Bump the nuget-minor-and-patch group with 30 updates by dependabot[bot] · Pull Request #17 · tthanhtung92/finmy

This release improves generic call matching (#989, #974, #990). Thanks to @zvirja and @JMolenkamp for fixes this.
We've also switched to using trusted nuget publishing linked to GitHub Releases. (#987, @zvirja)

What's Changed

Add trusted nuget publish by @zvirja in Add trusted nuget publish nsubstitute/NSubstitute#987
fix: Stop using return-type assignability for generic call matching by @zvirja in fix: Stop using return-type assignability for generic call matching nsubstitute/NSubstitute#989
Remove skip-duplicate option from NuGet push command by @zvirja in Remove skip-duplicate option from NuGet push command nsubstitute/NSubstitute#988
Add tag trigger for release pipeline by @zvirja in Add tag trigger for release pipeline nsubstitute/NSubstitute#991
Fix broken comparison of the generic methods by @zvirja in Fix broken comparison of the generic methods nsubstitute/NSubstitute#990
Support C# 13 params collections in argument matching by @zvirja in Support C# 13 params collections in argument matching nsubstitute/NSubstitute#993
Add tests for nullable Task by @zvirja in Add tests for nullable Task nsubstitute/NSubstitute#994

Full Changelog: nsubstitute/NSubstitute@v6.1.0...v6.2.0

6.1.0

NSubstitute v6.1.0

This release reverts nullability support introduced in 6.0. This change caused a number of problems for callers (#973, #976), and trying to resolve these (#976) revealed the need for more fundamental changes to NSubstitute to effectively support this. As a result, nullability is again disabled for public API. Huge thanks to @jdb0123, @Romfos, and @Moha-sami for their PRs addressing this, and thanks for all those who raised issues. We also humbly award @zvirja with one unlimited "I told you so" pass to use as he sees fit.

What's Changed

Add new argument matcher for comparing objects by reference by @Wer-Wolf in Add new argument matcher for comparing objects by reference nsubstitute/NSubstitute#963
Revert nullability changes in Revert nullability changes nsubstitute/NSubstitute#985

New Contributors

@Wer-Wolf made their first contribution in Add new argument matcher for comparing objects by reference nsubstitute/NSubstitute#963

Full Changelog: nsubstitute/NSubstitute@v6.0.0...v6.1.0

Commits viewable in compare view.

Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.17.0 to 1.18.0.

Release notes

Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.

1.18.0

For highlights and announcements pertaining to this release see: Release Notes > 1.18.0.

The following changes are from the previous release 1.17.0.

NuGet: OpenTelemetry v1.18.0
- Fixed self-diagnostics log lines being silently dropped when an event message or parameter contained enough 3-byte UTF-8 characters to overflow the internal buffer estimate. Such content is now truncated.
  (#7543)
- Fixed activity creation throwing when multiple tracer providers return a sampler attribute with the same key.
  (#7558)
- Added the otel.sdk.processor.log.processed SDK self-observability metric.
  (#7486)
- Added the otel.sdk.processor.span.processed SDK self-observability metric.
  (#7598)
- BatchActivityExportProcessor and SimpleActivityExportProcessor no longer forward spans to the exporter once Shutdown has been called, and BatchActivityExportProcessor.Shutdown now waits for in-flight OnEnd calls to finish enqueueing before flushing.
  (#7598)
- Fix logger, meter and tracer providers leaking background threads if an exception is thrown by their constructor after resource creation.
  (#7615)
- CircularBufferBuckets.Copy optimized to use bulk array copies.
  (#7670)
- Restored configured MaxScale after delta exponential histogram collection.
  (#7671)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.18.0
- Avoid formatting exceptions and creating exception attributes when RecordException is called on a span that is not recorded.
  (#7669)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.18.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.18.0
- Added support for serializing attribute values that are key/value lists (IEnumerable<KeyValuePair<string, object?>>). These attributes will be serialized as JSON objects.
  (#7015)

... (truncated)

1.18.0-rc.1

The following changes are from the previous release 1.17.0.

NuGet: OpenTelemetry v1.18.0-rc.1
- Fixed self-diagnostics log lines being silently dropped when an event message or parameter contained enough 3-byte UTF-8 characters to overflow the internal buffer estimate. Such content is now truncated.
  (#7543)
- Fixed activity creation throwing when multiple tracer providers return a sampler attribute with the same key.
  (#7558)
- Added the otel.sdk.processor.log.processed SDK self-observability metric.
  (#7486)
- Added the otel.sdk.processor.span.processed SDK self-observability metric.
  (#7598)
- BatchActivityExportProcessor and SimpleActivityExportProcessor no longer forward spans to the exporter once Shutdown has been called, and BatchActivityExportProcessor.Shutdown now waits for in-flight OnEnd calls to finish enqueueing before flushing.
  (#7598)
- Fix logger, meter and tracer providers leaking background threads if an exception is thrown by their constructor after resource creation.
  (#7615)
- CircularBufferBuckets.Copy optimized to use bulk array copies.
  (#7670)
- Restored configured MaxScale after delta exponential histogram collection.
  (#7671)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.18.0-rc.1
- Avoid formatting exceptions and creating exception attributes when RecordException is called on a span that is not recorded.
  (#7669)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.18.0-rc.1

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.18.0-rc.1
- Added support for serializing attribute values that are key/value lists (IEnumerable<KeyValuePair<string, object?>>). These attributes will be serialized as JSON objects.
  (#7015)
See CHANGELOG for details.

... (truncated)

1.18.0-beta.1

The following changes are from the previous release 1.17.0-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.18.0-beta.1
- Fix concurrent scrapes returning an empty response under contention. Now the exporter will return an HTTP 500 error instead.
  (#7571)
- Waiting for concurrent scrapes to finish before collecting no longer blocks, which could stall concurrent scrapes being waited on.
  (#7571)
- Fixed the interaction between PrometheusAspNetCoreOptions.TranslationStrategy and content negotiation. The configured strategy is now applied before content negotiation, instead of the negotiated escaping scheme replacing the strategy's, and the Content-Type header now reports the escaping scheme that was applied rather than the one that was negotiated.
  (#7610)
- Fixed metric values and histogram bucket bounds being written with 17 significant digits instead of their shortest round-trippable representation.
  (#7589)
- Fixed the canonical representation used for histogram le and summary quantile label values falling back to 17 significant digits incorrectly.
  (#7589)
- Fixed a race where a slow scrape could return an HTTP 200 instead of 408.
  (#7615)
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#7674)
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.18.0-beta.1
- Fix concurrent scrapes returning an empty response under contention. Now the exporter will return an HTTP 500 error instead.
  (#7571)
- Waiting for concurrent scrapes to finish before collecting no longer blocks, which could stall concurrent scrapes being waited on.
  (#7571)
- A scrape which is still collecting when the listener is disposed now returns an HTTP 503 response.
  (#7587)
- Shutting down the listener no longer waits indefinitely for its request processing loop to stop, and no longer throws if the loop faulted.
  (#7587)
- Fixed the interaction between PrometheusHttpListenerOptions.TranslationStrategy and content negotiation. The configured strategy is now applied before content negotiation, instead of the negotiated escaping scheme replacing the strategy's, and the Content-Type header now reports the escaping scheme that was applied rather than the one that was negotiated.
  (#7610)
- Fixed metric values and histogram bucket bounds being written with 17 significant digits instead of their shortest round-trippable representation.
  (#7589)
- Fixed the canonical representation used for histogram le and summary quantile label values falling back to 17 significant digits incorrectly.
  (#7589)

... (truncated)

Commits viewable in compare view.

Updated OpenTelemetry.Extensions.Hosting from 1.17.0 to 1.18.0.

Release notes

Sourced from OpenTelemetry.Extensions.Hosting's releases.

1.18.0

For highlights and announcements pertaining to this release see: Release Notes > 1.18.0.

The following changes are from the previous release 1.17.0.

NuGet: OpenTelemetry v1.18.0
- Fixed self-diagnostics log lines being silently dropped when an event message or parameter contained enough 3-byte UTF-8 characters to overflow the internal buffer estimate. Such content is now truncated.
  (#7543)
- Fixed activity creation throwing when multiple tracer providers return a sampler attribute with the same key.
  (#7558)
- Added the otel.sdk.processor.log.processed SDK self-observability metric.
  (#7486)
- Added the otel.sdk.processor.span.processed SDK self-observability metric.
  (#7598)
- BatchActivityExportProcessor and SimpleActivityExportProcessor no longer forward spans to the exporter once Shutdown has been called, and BatchActivityExportProcessor.Shutdown now waits for in-flight OnEnd calls to finish enqueueing before flushing.
  (#7598)
- Fix logger, meter and tracer providers leaking background threads if an exception is thrown by their constructor after resource creation.
  (#7615)
- CircularBufferBuckets.Copy optimized to use bulk array copies.
  (#7670)
- Restored configured MaxScale after delta exponential histogram collection.
  (#7671)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.18.0
- Avoid formatting exceptions and creating exception attributes when RecordException is called on a span that is not recorded.
  (#7669)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.18.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.18.0
- Added support for serializing attribute values that are key/value lists (IEnumerable<KeyValuePair<string, object?>>). These attributes will be serialized as JSON objects.
  (#7015)

... (truncated)

1.18.0-rc.1

The following changes are from the previous release 1.17.0.

NuGet: OpenTelemetry v1.18.0-rc.1
- Fixed self-diagnostics log lines being silently dropped when an event message or parameter contained enough 3-byte UTF-8 characters to overflow the internal buffer estimate. Such content is now truncated.
  (#7543)
- Fixed activity creation throwing when multiple tracer providers return a sampler attribute with the same key.
  (#7558)
- Added the otel.sdk.processor.log.processed SDK self-observability metric.
  (#7486)
- Added the otel.sdk.processor.span.processed SDK self-observability metric.
  (#7598)
- BatchActivityExportProcessor and SimpleActivityExportProcessor no longer forward spans to the exporter once Shutdown has been called, and BatchActivityExportProcessor.Shutdown now waits for in-flight OnEnd calls to finish enqueueing before flushing.
  (#7598)
- Fix logger, meter and tracer providers leaking background threads if an exception is thrown by their constructor after resource creation.
  (#7615)
- CircularBufferBuckets.Copy optimized to use bulk array copies.
  (#7670)
- Restored configured MaxScale after delta exponential histogram collection.
  (#7671)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.18.0-rc.1
- Avoid formatting exceptions and creating exception attributes when RecordException is called on a span that is not recorded.
  (#7669)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.18.0-rc.1

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.18.0-rc.1
- Added support for serializing attribute values that are key/value lists (IEnumerable<KeyValuePair<string, object?>>). These attributes will be serialized as JSON objects.
  (#7015)
See CHANGELOG for details.

... (truncated)

1.18.0-beta.1

The following changes are from the previous release 1.17.0-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.18.0-beta.1
- Fix concurrent scrapes returning an empty response under contention. Now the exporter will return an HTTP 500 error instead.
  (#7571)
- Waiting for concurrent scrapes to finish before collecting no longer blocks, which could stall concurrent scrapes being waited on.
  (#7571)
- Fixed the interaction between PrometheusAspNetCoreOptions.TranslationStrategy and content negotiation. The configured strategy is now applied before content negotiation, instead of the negotiated escaping scheme replacing the strategy's, and the Content-Type header now reports the escaping scheme that was applied rather than the one that was negotiated.
  (#7610)
- Fixed metric values and histogram bucket bounds being written with 17 significant digits instead of their shortest round-trippable representation.
  (#7589)
- Fixed the canonical representation used for histogram le and summary quantile label values falling back to 17 significant digits incorrectly.
  (#7589)
- Fixed a race where a slow scrape could return an HTTP 200 instead of 408.
  (#7615)
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#7674)
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.18.0-beta.1
- Fix concurrent scrapes returning an empty response under contention. Now the exporter will return an HTTP 500 error instead.
  (#7571)
- Waiting for concurrent scrapes to finish before collecting no longer blocks, which could stall concurrent scrapes being waited on.
  (#7571)
- A scrape which is still collecting when the listener is disposed now returns an HTTP 503 response.
  (#7587)
- Shutting down the listener no longer waits indefinitely for its request processing loop to stop, and no longer throws if the loop faulted.
  (#7587)
- Fixed the interaction between PrometheusHttpListenerOptions.TranslationStrategy and content negotiation. The configured strategy is now applied before content negotiation, instead of the negotiated escaping scheme replacing the strategy's, and the Content-Type header now reports the escaping scheme that was applied rather than the one that was negotiated.
  (#7610)
- Fixed metric values and histogram bucket bounds being written with 17 significant digits instead of their shortest round-trippable representation.
  (#7589)
- Fixed the canonical representation used for histogram le and summary quantile label values falling back to 17 significant digits incorrectly.
  (#7589)

... (truncated)

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.AspNetCore from 1.17.0 to 1.18.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.AspNetCore's releases.

1.18.0

NuGet: OpenTelemetry.Exporter.OneCollector v1.18.0
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

1.18.0-rc.1

NuGet: OpenTelemetry.Instrumentation.Process v1.18.0-rc.1
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

1.18.0-beta.2

NuGet: OpenTelemetry.Exporter.Geneva v1.18.0-beta.2
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

1.18.0-beta.1

NuGet: OpenTelemetry.Exporter.Geneva v1.18.0-beta.1
- Fixed a metric TLV serialization issue where an exemplar whose filtered tags
  serialized to more than 255 bytes caused the payload to be corrupted.
  (#4856)
- Renamed the PrivatePreviewEnableOtlpProtobufEncoding connection string switch
  to EnableOtlpProtobufEncoding. The old PrivatePreviewEnableOtlpProtobufEncoding
  switch is no longer supported.
  (#4920)
- Fixed a regression introduced in 1.17.0 where EtwDataTransport prepended a
  synthetic 4-byte length field to the ETW payload for logs and traces, causing
  the agent to reject the data with "Bad forward protocol format". The raw
  payload is once again written as a single unframed field.
  (#4941)
See CHANGELOG for details.

1.18.0-alpha.1

NuGet: OpenTelemetry.Instrumentation.EventCounters v1.18.0-alpha.1
- Added argument validation for EventCounter source names and refresh intervals.
  (#5012)
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.Http from 1.17.0 to 1.18.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.Http's releases.

1.18.0

NuGet: OpenTelemetry.Exporter.OneCollector v1.18.0
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

1.18.0-rc.1

NuGet: OpenTelemetry.Instrumentation.Process v1.18.0-rc.1
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

1.18.0-beta.2

NuGet: OpenTelemetry.Exporter.Geneva v1.18.0-beta.2
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

1.18.0-beta.1

NuGet: OpenTelemetry.Exporter.Geneva v1.18.0-beta.1
- Fixed a metric TLV serialization issue where an exemplar whose filtered tags
  serialized to more than 255 bytes caused the payload to be corrupted.
  (#4856)
- Renamed the PrivatePreviewEnableOtlpProtobufEncoding connection string switch
  to EnableOtlpProtobufEncoding. The old PrivatePreviewEnableOtlpProtobufEncoding
  switch is no longer supported.
  (#4920)
- Fixed a regression introduced in 1.17.0 where EtwDataTransport prepended a
  synthetic 4-byte length field to the ETW payload for logs and traces, causing
  the agent to reject the data with "Bad forward protocol format". The raw
  payload is once again written as a single unframed field.
  (#4941)
See CHANGELOG for details.

1.18.0-alpha.1

NuGet: OpenTelemetry.Instrumentation.EventCounters v1.18.0-alpha.1
- Added argument validation for EventCounter source names and refresh intervals.
  (#5012)
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.Runtime from 1.17.0 to 1.18.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.Runtime's releases.

1.18.0

NuGet: OpenTelemetry.Exporter.OneCollector v1.18.0
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

1.18.0-rc.1

NuGet: OpenTelemetry.Instrumentation.Process v1.18.0-rc.1
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

1.18.0-beta.2

NuGet: OpenTelemetry.Exporter.Geneva v1.18.0-beta.2
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

1.18.0-beta.1

NuGet: OpenTelemetry.Exporter.Geneva v1.18.0-beta.1
- Fixed a metric TLV serialization issue where an exemplar whose filtered tags
  serialized to more than 255 bytes caused the payload to be corrupted.
  (#4856)
- Renamed the PrivatePreviewEnableOtlpProtobufEncoding connection string switch
  to EnableOtlpProtobufEncoding. The old PrivatePreviewEnableOtlpProtobufEncoding
  switch is no longer supported.
  (#4920)
- Fixed a regression introduced in 1.17.0 where EtwDataTransport prepended a
  synthetic 4-byte length field to the ETW payload for logs and traces, causing
  the agent to reject the data with "Bad forward protocol format". The raw
  payload is once again written as a single unframed field.
  (#4941)
See CHANGELOG for details.

1.18.0-alpha.1

NuGet: OpenTelemetry.Instrumentation.EventCounters v1.18.0-alpha.1
- Added argument validation for EventCounter source names and refresh intervals.
  (#5012)
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

Commits viewable in compare view.

Updated Roslynator.Analyzers from 4.15.0 to 4.16.1.

Release notes

Sourced from Roslynator.Analyzers's releases.

4.16.1

Fixed

Fix analyzer RCS1060 to not report a file that contains only multiple partial declarations of the same type (PR)
Fix analyzer RCS1231 to not suggest in for ref struct parameters (#1725) (PR)
Fix analyzer RCS1260 false positive for omit_when_single_line on multi-line object/collection initializers (#1439) (PR)
Fix analyzer RCS0036 to report blank lines between single-line declarations in records (PR)
Fix analyzer RCS1046 to report async void methods without Async suffix (PR)
Fix analyzer RCS1265 to not report catch clauses with a when filter (PR)
Fix analyzer RCS0034 for types with a primary constructor and multiple constraint clauses (PR)
Fix analyzer RCS1231 to not report CancellationToken in sync methods returning Task (PR)
[CLI] Fix GitLab output format to use relative paths, forward slashes, and 1-based line numbers (PR)
[CLI] Fix generate-doc to omit internal interfaces from type declarations and the Implements section (PR)

4.16.0

Added

[CLI] Suppress error code from Roslynator when it detects issues in code but runs successfully (PR by @mdrybak)

Fixed

Fix analyzer RCS1118 to not report local variable passed as 'in' argument (PR by @NoahStolk)
Fix analyzer RCS1074 (PR by @cbersch)
Fix enum contained flags check for partial matches in RCS1258 (PR by @ovska)
Fix analyzer RCS1146 (PR)
Fix analyzer RCS1194 (PR)
Fix analyzer RCS1060 to ignore classes marked with file modifier (PR by @cbersch)
Fix analyzer RCS1231 (PR by @cbersch)
Fix analyzer RCS1246 for conditional access expressions ([PR](Fix analyzer RCS1246 for conditional access expressions dotnet/roslynator#1772 by @krajek))
[CLI] Fix fix command ignoring --include / --exclude file filter (PR by @hashiiiii)
[CLI] Fix loading of projects and solutions on .NET 10 SDK (PR)

Commits viewable in compare view.

Updated Scalar.AspNetCore from 2.16.16 to 2.17.1.

Release notes

Sourced from Scalar.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.31.0.145097 to 10.33.0.1635.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.33.0.1635

Release notes - .NET Analyzers - 10.33

Feature

NET-4312 Update RSPEC before 10.33 release
NET-4254 Implement rule S9129: "Include" and "ThenInclude" chains of reference navigations should be merged into a single "Include" call

False Positive

NET-1777 Fix S101 FP: Lower case character after number
NET-4245 Fix S107 FP: should not raise for parameters marked with dependency-injection attributes

Maintenance

NET-4184 Duplicate telemetry key exception when multiple projects report the same non-counter telemetry value

10.32.0.713

Release notes - .NET Analyzers - 10.32

Feature

NET-4132 Implement rule S9022: Redundant "Include" calls should be removed
NET-4215 Implement rule S9118: Default values should be compatible with their entity property type
NET-4240 Update RSPEC before 10.32 release

False Positive

NET-1322 Fix S2857 FP: Do not raise in constant string interpolation when string is in square brackets
NET-1468 Fix S6966 FP: should not raise when inside lock
NET-1598 Fix S1125 FP: dynamic and custom nullable structs with conversion to bool are compliant
NET-4233 Fix S8733 FP: AsSplitQuery/AsSingleQuery set in a different statement than the colliding Includes goes undetected
NET-4297 Fix S8717 FP: EFCore DBFirst Scaffold

Commits viewable in compare view.

Updated Testcontainers.Minio from 4.13.0 to 4.14.0.

Release notes

Sourced from Testcontainers.Minio's releases.

4.14.0

What's Changed

I published this version because several developers asked for a release addressing the SSH.NET vulnerability. As an interim fix, you can also bump the transitive dependency, which should work fine.

Unfortunately, I had to run the release CI pipeline twice (1, 2). The change #1725 introduced a regression that caused the pipeline to attempt to publish the Cake build project, which correctly failed (partially published).

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #40693051.

🚀 Features

feat: Add possibility to select MSSQL database (instead of master) (#1737) @0xced, @HofmeisterAn
feat: Add Mailpit module (#1727) @0xced, @feslima, @HofmeisterAn

🐛 Bug Fixes

fix(MongoDb): Probe the server instead of counting log messages before initiating (#1735) @arnelirobles, @HofmeisterAn
fix(MongoDb): Treat an already initiated replica set as success (#1731) @arnelirobles, @HofmeisterAn

🧹 Housekeeping

chore: Cleanup and align tests (#1740) @HofmeisterAn
chore: Set Cake build solution file path to Testcontainers.slnx (#1728) @0xced
chore: Keep Testcontainers.slnx solution file only (#1725) @0xced
feat: Prepare next release cycle (4.14.0) (#1726) @HofmeisterAn

📦 Dependency Updates

chore(deps): Bump SSH.NET to 2026.0.0 and BouncyCastle.Cryptography to 2.7.0 (#1739) @markmario
chore(deps): Bump the actions group with 10 updates (#1730) @dependabot[bot]

Commits viewable in compare view.

Updated Testcontainers.PostgreSql from 4.13.0 to 4.14.0.

Release notes

Sourced from Testcontainers.PostgreSql's releases.

4.14.0

What's Changed

I published this version because several developers asked for a release addressing the SSH.NET vulnerability. As an interim fix, you can also bump the transitive dependency, which should work fine.

Unfortunately, I had to run the release CI pipeline twice (1, 2). The change #1725 introduced a regression that caused the pipeline to attempt to publish the Cake build project, which correctly failed (partially published).

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #40693051.

🚀 Features

feat: Add possibility to select MSSQL database (instead of master) (#1737) @0xced, @HofmeisterAn
feat: Add Mailpit module (#1727) @0xced, @feslima, @HofmeisterAn

🐛 Bug Fixes

fix(MongoDb): Probe the server instead of counting log messages before initiating (#1735) @arnelirobles, @HofmeisterAn
fix(MongoDb): Treat an already initiated replica set as success (#1731) @arnelirobles, @HofmeisterAn

🧹 Housekeeping

chore: Cleanup and align tests (#1740) @HofmeisterAn
chore: Set Cake build solution file path to Testcontainers.slnx (#1728) @0xced
chore: Keep Testcontainers.slnx solution file only (#1725) @0xced
feat: Prepare next release cycle (4.14.0) (#1726) @HofmeisterAn

📦 Dependency Updates

chore(deps): Bump SSH.NET to 2026.0.0 and BouncyCastle.Cryptography to 2.7.0 (#1739) @markmario
chore(deps): Bump the actions group with 10 updates (#1730) @dependabot[bot]

Commits viewable in compare view.

Updated Testcontainers.Redis from 4.13.0 to 4.14.0.

Release notes

Sourced from Testcontainers.Redis's releases.

4.14.0

What's Changed

I published this version because several developers asked for a release addressing the SSH.NET vulnerability. As an interim fix, you can also bump the transitive dependency, which should work fine.

Unfortunately, I had to run the release CI pipeline twice (1, 2). The change #1725 introduced a regression that caused the pipeline to attempt to publish the Cake build project, which correctly failed (partially published).

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #40693051.

🚀 Features

feat: Add possibility to select MSSQL database (instead of master) (#1737) @0xced, @HofmeisterAn
feat: Add Mailpit module (#1727) @0xced, @feslima, @HofmeisterAn

🐛 Bug Fixes

fix(MongoDb): Probe the server instead of counting log messages before initiating (#1735) @arnelirobles, @HofmeisterAn
fix(MongoDb): Treat an already initiated replica set as success (#1731) @arnelirobles, @HofmeisterAn

🧹 Housekeeping

chore: Cleanup and align tests (#1740) @HofmeisterAn
chore: Set Cake build solution file path to Testcontainers.slnx (#1728) @0xced
chore: Keep Testcontainers.slnx solution file only (#1725) @0xced
feat: Prepare next release cycle (4.14.0) (#1726) @HofmeisterAn

📦 Dependency Updates

chore(deps): Bump SSH.NET to 2026.0.0 and BouncyCastle.Cryptography to 2.7.0 (#1739) @markmario
chore(deps): Bump the actions group with 10 updates (#1730) @dependabot[bot]

Commits viewable in compare view.

Updated WolverineFx from 6.22.0 to 6.30.0.

Release notes

Sourced from WolverineFx's releases.

6.30.0

Wolverine 6.30.0 is a large release built around one headline feature — a new endpoint mode — plus the usual crop of transport fixes, and a couple of long-standing multi-tenancy and HTTP gaps closed.

`EndpointMode.NativeAck`

The main event. Buffered's throughput and partitioning with Inline's no-loss guarantee, and no database required.

A broker delivery is held unacknowledged while the envelope flows through an in-memory, optionally group-partitioned execution block, and is settled natively when the handler pipeline terminates. Nothing is acknowledged ahead of its handler, so work parked in a lane when a node goes away comes back rather than vanishing.

opts.ListenToRabbitQueue("orders")
    .ProcessInParallelWithNativeAcks();

The guarantee, stated exactly: no two messages sharing a group id execute concurrently. Ordering is per-slot best-effort, not per-group guaranteed; redelivery may reorder. Anything needing strict order under failure keeps the durable inbox.

Transport support is opt-in and default-closed — a transport must explicitly claim the mode, because most settlement models cannot express out-of-order completion. Adopted by RabbitMQ, Amazon SQS, Azure Service Bus, NATS JetStream, Redis Streams, Pulsar and GCP Pub/Sub (#3708, #4046, #4047, #4050, #4051, #4052, #4053).

Supporting work in the same wave:

Lease renewal for queued envelopes on clocked transports — SQS, ASB, JetStream and Pub/Sub run a clock on an unsettled delivery, and the risk window is lane queue time plus handler time (#4048).
In-memory idempotency guard, an opt-in duplicate filter for a mode with no inbox row to deduplicate against (#3710).
Global partitioning across sharded queues (#3709).
Listener mode coherence validation, which caught that RabbitMQ queues default to Inline — so sharded topologies were silently unpartitioned without an explicit BufferedInMemory() (#3712, #4022).
A five-node chaos reproduction under webhook flood, measuring the real duplicate rate on abrupt node loss (#3713).

Multi-tenancy

Conjoined EF Core tenancy now works when Marten owns the message store via IntegrateWithWolverine(). Marten hands Wolverine an NpgsqlDataSource rather than a connection string, and NpgsqlDataSource.ConnectionString deliberately omits the password — so there is a new DbDataSource overload of AddDbContextWithWolverineManagedConjoinedTenancy that carries credentials through intact. A second defect on the same path is fixed too: IntegrateWithWolverine() never registered the tenant partitioning provider, so PartitionPerTenant() failed (#4044).

HTTP and event sourcing

[StreamState] and [StreamEvents] — new parameter attributes for handlers whose read is the raw stream rather than the folded aggregate, for timeline and audit shaped endpoints that [ReadModel] cannot express. Store-agnostic across Marten, Polecat and Fisher; Marten batches both fetches into a single round trip (#3627).
Marten concurrency conflicts as 409 — a documented, tested recipe for mapping optimistic-concurrency failures on [WriteAggregate] endpoints to ProblemDetails instead of an unhandled 500. Note that StreamLockedException derives from MartenException, not ConcurrencyException, so catching only the latter silently leaves FetchForExclusiveWriting returning 500s (#3764).
Event Model slices per route — HttpChainDescriptor and GrpcRpcDescriptor now carry the slice the route *is...

_Descri...

Description has been truncated

Bumps AWSSDK.S3 from 4.0.16 to 4.0.102.4 Bumps dotnet-coverage from 18.9.0 to 18.10.0 Bumps dotnet-ef from 10.0.10 to 10.0.11 Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.10 to 10.0.11 Bumps Microsoft.AspNetCore.OpenApi from 10.0.10 to 10.0.11 Bumps Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.10 to 10.0.11 Bumps Microsoft.Extensions.Configuration from 10.0.10 to 10.0.11 Bumps Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.10 to 10.0.11 Bumps Microsoft.Extensions.Configuration.UserSecrets from 10.0.10 to 10.0.11 Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.10 to 10.0.11 Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.10 to 10.0.11 Bumps Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.10 to 10.0.11 Bumps Microsoft.NET.Test.Sdk from 18.7.0 to 18.9.0 Bumps Microsoft.Testing.Extensions.CodeCoverage from 18.9.0 to 18.10.0 Bumps NSubstitute from 6.0.0 to 6.2.0 Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.17.0 to 1.18.0 Bumps OpenTelemetry.Extensions.Hosting from 1.17.0 to 1.18.0 Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.17.0 to 1.18.0 Bumps OpenTelemetry.Instrumentation.Http from 1.17.0 to 1.18.0 Bumps OpenTelemetry.Instrumentation.Runtime from 1.17.0 to 1.18.0 Bumps Roslynator.Analyzers from 4.15.0 to 4.16.1 Bumps Scalar.AspNetCore from 2.16.16 to 2.17.1 Bumps SonarAnalyzer.CSharp from 10.31.0.145097 to 10.33.0.1635 Bumps Testcontainers.Minio from 4.13.0 to 4.14.0 Bumps Testcontainers.PostgreSql from 4.13.0 to 4.14.0 Bumps Testcontainers.Redis from 4.13.0 to 4.14.0 Bumps WolverineFx from 6.22.0 to 6.30.0 Bumps WolverineFx.EntityFrameworkCore from 6.22.0 to 6.30.0 Bumps WolverineFx.Postgresql from 6.22.0 to 6.30.0 Bumps WolverineFx.RuntimeCompilation from 6.22.0 to 6.30.0 --- updated-dependencies: - dependency-name: AWSSDK.S3 dependency-version: 4.0.102.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: dotnet-coverage dependency-version: 18.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: dotnet-ef dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.Caching.StackExchangeRedis dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.Configuration dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.Configuration.EnvironmentVariables dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.Configuration.UserSecrets dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Testing.Extensions.CodeCoverage dependency-version: 18.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: NSubstitute dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: OpenTelemetry.Instrumentation.Http dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: OpenTelemetry.Instrumentation.Runtime dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: Roslynator.Analyzers dependency-version: 4.16.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: Scalar.AspNetCore dependency-version: 2.17.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: SonarAnalyzer.CSharp dependency-version: 10.33.0.1635 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: Testcontainers.Minio dependency-version: 4.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: Testcontainers.PostgreSql dependency-version: 4.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: Testcontainers.Redis dependency-version: 4.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: WolverineFx dependency-version: 6.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: WolverineFx.EntityFrameworkCore dependency-version: 6.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: WolverineFx.Postgresql dependency-version: 6.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: WolverineFx.RuntimeCompilation dependency-version: 6.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-01T09:27:21Z

Superseded by #19.

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 25, 2026

dependabot Bot requested a review from tthanhtung92 as a code owner August 25, 2026 09:21

dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Aug 25, 2026

dependabot Bot closed this Sep 1, 2026

dependabot Bot deleted the dependabot/nuget/dot-config/nuget-minor-and-patch-2a9284392c branch September 1, 2026 09:27

Navigation Menu

Bump the nuget-minor-and-patch group with 30 updates - #17

Bump the nuget-minor-and-patch group with 30 updates#17
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/nuget-minor-and-patch-2a9284392c

dependabot Bot commented on behalf of github Aug 25, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

18.9.0

What's Changed

New Contributors

18.8.1

What's Changed

18.8.0

What's Changed

6.2.0

NSubstitute v6.2.0

What's Changed

6.1.0

NSubstitute v6.1.0

What's Changed

New Contributors

1.18.0

1.18.0-rc.1

1.18.0-beta.1

1.18.0

1.18.0-rc.1

1.18.0-beta.1

1.18.0

1.18.0-rc.1

1.18.0-beta.2

1.18.0-beta.1

1.18.0-alpha.1

1.18.0

1.18.0-rc.1

1.18.0-beta.2

1.18.0-beta.1

1.18.0-alpha.1

1.18.0

1.18.0-rc.1

1.18.0-beta.2

1.18.0-beta.1

1.18.0-alpha.1

4.16.1

Fixed

4.16.0

Added

Fixed

10.33.0.1635

Release notes - .NET Analyzers - 10.33

Feature

False Positive

Maintenance

10.32.0.713

Release notes - .NET Analyzers - 10.32

Feature

False Positive

4.14.0

What's Changed

🚀 Features

🐛 Bug Fixes

🧹 Housekeeping

📦 Dependency Updates

4.14.0

What's Changed

🚀 Features

🐛 Bug Fixes

🧹 Housekeeping

📦 Dependency Updates

4.14.0

What's Changed

🚀 Features

🐛 Bug Fixes

🧹 Housekeeping

📦 Dependency Updates

6.30.0

EndpointMode.NativeAck

Multi-tenancy

HTTP and event sourcing

Uh oh!

dependabot Bot commented on behalf of github Sep 1, 2026

Uh oh!

Reviewers

Assignees

Labels

dependabot Bot commented on behalf of github Aug 25, 2026 •

edited

Loading

`EndpointMode.NativeAck`