Bump the nuget-minor-and-patch group with 30 updates by dependabot[bot] · Pull Request #19 · tthanhtung92/finmy

This release improves generic call matching (#989, #974, #990). Thanks to @zvirja and @JMolenkamp for fixes this.
We've also switched to using trusted nuget publishing linked to GitHub Releases. (#987, @zvirja)

What's Changed

Add trusted nuget publish by @zvirja in Add trusted nuget publish nsubstitute/NSubstitute#987
fix: Stop using return-type assignability for generic call matching by @zvirja in fix: Stop using return-type assignability for generic call matching nsubstitute/NSubstitute#989
Remove skip-duplicate option from NuGet push command by @zvirja in Remove skip-duplicate option from NuGet push command nsubstitute/NSubstitute#988
Add tag trigger for release pipeline by @zvirja in Add tag trigger for release pipeline nsubstitute/NSubstitute#991
Fix broken comparison of the generic methods by @zvirja in Fix broken comparison of the generic methods nsubstitute/NSubstitute#990
Support C# 13 params collections in argument matching by @zvirja in Support C# 13 params collections in argument matching nsubstitute/NSubstitute#993
Add tests for nullable Task by @zvirja in Add tests for nullable Task nsubstitute/NSubstitute#994

Full Changelog: nsubstitute/NSubstitute@v6.1.0...v6.2.0

6.1.0

NSubstitute v6.1.0

This release reverts nullability support introduced in 6.0. This change caused a number of problems for callers (#973, #976), and trying to resolve these (#976) revealed the need for more fundamental changes to NSubstitute to effectively support this. As a result, nullability is again disabled for public API. Huge thanks to @jdb0123, @Romfos, and @Moha-sami for their PRs addressing this, and thanks for all those who raised issues. We also humbly award @zvirja with one unlimited "I told you so" pass to use as he sees fit.

What's Changed

Add new argument matcher for comparing objects by reference by @Wer-Wolf in Add new argument matcher for comparing objects by reference nsubstitute/NSubstitute#963
Revert nullability changes in Revert nullability changes nsubstitute/NSubstitute#985

New Contributors

@Wer-Wolf made their first contribution in Add new argument matcher for comparing objects by reference nsubstitute/NSubstitute#963

Full Changelog: nsubstitute/NSubstitute@v6.0.0...v6.1.0

Commits viewable in compare view.

Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.17.0 to 1.18.0.

Release notes

Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.

1.18.0

For highlights and announcements pertaining to this release see: Release Notes > 1.18.0.

The following changes are from the previous release 1.17.0.

NuGet: OpenTelemetry v1.18.0
- Fixed self-diagnostics log lines being silently dropped when an event message or parameter contained enough 3-byte UTF-8 characters to overflow the internal buffer estimate. Such content is now truncated.
  (#7543)
- Fixed activity creation throwing when multiple tracer providers return a sampler attribute with the same key.
  (#7558)
- Added the otel.sdk.processor.log.processed SDK self-observability metric.
  (#7486)
- Added the otel.sdk.processor.span.processed SDK self-observability metric.
  (#7598)
- BatchActivityExportProcessor and SimpleActivityExportProcessor no longer forward spans to the exporter once Shutdown has been called, and BatchActivityExportProcessor.Shutdown now waits for in-flight OnEnd calls to finish enqueueing before flushing.
  (#7598)
- Fix logger, meter and tracer providers leaking background threads if an exception is thrown by their constructor after resource creation.
  (#7615)
- CircularBufferBuckets.Copy optimized to use bulk array copies.
  (#7670)
- Restored configured MaxScale after delta exponential histogram collection.
  (#7671)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.18.0
- Avoid formatting exceptions and creating exception attributes when RecordException is called on a span that is not recorded.
  (#7669)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.18.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.18.0
- Added support for serializing attribute values that are key/value lists (IEnumerable<KeyValuePair<string, object?>>). These attributes will be serialized as JSON objects.
  (#7015)

... (truncated)

1.18.0-rc.1

The following changes are from the previous release 1.17.0.

NuGet: OpenTelemetry v1.18.0-rc.1
- Fixed self-diagnostics log lines being silently dropped when an event message or parameter contained enough 3-byte UTF-8 characters to overflow the internal buffer estimate. Such content is now truncated.
  (#7543)
- Fixed activity creation throwing when multiple tracer providers return a sampler attribute with the same key.
  (#7558)
- Added the otel.sdk.processor.log.processed SDK self-observability metric.
  (#7486)
- Added the otel.sdk.processor.span.processed SDK self-observability metric.
  (#7598)
- BatchActivityExportProcessor and SimpleActivityExportProcessor no longer forward spans to the exporter once Shutdown has been called, and BatchActivityExportProcessor.Shutdown now waits for in-flight OnEnd calls to finish enqueueing before flushing.
  (#7598)
- Fix logger, meter and tracer providers leaking background threads if an exception is thrown by their constructor after resource creation.
  (#7615)
- CircularBufferBuckets.Copy optimized to use bulk array copies.
  (#7670)
- Restored configured MaxScale after delta exponential histogram collection.
  (#7671)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.18.0-rc.1
- Avoid formatting exceptions and creating exception attributes when RecordException is called on a span that is not recorded.
  (#7669)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.18.0-rc.1

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.18.0-rc.1
- Added support for serializing attribute values that are key/value lists (IEnumerable<KeyValuePair<string, object?>>). These attributes will be serialized as JSON objects.
  (#7015)
See CHANGELOG for details.

... (truncated)

1.18.0-beta.1

The following changes are from the previous release 1.17.0-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.18.0-beta.1
- Fix concurrent scrapes returning an empty response under contention. Now the exporter will return an HTTP 500 error instead.
  (#7571)
- Waiting for concurrent scrapes to finish before collecting no longer blocks, which could stall concurrent scrapes being waited on.
  (#7571)
- Fixed the interaction between PrometheusAspNetCoreOptions.TranslationStrategy and content negotiation. The configured strategy is now applied before content negotiation, instead of the negotiated escaping scheme replacing the strategy's, and the Content-Type header now reports the escaping scheme that was applied rather than the one that was negotiated.
  (#7610)
- Fixed metric values and histogram bucket bounds being written with 17 significant digits instead of their shortest round-trippable representation.
  (#7589)
- Fixed the canonical representation used for histogram le and summary quantile label values falling back to 17 significant digits incorrectly.
  (#7589)
- Fixed a race where a slow scrape could return an HTTP 200 instead of 408.
  (#7615)
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#7674)
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.18.0-beta.1
- Fix concurrent scrapes returning an empty response under contention. Now the exporter will return an HTTP 500 error instead.
  (#7571)
- Waiting for concurrent scrapes to finish before collecting no longer blocks, which could stall concurrent scrapes being waited on.
  (#7571)
- A scrape which is still collecting when the listener is disposed now returns an HTTP 503 response.
  (#7587)
- Shutting down the listener no longer waits indefinitely for its request processing loop to stop, and no longer throws if the loop faulted.
  (#7587)
- Fixed the interaction between PrometheusHttpListenerOptions.TranslationStrategy and content negotiation. The configured strategy is now applied before content negotiation, instead of the negotiated escaping scheme replacing the strategy's, and the Content-Type header now reports the escaping scheme that was applied rather than the one that was negotiated.
  (#7610)
- Fixed metric values and histogram bucket bounds being written with 17 significant digits instead of their shortest round-trippable representation.
  (#7589)
- Fixed the canonical representation used for histogram le and summary quantile label values falling back to 17 significant digits incorrectly.
  (#7589)

... (truncated)

Commits viewable in compare view.

Updated OpenTelemetry.Extensions.Hosting from 1.17.0 to 1.18.0.

Release notes

Sourced from OpenTelemetry.Extensions.Hosting's releases.

1.18.0

For highlights and announcements pertaining to this release see: Release Notes > 1.18.0.

The following changes are from the previous release 1.17.0.

NuGet: OpenTelemetry v1.18.0
- Fixed self-diagnostics log lines being silently dropped when an event message or parameter contained enough 3-byte UTF-8 characters to overflow the internal buffer estimate. Such content is now truncated.
  (#7543)
- Fixed activity creation throwing when multiple tracer providers return a sampler attribute with the same key.
  (#7558)
- Added the otel.sdk.processor.log.processed SDK self-observability metric.
  (#7486)
- Added the otel.sdk.processor.span.processed SDK self-observability metric.
  (#7598)
- BatchActivityExportProcessor and SimpleActivityExportProcessor no longer forward spans to the exporter once Shutdown has been called, and BatchActivityExportProcessor.Shutdown now waits for in-flight OnEnd calls to finish enqueueing before flushing.
  (#7598)
- Fix logger, meter and tracer providers leaking background threads if an exception is thrown by their constructor after resource creation.
  (#7615)
- CircularBufferBuckets.Copy optimized to use bulk array copies.
  (#7670)
- Restored configured MaxScale after delta exponential histogram collection.
  (#7671)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.18.0
- Avoid formatting exceptions and creating exception attributes when RecordException is called on a span that is not recorded.
  (#7669)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.18.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.18.0
- Added support for serializing attribute values that are key/value lists (IEnumerable<KeyValuePair<string, object?>>). These attributes will be serialized as JSON objects.
  (#7015)

... (truncated)

1.18.0-rc.1

The following changes are from the previous release 1.17.0.

NuGet: OpenTelemetry v1.18.0-rc.1
- Fixed self-diagnostics log lines being silently dropped when an event message or parameter contained enough 3-byte UTF-8 characters to overflow the internal buffer estimate. Such content is now truncated.
  (#7543)
- Fixed activity creation throwing when multiple tracer providers return a sampler attribute with the same key.
  (#7558)
- Added the otel.sdk.processor.log.processed SDK self-observability metric.
  (#7486)
- Added the otel.sdk.processor.span.processed SDK self-observability metric.
  (#7598)
- BatchActivityExportProcessor and SimpleActivityExportProcessor no longer forward spans to the exporter once Shutdown has been called, and BatchActivityExportProcessor.Shutdown now waits for in-flight OnEnd calls to finish enqueueing before flushing.
  (#7598)
- Fix logger, meter and tracer providers leaking background threads if an exception is thrown by their constructor after resource creation.
  (#7615)
- CircularBufferBuckets.Copy optimized to use bulk array copies.
  (#7670)
- Restored configured MaxScale after delta exponential histogram collection.
  (#7671)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.18.0-rc.1
- Avoid formatting exceptions and creating exception attributes when RecordException is called on a span that is not recorded.
  (#7669)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.18.0-rc.1

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.18.0-rc.1
- Added support for serializing attribute values that are key/value lists (IEnumerable<KeyValuePair<string, object?>>). These attributes will be serialized as JSON objects.
  (#7015)
See CHANGELOG for details.

... (truncated)

1.18.0-beta.1

The following changes are from the previous release 1.17.0-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.18.0-beta.1
- Fix concurrent scrapes returning an empty response under contention. Now the exporter will return an HTTP 500 error instead.
  (#7571)
- Waiting for concurrent scrapes to finish before collecting no longer blocks, which could stall concurrent scrapes being waited on.
  (#7571)
- Fixed the interaction between PrometheusAspNetCoreOptions.TranslationStrategy and content negotiation. The configured strategy is now applied before content negotiation, instead of the negotiated escaping scheme replacing the strategy's, and the Content-Type header now reports the escaping scheme that was applied rather than the one that was negotiated.
  (#7610)
- Fixed metric values and histogram bucket bounds being written with 17 significant digits instead of their shortest round-trippable representation.
  (#7589)
- Fixed the canonical representation used for histogram le and summary quantile label values falling back to 17 significant digits incorrectly.
  (#7589)
- Fixed a race where a slow scrape could return an HTTP 200 instead of 408.
  (#7615)
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#7674)
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.18.0-beta.1
- Fix concurrent scrapes returning an empty response under contention. Now the exporter will return an HTTP 500 error instead.
  (#7571)
- Waiting for concurrent scrapes to finish before collecting no longer blocks, which could stall concurrent scrapes being waited on.
  (#7571)
- A scrape which is still collecting when the listener is disposed now returns an HTTP 503 response.
  (#7587)
- Shutting down the listener no longer waits indefinitely for its request processing loop to stop, and no longer throws if the loop faulted.
  (#7587)
- Fixed the interaction between PrometheusHttpListenerOptions.TranslationStrategy and content negotiation. The configured strategy is now applied before content negotiation, instead of the negotiated escaping scheme replacing the strategy's, and the Content-Type header now reports the escaping scheme that was applied rather than the one that was negotiated.
  (#7610)
- Fixed metric values and histogram bucket bounds being written with 17 significant digits instead of their shortest round-trippable representation.
  (#7589)
- Fixed the canonical representation used for histogram le and summary quantile label values falling back to 17 significant digits incorrectly.
  (#7589)

... (truncated)

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.AspNetCore from 1.17.0 to 1.18.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.AspNetCore's releases.

1.18.0

NuGet: OpenTelemetry.Exporter.OneCollector v1.18.0
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

1.18.0-rc.1

NuGet: OpenTelemetry.Instrumentation.Process v1.18.0-rc.1
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

1.18.0-beta.2

NuGet: OpenTelemetry.Exporter.Geneva v1.18.0-beta.2
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

1.18.0-beta.1

NuGet: OpenTelemetry.Exporter.Geneva v1.18.0-beta.1
- Fixed a metric TLV serialization issue where an exemplar whose filtered tags
  serialized to more than 255 bytes caused the payload to be corrupted.
  (#4856)
- Renamed the PrivatePreviewEnableOtlpProtobufEncoding connection string switch
  to EnableOtlpProtobufEncoding. The old PrivatePreviewEnableOtlpProtobufEncoding
  switch is no longer supported.
  (#4920)
- Fixed a regression introduced in 1.17.0 where EtwDataTransport prepended a
  synthetic 4-byte length field to the ETW payload for logs and traces, causing
  the agent to reject the data with "Bad forward protocol format". The raw
  payload is once again written as a single unframed field.
  (#4941)
See CHANGELOG for details.

1.18.0-alpha.1

NuGet: OpenTelemetry.Instrumentation.EventCounters v1.18.0-alpha.1
- Added argument validation for EventCounter source names and refresh intervals.
  (#5012)
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.Http from 1.17.0 to 1.18.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.Http's releases.

1.18.0

NuGet: OpenTelemetry.Exporter.OneCollector v1.18.0
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

1.18.0-rc.1

NuGet: OpenTelemetry.Instrumentation.Process v1.18.0-rc.1
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

1.18.0-beta.2

NuGet: OpenTelemetry.Exporter.Geneva v1.18.0-beta.2
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

1.18.0-beta.1

NuGet: OpenTelemetry.Exporter.Geneva v1.18.0-beta.1
- Fixed a metric TLV serialization issue where an exemplar whose filtered tags
  serialized to more than 255 bytes caused the payload to be corrupted.
  (#4856)
- Renamed the PrivatePreviewEnableOtlpProtobufEncoding connection string switch
  to EnableOtlpProtobufEncoding. The old PrivatePreviewEnableOtlpProtobufEncoding
  switch is no longer supported.
  (#4920)
- Fixed a regression introduced in 1.17.0 where EtwDataTransport prepended a
  synthetic 4-byte length field to the ETW payload for logs and traces, causing
  the agent to reject the data with "Bad forward protocol format". The raw
  payload is once again written as a single unframed field.
  (#4941)
See CHANGELOG for details.

1.18.0-alpha.1

NuGet: OpenTelemetry.Instrumentation.EventCounters v1.18.0-alpha.1
- Added argument validation for EventCounter source names and refresh intervals.
  (#5012)
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.Runtime from 1.17.0 to 1.18.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.Runtime's releases.

1.18.0

NuGet: OpenTelemetry.Exporter.OneCollector v1.18.0
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

1.18.0-rc.1

NuGet: OpenTelemetry.Instrumentation.Process v1.18.0-rc.1
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

1.18.0-beta.2

NuGet: OpenTelemetry.Exporter.Geneva v1.18.0-beta.2
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

1.18.0-beta.1

NuGet: OpenTelemetry.Exporter.Geneva v1.18.0-beta.1
- Fixed a metric TLV serialization issue where an exemplar whose filtered tags
  serialized to more than 255 bytes caused the payload to be corrupted.
  (#4856)
- Renamed the PrivatePreviewEnableOtlpProtobufEncoding connection string switch
  to EnableOtlpProtobufEncoding. The old PrivatePreviewEnableOtlpProtobufEncoding
  switch is no longer supported.
  (#4920)
- Fixed a regression introduced in 1.17.0 where EtwDataTransport prepended a
  synthetic 4-byte length field to the ETW payload for logs and traces, causing
  the agent to reject the data with "Bad forward protocol format". The raw
  payload is once again written as a single unframed field.
  (#4941)
See CHANGELOG for details.

1.18.0-alpha.1

NuGet: OpenTelemetry.Instrumentation.EventCounters v1.18.0-alpha.1
- Added argument validation for EventCounter source names and refresh intervals.
  (#5012)
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#5022)
See CHANGELOG for details.

Commits viewable in compare view.

Updated Roslynator.Analyzers from 4.15.0 to 4.16.1.

Release notes

Sourced from Roslynator.Analyzers's releases.

4.16.1

Fixed

Fix analyzer RCS1060 to not report a file that contains only multiple partial declarations of the same type (PR)
Fix analyzer RCS1231 to not suggest in for ref struct parameters (#1725) (PR)
Fix analyzer RCS1260 false positive for omit_when_single_line on multi-line object/collection initializers (#1439) (PR)
Fix analyzer RCS0036 to report blank lines between single-line declarations in records (PR)
Fix analyzer RCS1046 to report async void methods without Async suffix (PR)
Fix analyzer RCS1265 to not report catch clauses with a when filter (PR)
Fix analyzer RCS0034 for types with a primary constructor and multiple constraint clauses (PR)
Fix analyzer RCS1231 to not report CancellationToken in sync methods returning Task (PR)
[CLI] Fix GitLab output format to use relative paths, forward slashes, and 1-based line numbers (PR)
[CLI] Fix generate-doc to omit internal interfaces from type declarations and the Implements section (PR)

4.16.0

Added

[CLI] Suppress error code from Roslynator when it detects issues in code but runs successfully (PR by @mdrybak)

Fixed

Fix analyzer RCS1118 to not report local variable passed as 'in' argument (PR by @NoahStolk)
Fix analyzer RCS1074 (PR by @cbersch)
Fix enum contained flags check for partial matches in RCS1258 (PR by @ovska)
Fix analyzer RCS1146 (PR)
Fix analyzer RCS1194 (PR)
Fix analyzer RCS1060 to ignore classes marked with file modifier (PR by @cbersch)
Fix analyzer RCS1231 (PR by @cbersch)
Fix analyzer RCS1246 for conditional access expressions ([PR](Fix analyzer RCS1246 for conditional access expressions dotnet/roslynator#1772 by @krajek))
[CLI] Fix fix command ignoring --include / --exclude file filter (PR by @hashiiiii)
[CLI] Fix loading of projects and solutions on .NET 10 SDK (PR)

Commits viewable in compare view.

Updated Scalar.AspNetCore from 2.16.16 to 2.17.2.

Release notes

Sourced from Scalar.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.31.0.145097 to 10.33.0.1635.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.33.0.1635

Release notes - .NET Analyzers - 10.33

Feature

NET-4312 Update RSPEC before 10.33 release
NET-4254 Implement rule S9129: "Include" and "ThenInclude" chains of reference navigations should be merged into a single "Include" call

False Positive

NET-1777 Fix S101 FP: Lower case character after number
NET-4245 Fix S107 FP: should not raise for parameters marked with dependency-injection attributes

Maintenance

NET-4184 Duplicate telemetry key exception when multiple projects report the same non-counter telemetry value

10.32.0.713

Release notes - .NET Analyzers - 10.32

Feature

NET-4132 Implement rule S9022: Redundant "Include" calls should be removed
NET-4215 Implement rule S9118: Default values should be compatible with their entity property type
NET-4240 Update RSPEC before 10.32 release

False Positive

NET-1322 Fix S2857 FP: Do not raise in constant string interpolation when string is in square brackets
NET-1468 Fix S6966 FP: should not raise when inside lock
NET-1598 Fix S1125 FP: dynamic and custom nullable structs with conversion to bool are compliant
NET-4233 Fix S8733 FP: AsSplitQuery/AsSingleQuery set in a different statement than the colliding Includes goes undetected
NET-4297 Fix S8717 FP: EFCore DBFirst Scaffold

Commits viewable in compare view.

Updated Testcontainers.Minio from 4.13.0 to 4.14.0.

Release notes

Sourced from Testcontainers.Minio's releases.

4.14.0

What's Changed

I published this version because several developers asked for a release addressing the SSH.NET vulnerability. As an interim fix, you can also bump the transitive dependency, which should work fine.

Unfortunately, I had to run the release CI pipeline twice (1, 2). The change #1725 introduced a regression that caused the pipeline to attempt to publish the Cake build project, which correctly failed (partially published).

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #40693051.

🚀 Features

feat: Add possibility to select MSSQL database (instead of master) (#1737) @0xced, @HofmeisterAn
feat: Add Mailpit module (#1727) @0xced, @feslima, @HofmeisterAn

🐛 Bug Fixes

fix(MongoDb): Probe the server instead of counting log messages before initiating (#1735) @arnelirobles, @HofmeisterAn
fix(MongoDb): Treat an already initiated replica set as success (#1731) @arnelirobles, @HofmeisterAn

🧹 Housekeeping

chore: Cleanup and align tests (#1740) @HofmeisterAn
chore: Set Cake build solution file path to Testcontainers.slnx (#1728) @0xced
chore: Keep Testcontainers.slnx solution file only (#1725) @0xced
feat: Prepare next release cycle (4.14.0) (#1726) @HofmeisterAn

📦 Dependency Updates

chore(deps): Bump SSH.NET to 2026.0.0 and BouncyCastle.Cryptography to 2.7.0 (#1739) @markmario
chore(deps): Bump the actions group with 10 updates (#1730) @dependabot[bot]

Commits viewable in compare view.

Updated Testcontainers.PostgreSql from 4.13.0 to 4.14.0.

Release notes

Sourced from Testcontainers.PostgreSql's releases.

4.14.0

What's Changed

I published this version because several developers asked for a release addressing the SSH.NET vulnerability. As an interim fix, you can also bump the transitive dependency, which should work fine.

Unfortunately, I had to run the release CI pipeline twice (1, 2). The change #1725 introduced a regression that caused the pipeline to attempt to publish the Cake build project, which correctly failed (partially published).

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #40693051.

🚀 Features

feat: Add possibility to select MSSQL database (instead of master) (#1737) @0xced, @HofmeisterAn
feat: Add Mailpit module (#1727) @0xced, @feslima, @HofmeisterAn

🐛 Bug Fixes

fix(MongoDb): Probe the server instead of counting log messages before initiating (#1735) @arnelirobles, @HofmeisterAn
fix(MongoDb): Treat an already initiated replica set as success (#1731) @arnelirobles, @HofmeisterAn

🧹 Housekeeping

chore: Cleanup and align tests (#1740) @HofmeisterAn
chore: Set Cake build solution file path to Testcontainers.slnx (#1728) @0xced
chore: Keep Testcontainers.slnx solution file only (#1725) @0xced
feat: Prepare next release cycle (4.14.0) (#1726) @HofmeisterAn

📦 Dependency Updates

chore(deps): Bump SSH.NET to 2026.0.0 and BouncyCastle.Cryptography to 2.7.0 (#1739) @markmario
chore(deps): Bump the actions group with 10 updates (#1730) @dependabot[bot]

Commits viewable in compare view.

Updated Testcontainers.Redis from 4.13.0 to 4.14.0.

Release notes

Sourced from Testcontainers.Redis's releases.

4.14.0

What's Changed

I published this version because several developers asked for a release addressing the SSH.NET vulnerability. As an interim fix, you can also bump the transitive dependency, which should work fine.

Unfortunately, I had to run the release CI pipeline twice (1, 2). The change #1725 introduced a regression that caused the pipeline to attempt to publish the Cake build project, which correctly failed (partially published).

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #40693051.

🚀 Features

feat: Add possibility to select MSSQL database (instead of master) (#1737) @0xced, @HofmeisterAn
feat: Add Mailpit module (#1727) @0xced, @feslima, @HofmeisterAn

🐛 Bug Fixes

fix(MongoDb): Probe the server instead of counting log messages before initiating (#1735) @arnelirobles, @HofmeisterAn
fix(MongoDb): Treat an already initiated replica set as success (#1731) @arnelirobles, @HofmeisterAn

🧹 Housekeeping

chore: Cleanup and align tests (#1740) @HofmeisterAn
chore: Set Cake build solution file path to Testcontainers.slnx (#1728) @0xced
chore: Keep Testcontainers.slnx solution file only (#1725) @0xced
feat: Prepare next release cycle (4.14.0) (#1726) @HofmeisterAn

📦 Dependency Updates

chore(deps): Bump SSH.NET to 2026.0.0 and BouncyCastle.Cryptography to 2.7.0 (#1739) @markmario
chore(deps): Bump the actions group with 10 updates (#1730) @dependabot[bot]

Commits viewable in compare view.

Updated WolverineFx from 6.22.0 to 6.31.0.

Release notes

Sourced from WolverineFx's releases.

6.31.0 Logical message deduplication

Envelope.Id identifies one delivery. That is the right identity for "the broker handed me this twice" and the wrong one for "the operator clicked Rebuild twice" — those are different deliveries of the same intent, so each carries a different Envelope.Id and every one gets through.

6.31.0 promotes Envelope.DeduplicationId into a first-class logical id, with storage, enforcement, and a retention policy behind it.

opts.Durability.EnableMessageDeduplication = true;   // provisions wolverine_deduplication
opts.Durability.DeduplicationWindow = 24.Hours();    // this IS the guarantee

[Deduplicated]
public static void Handle(RebuildProjection command) { }

It is opt-in throughout — leaving it off means no schema change at all on upgrade. Storage is a separate wolverine_deduplication table rather than a column on the inbox, because under EnableInboxPartitioning the inbox is PARTITION BY LIST (status) and marking an envelope handled moves the row between partitions, which would let one logical id exist as both Incoming and Handled — silently, and only for users who enabled partitioning. Claiming is an INSERT that either succeeds or trips the primary key, never a SELECT-then-INSERT.

Refusals differ per chain type: a message handler discards and acks, HTTP returns 409 with ProblemDetails (configurable to 2xx where a replay is benign), gRPC returns AlreadyExists / InvalidArgument per AIP-193. Storage on PostgreSQL, SQL Server, MySQL and SQLite.

Deriving the id from the message

The publishing side does not have to remember DeliveryOptions.DeduplicationId at every call site. A message type declares its own logical identity once, the way it already declares a topic name with [Topic] or a saga id with [SagaIdentity]:

public record ArchiveInvoice([property: DeduplicationIdentity] string InvoiceNumber, DateOnly AsOf);

[DeduplicationIdentity(nameof(ReceiveShipment.ShipmentId))]   // a contract whose members you cannot decorate
public record ReceiveShipment(Guid ShipmentId, string Warehouse);

// or configured, for composed ids and generated message types
opts.MessageDeduplication.ByMessage<RebuildProjection>(x => $"{x.ProjectionName}|{x.OccurrenceUtc:O}");
opts.MessageDeduplication.ByMemberNamed("IdempotencyKey", "DeduplicationId");
opts.Policies.ForMessagesOfType<CreateOrder>().DeduplicateBy(x => $"{x.Sku}|{x.Quantity}");

These are IEnvelopeRule at the message type level, resolved once when the route is built rather than per message. An explicit DeliveryOptions.DeduplicationId always wins, then configured rules, then the attribute.

Fixes

Broker startup is bounded by a clock. A host starting against a dead broker took 21m38s to fail — long enough to look like a hang and to blow past any orchestrator's startup probe. (#4116)
ListeningAgent sees past its receiver wrappers. ReceiverWithRules — installed by a bare endpoint-level MessageType or TenantId — is unconditionally an ILocalQueue, so a wrapped NativeAck or Inline receiver took the wrong branch and threw on the durability agent's re-entry path. The same blindness meant a terminally faulted receiver reported healthy forever on exactly the endpoints most likely to be non-trivially configured. (#4188, #4191)
**A locally-owned shard that stopped wit...

_Descri...

Description has been truncated

Bumps AWSSDK.S3 from 4.0.16 to 4.0.102.4 Bumps dotnet-coverage from 18.9.0 to 18.10.0 Bumps dotnet-ef from 10.0.10 to 10.0.11 Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.10 to 10.0.11 Bumps Microsoft.AspNetCore.OpenApi from 10.0.10 to 10.0.11 Bumps Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.10 to 10.0.11 Bumps Microsoft.Extensions.Configuration from 10.0.10 to 10.0.11 Bumps Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.10 to 10.0.11 Bumps Microsoft.Extensions.Configuration.UserSecrets from 10.0.10 to 10.0.11 Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.10 to 10.0.11 Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.10 to 10.0.11 Bumps Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.10 to 10.0.11 Bumps Microsoft.NET.Test.Sdk from 18.7.0 to 18.9.0 Bumps Microsoft.Testing.Extensions.CodeCoverage from 18.9.0 to 18.10.0 Bumps NSubstitute from 6.0.0 to 6.2.0 Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.17.0 to 1.18.0 Bumps OpenTelemetry.Extensions.Hosting from 1.17.0 to 1.18.0 Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.17.0 to 1.18.0 Bumps OpenTelemetry.Instrumentation.Http from 1.17.0 to 1.18.0 Bumps OpenTelemetry.Instrumentation.Runtime from 1.17.0 to 1.18.0 Bumps Roslynator.Analyzers from 4.15.0 to 4.16.1 Bumps Scalar.AspNetCore from 2.16.16 to 2.17.2 Bumps SonarAnalyzer.CSharp from 10.31.0.145097 to 10.33.0.1635 Bumps Testcontainers.Minio from 4.13.0 to 4.14.0 Bumps Testcontainers.PostgreSql from 4.13.0 to 4.14.0 Bumps Testcontainers.Redis from 4.13.0 to 4.14.0 Bumps WolverineFx from 6.22.0 to 6.31.0 Bumps WolverineFx.EntityFrameworkCore from 6.22.0 to 6.31.0 Bumps WolverineFx.Postgresql from 6.22.0 to 6.31.0 Bumps WolverineFx.RuntimeCompilation from 6.22.0 to 6.31.0 --- updated-dependencies: - dependency-name: AWSSDK.S3 dependency-version: 4.0.102.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: dotnet-coverage dependency-version: 18.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: dotnet-ef dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.Caching.StackExchangeRedis dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.Configuration dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.Configuration.EnvironmentVariables dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.Configuration.UserSecrets dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Testing.Extensions.CodeCoverage dependency-version: 18.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: NSubstitute dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: OpenTelemetry.Instrumentation.Http dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: OpenTelemetry.Instrumentation.Runtime dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: Roslynator.Analyzers dependency-version: 4.16.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: Scalar.AspNetCore dependency-version: 2.17.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: SonarAnalyzer.CSharp dependency-version: 10.33.0.1635 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: Testcontainers.Minio dependency-version: 4.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: Testcontainers.PostgreSql dependency-version: 4.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: Testcontainers.Redis dependency-version: 4.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: WolverineFx dependency-version: 6.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: WolverineFx.EntityFrameworkCore dependency-version: 6.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: WolverineFx.Postgresql dependency-version: 6.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: WolverineFx.RuntimeCompilation dependency-version: 6.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Sep 1, 2026

dependabot Bot requested a review from tthanhtung92 as a code owner September 1, 2026 09:27

dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Sep 1, 2026

This was referenced Sep 1, 2026

Bump the nuget-minor-and-patch group with 30 updates #17

Closed

Bump Roslynator.Analyzers from 4.15.0 to 5.0.0 #18

Closed

Navigation Menu

Bump the nuget-minor-and-patch group with 30 updates - #19

Bump the nuget-minor-and-patch group with 30 updates#19
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/nuget-minor-and-patch-a744c9684b

dependabot Bot commented on behalf of github Sep 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 1, 2026

18.9.0

What's Changed

New Contributors

18.8.1

What's Changed

18.8.0

What's Changed

6.2.0

NSubstitute v6.2.0

What's Changed

6.1.0

NSubstitute v6.1.0

What's Changed

New Contributors

1.18.0

1.18.0-rc.1

1.18.0-beta.1

1.18.0

1.18.0-rc.1

1.18.0-beta.1

1.18.0

1.18.0-rc.1

1.18.0-beta.2

1.18.0-beta.1

1.18.0-alpha.1

1.18.0

1.18.0-rc.1

1.18.0-beta.2

1.18.0-beta.1

1.18.0-alpha.1

1.18.0

1.18.0-rc.1

1.18.0-beta.2

1.18.0-beta.1

1.18.0-alpha.1

4.16.1

Fixed

4.16.0

Added

Fixed

10.33.0.1635

Release notes - .NET Analyzers - 10.33

Feature

False Positive

Maintenance

10.32.0.713

Release notes - .NET Analyzers - 10.32

Feature

False Positive

4.14.0

What's Changed

🚀 Features

🐛 Bug Fixes

🧹 Housekeeping

📦 Dependency Updates

4.14.0

What's Changed

🚀 Features

🐛 Bug Fixes

🧹 Housekeeping

📦 Dependency Updates

4.14.0

What's Changed

🚀 Features

🐛 Bug Fixes

🧹 Housekeeping

📦 Dependency Updates

6.31.0

Logical message deduplication

Deriving the id from the message

Fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development