Skip to content

chore(deps): Bump AngleSharp and 11 others - #22

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/BrassLedger.Api.Tests/routine-updates-06aae139bb
Closed

chore(deps): Bump AngleSharp and 11 others#22
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/BrassLedger.Api.Tests/routine-updates-06aae139bb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updated AngleSharp from 1.5.0 to 1.8.0.

Release notes

Sourced from AngleSharp's releases.

1.8.0

Released on Saturday, September 5 2026

What's Changed

  • Improved AngleSharp's test website
  • Fixed script data escaped state potentially not bouncing back correctly
  • Added the DomSameObject annotation for the respective IDL members (#​1314) @​lahma
  • Added the DomReturnType annotation for methods returning a different IDL type (#​1318)
  • Released 1.8.0 by @​FlorianRappl in Release 1.8.0 AngleSharp/AngleSharp#1317

Full Changelog: AngleSharp/AngleSharp@v1.7.3...v1.8.0

1.7.3

Released on Thursday, September 3 2026

What's Changed

  • Improved tracking of parse exceptions in the HtmlParser (#​1315) @​lahma
  • Fixed tokenizer buffer overrun on encoding change (#​1290) @​jafin
  • Fixed selector text dropping the nth-child of clause (#​1292) @​jafin
  • Fixed selector text dropping the case-insensitive (#​1291) @​jafin
  • Fixed selector specificity carrying between fields instead of saturating (#​1300) @​meziantou
  • Fixed condition check for disposed state in ReturnToPool (#​1296) @​meziantou
  • Fixed ArgumentOutOfRangeException CSS escapes (#​1299) @​meziantou
  • Fixed whitespace around An+B CSS selector notations (#​1297)
  • Fixed unsupported pseudo-classes matching everything (#​1295)
  • Fixed DomException for invalid foreign attribute names such as xml:lang[ (#​1294)
  • Fixed script data escaped state leaving escaped mode too early (#​1298)
  • Fixed CurrentScript not indicating the currently executing script (#​1308) @​lahma
  • Fixed returned missing attribute-properties to use empty string instead of null (#​1313) @​lahma
  • Fixed removal of data-* attributes (#​1310) @​lahma
  • Added missing DomName/DomAccessor annotations (#​1301) @​meziantou
  • Added missing DomLiterals attribute to AdjacentPosition (#​1311) @​lahma
  • Released 1.7.3 by @​FlorianRappl in Release 1.7.3 AngleSharp/AngleSharp#1302

Full Changelog: AngleSharp/AngleSharp@v1.7.2...v1.7.3

1.7.2

Released on Sunday, August 23 2026

What's Changed

  • Fixed matching of annotation-xml encoding to be case-insensitive (#​1284) @​arpitjain099
  • Fixed <xmp> usage in <select> elements
  • Added ability to parse immutable byte buffers without a stream (#​1286) @​dv00d00
  • Released 1.7.2 by @​FlorianRappl in Release 1.7.2 AngleSharp/AngleSharp#1288

New Contributors

Full Changelog: AngleSharp/AngleSharp@1.7.1...v1.7.2

1.7.1

Released on Wednesday, August 5 2026

  • Migrated the build system from NUKE to Fallout by @​jafin in Migrate the build system from NUKE to Fallout AngleSharp/AngleSharp#1275
  • Improved WHATWG Url specification (#​802) @​jafin
  • Improved tokenizer read performance (#​1274) @​dv00d00
  • Fixed auxiliary browsing context lifetime (#​1278) @​jafin
  • Fixed duplicated DomName attributes on DOM geometry
  • Fixed document.open() destroying the DOM tree in case of encoding problems (#​1276)
  • Fixed source references having wrong line (#​1280)
  • Released 1.7.1 by @​FlorianRappl in Release 1.7.1 AngleSharp/AngleSharp#1281

Full Changelog: AngleSharp/AngleSharp@1.7.0...v1.7.1

1.7.0

Released on Friday, July 31 2026

  • Improved CSS selector performance (#​1270, #​929) @​lahma
  • Added support for the :host pseudo selector (#​1271)
  • Added support for the DomGeometry spec (#​1193)

1.6.0

Released on Sunday, July 26 2026

  • Improved performance for text tokenization (#​1262) @​dv00d00
  • Improved CSS selector performance
  • Improved observer dispatch during HTML parsing (#​1266) @​dv00d00
  • Improved declaration of unsupported pseudo elements
  • Fixed inconsistent behavior and segfaults on Android Release build (#​1252) @​DevGitPit
  • Fixed CSS attribute selector modifier handling for i / I (case-insensitive) and s / S (case-sensitive)
  • Added API enhancements to expose asynchronous HTML token source (#​1265) @​dv00d00
  • Added bounded stream parsing mode (#​1263) @​dv00d00
  • Added canonicalization of decimal, octal, or hexadecimal IPv4 literals in Url
  • Added parsing of / checks for IPv6 literals in Url
  • Added support for the CSS column combinator (||) selector syntax
  • Added correct identification of CurrentSource in CssMediaElement

1.5.2

Released on Sunday, July 5 2026

  • Fixed NodeIterator pre-removing steps to use the first following node (#​1260) @​ivandrofly
  • Fixed Range.IsCollapsed to also compare offsets (#​1259) @​ivandrofly
  • Fixed swapped comparison in Range.CompareBoundaryTo (#​1258) @​ivandrofly
  • Fixed Range.CopyContent to follow the DOM Standard (#​1257) @​ivandrofly
  • Fixed Range.ExtractContent to follow the DOM Standard (#​1256) @​ivandrofly
  • Added missing media attribute change detection on SVG style elements (#​1261) @​ivandrofly

Commits viewable in compare view.

Updated bunit from 1.31.3 to 1.40.0.

Release notes

Sourced from bunit's releases.

1.40.0

Fixed

  • Aligned Microsoft packages to their TFM version

1.39.5

Fixed

  • Do not set the Uri or BaseUri property on the FakeNavigationManager if navigation is prevented by a handler on net7.0 or greater. Reported and fixed by @​ayyron-dev in #​1647
  • Use default renderer properties for AngleSharp. Reported by @​jtleaming in [#​1692].
  • FindComponents throws an exception, when a base and derived class was searched for. Reported by @​BlueDragon709 in [#​1691].

1.38.5

Added

  • Added support for xunit v3 in the bunit.template. By @​linkdotnet.

1.37.7

Added

  • Added support for RendererInfo and AssignedRenderMode (.net9.0).

1.36.0

Added

  • Bumped .NET 9 version dependencies to stable packages.

1.35.3

Added

  • Extension packages (bunit.generators and bunit.web.query) are flagged as stable.

1.34.0

Fixed

1.33.3

Added

  • bunit.generators respect parameters from the base class.
  • Supports components using constructor injection in net9.0.

Fixed

  • Use latest System.Text.Json due to CVE in 8.0.4.

1.32.7

Fixed

  • Ensure that a check in WaitForAssertion and related methods is always performed at once before the wait timer is started. If not, the timeout could occure before a wait-for check-condition had been attempted, causing tests to fail without reason. Fixed by @​egil.

Commits viewable in compare view.

Updated coverlet.collector from 6.0.2 to 6.0.4.

Release notes

Sourced from coverlet.collector's releases.

6.0.4

Fixed

  • Fix empty coverage report when using include and exclude filters #​1726

Diff between 6.0.3 and 6.0.4

6.0.3

Fixed

Improvements

  • Cache the regex used in InstrumentationHelper #​1693
  • Enable dotnetTool integration tests for linux #​660

Diff between 6.0.2 and 6.0.3

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 8.0.10 to 8.0.31.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

8.0.31

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.30...v8.0.31

8.0.30

Release

What's Changed

New Contributors

Full Changelog: dotnet/aspnetcore@v8.0.29...v8.0.30

8.0.29

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.28...v8.0.29

8.0.28

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.27...v8.0.28

8.0.27

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.26...v8.0.27

8.0.26

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.25...v8.0.26

8.0.25

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.24...v8.0.25

8.0.24

Release

8.0.23

Release

What's Changed

https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs

8.0.22

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.21...v8.0.22

8.0.21

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.19...v8.0.20

8.0.18

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

  • Update dependencies from dotnet/arcade (#​61832)
    This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
    The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

  • Update branding to 8.0.17 (#​61830)
    The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

  • Merging internal commits for release/8.0 (#​61924)
    This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

8.0.13

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.11...v8.0.12

8.0.11

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.10...v8.0.11

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 8.0.25 to 8.0.31.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

8.0.31

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.30...v8.0.31

8.0.30

Release

What's Changed

New Contributors

Full Changelog: dotnet/aspnetcore@v8.0.29...v8.0.30

8.0.29

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.28...v8.0.29

8.0.28

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.27...v8.0.28

8.0.27

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.26...v8.0.27

8.0.26

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.25...v8.0.26

Commits viewable in compare view.

Pinned Microsoft.EntityFrameworkCore.Sqlite at 8.0.31.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

8.0.31

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.30...v8.0.31

8.0.30

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.29...v8.0.30

8.0.29

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.28...v8.0.29

8.0.28

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.27...v8.0.28

8.0.27

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.26...v8.0.27

8.0.26

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.25...v8.0.26

8.0.25

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.24...v8.0.25

8.0.24

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.23...v8.0.24

8.0.23

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.22...v8.0.23

8.0.22

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.21...v8.0.22

8.0.21

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.19...v8.0.20

8.0.17

Dependency Updates

  • Update dependencies from dotnet/arcade (#​36085)
    Updates the project's dependencies using the latest versions from the dotnet/arcade repository. This ensures that the build infrastructure and related tooling are up to date, which can bring in important bug fixes, security patches, and improvements from upstream.

Miscellaneous

  • Update branding to 8.0.17 (#​36043)
    Updates the internal version branding to 8.0.17. This change ensures that the product and its packages correctly reflect the new release version, helping users and developers identify the build.

  • Merging internal commits for release/8.0 (#​36080)
    Integrates various internal commits into the release/8.0 branch. This merge brings together important updates and ensures the release branch is synchronized with recent internal development, maintaining consistency and stability for the release.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.13...v8.0.14

8.0.13

[Release](https://github.com/dotnet/core/releases/tag/v8.0.13

What's Changed

Full Changelog: dotnet/efcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.11...v8.0.12

8.0.11

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.10...v8.0.11

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 17.11.1 to 17.14.1.

Release notes

_Sourced from [...

Description has been truncated

@dependabot
chore(deps): Bump AngleSharp and 11 others
6ccc7df 
Bumps AngleSharp from 1.5.0 to 1.7.2
Bumps bunit from 1.31.3 to 1.40.0
Bumps coverlet.collector from 6.0.2 to 6.0.4
Bumps Microsoft.AspNetCore.Mvc.Testing from 8.0.10 to 8.0.30
Bumps Microsoft.AspNetCore.OpenApi from 8.0.25 to 8.0.30
Bumps Microsoft.EntityFrameworkCore.Sqlite from 8.0.10 to 8.0.30
Bumps Microsoft.NET.Test.Sdk from 17.11.1 to 17.14.1
Bumps Microsoft.Playwright from 1.54.0 to 1.62.0
Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 8.0.10 to 8.0.11
Bumps SQLitePCLRaw.lib.e_sqlite3 from 2.1.12 to 2.1.13
Bumps Swashbuckle.AspNetCore from 6.6.2 to 6.9.0
Bumps xunit from 2.9.2 to 2.9.3

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL
  dependency-version: 8.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: SQLitePCLRaw.lib.e_sqlite3
  dependency-version: 2.1.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 6.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: coverlet.collector
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: coverlet.collector
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 8.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: SQLitePCLRaw.lib.e_sqlite3
  dependency-version: 2.1.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: coverlet.collector
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: Microsoft.Playwright
  dependency-version: 1.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: AngleSharp
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: bunit
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: coverlet.collector
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 26, 2026
@dependabot dependabot Bot mentioned this pull request Aug 26, 2026
Closed
@socket-security

socket-security Bot commented Aug 26, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedcoverlet.collector@​6.0.2 ⏵ 6.0.464 +1100100100100
Updatedmicrosoft.playwright@​1.54.0 ⏵ 1.62.079 +510010010070 -30
Updatedsqlitepclraw.lib.e_sqlite3@​2.1.12 ⏵ 2.1.138110090100100
Updatedmicrosoft.aspnetcore.mvc.testing@​8.0.10 ⏵ 8.0.309810090100100
Updatedmicrosoft.net.test.sdk@​17.11.1 ⏵ 17.14.110010090100100
Updatedxunit@​2.9.2 ⏵ 2.9.310010090100100
Updatedmicrosoft.aspnetcore.openapi@​8.0.25 ⏵ 8.0.3010010090100100
Updatedswashbuckle.aspnetcore@​6.6.2 ⏵ 6.9.010010090100100
Updatedmicrosoft.entityframeworkcore.sqlite@​8.0.10 ⏵ 8.0.3010010090100100
Updatednpgsql.entityframeworkcore.postgresql@​8.0.10 ⏵ 8.0.1199 -110090100100
Updatedanglesharp@​1.5.0 ⏵ 1.7.29410090100100
Updatedbunit@​1.31.3 ⏵ 1.40.010010090100100

View full report

@socket-security

socket-security Bot commented Aug 26, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: nuget system.reflection.metadata is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: BrassLedger.Api.Tests/BrassLedger.Api.Tests.csproj → nuget/microsoft.net.test.sdk@17.14.1 → nuget/system.reflection.metadata@8.0.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/system.reflection.metadata@8.0.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@dependabot @github

dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants