/66989
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/67105
* [release/8.0] Update npm dependencies by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/67144
* [release/8.0] Update Microsoft Identity Web package versions to 3.15.1 by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/67164
* [release/8.0] (deps): Bump src/submodules/googletest from `a721f1b` to `7140cd4` by @​dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/67222
* [release/8.0] Backport docker image fix by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/67279
* [release/8.0] Reject ASCII control characters in cookie auth return URLs by @​github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/67157


**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.28...v8.0.29

## 8.0.28

[Release](https://github.com/dotnet/core/releases/tag/v8.0.28)

## What's Changed
* Update branding to 8.0.28 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/66589
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/66556
* [release/8.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/66471
* [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/66344
* [release/8.0] Strip UTF-8 BOM from template localization files and remove version override by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/66427
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/66662


**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.27...v8.0.28

## 8.0.27

[Release](https://github.com/dotnet/core/releases/tag/v8.0.27)

## What's Changed
* [release/8.0] Update branding to 8.0.27 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/66205
* [release/8.0] Update NPM dependencies by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/66052
* [release/8.0] Move off of dead-lettered Windows preview helix queue by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/66220
* [release/8.0] (deps): Bump src/submodules/googletest from `73a63ea` to `d72f9c8` by @​dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/66087
* [release/8.0] Replace dn-bot-dnceng-build-rw-code-rw PAT with WIF service connection in mirror-within-azdo by @​missymessa in https://github.com/dotnet/aspnetcore/pull/66115
* [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/66216
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/66081
* [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/66131
* [release/8.0] Update @​azure/msal-browser from 2.x to 4.x by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/66236
* [release/8.0] Use source-build-assets repo by @​NikolaMilosavljevic in https://github.com/dotnet/aspnetcore/pull/66276
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/66317


**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.26...v8.0.27

## 8.0.26

[Release](https://github.com/dotnet/core/releases/tag/v8.0.26)

## What's Changed
* [release/8.0] Update branding to 8.0.26 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/65635
* [release/8.0] (deps): Bump src/submodules/googletest from `56efe39` to `73a63ea` by @​dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/65586
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/65581
* [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/65621
* [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/65615
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/65730


**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.25...v8.0.26

## 8.0.25

[Release](https://github.com/dotnet/core/releases/tag/v8.0.25)

## What's Changed
* Update branding to 8.0.25 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/65293
* [release/8.0] (deps): Bump src/submodules/googletest from `9156d4c` to `56efe39` by @​dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/65289
* [release/8.0] Add support for hotfix branding by @​mmitche in https://github.com/dotnet/aspnetcore/pull/65252
* [release/8.0] Remove package baseline infrastructure by @​Copilot in https://github.com/dotnet/aspnetcore/pull/65209
* [release/8.0] Set network isolation policy for aspnetcore-ci by @​github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/65173
* [release/8.0] Fix URL format for JDK download on linux by @​github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/65076
* [release/8.0] Disable parallel restore for Grpc JsonTranscoding by @​github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/65073
* [release/8.0] Update Ubuntu queue to 22.04 by @​github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/65299
* [release/8.0] Re-enable Nuget Audit by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/65328
* [release/8.0] Don't use netcoreapp2.1 in dotnet-getdocument by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/65331
* [release/8.0] Update AzureIdentityVersion to 1.11.4 by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/65332
* [release/8.0] Disable parallel restore for linker tests by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/65375
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/65382
* [release/8.0] Switch to non-preview 2022 queue by @​github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/65413


**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.24...v8.0.25

## 8.0.24

[Release](https://github.com/dotnet/core/releases/tag/v8.0.24)

## 8.0.23

[Release](https://github.com/dotnet/core/releases/tag/v8.0.23)

## What's Changed

https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs

## 8.0.22

[Release](https://github.com/dotnet/core/releases/tag/v8.0.22)

## What's Changed
* Update branding to 8.0.22 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63949
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63664
* [release/8.0] (http2): Lower WINDOWS_UPDATE received on (half)closed stream to stream abortion by @​DeagleGross in https://github.com/dotnet/aspnetcore/pull/63903
* [release/8.0] (deps): Bump src/submodules/googletest from `eb2d85e` to `9706f75` by @​dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63893
* [release/8.0] Fixed devtools url used for debug with chrome and edge by @​github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62080
* [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63665
* [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63957
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/64035
* Mark productVersion.txt as shipping artifact in 8.0 by @​Copilot in https://github.com/dotnet/aspnetcore/pull/64067
* Revert log level severity for unknown proxy in ForwardedHeadersMiddleware by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/64090


**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.21...v8.0.22

## 8.0.21

[Release](https://github.com/dotnet/core/releases/tag/v8.0.21)

## What's Changed
* Update branding to 8.0.21 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63509
* [release/8.0] (deps): Bump src/submodules/googletest from `373af2e` to `eb2d85e` by @​dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63500
* [release/8.0] Make duplicate deb/rpm packages so we can sign them with the new PMC key by @​github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63250
* [release/8.0] Extend Unofficial 1ES template in IdentityModel nightly tests job by @​github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63466
* [release/8.0] Quarantine ResponseBody_WriteContentLength_PassedThrough by @​github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63534
* [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63261
* [release/8.0] Use wait assert in flaky tests by @​ilonatommy in https://github.com/dotnet/aspnetcore/pull/63565
* [release/8.0] Update Microsoft.Build versions by @​github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62507
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63603
* backport(8.0): Fix runtime architecture detection logic in ANCM by @​DeagleGross in https://github.com/dotnet/aspnetcore/pull/63706


**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.20...v8.0.21

## 8.0.20

[Release](https://github.com/dotnet/core/releases/tag/v8.0.20)

## What's Changed
* Update branding to 8.0.20 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63106
* [release/8.0] (deps): Bump src/submodules/googletest from `c67de11` to `373af2e` by @​dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63038
* [release/8.0] Dispose the certificate chain elements with the chain by @​MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/62994
* [release/8.0] Update SignalR Redis tests to use internal Docker Hub mirror by @​github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63117
* [release/8.0] [SignalR] Don't throw for message headers in Java client by @​github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62784
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63152
* [release/8.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63188
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63189


**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.19...v8.0.20

## 8.0.18

[Release](https://github.com/dotnet/core/releases/tag/v8.0.18)

## What's Changed
* Update branding to 8.0.18 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/62241
* [release/8.0] Update Alpine helix references by @​github-actions in https://github.com/dotnet/aspnetcore/pull/62243
* [release/8.0] (deps): Bump src/submodules/googletest from `04ee1b4` to `e9092b1` by @​dependabot in https://github.com/dotnet/aspnetcore/pull/62201
* [8.0] Delete src/arcade directory by @​akoeplinger in https://github.com/dotnet/aspnetcore/pull/61994
* [Backport 8.0] [IIS] Manually parse exe bitness (#​61894) by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/62037
* [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/62006
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61944
* [release/8.0] Associate tagged keys with entries so replacements are not evicted by @​github-actions in https://github.com/dotnet/aspnetcore/pull/62247
* [release/8.0] Block test that is failing after switching to latest-chrome by @​github-actions in https://github.com/dotnet/aspnetcore/pull/62284
* backport(net8.0): http.sys on-demand TLS client hello retrieval by @​DeagleGross in https://github.com/dotnet/aspnetcore/pull/62290
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/62302


**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.17...v8.0.18

## 8.0.17

## Bug Fixes

- **Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy** ([#​61623](https://github.com/dotnet/aspnetcore/pull/61623))  
  The Forwarded Headers Middleware now ignores `X-Forwarded-Headers` sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

## Dependency Updates

- **Update dependencies from dotnet/arcade** ([#​61832](https://github.com/dotnet/aspnetcore/pull/61832))  
  This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

- **Bump src/submodules/googletest from `52204f7` to `04ee1b4`** ([#​61761](https://github.com/dotnet/aspnetcore/pull/61761))  
  The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

## Miscellaneous

- **Update branding to 8.0.17** ([#​61830](https://github.com/dotnet/aspnetcore/pull/61830))  
  The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

- **Merging internal commits for release/8.0** ([#​61924](https://github.com/dotnet/aspnetcore/pull/61924))  
  This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

---

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.16...v8.0.17

## 8.0.16

[Release](https://github.com/dotnet/core/releases/tag/v8.0.16)

## What's Changed
* Update branding to 8.0.16 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61283
* [release/8.0] (deps): Bump src/submodules/googletest from `24a9e94` to `52204f7` by @​dependabot in https://github.com/dotnet/aspnetcore/pull/61260
* [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61281
* [release/8.0] Upgrade to Ubuntu 22 by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/61216
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60901
* [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60926
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61404
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61398
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61411
* Revert "Revert "[release/8.0] Update remnants of azureedge.net"" by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60352
* [release/8.0] Fix preserving messages for stateful reconnect with backplane by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/61375
* [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61442
* fetch TLS client hello message from HTTP.SYS by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/61494


**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.15...v8.0.16

## 8.0.15

[Release](https://github.com/dotnet/core/releases/tag/v8.0.15)

## What's Changed
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60355
* Update branding to 8.0.15 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60784
* Add partitioned to cookie for SignalR browser testing by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/60728
* [release/8.0] (deps): Bump src/submodules/googletest from `e235eb3` to `24a9e94` by @​dependabot in https://github.com/dotnet/aspnetcore/pull/60677
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60879


**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.14...v8.0.15

## 8.0.14

[Release](https://github.com/dotnet/core/releases/tag/v8.0.14)

## What's Changed
* Update branding to 8.0.14 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60197
* [release/8.0] (deps): Bump src/submodules/googletest from `7d76a23` to `e235eb3` by @​dependabot in https://github.com/dotnet/aspnetcore/pull/60150
* [release/8.0] Fix java discovery in IdentityModel pipeline by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60075
* [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60199
* [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59922
* [release/8.0] Readd DiagnosticSource to KestrelServerImpl by @​github-actions in https://github.com/dotnet/aspnetcore/pull/60203
* [release/8.0] Update to MacOS 15 in Helix by @​github-actions in https://github.com/dotnet/aspnetcore/pull/60239
* [release/8.0] Use the latest available JDK by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60233
* [release/8.0] Fix skip condition for java tests by @​github-actions in https://github.com/dotnet/aspnetcore/pull/60243
* [release/8.0] Update list of helix queues to skip by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60231
* [release/8.0] [Blazor] Allow cascading value subscribers to get added and removed during change notification by @​github-actions in https://github.com/dotnet/aspnetcore/pull/57288
* [release/8.0] Update remnants of azureedge.net by @​sebastienros in https://github.com/dotnet/aspnetcore/pull/60264
* [release/8.0] Centralize on one docker container by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60299
* Revert "[release/8.0] Update remnants of azureedge.net" by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60324
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60316


**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.13...v8.0.14

## 8.0.13

[Release](https://github.com/dotnet/core/releases/tag/v8.0.13)

## What's Changed
* [release/8.0] Update dotnetbuilds CDN to new endpoint by @​mmitche in https://github.com/dotnet/aspnetcore/pull/59575
* Update branding to 8.0.13 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/59756
* [release/8.0] Skip MVC template tests on HelixQueueArmDebian12 by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59295
* [release/8.0] Update OSX helix queue by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59742
* [release/8.0] (deps): Bump src/submodules/googletest from `d144031` to `7d76a23` by @​dependabot in https://github.com/dotnet/aspnetcore/pull/59678
* [release/8.0] Skip tests on internal queues too by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59579
* [release/8.0] Fix Kestrel host header mismatch handling when port in Url by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/59403
* Migrate off of Debian 11 by @​v-firzha in https://github.com/dotnet/aspnetcore/pull/59584
* [release/8.0] Pin to S.T.J 8.0.5 in Analyzers by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59777
* [release/8.0] [Blazor WASM standalone] Avoid caching `index.html` during development by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59349
* Update to Fedora 41 by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/59817
* [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59811
* [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59825
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59864
* [release/8.0] Fix/update docker tags by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59867
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/59872


**Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.12...v8.0.13

## 8.0.12

[Release](https://github.com/dotnet/core/releases/tag/v8.0.12)

## What's Changed
* Update branding to 8.0.12 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/58800
* [release/8.0] (deps): Bump src/submodules/googletest from `6dae7eb` to `1204d63` by @​dependabot in https://github.com/dotnet/aspnetcore/pull/58741
* Add scope for internal npm packages by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/58512
* [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58477
* [release/8.0] Upgrade `serialize-javascript` transient dependency by @​MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/58466
* [release/8.0] Update Messagepack dependency by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/58676
* Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/58898
* [release/8.0] Use MacOS-13 in CI by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/58549
* [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59065
* [release/8.0] Fix java discovery in helix-matrix by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59181
* [release/8.0] Update dependencies from dotnet/roslyn by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59184
* [release/8.0] (deps): Bump src/submodules/googletest from `1204d63` to `d144031` by @​dependabot in https://github.com/dotnet/aspnetcore/pull/59033


**Full Changelog**: htt...

_Description has been truncated_

Bumps BCrypt.Net-Next from 4.0.3 to 4.2.0
Bumps ClosedXML from 0.102.3 to 0.105.1
Bumps dotnet-ef from 8.0.11 to 8.0.30
Bumps FluentValidation from 11.11.0 to 11.12.0
Bumps FluentValidation.DependencyInjectionExtensions from 11.11.0 to 11.12.0
Bumps MediatR from 12.4.1 to 12.5.0
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.2 to 8.0.30
Bumps Microsoft.AspNetCore.Mvc.Testing from 8.0.0 to 8.0.30
Bumps Microsoft.EntityFrameworkCore from 8.0.11 to 8.0.30
Bumps Microsoft.EntityFrameworkCore.Design from 8.0.11 to 8.0.30
Bumps Microsoft.EntityFrameworkCore.InMemory from 8.0.0 to 8.0.30
Bumps Microsoft.Extensions.Logging.Abstractions from 8.0.2 to 8.0.3
Bumps Microsoft.NET.Test.Sdk from 17.8.0 to 17.14.1
Bumps NSubstitute from 5.1.0 to 5.3.0
Bumps StackExchange.Redis from 2.8.16 to 2.13.17
Bumps Swashbuckle.AspNetCore from 6.6.2 to 6.9.0
Bumps System.IdentityModel.Tokens.Jwt from 8.0.2 to 8.22.0
Bumps Testcontainers.PostgreSql from 3.6.0 to 3.10.0
Bumps xunit from 2.5.3 to 2.9.3
Bumps xunit.runner.visualstudio from 2.5.3 to 2.8.2

---
updated-dependencies:
- dependency-name: BCrypt.Net-Next
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ClosedXML
  dependency-version: 0.105.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: dotnet-ef
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: FluentValidation
  dependency-version: 11.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: FluentValidation.DependencyInjectionExtensions
  dependency-version: 11.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: MediatR
  dependency-version: 12.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.EntityFrameworkCore
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.EntityFrameworkCore.InMemory
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 8.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: NSubstitute
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: StackExchange.Redis
  dependency-version: 2.13.17
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 6.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-version: 8.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Testcontainers.PostgreSql
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: xunit.runner.visualstudio
  dependency-version: 2.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: xunit.runner.visualstudio
  dependency-version: 2.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 24, 2026
@vercel

vercel Bot commented Aug 24, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
devflow-platform Ready Ready Preview Aug 24, 2026 4:47pm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants