Skip to content

Bump the nuget-remaining group with 27 updates - #88

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/nuget/develop/nuget-remaining-de0f3332a5
Closed

Bump the nuget-remaining group with 27 updates#88
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/nuget/develop/nuget-remaining-de0f3332a5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor

Updated Avalonia.Controls.WebView from 12.1.0 to 12.1.1.

Updated Avalonia.Desktop from 12.1.2 to 12.1.4.

Release notes

Sourced from Avalonia.Desktop's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Avalonia.Themes.Fluent from 12.1.2 to 12.1.4.

Release notes

Sourced from Avalonia.Themes.Fluent's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Meziantou.Analyzer from 3.0.290 to 3.0.299.

Release notes

Sourced from Meziantou.Analyzer's releases.

3.0.299

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.299

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.298...3.0.299

3.0.298

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.298

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.297...3.0.298

3.0.297

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.297

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.296...3.0.297

3.0.296

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.296

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.295...3.0.296

3.0.295

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.295

What's Changed

New Contributors

Full Changelog: meziantou/Meziantou.Analyzer@3.0.294...3.0.295

3.0.294

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.294

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.293...3.0.294

3.0.293

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.293

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.292...3.0.293

3.0.292

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.292

What's Changed

New Contributors

Full Changelog: meziantou/Meziantou.Analyzer@3.0.291...3.0.292

3.0.291

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.291

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.290...3.0.291

Commits viewable in compare view.

Updated Microsoft.Identity.Client from 4.90.0 to 4.90.1.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.90.1

New Features

  • Added IMsalWsTrustHttpClientFactory, allowing custom HTTP client factories to provide redirect-disabled, credential-policy-aware clients for federation metadata (MEX) and WS-Trust requests. Added MsalError.TooManyRedirects and MsalError.WsTrustCrossOriginRedirectNotSupported for redirect failures. #​6165

Bug Fixes

  • Hardened federation metadata and WS-Trust requests by requiring HTTPS, securely validating redirects, rejecting credential-bearing cross-origin redirects, and limiting redirect chains. #​6165
  • Fixed instance discovery so a custom authority port is not forwarded to the global discovery host, while preserving the port when discovery uses the authority host. #​6155
  • Fixed KeyGuard attestation to send the tenant ID as the MAA client_id metadata value without changing managed-identity client-ID handling or attestation-cache partitioning. #​6200

Changes

  • Updated Microsoft.Azure.Security.KeyGuardAttestation from version 1.1.7 to 1.1.8. #​6202

Commits viewable in compare view.

Updated Microsoft.Identity.Client.Extensions.Msal from 4.90.0 to 4.90.1.

Release notes

Sourced from Microsoft.Identity.Client.Extensions.Msal's releases.

4.90.1

New Features

  • Added IMsalWsTrustHttpClientFactory, allowing custom HTTP client factories to provide redirect-disabled, credential-policy-aware clients for federation metadata (MEX) and WS-Trust requests. Added MsalError.TooManyRedirects and MsalError.WsTrustCrossOriginRedirectNotSupported for redirect failures. #​6165

Bug Fixes

  • Hardened federation metadata and WS-Trust requests by requiring HTTPS, securely validating redirects, rejecting credential-bearing cross-origin redirects, and limiting redirect chains. #​6165
  • Fixed instance discovery so a custom authority port is not forwarded to the global discovery host, while preserving the port when discovery uses the authority host. #​6155
  • Fixed KeyGuard attestation to send the tenant ID as the MAA client_id metadata value without changing managed-identity client-ID handling or attestation-cache partitioning. #​6200

Changes

  • Updated Microsoft.Azure.Security.KeyGuardAttestation from version 1.1.7 to 1.1.8. #​6202

Commits viewable in compare view.

Updated Microsoft.IdentityModel.JsonWebTokens from 8.22.0 to 8.23.0.

Release notes

Sourced from Microsoft.IdentityModel.JsonWebTokens's releases.

8.23.0

What's Changed

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.22.0...8.23.0

Commits viewable in compare view.

Updated Microsoft.Playwright from 1.62.0 to 1.63.0.

Release notes

Sourced from Microsoft.Playwright's releases.

1.63.0

🪟 Locate across frames

Page.FrameLocator() and Frame.FrameLocator() called without a selector search in any frame of the
subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await Page.FrameLocator().GetByRole(AriaRole.Button).ClickAsync();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it
matches elements in several frames.

👁️ Visible-only locators

New Locator.Visible returns a locator that matches only visible elements. It is the recommended
replacement for the :visible CSS pseudo-class:

await Page.Locator("button").Visible.ClickAsync();

🖼️ Aria and screen snapshots in traces

New AriaSnapshots and ScreenSnapshots options of Tracing.StartAsync() capture an aria snapshot and a screenshot of the page on every action:

await context.Tracing.StartAsync(new()
{
  Snapshots = true,
  AriaSnapshots = true,
  ScreenSnapshots = true
});

With aria and screen snapshots recorded, the new Display Aria mode in the trace viewer shows the action screenshot
side by side with the aria snapshot, and hovering an aria node highlights it on the screenshot.

New APIs

Browser and Context

Command line

  • pwsh bin/Debug/netX/playwright.ps1 install --no-remove keeps the browsers of other Playwright installations instead of removing them.
  • pwsh bin/Debug/netX/playwright.ps1 codegen --http-credentials records against pages behind HTTP authentication.

Announcements

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Testing.Extensions.CodeCoverage from 18.11.2 to 18.12.0.

Release notes

Sourced from Microsoft.Testing.Extensions.CodeCoverage's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Testing.Extensions.TrxReport from 2.4.1 to 2.5.1.

Release notes

Sourced from Microsoft.Testing.Extensions.TrxReport's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Testing.Platform from 2.4.1 to 2.5.0.

Release notes

Sourced from Microsoft.Testing.Platform's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Testing.Platform from 2.4.1 to 2.5.1.

Release notes

Sourced from Microsoft.Testing.Platform's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated OllamaSharp from 5.4.30 to 5.5.0.

Release notes

Sourced from OllamaSharp's releases.

5.5.0

What's Changed

What's Changed

Full Changelog: awaescher/OllamaSharp@5.4.30...5.5.0

Commits viewable in compare view.

Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.18.0 to 1.19.1.

Release notes

Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.

1.19.1

For highlights and announcements pertaining to this release see: Release Notes > 1.19.1.

The following changes are from the previous release 1.19.0.

1.19.1-rc.1

The following changes are from the previous release 1.19.0.

1.19.1-beta.1

The following changes are from the previous release 1.19.0-beta.1.

1.19.0

For highlights and announcements pertaining to this release see: Release Notes > 1.19.0.

The following changes are from the previous release 1.18.0.

  • NuGet: OpenTelemetry v1.19.0

    • Added Schema URL to internally created Resource instances.
      (#​7726)

    • Reduced allocations when formatting self-diagnostics events with up to three parameters.
      (#​7730)

    • Added AlwaysRecordSampler.
      (#​7695)

    • Fixed CircularBufferBuckets so the first delta histogram insertion after a reset does not result in an unnecessary scale reduction.
      (#​7749)

    • Improved wildcard source/meter name matching to avoid excessive matching time at runtime.
      (#​7760)

    • Fixed lazy logger provider builds after a failure from reusing partially initialized provider state.
      (#​7761)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api v1.19.0

    • Reduced allocations when creating log record attributes from an array.
      (#​7699)

    • Reduced allocations when setting baggage through the params overload.
      (#​7697)

    • Reduced allocations when constructing SpanAttributes from an array.
      (#​7698)

    • Fixed parsing of an inbound tracestate header whose member value trimmed to an empty value that previously threw an IndexOutOfRangeException internally and could silently truncate the tracestate.
      (#​7756)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.19.0

    No notable changes.

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Exporter.Console v1.19.0

... (truncated)

1.19.0-rc.1

The following changes are from the previous release 1.18.0.

  • NuGet: OpenTelemetry v1.19.0-rc.1

    • Added Schema URL to internally created Resource instances.
      (#​7726)

    • Reduced allocations when formatting self-diagnostics events with up to three parameters.
      (#​7730)

    • Added AlwaysRecordSampler.
      (#​7695)

    • Fixed CircularBufferBuckets so the first delta histogram insertion after a reset does not result in an unnecessary scale reduction.
      (#​7749)

    • Improved wildcard source/meter name matching to avoid excessive matching time at runtime.
      (#​7760)

    • Fixed lazy logger provider builds after a failure from reusing partially initialized provider state.
      (#​7761)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api v1.19.0-rc.1

    • Reduced allocations when creating log record attributes from an array.
      (#​7699)

    • Reduced allocations when setting baggage through the params overload.
      (#​7697)

    • Reduced allocations when constructing SpanAttributes from an array.
      (#​7698)

    • Fixed parsing of an inbound tracestate header whose member value trimmed to an empty value that previously threw an IndexOutOfRangeException internally and could silently truncate the tracestate.
      (#​7756)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.19.0-rc.1

    No notable changes.

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Exporter.Console v1.19.0-rc.1

    • Extended key/value list attribute handling to cover additional dictionary shapes (IEnumerable<KeyValuePair<string, string?>> and IDictionary). These attributes will be serialized as JSON objects.
      (#​7679)
      ... (truncated)

1.19.0-beta.1

The following changes are from the previous release 1.18.0-beta.1.

  • NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.19.0-beta.1

    • Breaking Change The PrometheusTranslationStrategy enum was renamed to PrometheusAspNetCoreTranslationStrategy.
      (#​7751)

    • Fixed OpenMetrics _created series being emitted for metric points with a default start time.
      (#​7754)

    • Prometheus text/OpenMetrics escaping of label values, label names and help text is now more efficient.
      (#​7758)

    • A scrape request whose connection is aborted, or whose X-Prometheus-Scrape-Timeout-Seconds deadline elapses, now stops waiting for an in-progress metrics collection instead of continuing to wait for it to finish. The collection itself is not cancelled and continues running in the background.
      (#​7757)

    • Updated OpenTelemetry core component version(s) to 1.19.0.
      (#​7785)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.19.0-beta.1

    • Breaking Change The PrometheusTranslationStrategy enum was renamed to PrometheusHttpListenerTranslationStrategy.
      (#​7751)

    • Fixed OpenMetrics _created series being emitted for metric points with a default start time.
      (#​7754)

    • Prometheus text/OpenMetrics escaping of label values, label names and help text is now more efficient.
      (#​7758)

    • Added PrometheusHttpListenerOptions.ScrapeResponseTimeoutMilliseconds (default 60000) which bounds how long a scrape request waits for its response. X-Prometheus-Scrape-Timeout-Seconds request header values may only shorten this limit. The limit bounds the request's wait only: a metrics collection already running when it is reached is not cancelled and continues running in the background.
      (#​7757)

    • Updated OpenTelemetry core component version(s) to 1.19.0.
      (#​7785)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Shims.OpenTracing v1.19.0-beta.1

    • Updated OpenTelemetry core component version(s) to 1.19.0.
      (#​7785)

    See CHANGELOG for details.

Commits viewable in compare view.

Updated OpenTelemetry.Extensions.Hosting from 1.18.0 to 1.19.1.

Release notes

Sourced from OpenTelemetry.Extensions.Hosting's releases.

1.19.1

For highlights and announcements pertaining to this release see: Release Notes > 1.19.1.

The following changes are from the previous release 1.19.0.

1.19.1-rc.1

The following changes are from the previous release 1.19.0.

1.19.1-beta.1

The following changes are from the previous release 1.19.0-beta.1.

1.19.0

For highlights and announcements pertaining to this release see: Release Notes > 1.19.0.

The following changes are from the previous release 1.18.0.

  • NuGet: OpenTelemetry v1.19.0

    • Added Schema URL to internally created Resource instances.
      (#​7726)

    • Reduced allocations when formatting self-diagnostics events with up to three parameters.
      (#​7730)

    • Added AlwaysRecordSampler.
      (#​7695)

    • Fixed CircularBufferBuckets so the first delta histogram insertion after a reset does not result in an unnecessary scale reduction.
      (#​7749)

    • Improved wildcard source/meter name matching to avoid excessive matching time at runtime.
      (#​7760)

    • Fixed lazy logger provider builds after a failure from reusing partially initialized provider state.
      (#​7761)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api v1.19.0

    • Reduced allocations when creating log record attributes from an array.
      (#​7699)

    • Reduced allocations when setting baggage through the params overload.
      (#​7697)

    • Reduced allocations when constructing SpanAttributes from an array.
      (#​7698)

    • Fixed parsing of an inbound tracestate header whose member value trimmed to an empty value that previously threw an IndexOutOfRangeException internally and could silently truncate the tracestate.
      (#​7756)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.19.0

    No notable changes.

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Exporter.Console v1.19.0

... (truncated)

1.19.0-rc.1

The following changes are from the previous release 1.18.0.

  • NuGet: OpenTelemetry v1.19.0-rc.1

    • Added Schema URL to internally created Resource instances.
      (#​7726)

    • Reduced allocations when formatting self-diagnostics events with up to three parameters.
      (#​7730)

    • Added AlwaysRecordSampler.
      (#​7695)

    • Fixed CircularBufferBuckets so the first delta histogram insertion after a reset does not result in an unnecessary scale reduction.
      (#​7749)

    • Improved wildcard source/meter name matching to avoid excessive matching time at runtime.
      (#​7760)

    • Fixed lazy logger provider builds after a failure from reusing partially initialized provider state.
      (#​7761)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api v1.19.0-rc.1

    • Reduced allocations when creating log record attributes from an array.
      (#​7699)

    • Reduced allocations when setting baggage through the params overload.
      (#​7697)

    • Reduced allocations when constructing SpanAttributes from an array.
      (#​7698)

    • Fixed parsing of an inbound tracestate header whose member value trimmed to an empty value that previously threw an IndexOutOfRangeException internally and could silently truncate the tracestate.
      (#​7756)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.19.0-rc.1

    No notable changes.

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Exporter.Console v1.19.0-rc.1

    • Extended key/value list attribute handling to cover additional dictionary shapes (IEnumerable<KeyValuePair<string, string?>> and IDictionary). These attributes will be serialized as JSON objects.
      (#​7679)
      ... (truncated)

1.19.0-beta.1

The following changes are from the previous release 1.18.0-beta.1.

  • NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.19.0-beta.1

    • Breaking Change The PrometheusTranslationStrategy enum was renamed to PrometheusAspNetCoreTranslationStrategy.
      (#​7751)

    • Fixed OpenMetrics _created series being emitted for metric points with a default start time.
      (#​7754)

    • Prometheus text/OpenMetrics escaping of label values, label names and help text is now more efficient.
      (#​7758)

    • A scrape request whose connection is aborted, or whose X-Prometheus-Scrape-Timeout-Seconds deadline elapses, now stops waiting for an in-progress metrics collection instead of continuing to wait for it to finish. The collection itself is not cancelled and continues running in the background.
      (#​7757)

    • Updated OpenTelemetry core component version(s) to 1.19.0.
      (#​7785)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.19.0-beta.1

    • Breaking Change The PrometheusTranslationStrategy enum was renamed to PrometheusHttpListenerTranslationStrategy.
      (#​7751)

    • Fixed OpenMetrics _created series being emitted for metric points with a default start time.
      (#​7754)

    • Prometheus text/OpenMetrics escaping of label values, label names and help text is now more efficient.
      (#​7758)

    • Added PrometheusHttpListenerOptions.ScrapeResponseTimeoutMilliseconds (default 60000) which bounds how long a scrape request waits for its response. X-Prometheus-Scrape-Timeout-Seconds request header values may only shorten this limit. The limit bounds the request's wait only: a metrics collection already running when it is reached is not cancelled and continues running in the background.
      (#​7757)

    • Updated OpenTelemetry core component version(s) to 1.19.0.
      (#​7785)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Shims.OpenTracing v1.19.0-beta.1

    • Updated OpenTelemetry core component version(s) to 1.19.0.
      (#​7785)

    See CHANGELOG for details.

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.AspNetCore from 1.18.0 to 1.19.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.AspNetCore's releases.

1.19.0

1.19.0-rc.1

1.19.0-beta.1

1.19.0-alpha.1

1.18.1

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.Http from 1.18.0 to 1.19.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.Http's releases.

1.19.0

1.19.0-rc.1

1.19.0-beta.1

1.19.0-alpha.1

1.18.1

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.Runtime from 1.18.0 to 1.19.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.Runtime's releases.

1.19.0

1.19.0-rc.1

1.19.0-beta.1

1.19.0-alpha.1

1.18.1

Commits viewable in compare view.

Updated Quartz from 3.22.0 to 4.4.0.

Release notes

Sourced from Quartz's releases.

4.4.0

Quartz.NET 4.4 is history you can run a business on. Each run says what it achieved: succeeded, failed,
cancelled or skipped, with a summary and metrics. The history keeps that per job, sweeps it by result and charts
it over time, and a health check degrades when a required job stops succeeding. Recovery respects rolling
deploys, and triggers already due fire in the transaction that acquires them: at 20 triggers a second on
PostgreSQL, 95–99 % of firings land within ±50 ms, up from 54 % on 4.3.0. Quartz.Weasel now manages the job store's schema on six databases, adding MySQL, Oracle and Firebird.

dotnet add package Quartz --version 4.4.0

Highlights

  • A run says what it achieved, and the history keeps it per job. context.Result, a status per job, retention
    by result, and a chart of runs over time. Execution history and outcomes
  • A health check per job. RequireSuccessWithin(jobKey, TimeSpan.FromHours(26)) degrades when a nightly job
    stops succeeding. Execution history and outcomes
  • A retry policy on the job class, and a scheduler-wide default. Also RunAtStartup, scheduling a trigger
    already paused, and pausing a set of keys with a reason in one call. Scheduling
  • Fire on acquire. One transaction per round instead of two: one-off throughput on PostgreSQL goes from 258–272 to
    420–429 firings a second. Reliability and clustering
  • Recovery that respects rolling deploys. A firing cancelled by a graceful shutdown can be replayed by a peer
    or the restarted node. Reliability and clustering
  • Weasel for six databases. Quartz.Weasel.MySQL, Quartz.Weasel.Oracle and Quartz.Weasel.Firebird join
    PostgreSQL, SQL Server and SQLite. Databases and Weasel
  • An HTTP client that reads a newer host, and HTTP API errors as problem details under native AOT.
    HTTP API and dashboard

Execution history and outcomes

  • Job outcomes (#​3971, closes #​3957). A job says what its run achieved:
    context.Result = JobRunReport.Skipped("…").With("released", 3).
    • Results: JobRunResult {Succeeded, Failed, Cancelled, Skipped}.
    • A summary and metrics go with it. Metrics are JSON, AOT-safe, capped at 4,000 characters (log events
      1059/1060).
    • Vetoes are recorded in the misfire feed (MisfireReason.Vetoed). Manual runs (TriggerJob) are marked.
    • Per-job JobRunStatus: last run, last success and failure, consecutive failures, counts.
    • Retention by result (RetentionByResult, MisfireRetention) and MaxEntriesPerJob.
    • How-to: Job Outcomes.
  • The database history keeps all of it (#​3980, closes #​3959; schema #​3972, closes #​3958).
    • Each run's row and its job's status commit in one transaction on the history connection.
    • The sweep is tiered by result, capped per job, and clears status rows of deleted jobs. One elected node
      sweeps per cluster.
    • The misfire feed is filtered by reason. A 4.2 row with no reason reads as Missed.
    • Known cost: runs of one job that complete at once take turns on its status row. On PostgreSQL, one hot job
      with history on went from 113–248 to 77–189 firings a second. Tracked in #​3979.
    • Fixed: the optional-t......

Description has been truncated

@dependabot
Bump the nuget-remaining group with 27 updates
6f1af0c 
Bumps Avalonia.Controls.WebView from 12.1.0 to 12.1.1
Bumps Avalonia.Desktop from 12.1.2 to 12.1.4
Bumps Avalonia.Themes.Fluent from 12.1.2 to 12.1.4
Bumps Meziantou.Analyzer from 3.0.290 to 3.0.299
Bumps Microsoft.Identity.Client from 4.90.0 to 4.90.1
Bumps Microsoft.Identity.Client.Extensions.Msal from 4.90.0 to 4.90.1
Bumps Microsoft.IdentityModel.JsonWebTokens from 8.22.0 to 8.23.0
Bumps Microsoft.Playwright from 1.62.0 to 1.63.0
Bumps Microsoft.Testing.Extensions.CodeCoverage from 18.11.2 to 18.12.0
Bumps Microsoft.Testing.Extensions.TrxReport from 2.4.1 to 2.5.1
Bumps Microsoft.Testing.Platform to 2.5.0, 2.5.1
Bumps OllamaSharp from 5.4.30 to 5.5.0
Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.18.0 to 1.19.1
Bumps OpenTelemetry.Extensions.Hosting from 1.18.0 to 1.19.1
Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.18.0 to 1.19.0
Bumps OpenTelemetry.Instrumentation.Http from 1.18.0 to 1.19.0
Bumps OpenTelemetry.Instrumentation.Runtime from 1.18.0 to 1.19.0
Bumps Quartz from 3.22.0 to 4.4.0
Bumps Quartz.Extensions.Hosting from 3.22.0 to 4.4.0
Bumps Quartz.Plugins from 3.22.0 to 4.4.0
Bumps Quartz.Plugins.TimeZoneConverter from 3.22.0 to 4.4.0
Bumps Quartz.Serialization.SystemTextJson from 3.22.0 to 4.4.0
Bumps Scalar.AspNetCore from 2.17.4 to 2.17.14
Bumps SonarAnalyzer.CSharp from 10.34.0.3385 to 10.35.0.4138
Bumps TUnit from 1.70.1 to 1.74.0
Bumps TUnit.Playwright from 1.68.4 to 1.74.0
Bumps Velopack from 1.2.0 to 1.2.161

---
updated-dependencies:
- dependency-name: Avalonia.Controls.WebView
  dependency-version: 12.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-remaining
- dependency-name: Avalonia.Desktop
  dependency-version: 12.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-remaining
- dependency-name: Avalonia.Themes.Fluent
  dependency-version: 12.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-remaining
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.299
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-remaining
- dependency-name: Microsoft.Identity.Client
  dependency-version: 4.90.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-remaining
- dependency-name: Microsoft.Identity.Client.Extensions.Msal
  dependency-version: 4.90.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-remaining
- dependency-name: Microsoft.IdentityModel.JsonWebTokens
  dependency-version: 8.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-remaining
- dependency-name: Microsoft.Playwright
  dependency-version: 1.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-remaining
- dependency-name: Microsoft.Testing.Extensions.CodeCoverage
  dependency-version: 18.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-remaining
- dependency-name: Microsoft.Testing.Platform
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-remaining
- dependency-name: Microsoft.Testing.Extensions.TrxReport
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-remaining
- dependency-name: Microsoft.Testing.Platform
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-remaining
- dependency-name: OllamaSharp
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-remaining
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-remaining
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-remaining
- dependency-name: OpenTelemetry.Instrumentation.AspNetCore
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-remaining
- dependency-name: OpenTelemetry.Instrumentation.Http
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-remaining
- dependency-name: OpenTelemetry.Instrumentation.Runtime
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-remaining
- dependency-name: Quartz
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-remaining
- dependency-name: Quartz.Extensions.Hosting
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-remaining
- dependency-name: Quartz.Plugins
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-remaining
- dependency-name: Quartz.Plugins.TimeZoneConverter
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-remaining
- dependency-name: Quartz.Serialization.SystemTextJson
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-remaining
- dependency-name: Scalar.AspNetCore
  dependency-version: 2.17.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-remaining
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.35.0.4138
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-remaining
- dependency-name: TUnit
  dependency-version: 1.74.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-remaining
- dependency-name: TUnit.Playwright
  dependency-version: 1.74.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-remaining
- dependency-name: Velopack
  dependency-version: 1.2.161
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-remaining
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from w0rldx as a code owner October 12, 2026 12:41
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 12, 2026
@w0rldx w0rldx mentioned this pull request Oct 12, 2026
Closed
@w0rldx

w0rldx commented Oct 12, 2026

Copy link
Copy Markdown
Owner

Absorbed by the manual dependency round: develop @eb085a983 "build(deps): absorb Dependabot #77, #88, #89, #90 and hold the majors with migration cost" (lands on origin with the next push). Held from this PR, with reasons in that commit body: Quartz 4, Playwright/TUnit.Playwright, Velopack, msw 3, monaco 0.57, react-doctor; Dependabot now ignores Quartz and msw majors.

@w0rldx w0rldx closed this Oct 12, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

This was referenced Oct 12, 2026
Closed
Closed
@dependabot
dependabot Bot deleted the dependabot/nuget/develop/nuget-remaining-de0f3332a5 branch October 12, 2026 18:20
w0rldx added a commit that referenced this pull request Oct 12, 2026
@w0rldx
build(deps): absorb Dependabot #77, #88, #89, #90 and hold the majors…
eb085a9 
… with migration cost

Backend (Directory.Packages.props): Avalonia.Desktop and Themes.Fluent 12.1.4, Avalonia.Controls.WebView 12.1.1,
Meziantou.Analyzer 3.0.299, SonarAnalyzer.CSharp 10.35.0.4138, Microsoft.Identity.Client and
Extensions.Msal 4.90.1, Microsoft.IdentityModel.JsonWebTokens 8.23.0, OllamaSharp 5.5.0, OpenTelemetry
exporter and hosting 1.19.1 with the AspNetCore, Http and Runtime instrumentation 1.19.0, Scalar.AspNetCore
2.17.14, Microsoft.Extensions.AI.Abstractions 10.10.1, and the test cohort TUnit 1.74.0, Microsoft.Testing.Platform
2.5.1, TrxReport 2.5.1, CodeCoverage 18.12.0 (TUnit.Engine pins the platform exactly, so they move together).

Avalonia 12.1.1 obsoletes PreferWebKitGtkInstead (error under Release). DesktopWindow now sets
NativeWebView.AdapterPreference to WebKitGtk on Linux only and the WPE environment case is gone; the existing
PlatformNotSupportedException covers WPE. The list is never set on Windows, where a WebKitGtk-only preference
filters the adapter order to empty.

Frontend (XE-Local-AI-Engine.Client.React): Mantine 9.7.0 (9.7.1 and 9.7.2 are inside pnpm's seven-day release
age), @tabler/icons-react 3.48.0, @tanstack/react-query and query-devtools 5.104.1, react-router 1.170.41,
router-plugin 1.168.42, react-devtools 0.10.13, @xyflow/react 12.12.0, framer-motion 14.0.0 (14.0 removed only
internal APIs; 14.1.0 is inside the release age), react-i18next 17.0.15, rrweb 2.1.7, biome 2.5.15 with its
schema, cspell 10.3.6 and dict-de-de 4.1.3, @vitejs/plugin-react 6.1.2, vite 8.3.2, vitest and its ui and
coverage-v8 5.0.3, dependency-cruiser 18.5.0, knip 6.39.0, postcss 8.5.29, stylelint 17.16.0,
@rollup/rollup-linux-x64-gnu 4.64.0. The why-is-node-running override is gone because vitest 5.0.3 pins 3.2.1
itself. The rrweb license override is re-keyed to 2.1.7 (the LICENSE at its gitHead is byte-identical).
The third-party license inventory is regenerated for both sides.

Held, on purpose:
- Quartz 3.22.0 (4.x needs a non-idempotent schema migration on the repo-owned QRTZ_ tables in user databases
  and changes IJob.Execute); Dependabot now ignores Quartz majors.
- msw 2.15.0 (3.x renames onUnhandledRequest and stops bypassing fake timers across 77 test files); Dependabot
  now ignores msw majors.
- monaco-editor 0.56.0 (0.57.0 adds 110 kB to the lazy editor chunk and crosses its 3.40 MB budget for no fix).
- Microsoft.Playwright 1.62.0 and TUnit.Playwright 1.68.4 (1.74.0 forces Playwright 1.63 and a browser refresh).
- Velopack 1.2.0 (1.2.161 unreviewed, installer path).
- Microsoft.Extensions.AI and .OpenAI 10.10.0 with OpenAI 2.13.0 (10.10.1 floors OpenAI at 2.14.0, which needs
  a live Responses tool-call proof).
- react-doctor 0.9.14, jsdom 30.0.1, Aspire 13.5.4 (13.6.1 is a coordinated bump with a live round).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@w0rldx w0rldx Awaiting requested review from w0rldx w0rldx is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@w0rldx